Enpass MCP

Install

Works with Claude Code, Codex, VS Code, Cursor, Windsurf, Claude Desktop. Read the repository before you give any tool access to your data.

npx agentmarket install connector/bitterdev-enpass-mcp

About

No reviews yet. Installed it? Reviews come from verified installers only. How reviews work

Permissions

What this server can do and what it asks for, from its tool list, install config and code. Checked Oct 26, 2026.

Tools

6 read · 6 write · 1 delete · 1 not yet classified

Secrets

None asked for

Install scripts

None found

Runs as

Node.js package

Tools (14)

Read from the source code; the running server may differ. Descriptions are the server’s own words; hidden characters are shown as [U+…].

• add_attachmentAdd attachment

  Attaches a file from disk to an existing entry and publishes it through Enpass folder sync. The bytes are stored raw, exactly as the Enpass app stores them, and read back byte for byte. Enpass must be closed.

• create_itemCreate item

  Creates a login entry in an unlocked vault and publishes it through Enpass folder sync when that vault uses it. Supports arbitrary custom fields (e.g. SMTP host, port), sensitive ones are encrypted like Enpass does. Enpass must be closed.

• delete_itemDelete item

  Deletes an entry the way Enpass does: the row stays as a tombstone with deleted=1 so the other machine learns about the deletion instead of resurrecting the entry. Publishes through folder sync. Enpass must be closed.

• export_attachmentExport attachment

  Decrypts a file attachment from an unlocked vault. By default it writes the file to disk and returns the path (works for any size). Set inline=true to get small files as base64 instead.

• get_itemGet entry

  Returns a full entry from an unlocked vault including sensitive field values (password, TOTP, etc.). Use this when the user explicitly wants the credentials.

• get_otpGet one-time code

  Generates the current TOTP / two-factor one-time code for an entry that stores an OTP secret. Returns the code and how many seconds until it rotates, so it can be entered for 2FA.

• get_passwordGet password

  Returns just the password (and TOTP if present) of an entry in an unlocked vault.

• list_attachmentsList attachments

  Lists the file attachments of an entry in an unlocked vault (name, size, MIME). Use export_attachment to get the file itself.

• list_itemsList entries

  Lists entries in an unlocked vault. Returns titles, usernames and URLs but no passwords or other sensitive values. Supports optional search, category and folder filters.

• list_vaultsList vaults

  Lists the Enpass vaults registered on this machine, whether their file exists, whether a master password is stored in the OS keychain, and whether they are currently unlocked in this session.

• lock_vaultLock vault

  Locks a vault and clears its derived key from memory for this session.

• sync_pullPull newer copy

  Takes in the copy from the sync folder when it is genuinely newer, after backing up the local vault (one generation, under .enpass-mcp-previous). Does nothing when there is no baseline or no folder sync. Enpass must be closed.

• sync_statusSync status

  Lists every vault that uses Enpass folder sync, where its sync folder is, and whether the copy there is newer than the local one. Vaults without folder sync are not listed. Answers include a reason, so 'no baseline yet' is distinguishable from 'up to date'.

• unlock_vaultUnlock vault

  Unlocks a registered vault using the master password stored in the OS keychain. The password is never passed as an argument and never reaches the model. Must be called before listing or reading entries.

Signals

Stars

3

Forks

0

Open issues

0

Last commit

Oct 19, 2026 (10 days ago)

Last release

Jul 23, 2026 (3 months ago)

From GitHub (fetched Oct 24, 2026).

Details

Registry name

io.github.bitterdev/enpass-mcp

Version

0.1.0

Auth

No auth

Packages

npm enpass-mcp

License

MIT

Repository

github.com/bitterdev/enpass-mcp

First seen

Oct 24, 2026

Last checked

Oct 25, 2026

Source

Official MCP Registrygithub-graphql