{
 "categories": [
  "identity",
  "developer-tools"
 ],
 "deployment": "hybrid",
 "evidence": [
  {
   "date": "2026-09-04",
   "fact": "homepage",
   "note": "Bitwarden presents an open-source password manager for individuals, teams, and enterprises, with free personal signup and paid Premium, Families, Teams, and Enterprise plans.",
   "source": "https://bitwarden.com/",
   "tier": "declared"
  },
  {
   "date": "2026-09-04",
   "fact": "deployment",
   "note": "Public API docs give cloud hosts api.bitwarden.com and api.bitwarden.eu plus a self-hosted path at https://your.domain.com/api, so the product is hybrid.",
   "source": "https://bitwarden.com/help/public-api/",
   "tier": "declared"
  },
  {
   "date": "2026-09-04",
   "fact": "license",
   "note": "The homepage lists a free personal plan and paid Premium, Families, Teams, and Enterprise subscriptions. That is a freemium product, not a free-only or purely commercial license.",
   "source": "https://bitwarden.com/",
   "tier": "declared"
  },
  {
   "date": "2026-09-04",
   "fact": "platforms",
   "note": "Downloads cover browser extensions, desktop (Windows, macOS, Linux), the web app, iOS, Android, F-Droid, and the CLI.",
   "source": "https://bitwarden.com/download/",
   "tier": "declared"
  },
  {
   "date": "2026-09-04",
   "fact": "modalities.api.exists",
   "note": "Bitwarden documents a Public API for organization members, collections, groups, event logs, and policies.",
   "source": "https://bitwarden.com/help/public-api/",
   "tier": "declared"
  },
  {
   "date": "2026-09-04",
   "fact": "modalities.api.kinds[0]",
   "note": "The Public API is documented as RESTful HTTP with JSON request and response bodies and standard HTTP verbs.",
   "source": "https://bitwarden.com/help/public-api/",
   "tier": "declared"
  },
  {
   "date": "2026-09-04",
   "fact": "modalities.api.auth[0]",
   "note": "Organization callers POST grant_type=client_credentials and scope=api.organization with client_id and client_secret to identity.bitwarden.com/connect/token, then send Authorization: Bearer on /public requests.",
   "source": "https://bitwarden.com/help/public-api/",
   "tier": "declared"
  },
  {
   "date": "2026-09-04",
   "fact": "modalities.api.coverage",
   "note": "Bitwarden states the Public API does not manage individual vault items and is available for Enterprise and Teams organizations. Vault-item HTTP access requires the local CLI serve API.",
   "source": "https://bitwarden.com/help/public-api/",
   "tier": "declared"
  },
  {
   "date": "2026-09-04",
   "fact": "modalities.mcp.first_party",
   "note": "Bitwarden owns bitwarden/mcp-server and publishes @bitwarden/mcp-server. The README documents local stdio MCP for vault CLI tools and organization Public API tools.",
   "source": "https://github.com/bitwarden/mcp-server",
   "tier": "declared"
  },
  {
   "date": "2026-09-04",
   "fact": "modalities.cli.exists",
   "note": "Bitwarden documents official bw for Windows, macOS, and Linux, including login, unlock, item CRUD, import, export, and serve.",
   "source": "https://bitwarden.com/help/cli/",
   "tier": "declared"
  },
  {
   "date": "2026-09-04",
   "fact": "modalities.data_access.export[0]",
   "note": "bw export supports --format json (and encrypted_json) for vault data.",
   "source": "https://bitwarden.com/help/cli/",
   "tier": "declared"
  },
  {
   "date": "2026-09-04",
   "fact": "modalities.data_access.export[1]",
   "note": "bw export defaults to CSV and accepts --format csv.",
   "source": "https://bitwarden.com/help/cli/",
   "tier": "declared"
  },
  {
   "date": "2026-09-04",
   "fact": "modalities.data_access.import[0]",
   "note": "bw import <format> <path> imports a Bitwarden export or another supported password-manager file, including CSV examples.",
   "source": "https://bitwarden.com/help/cli/",
   "tier": "declared"
  },
  {
   "date": "2026-09-04",
   "fact": "modalities.agent_docs.llms_txt",
   "note": "Bitwarden publishes a curated llms.txt index at https://bitwarden.com/llms.txt with links to help, blog, and product Markdown.",
   "source": "https://bitwarden.com/llms.txt",
   "tier": "declared"
  },
  {
   "date": "2026-09-04",
   "fact": "verdict.scores.api",
   "note": "The Public API is documented production REST with OAuth2 client-credentials and write coverage for org admin, but it is Teams/Enterprise-gated and explicitly excludes vault items. The Vault Management API exists only behind local bw serve.",
   "source": "https://bitwarden.com/help/public-api/",
   "tier": "declared"
  },
  {
   "date": "2026-09-04",
   "fact": "verdict.scores.mcp",
   "note": "The official server has useful vault and org-admin tools over stdio, but the README forbids public hosting, warns that vault contents can appear in AI responses, and org-admin tools need Teams or Enterprise plus owner/admin credentials.",
   "source": "https://raw.githubusercontent.com/bitwarden/mcp-server/main/README.md",
   "tier": "declared"
  },
  {
   "date": "2026-09-04",
   "fact": "verdict.scores.cli",
   "note": "Official bw covers login, unlock, item, folder, send, import, export, and serve, with personal API-key login, BW_SESSION, and JSON output including --pretty.",
   "source": "https://bitwarden.com/help/cli/",
   "tier": "declared"
  },
  {
