@icoretech/warden-mcp 0.1.1 → 0.1.3
This diff represents the content of publicly available package versions that have been released to one of the supported registries. The information contained in this diff is provided for informational purposes only and reflects changes between package versions as they appear in their respective public registries.
- package/README.md +27 -1
- package/package.json +7 -7
package/README.md
CHANGED
|
@@ -1,10 +1,15 @@
|
|
|
1
1
|
# warden-mcp
|
|
2
2
|
|
|
3
|
+
[](https://www.npmjs.com/package/@icoretech/warden-mcp)
|
|
4
|
+
[](https://ghcr.io/icoretech/warden-mcp)
|
|
5
|
+
[](https://github.com/icoretech/warden-mcp/actions/workflows/ci.yml)
|
|
6
|
+
[](LICENSE)
|
|
7
|
+
|
|
3
8
|
Programmatic Vaultwarden/Bitwarden vault management over MCP (Model Context Protocol), backed by the official Bitwarden CLI (`bw`).
|
|
4
9
|
|
|
5
10
|
This project exists to let agents and automation **create/search/read/update/move** vault items without re-implementing Bitwarden’s client-side crypto.
|
|
6
11
|
|
|
7
|
-
Published package: `@icoretech/warden-mcp`
|
|
12
|
+
Published package: [`@icoretech/warden-mcp`](https://www.npmjs.com/package/@icoretech/warden-mcp)
|
|
8
13
|
|
|
9
14
|
## Highlights
|
|
10
15
|
|
|
@@ -14,6 +19,21 @@ Published package: `@icoretech/warden-mcp`
|
|
|
14
19
|
- Attachments: create/delete/download
|
|
15
20
|
- Organization + collection helpers (list + org-collection CRUD)
|
|
16
21
|
- Safe-by-default: item reads are **redacted** unless explicitly revealed; secret helper tools return `null` unless `reveal: true`
|
|
22
|
+
- Strong fit for LLM automation: pair it with a browser-capable MCP host so an agent can fetch credentials, complete sign-in flows, read TOTP codes, and keep automating after login
|
|
23
|
+
|
|
24
|
+
## LLM Automation Use Case
|
|
25
|
+
|
|
26
|
+
`warden-mcp` is not only useful for vault administration. A very practical use case is pairing it with an LLM that can also drive a browser.
|
|
27
|
+
|
|
28
|
+
That lets the agent do end-to-end authenticated workflows such as:
|
|
29
|
+
|
|
30
|
+
- open a site or backoffice in the browser
|
|
31
|
+
- read the right login from Vaultwarden or Bitwarden
|
|
32
|
+
- fill username and password without hardcoding secrets in prompts or config
|
|
33
|
+
- retrieve a current TOTP code with `keychain.get_totp` for TOTP-based MFA
|
|
34
|
+
- continue the real task after login, such as navigation, data entry, exports, or routine admin work
|
|
35
|
+
|
|
36
|
+
In practice, this is what makes the server useful for full automation, not just secret lookup. The same MCP session that gives the model browser control can also give it scoped access to the credentials and MFA material needed to finish the workflow.
|
|
17
37
|
|
|
18
38
|
## Runtime Requirement
|
|
19
39
|
|
|
@@ -92,6 +112,12 @@ This mode is what makes `warden-mcp` different from a simple local wrapper:
|
|
|
92
112
|
- one running server can front different vault hosts or different identities without restarting
|
|
93
113
|
- it fits shared-agent and gateway setups much better than per-client local processes
|
|
94
114
|
|
|
115
|
+
### Docker
|
|
116
|
+
|
|
117
|
+
```bash
|
|
118
|
+
docker run --rm -p 3005:3005 ghcr.io/icoretech/warden-mcp
|
|
119
|
+
```
|
|
120
|
+
|
|
95
121
|
### Global install
|
|
96
122
|
|
|
97
123
|
```bash
|
package/package.json
CHANGED
|
@@ -1,7 +1,7 @@
|
|
|
1
1
|
{
|
|
2
2
|
"private": false,
|
|
3
3
|
"name": "@icoretech/warden-mcp",
|
|
4
|
-
"version": "0.1.
|
|
4
|
+
"version": "0.1.3",
|
|
5
5
|
"type": "module",
|
|
6
6
|
"license": "MIT",
|
|
7
7
|
"description": "Vaultwarden/Bitwarden MCP server backed by Bitwarden CLI (bw).",
|
|
@@ -42,18 +42,18 @@
|
|
|
42
42
|
"lint": "biome check --write --assist-enabled=true . && tsc --noEmit"
|
|
43
43
|
},
|
|
44
44
|
"dependencies": {
|
|
45
|
-
"@modelcontextprotocol/sdk": "^1.
|
|
45
|
+
"@modelcontextprotocol/sdk": "^1.27.1",
|
|
46
46
|
"express": "^5.2.1",
|
|
47
|
-
"jose": "^6.
|
|
47
|
+
"jose": "^6.2.2",
|
|
48
48
|
"zod": "^4.3.6"
|
|
49
49
|
},
|
|
50
50
|
"optionalDependencies": {
|
|
51
|
-
"@bitwarden/cli": "2026.
|
|
51
|
+
"@bitwarden/cli": "2026.2.0"
|
|
52
52
|
},
|
|
53
53
|
"devDependencies": {
|
|
54
|
-
"@biomejs/biome": "^2.
|
|
54
|
+
"@biomejs/biome": "^2.4.8",
|
|
55
55
|
"@types/express": "^5.0.6",
|
|
56
|
-
"@types/node": "^25.
|
|
56
|
+
"@types/node": "^25.5.0",
|
|
57
57
|
"playwright": "1.58.2",
|
|
58
58
|
"tsx": "^4.21.0",
|
|
59
59
|
"typescript": "^5.9.3"
|
|
@@ -63,6 +63,6 @@
|
|
|
63
63
|
"access": "public"
|
|
64
64
|
},
|
|
65
65
|
"engines": {
|
|
66
|
-
"node": ">=24.
|
|
66
|
+
"node": ">=24.14.0"
|
|
67
67
|
}
|
|
68
68
|
}
|