LaunchKit · 2026
Back to Skills

bitwarden-vault

Bitwarden CLI setup, authentication.

5
2.4k downloads
by @startupbros

Setup & Installation

openclaw skills install @startupbros/bitwarden-vault

Or with the ClawHub CLI, for registry-managed skill folders outside a full OpenClaw workspace:

npx clawhub install bitwarden-vault

What This Skill Does

Bitwarden CLI (`bw`) provides programmatic access to a Bitwarden password vault, letting you retrieve passwords, usernames, TOTP codes, and secure notes from the command line. It supports email/password, API key, and SSO authentication. All vault operations require a session key exported as `BW_SESSION` after authenticating.

Lets scripts and agents pull secrets from an encrypted vault at runtime instead of storing credentials in env files or source code.

When to use it

  • Pulling API keys from vault into shell scripts
  • Fetching TOTP codes for automated 2FA login flows
  • Retrieving database passwords during local development
  • Accessing shared credentials in CI/CD pipelines
  • Looking up SSH passwords without leaving the terminal

Example Workflow

Here's how your AI assistant might use this skill in practice.

INPUT

User asks: Get the password for my GitHub account from Bitwarden

AGENT
  1. 1Run `bw unlock` inside a tmux session to decrypt the vault
  2. 2Export the returned session key as `BW_SESSION`
  3. 3Run `bw get password "GitHub"` to retrieve the password
  4. 4Return the password without logging it to stdout
OUTPUT

The GitHub account password retrieved securely from the vault

Requirements

Accounts, API keys, or tools you or your AI assistant may need to set up while using this skill.

Bitwarden account (free or paid at bitwarden.com)BW_CLIENTID environment variable (for API key authentication)BW_CLIENTSECRET environment variable (for API key authentication)