BitWarden

{
  "service_type": "platform",
  "base_url": "https://bitwarden.com",
  "auth_method": "api_key",
  "auth_config": {
    "api_key": "X-Api-Key header or Bearer token",
    "note": "Authentication requires an API key obtained from the Bitwarden web vault (or organization settings for organizations). For user-scoped API, use OAuth2 client credentials flow. For organization API, use client_id and client_secret."
  },
  "endpoints": [
    {
      "path": "/api/ciphers",
      "method": "GET",
      "description": "List all items (ciphers) in the user's vault."
    },
    {
      "path": "/api/ciphers",
      "method": "POST",
      "description": "Create a new item (cipher) in the vault."
    },
    {
      "path": "/api/ciphers/{id}",
      "method": "GET",
      "description": "Get a specific cipher by ID."
    },
    {
      "path": "/api/ciphers/{id}",
      "method": "PUT",
      "description": "Update an existing cipher."
    },
    {
      "path": "/api/ciphers/{id}",
      "method": "DELETE",
      "description": "Delete a cipher."
    },
    {
      "path": "/api/collections",
      "method": "GET",
      "description": "List all collections (organization-shared folders)."
    },
    {
      "path": "/api/collections",
      "method": "POST",
      "description": "Create a new collection."
    },
    {
      "path": "/api/collections/{id}",
      "method": "PUT",
      "description": "Update a collection."
    },
    {
      "path": "/api/collections/{id}",
      "method": "DELETE",
      "description": "Delete a collection."
    },
    {
      "path": "/api/organizations",
      "method": "GET",
      "description": "List organizations the user belongs to."
    },
    {
      "path": "/api/organizations/{orgId}/members",
      "method": "GET",
      "description": "List members of an organization."
    },
    {
      "path": "/api/organizations/{orgId}/members/{memberId}",
      "method": "DELETE",
      "description": "Remove a member from an organization."
    },
    {
      "path": "/api/sync",
      "method": "GET",
      "description": "Get a snapshot of the user's vault data (ciphers, folders, collections, etc.)."
    },
    {
      "path": "/api/folders",
      "method": "GET",
      "description": "List folders in the user's vault."
    },
    {
      "path": "/api/folders",
      "method": "POST",
      "description": "Create a new folder."
    },
    {
      "path": "/api/folders/{id}",
      "method": "PUT",
      "description": "Update a folder."
    },
    {
      "path": "/api/folders/{id}",
      "method": "DELETE",
      "description": "Delete a folder."
    }
  ],
  "pricing_model": {
    "type": "freemium",
    "details": {
      "free": "Unlimited items, unlimited devices, sync across devices, password generator, etc.",
      "premium": "$10/year (user) with additional features like 1 GB encrypted file storage, TOTP authenticator, breach alerts, etc.",
      "family": "$40/year up to 6 users",
      "teams": "$3/user/month billed annually for 2+ users",
      "enterprise": "$5/user/month billed annually for 2+ users with SSO, policy controls, etc.",
      "self_hosted": "Free community edition for self-hosting, paid for enterprise features.",
      "note": "Pricing subject to change; check official site for current rates."
    }
  },
  "rate_limits": {
    "general": "Bitwarden does not publish explicit rate limits for its public API. However, to prevent abuse, the API may impose throttling or require reasonable usage. For production use, consider using self-hosted instance or contact Bitwarden for partnership.",
    "suggestions": "Batch requests, avoid polling, and use webhooks if available (not currently public)."
  },
  "capabilities": [
    "Password management (CRUD on items/ciphers)",
    "Folder management",
    "Organization/collection management (requires admin role)",
    "Member management (invite, remove, etc.)",
    "Vault synchronization",
    "Encrypted file storage (via API attachments? Not fully documented)",
    "TOTP seed retrieval (premium only)",
    "Password generator (via CLI/CLI API? Not RESTful)",
    "Event logs (enterprise only, via API?)",
    "Two-step login configuration (via API?)"
  ],
  "raw_analysis": "Bitwarden is a leading open-source password manager, offering both SaaS and self-hosted options. The platform is highly mature, with robust security, regular updates, and a strong community. The Rest API is documented at https://bitwarden.com/help/api and primarily intended for integration with their desktop/browser extensions and for organizations to automate management. The API is not fully public in the sense that it's not designed for third-party developers to build on top of, but it allows authorized access to a user's or organization's vault data programmatically. Authentication involves an API key (OAuth2 client credentials) or a personal access token. The API allows CRUD on ciphers, folders, collections, members, etc. However, some features

3/3 tests passed

```json
{
  "overall": 87,
  "dimensions": {
    "token_efficiency": 9.5,
    "first_try_success": 8.5,
    "response_parseability": 8.0,
    "error_clarity": 8.5,
    "doc_quality": 9.0,
    "auth_simplicity": 8.0,
    "latency": 9.5,
    "consistency": 9.0
  },
  "pricing_normalized": {
    "free": "Unlimited items/devices, sync, generator",
    "premium": "$10/yr (TOTP, 1GB storage, breach alerts)",
    "family": "$40/yr for 6 users",
    "teams": "$3/user/mo annual",
    "enterprise": "$5/user/mo annual (SSO, policies)",
    "self_hosted": "Free community edition"
  },
  "issues": [
    "Password generator only via CLI/API, not RESTful",
    "TOTP retrieval is premium-only",
    "File attachments via API not fully documented",
    "Event logs (enterprise) - API access unclear"
  ],
  "recommendations": [
    "Add RESTful password generator endpoint",
    "Document attachment API more thoroughly",
    "Clarify event log API availability for enterprise",
    "Consider making TOTP seed retrieval available on free tier for agent use"
  ]
}
```