MCP servers for password managers

7 ways to connect password managers to Claude, Cursor or VS Code. 1 are hosted, so there's nothing to install; the rest run on your machine. Each row shows the security checks, the secrets asked for and an install command.

Sort
How we check servers

Registry data fetched

password managers MCP servers 7

MCP servers, password managers, most relevant first
Type Secrets Version Actions
★ 22 io.github.CakeRepository/1password

MCP server for 1Password service accounts — tools and resources for vaults and credentials

7/7All passed65health of 100npmRuns locally1secret asked2.5.0
io.github.mguttmann/the-real-bitwarden-mcp

Unofficial MCP server for the Bitwarden Public API and Secrets Manager, self-hosted or cloud.

7/81 warning58health of 100npmRuns locally3secrets asked0.3.1
★ 81 com.pulsemcp/onepassword

MCP server for interacting with 1Password via the CLI to read and manage credentials.

7/7All passed64health of 100npmRuns locally1secret asked0.5.4
★ 5 io.github.yarrasys/kdbx

Read-only access to secrets in a local KeePassXC vault. Runs commands with them injected.

4/4All passed50health of 100DockerRuns locallyNoneno keys asked0.3.2
★ 3 io.github.adamrowles1996/vaultgate

Self-hosted remote MCP server for Bitwarden and Vaultwarden with OAuth 2.1; agents hold tokens only

3/3All passed58health of 100RemoteHostedNoneno keys asked0.1.0-rc.10
★ 1 io.github.dinhkarate/keyshroud

Agent-safe secrets from self-hosted Vaultwarden/Bitwarden: injected into commands, masked in output

7/7All passed55health of 100npmRuns locallyNoneno keys asked0.7.6
io.github.gambadio/onepassword-agent-mcp

Save and use 1Password secrets locally without exposing plaintext to AI agents.

7/7All passed61health of 100npmRuns locallyNoneno keys asked0.4.2

Showing 1 to 7 of 7. These are the most recently updated; search or pick a category for the rest.

password managers MCP servers: what to know before you pick one

What's the most popular MCP server for password managers?

Among community builds, the most-starred on GitHub is 1password (★ 22). If you want one that passed every check, 1password did.

Is it safe to give an AI a password managers MCP server?

On registry checks, 6 of 7 come out clean. We also read the code or live tool list of 5 of them without running anything, and none raised a red flag. Treat a pass as "nothing found", and give any server the least access that works.

Is a Claude skill better than an MCP server for password managers?

An MCP server gives the AI new tools, such as reaching password managers itself. A skill only teaches it how to do a task with tools it already has. There are 5 Claude skills for password managers if that fits better.

How fresh are these password managers MCP servers?

4 of the 7 were updated in the 30 days before 31 Oct 2026. The latest was Bitwarden Public API and Secrets Manager (unofficial), on 27 October.

How do I add a password managers MCP server to Claude?

To connect password managers through 1password, use this Claude Desktop (npm) entry: { "mcpServers": { "1password": { "command": "npx", "args": [ "-y", "@takescake/1password-mcp@2.5.0" ] } } }. Pin the version shown before you rely on it.

Do I have to install a password managers MCP server?

1 can run hosted, so you only paste a URL into Claude, Cursor or VS Code. The 6 that run locally ship as 5 npm and 1 Docker packages.

More topics: every “MCP server for…” page. Prefer a skill? Claude skills for this (5).