Bitwarden & Vaultwarden Integration for Openclaw

A powerful CLI wrapper for Bitwarden and Vaultwarden that enables AI agents to securely manage credentials with automatic session handling.

twhidden
v1.0.3
Feb 18, 2026
0
0
0

Install & Download

1. ClawHub CLI

The fastest way to install a skill directly from the registry.

npx clawhub@latest install openclaw-skill-bitwarden

2. Manual Installation

Copy the skill folder to one of these locations

Global
~/.openclaw/skills/
Workspace
<project>/skills/

Priority: Workspace > Local > Bundled

3. Prompt Installation

Copy this prompt to OpenClaw to install it automatically.

Help me install openclaw-skill-bitwarden using Clawhub. If Clawhub is not installed, install it first (npm i -g clawhub).

Prefer to download?

Get the raw skill files in a ZIP archive.

What is Bitwarden & Vaultwarden Integration?

This skill provides a robust interface for interacting with Bitwarden and Vaultwarden password managers within the Openclaw Skills ecosystem. It wraps the official Bitwarden CLI (bw) to provide automated login, session caching, and a simplified command set for storing and retrieving sensitive data. By bridging the gap between your secure vault and automated workflows, it allows for high-security credential management without manual overhead.

Designed for both the official Bitwarden cloud and self-hosted Vaultwarden instances, this skill ensures that your AI agents can autonomously generate secure passwords, fetch API keys, and manage logins. It prioritizes security by utilizing local session tokens and encrypted communication, making it an essential tool for developers who need to integrate secret management into their Openclaw Skills implementations.

Bitwarden & Vaultwarden Integration Use Cases

  • Automating the retrieval of database credentials or API keys during CI/CD processes.
  • Generating high-entropy passwords for new user accounts and storing them directly in the vault.
  • Searching and fetching login details for web automation and testing scripts.
  • Programmatically registering new accounts on a private Vaultwarden server.
  • Managing temporary access to shared credentials within a team environment.

How Bitwarden & Vaultwarden Integration Works

  1. The skill initializes by reading configuration from environment variables or a secure .env file.
  2. Upon the first request, the skill performs a login and unlock operation using the provided master credentials.
  3. A session token is generated and cached in a temporary directory to facilitate subsequent requests without re-authentication.
  4. The skill executes the requested command—such as retrieving a password or listing items—by interfacing with the Bitwarden CLI.
  5. All data returned from the vault is handled in memory, ensuring that decrypted secrets are never written to permanent storage.
  6. The session can be manually locked or allowed to expire, ensuring the security of the Openclaw Skills environment.

Bitwarden & Vaultwarden Integration Setup

To use this integration with Openclaw Skills, first install the Bitwarden CLI:

npm install -g @bitwarden/cli

Next, configure your environment variables to point to your vault server:

export BW_SERVER="https://vault.bitwarden.com"
export BW_EMAIL="[email protected]"
export BW_MASTER_PASSWORD="your-master-password"

Ensure that your Python environment has the necessary packages for advanced registration features:

pip install cryptography requests

Bitwarden & Vaultwarden Integration Data Schema & Taxonomy

The skill manages vault data using the standard Bitwarden schema and local session tracking.

Component Location / Format Description
Session Token /tmp/.bw_session A temporary file containing the active vault unlock key
Vault Items JSON Full item objects including UUID, name, username, and password
Config File secrets/bitwarden.env Local environment file for sensitive server credentials
Logic Wrapper bw.sh Bash script managing the lifecycle of the CLI interactions

Bitwarden & Vaultwarden Integration Advanced Features

  • Direct account registration utilizing PBKDF2-SHA256 key derivation for new server setups.
  • Automatic session caching to minimize API calls and improve performance for Openclaw Skills.
  • Support for custom Vaultwarden instances via the BW_SERVER configuration.
  • Secure password generation with custom entropy and length settings.
  • Built-in guardrails to prevent accidental logging of sensitive session tokens or master passwords.

SKILL.md


Loading

Related Openclaw Skills

METADATA

Github Stars: 0
forks: 0

Featured*