bw-cli

Files (3)

• SKILL.md
• _meta.json
• commands.md · references/

SKILL.md (first lines)

# Bitwarden CLI

Complete reference for interacting with Bitwarden via the command-line interface.

**Official documentation:** https://bitwarden.com/help/cli/  
**Markdown version (for agents):** https://bitwarden.com/help/cli.md

## Quick Reference

### Installation

```bash
# Native executable (recommended)
# https://bitwarden.com/download/?app=cli

# npm
npm install -g @bitwarden/cli

# Linux package managers
choco install bitwarden-cli  # Windows via Chocolatey
snap install bw              # Linux via Snap
```

### Authentication Flow (Preferred: Unlock First)

**Standard-Workflow (unlock-first):**
```bash
# 1. Try unlock first (fast, most common case)
export BW_SESSION=$(bw unlock --passwordenv BW_PASSWORD --raw 2>/dev/null)

# 2. Only if unlock fails, fall back to login
if [ -z "$BW_SESSION" ]; then
  bw login "$BW_EMAIL" "$BW_PASSWORD"
  export BW_SESSION=$(bw unlock --passwordenv BW_PASSWORD --raw)
fi

# 3. Sync before any vault operation
bw sync

# 4. End session
bw lock                      # Lock (keep login)
bw logout                    # Complete logout
```

**Alternative: Direct login methods**
```bash
bw login                     # Interactive login (email + password)
bw login --apikey           # API key login (uses BW_CLIENTID/BW_CLIENTSECRET from .secrets)
bw login --sso              # SSO login
bw unlock                    # Interactive unlock
bw unlock --passwordenv BW_PASSWORD     # Auto-available from sourced .secrets
```

## Session & Configuration Commands

### status

Check authentication and vault status:

```bash
bw status
```

Returns: `unauthenticated`, `locked`, or `unlocked`.

### config

Configure CLI settings:

```bash
# Set server (self-hosted or regional)
bw config server https://vault.example.com
bw config server https://vault.bitwarden.eu   # EU cloud
bw config server                              # Check current

# Individual service URLs
bw config server --web-vault <url> --api <url> --identity <url>
```

### sync

Sync local vault with server (always run before vault operations):

```bash
bw sync                     # Full sync
bw sync --last             # Show last sync timestamp
```

### update

Check for updates (does not auto-install):

```bash
bw update
```

### serve

Start REST API server:

```bash
bw serve --port 8087 --hostname localhost
```

## Vault Item Commands

### list

List vault objects:

```bash
# Items
bw list items
bw list items --search github
bw list items --folderid <id> --collectionid <id>
bw list items --url https://example.com
bw list items --trash                        # Items in trash

# Folders

From johnalbertini14-glitch/openclaw-skills, MIT.

More from johnalbertini14-glitch/openclaw-skills