   "date": "2026-09-04",
   "fact": "freshness.watch[0].url",
   "note": "Opened bitwarden/mcp-server. Not archived. Latest push 2026-08-20. GPL-3.0. README documents local-only stdio MCP, BW_SESSION, and org API credentials.",
   "source": "https://github.com/bitwarden/mcp-server",
   "tier": "declared"
  },
  {
   "date": "2026-09-04",
   "fact": "freshness.watch[1].url",
   "note": "Opened and verified as the current Public API page, including OAuth2 client-credentials, Bearer tokens, Teams/Enterprise access, and the no-vault-item rule.",
   "source": "https://bitwarden.com/help/public-api/",
   "tier": "declared"
  },
  {
   "date": "2026-09-04",
   "fact": "freshness.watch[2].url",
   "note": "Opened and verified as the current Password Manager CLI page, including personal API-key login, BW_SESSION, import/export, and serve.",
   "source": "https://bitwarden.com/help/cli/",
   "tier": "declared"
  },
  {
   "date": "2026-09-04",
   "fact": "freshness.watch[3].url",
   "note": "Opened the vendor blog. It presents the MCP server as first-party local infrastructure implemented via the CLI and lists vault and organization-admin actions.",
   "source": "https://bitwarden.com/blog/bitwarden-mcp-server/",
   "tier": "declared"
  }
 ],
 "freshness": {
  "last_verified": "2026-09-04",
  "volatility": "high",
  "watch": [
   {
    "type": "repo",
    "url": "https://github.com/bitwarden/mcp-server"
   },
   {
    "type": "docs",
    "url": "https://bitwarden.com/help/public-api/"
   },
   {
    "type": "docs",
    "url": "https://bitwarden.com/help/cli/"
   },
   {
    "type": "mcp",
    "url": "https://bitwarden.com/blog/bitwarden-mcp-server/"
   }
  ]
 },
 "homepage": "https://bitwarden.com/",
 "id": "bitwarden",
 "license": "freemium",
 "modalities": {
  "agent_docs": {
   "llms_txt": true
  },
  "api": {
   "auth": [
    "oauth2-client-credentials"
   ],
   "coverage": "partial",
   "docs": "https://bitwarden.com/help/public-api/",
   "exists": true,
   "kinds": [
    "rest"
   ]
  },
  "cli": {
   "exists": true
  },
  "computer_use": {
   "issues": [],
   "viability": "unknown"
  },
  "data_access": {
   "export": [
    "json",
    "csv"
   ],
   "import": [
    "csv"
   ]
  },
  "extensibility": {
   "scripting": [],
   "webhooks": "unknown"
  },
  "integrations": {
   "make": "unknown",
   "n8n": "unknown",
   "power_automate": "unknown",
   "zapier": "unknown"
  },
  "mcp": {
   "first_party": true,
   "third_party": [],
   "verdict": "official"
  },
  "rpa": {
   "drivability": "unknown",
   "notes": "No repeatable UI probe was run. The official bw CLI, Public API, and local Bitwarden MCP cover vault and organization-admin work without browser control.\n",
   "ui_stack": [
    "web-dom",
    "native-desktop"
   ],
   "vendor_support": []
  },
  "sdk": {
   "exists": "unknown",
   "languages": [],
   "official": "unknown"
  }
 },
 "name": "Bitwarden",
 "platforms": [
  "windows",
  "macos",
  "linux",
  "web",
  "ios",
  "android"
 ],
 "related": {
  "alternatives": [
   "1password",
   "hashicorp-vault"
  ],
  "our_products": []
 },
 "schema_version": 1,
 "score_version": 1,
 "status": "active",
 "vendor": "Bitwarden",
 "verdict": {
  "best_path": "cli",
  "scores": {
   "api": 6,
   "cli": 8,
   "computer_use": null,
   "integrations": null,
   "mcp": 6,
   "overall": 8,
   "rpa": null
  },
  "summary": "Bitwarden is automatable today through the official bw CLI. This record is Bitwarden Password Manager (cloud and self-hosted vaults, organization administration, CLI, Public API, and the first-party local MCP). It is not 1Password and not HashiCorp Vault. bw installs on Windows, macOS, and Linux, logs in with email, a personal API key (BW_CLIENTID and BW_CLIENTSECRET), or SSO, and unlocks with a master password to produce BW_SESSION. Item, folder, send, and organization-collection commands return JSON; --pretty formats that JSON. That is the broadest documented agent path for vault items. The Public API is a documented REST surface at https://api.bitwarden.com/public for members, collections, groups, event logs, and policies. It authenticates with OAuth2 client credentials (scope api.organization) against identity.bitwarden.com, then Authorization: Bearer. Bitwarden states the Public API does not manage individual vault items and is available to Teams and Enterprise organizations. A separate Vault Management API is a local Express server started with bw serve; it is not a hosted vault-item API. First-party MCP is npm package @bitwarden/mcp-server (bitwarden/mcp-server), stdio only. Vault tools wrap the CLI (lock, unlock, sync, item CRUD, folders, attachments, Send, device approval). Organization-admin tools wrap the Public API and need Teams or Enterprise plus owner or admin API credentials. The README says the server must never be hosted publicly and that vault contents can appear in AI responses. That is the opposite of 1Password Environments MCP, which the opened 1Password page says never returns stored secret values. iPaaS connectors were not opened. Computer-use viability is unassessed. CLI scores 8 and is the best path. API scores 6 because the hosted Public API is org-admin only and edition-gated. MCP scores 6 because it is local-only, can leak vault secrets into model output, and org tools need Teams or Enterprise.\n"
 }
}