Can I use Bitwarden as a CLI?

Yes. KosmoKrator exposes a Bitwarden CLI through kosmo integrations:call and the provider shortcut command. Commands can return JSON for scripts, CI, and coding agents.

Can I expose Bitwarden through MCP?

Yes. The KosmoKrator MCP gateway can expose selected Bitwarden tools to clients such as Claude Code, Cursor, Codex, and other MCP-compatible tools.

Where are Bitwarden credentials stored?

Bitwarden credentials are configured in KosmoKrator's local integration settings and reused by CLI, Lua, and MCP gateway surfaces.

Can I deny write access for Bitwarden MCP tools?

Yes. Start the gateway with --write=deny for read-only clients, or use ask/allow only for trusted workspaces.

productivity

Bitwarden MCP, CLI, and Lua Integration for AI Agents

Bitwarden integration docs for AI agents: MCP gateway setup, Bitwarden CLI commands, Lua API reference, credentials, and function schemas.

Bitwarden for agents

Credentials can be configured manually in web or CLI hosts.

Use this integration from Lua code mode, the headless integrations CLI, or the KosmoKrator MCP gateway. The same package metadata powers all three surfaces.

Agent Surfaces

Bitwarden CLIHeadless setup, JSON output, direct function calls. Bitwarden MCPExpose selected tools to local MCP clients. Bitwarden LuaAgent-facing namespace and Lua reference. FeedbackReport missing tools, auth issues, or bad metadata.

Machine-Readable Metadata

integration_slug: bitwarden
route_slug: bitwarden
package: bitwarden
auth_strategy: oauth_client_credentials
cli_setup_supported: true
cli_runtime_supported: true
mcp_gateway_supported: true
lua_supported: true

Function Catalog

Function	Type	Description
`bitwarden.bitwarden_collections_get`	Read `read`	Retrieves the details of an existing collection. You need only supply the unique collection identifier that was returned upon collection creation.
`bitwarden.bitwarden_collections_put`	Write `write`	Updates the specified collection object. If a property is not provided, the value of the existing property will be reset.
`bitwarden.bitwarden_collections_delete`	Write `write`	Permanently deletes a collection. This cannot be undone.
`bitwarden.bitwarden_collections_list`	Read `read`	Returns a list of your organization's collections. Collection objects listed in this call do not include information about their associated groups.
`bitwarden.bitwarden_events_list`	Read `read`	Returns a filtered list of your organization's event logs, paged by a continuation token. If no filters are provided, it will return the last 30 days of event for the organization.
`bitwarden.bitwarden_groups_get`	Read `read`	Retrieves the details of an existing group. You need only supply the unique group identifier that was returned upon group creation.
`bitwarden.bitwarden_groups_put`	Write `write`	Updates the specified group object. If a property is not provided, the value of the existing property will be reset.
`bitwarden.bitwarden_groups_delete`	Write `write`	Permanently deletes a group. This cannot be undone.
`bitwarden.bitwarden_groups_get_member_ids`	Read `read`	Retrieves the unique identifiers for all members that are associated with this group. You need only supply the unique group identifier that was returned upon group creation.
`bitwarden.bitwarden_groups_put_member_ids`	Write `write`	Updates the specified group's member associations.
`bitwarden.bitwarden_groups_list`	Read `read`	Returns a list of your organization's groups. Group objects listed in this call include information about their associated collections.
`bitwarden.bitwarden_groups_post`	Write `write`	Creates a new group object.
`bitwarden.bitwarden_members_get`	Read `read`	Retrieves the details of an existing member of the organization. You need only supply the unique member identifier that was returned upon member creation.
`bitwarden.bitwarden_members_put`	Write `write`	Updates the specified member object. If a property is not provided, the value of the existing property will be reset.
`bitwarden.bitwarden_members_remove`	Write `write`	Removes a member from the organization. This cannot be undone. The user account will still remain.
`bitwarden.bitwarden_members_get_group_ids`	Read `read`	Retrieves the unique identifiers for all groups that are associated with this member. You need only supply the unique member identifier that was returned upon member creation.
`bitwarden.bitwarden_members_put_group_ids`	Write `write`	Updates the specified member's group associations.
`bitwarden.bitwarden_members_list`	Read `read`	Returns a list of your organization's members. Member objects listed in this call include information about their associated collections.
`bitwarden.bitwarden_members_post`	Write `write`	Creates a new member object by inviting a user to the organization.
`bitwarden.bitwarden_members_post_reinvite`	Write `write`	Re-sends the invitation email to an organization member.
`bitwarden.bitwarden_members_revoke`	Write `write`	Revoke a member's access to an organization.
`bitwarden.bitwarden_members_restore`	Write `write`	Restores a previously revoked member of the organization.
`bitwarden.bitwarden_organization_get_subscription`	Read `read`	Retrieves the subscription details for the current organization.
`bitwarden.bitwarden_organization_post_subscription`	Write `write`	Update the organization's current subscription for Password Manager and/or Secrets Manager.
`bitwarden.bitwarden_organization_import`	Write `write`	Import members and groups from an external system.
`bitwarden.bitwarden_policies_get`	Read `read`	Retrieves the details of a policy.
`bitwarden.bitwarden_policies_put`	Write `write`	Updates the specified policy. If a property is not provided, the value of the existing property will be reset.
`bitwarden.bitwarden_policies_list`	Read `read`	Returns a list of your organization's policies.