github TypeScript analyzed e8730d1

icoretech/warden-mcp

🔐 Vaultwarden / Bitwarden MCP server for credential-aware AI agents

Drift inferred · capture-to-capture

capabilities 0 tools

transport stdio · streamable-http · http counts 0 tools · 0 res · 0 prompts permission surface via code analysis

No tools enumerated yet for this server.

skills & danger signals github-tarball

prompt-surface shipped agent-instruction files + hidden-content / dangerous-code findings — quoted from the analyzed source

analyzed commit e8730d1 · analyzer v28 · 2d ago

code evidence vv0.2.29 · github-tarball

evidence-backed findings quoted directly from the published source artifact — not inferred

code files: 46

fs icoretech-warden-mcp-e8730d1/bin/patch-bitwarden-cli-lib.js :1 import { readFileSync, writeFileSync } from 'node:fs';
fs icoretech-warden-mcp-e8730d1/bin/warden-mcp.js :5 import { existsSync } from 'node:fs';
fs icoretech-warden-mcp-e8730d1/src/bw/bwPool.ts :4 import { mkdir } from 'node:fs/promises';
fs icoretech-warden-mcp-e8730d1/src/bw/bwSession.ts :3 import { mkdir, readFile, rm, stat, writeFile } from 'node:fs/promises';
fs icoretech-warden-mcp-e8730d1/src/bw/resolveBwBin.ts :1 import { accessSync, constants, readFileSync } from 'node:fs';
fs icoretech-warden-mcp-e8730d1/src/sdk/keychainSdk.ts :3 import { mkdtemp, readFile, rm, writeFile } from 'node:fs/promises';

shell icoretech-warden-mcp-e8730d1/src/bw/bwCli.ts :3 import { spawn } from 'node:child_process';
shell icoretech-warden-mcp-e8730d1/src/startup/bwStartup.ts :1 import { spawnSync } from 'node:child_process';

net icoretech-warden-mcp-e8730d1/src/transports/http.ts :4 import type { IncomingMessage, ServerResponse } from 'node:http';

secrets icoretech-warden-mcp-e8730d1/src/bw/bwSession.ts :96 const clientSecret = process.env.BW_CLIENTSECRET;

postinstall icoretech-warden-mcp-e8730d1/package.json :37 node bin/patch-bitwarden-cli.js