Bitwarden MCP server

What the model can do

Bitwarden organization administration (never vault items or passwords): members with role and status, groups and the collections they reach, collection access by group, the organization's event log and its policies. When you ask, can invite, re-invite, revoke, restore or remove a member, change a member's role or groups, create, rename or delete a group, set a group's members, set which groups reach a collection, or delete a collection.

Reads

• bitwarden_list_membersMembers of the Bitwarden organization: name, email, role (owner, admin, user, custom), status (invited, accepted, confirmed, staged…
• bitwarden_get_memberOne Bitwarden member: role, status, custom permissions, the collections they reach directly with the access level, and the groups they belong to…
• bitwarden_list_groupsGroups in the Bitwarden organization with the collections each can reach and at what access level (view, edit, manage).
• bitwarden_get_groupOne Bitwarden group: its collections and access levels, and its members by name and email.
• bitwarden_list_collectionsCollections in the Bitwarden organization, by id and external id.
• bitwarden_get_collectionOne Bitwarden collection: which groups can reach it and at what access level (view, edit, manage, passwords hidden).
• bitwarden_list_eventsThe Bitwarden organization's event log: what happened (member invited, revoked or removed, group or collection changed, policy updated…
• bitwarden_list_policiesThe Bitwarden organization's policies (two-step login required, master password rules, single organization, require SSO, vault timeout…

Acts, when you ask

These change something in Bitwarden. The model is told to use them only when you ask for exactly that, and each one is granted by name: per team on a shared connection, by the owner on a personal one.

• bitwarden_invite_memberInvites a person to the Bitwarden organization by email with the role given; Bitwarden emails them an invitation…
• bitwarden_reinvite_memberRe-sends the Bitwarden invitation email to a member who has not yet accepted.
• bitwarden_revoke_memberRevokes a member's access to the Bitwarden organization: they immediately lose access to its collections and items…
• bitwarden_restore_memberRestores a revoked Bitwarden member, giving back their access to the organization's collections.
• bitwarden_remove_memberPermanently removes a member from the Bitwarden organization; this cannot be undone (their own Bitwarden account remains…
• bitwarden_update_member_roleChanges a Bitwarden member's role (owner, admin, user, custom with the permissions given), keeping their groups…
• bitwarden_set_member_groupsSets exactly which groups a Bitwarden member belongs to, replacing their current groups (an empty list takes them out of every group)…
• bitwarden_create_groupCreates a group in the Bitwarden organization, optionally with access to collections.
• bitwarden_update_groupRenames a Bitwarden group and/or replaces the collections it can reach (collections, when given, is the complete new list…
• bitwarden_delete_groupPermanently deletes a Bitwarden group; this cannot be undone, and its members lose whatever access came only through it.
• bitwarden_set_group_membersSets exactly who is in a Bitwarden group, replacing the current members (an empty list empties it)…
• bitwarden_set_collection_groupsSets exactly which groups can reach a Bitwarden collection and at what level (view, edit, manage, passwords hidden), replacing the current list…
• bitwarden_delete_collectionPermanently deletes a Bitwarden collection; Bitwarden says this cannot be undone, and items that belong only to it go with it.

Connect it

First connect Bitwarden on Dashboard → Connections, then add Memtro to your client once. The Bitwarden tools appear alongside the tools of everything else you have connected; nothing is configured per connector.

claude plugin marketplace add memtro-org/claude-memtro
claude plugin install memtro@memtro --config api_key=sk-memtro-...

{
  "mcpServers": {
    "memtro": {
      "url": "https://platform.memtro.com/api/mcp",
      "headers": {
        "Authorization": "Bearer sk-memtro-..."
      }
    }
  }
}

{
  "mcp": {
    "memtro": {
      "type": "remote",
      "url": "https://platform.memtro.com/api/mcp",
      "headers": {
        "Authorization": "Bearer sk-memtro-..."
      }
    }
  }
}

Who may use it

The key identifies the person, and the server offers that person the tools they may use everywhere else in Memtro. A shared Bitwarden connection is used by the teams an administrator granted it to, tool by tool, on the Permissions page; a personal connection is used by its owner alone, and its tools that act stay off until the owner allows them. See Teams and permissions and Connectors.

Ask it like this

• › Who can reach the finance collection, and at what level?
• › Which members are still invited but not confirmed?
• › Who was revoked or removed this month?
• › Is two-step login required by policy?
• › Revoke Tom Reilly's access to the organization.

Questions

Is this an official Bitwarden MCP server?

No. It is Memtro's MCP server with Memtro's Bitwarden connector behind it: the connector reads Bitwarden through its API with the credentials you connect on Dashboard → Connections, and Bitwarden publishes nothing here. The same endpoint carries every other system you connect and Memtro's memory tools.

What does it cost?

Nothing on top of Memtro. One price per organisation by its number of users, from $50 a month for up to 10 users after a 7-day free trial, with every connector, the MCP server, jobs and memory included. You bring your own model keys.

Can it change anything in Bitwarden?

Only when you ask, and only what it has been granted: invite a person to the organization by email; re-send a member's invitation; revoke a member's access (reversible); restore a revoked member; remove a member from the organization; change a member's role; set which groups a member belongs to; create a group; rename a group or change its collection access; delete a group; set a group's members; set which groups can reach a collection; delete a collection and its items. Every other tool reads, searches or lists. An administrator grants each acting tool by name per team, and a personal connection acts only after its owner allows it.

Which clients work?

Any MCP client that speaks Streamable HTTP: Claude Code, Cursor, Claude Desktop, OpenCode, Codex, Zed, Windsurf, Cline and the Anthropic and OpenAI SDKs. There is no local process to run; the server is remote and authenticated with your key.

Other MCP servers · Engineering and operations

• GitHub MCP server
• AWS CloudWatch MCP server
• Sentry MCP server
• ServiceNow MCP server
• Okta MCP server
• Twilio MCP server