MCP servers for password managers
7 ways to connect password managers to Claude, Cursor or VS Code. 1 are hosted, so there's nothing to install; the rest run on your machine. Each row shows the security checks, the secrets asked for and an install command.
password managers MCP servers 7
Now showing are unlisted. These entries didn't pass our listing filter: no source repo, a very short or duplicated description, or a publisher with 100+ servers. Same automated checks, shown as-is. How we check
| Type | Secrets | Version | Actions | ||||
|---|---|---|---|---|---|---|---|
★ 22 io.github.CakeRepository/1password MCP server for 1Password service accounts — tools and resources for vaults and credentials | 7/7All passed | 65health of 100 | npmRuns locally | 1secret asked | 2.5.0 | ||
io.github.mguttmann/the-real-bitwarden-mcp Unofficial MCP server for the Bitwarden Public API and Secrets Manager, self-hosted or cloud. | 7/81 warning | 58health of 100 | npmRuns locally | 3secrets asked | 0.3.1 | ||
★ 81 com.pulsemcp/onepassword MCP server for interacting with 1Password via the CLI to read and manage credentials. | 7/7All passed | 64health of 100 | npmRuns locally | 1secret asked | 0.5.4 | ||
★ 5 io.github.yarrasys/kdbx Read-only access to secrets in a local KeePassXC vault. Runs commands with them injected. | 4/4All passed | 50health of 100 | DockerRuns locally | Noneno keys asked | 0.3.2 | ||
★ 3 io.github.adamrowles1996/vaultgate Self-hosted remote MCP server for Bitwarden and Vaultwarden with OAuth 2.1; agents hold tokens only | 3/3All passed | 58health of 100 | RemoteHosted | Noneno keys asked | 0.1.0-rc.10 | ||
★ 1 io.github.dinhkarate/keyshroud Agent-safe secrets from self-hosted Vaultwarden/Bitwarden: injected into commands, masked in output | 7/7All passed | 55health of 100 | npmRuns locally | Noneno keys asked | 0.7.6 | ||
io.github.gambadio/onepassword-agent-mcp Save and use 1Password secrets locally without exposing plaintext to AI agents. | 7/7All passed | 61health of 100 | npmRuns locally | Noneno keys asked | 0.4.2 |
Showing 1 to 7 of 7. These are the most recently updated; search or pick a category for the rest.
password managers MCP servers: what to know before you pick one
What's the most popular MCP server for password managers?
Among community builds, the most-starred on GitHub is 1password (★ 22). If you want one that passed every check, 1password did.
Is it safe to give an AI a password managers MCP server?
On registry checks, 6 of 7 come out clean. We also read the code or live tool list of 5 of them without running anything, and none raised a red flag. Treat a pass as "nothing found", and give any server the least access that works.
Is a Claude skill better than an MCP server for password managers?
An MCP server gives the AI new tools, such as reaching password managers itself. A skill only teaches it how to do a task with tools it already has. There are 5 Claude skills for password managers if that fits better.
How fresh are these password managers MCP servers?
4 of the 7 were updated in the 30 days before 31 Oct 2026. The latest was Bitwarden Public API and Secrets Manager (unofficial), on 27 October.
How do I add a password managers MCP server to Claude?
To connect password managers through 1password, use this Claude Desktop (npm) entry: {
"mcpServers": {
"1password": {
"command": "npx",
"args": [
"-y",
"@takescake/1password-mcp@2.5.0"
]
}
}
}. Pin the version shown before you rely on it.
Do I have to install a password managers MCP server?
1 can run hosted, so you only paste a URL into Claude, Cursor or VS Code. The 6 that run locally ship as 5 npm and 1 Docker packages.
More topics: every “MCP server for…” page. Prefer a skill? Claude skills for this (5).