Security — entry 001 of 30

BitWarden

Verified Jul 2026

Bitwarden's Public API lets an organization's admins manage members, groups, collections, event logs, and policies programmatically — separate from the Vault Management API, which handles individual vault items. It authenticates via OAuth 2.0 client-credentials, exchanging an organization's client ID/secret (issued from the admin console) for a short-lived bearer token, and is gated to Teams and Enterprise subscriptions rather than the free password-manager tier. As an open-source password manager built for both individuals and businesses, Bitwarden exposes this REST API mainly for enterprise provisioning and SIEM/event-log integrations.

password-managementidentity-access-managemententerprise-securityoauth
AuthenticationOAuthRequires an OAuth flow; expect app registration.
HTTPSSupportedTraffic is encrypted in transit.
CORSDisabledBrowser calls need a server-side proxy.
PricingPaidSubscription required — no meaningful free tier.
FormatsJSONResponses can be requested as JSON.

GreatAPIs Score

Score46out of 100
Authentication8/25OAuth flow required
Pricing9/20Paid API
Docs0/20No docs or spec available
Formats9/15Single response format
Freshness20/20Verified within 6 months

Embed this badge

Scored 46 on greatapis.com
<a href="https://greatapis.com/api/bitwarden/"><img src="https://greatapis.com/badge/bitwarden.svg" alt="Scored 46 on greatapis.com"></a>

Auth quickstart

  1. Register an app / run the OAuth flow to obtain a bearer token.
  2. Send it as an Authorization headerAuthorization: Bearer <token>
Stored keyNo key stored

Your key is stored only in this browser (localStorage) and sent directly to the API — never to greatapis.