MCP
A2AChoose your region
Bitwarden offers hosted servers in two regions and supports self-hosted deployments. Enter the API Base URL and Identity Base URL fields with the values that match the region where your organization lives — both must point to the same region.
- United States — API:
https://api.bitwarden.com, Identity:https://identity.bitwarden.com - European Union — API:
https://api.bitwarden.eu, Identity:https://identity.bitwarden.eu - Self-hosted — API:
https://<your-host>/api, Identity:https://<your-host>/identity
Retrieve the organization API key
Sign in to the Bitwarden web vault as an Owner of the organization and copy the API key.
Open the Admin Console
Sign in to your Bitwarden web vault (or the EU / self-hosted equivalent) and switch from Password Manager to Admin Console using the product switcher in the top navigation.
View the API key
Scroll to the API key section at the bottom of the page and click View API key. Confirm your master password if prompted.
- Copy the client_id value (it has the form
organization.<org-uuid>). - Copy the client_secret value. Treat it as a password.
- If the API key was leaked, click Rotate API key to invalidate the old credentials and generate new ones.
Linking the Account from the Hub
Navigate to the Hub
Use one of the three Linking Account Methods to access the Hub.
Fill out the fields
Fill out the following fields using details from your provider:
- API Base URL
- Identity Base URL
- Client ID
- Client Secret