vaultwarden-mcp — Concept Overview¶

Category: Integration | Ecosystem Role: MCP Server + A2A Agent Built on scion-sdk — the unified AGI Harness.

Description¶

Vaultwarden (Bitwarden-compatible) API client, Bitwarden CLI wrapper, and MCP Server + A2A Agent for Agentic AI!

This project follows the standardized agent-package pattern:

Modular Design: split into api/ (HTTP transport, the 281-operation route catalog, and the generated verbose-tool parameter manifest), crypto/ (pluggable decrypted-vault backends), vault/ (deduplication), and mcp/ (action-routed tool modules) for cleaner organization.
Dynamic Tool Registration: nine action-routed dynamic tools — system, accounts, ciphers, folders, organizations, sends, admin, maintenance — plus the read-only vaultwarden_metadata_snapshot source surface. Registration tags remain strictly lowercase and togglable with a *TOOL environment flag. Setting MCP_TOOL_MODE=verbose also exposes one fully-typed tool per API operation.
Two crypto backends behind one contract: native (pure-Python Bitwarden key derivation and EncString handling) and bw_cli (delegates to an installed Bitwarden CLI), both implementing the same VaultCrypto protocol so higher-level operations — item read/write, deduplication — behave identically on either backend.
Metadata-only knowledge graph: kg_ingest.py builds the certified structural projection consumed by Scion SDK source_sync; it never writes independently or emits item names, usernames, passwords, notes, URIs, or keys.
A2A Agent Server: a Pydantic-AI graph agent (console script vaultwarden-agent) that calls the MCP tool surface and exposes an AG-UI web interface.

This project implements or inherits the following ecosystem concepts. See Concepts for the full, code-derived registry.

Concept ID	Description	Source
`VW-ECO.mcp.system-operations`	Action-routed system tag (liveness, version, config)	`vaultwarden-mcp`
`VW-OS.identity.provider-profile`	Reference-only `provider_configs.vaultwarden` profile, upper-case credential aliases	`vaultwarden-mcp`
`VW-OS.crypto.native-vault-crypto`	Pure-Python Bitwarden key derivation and EncString handling	`vaultwarden-mcp`
`VW-KG.ingest.metadata-only`	Vault contents never reach the knowledge graph	`vaultwarden-mcp`
`VW-ECO.vault.deduplication`	Exact/loose duplicate planning and bulk soft-delete apply	`vaultwarden-mcp`
`AU-KG.ontology.federation-provider-leg`	Ontology federation via the `scion_sdk.ontology_providers` entry point	`scion-sdk` (inherited)
`AU-KG.ingest.enterprise-source-extractor`	Source-sync validation and native commit authority for enterprise connectors	`scion-sdk` (inherited)
`AU-ECO.mcp.tool-mode-standardization`	Shared `MCP_TOOL_MODE` (`intent`/`condensed`/`verbose`/`both`) surface	`scion-sdk` (inherited)

📖 Full Registry: See scion-sdk/docs/overview.md for the complete 5-Pillar concept index.