# Bitwarden Secrets

> Retrieve and manage secrets using Bitwarden Secrets Manager CLI (bws). Trigger terms: bitwarden, secrets, bws, secret, api key, credentials, password.

- Skill: `th0rgal/bitwarden-secrets` (Agent Skill)
- Install (CLI): `npx skillmds@latest add th0rgal/bitwarden-secrets`
- Raw SKILL.md: https://api.skillmd.com/api/skills/th0rgal/bitwarden-secrets/raw
- Safety review: pending
- Works with: Claude Code, Claude.ai, OpenAI Codex
- Category: Security
- Author: Th0rgal (https://skillmd.com/u/th0rgal)
- Updated: 2026-09-17
- Page: https://skillmd.com/skills/th0rgal/bitwarden-secrets

---


## Use when
- Retrieving API keys, passwords, or credentials for a task
- Listing available secrets or projects
- Creating or updating secrets

## Don't use when
- Storing secrets in code or config files (use bws instead)
- Managing Bitwarden vault items (use `bw` CLI, not `bws`)

## Prerequisites
- `bws` CLI installed
- `BWS_ACCESS_TOKEN` environment variable set

## Quick Reference

| Action | Command |
|--------|---------|
| Get secret | `bws secret get <SECRET_ID>` |
| List secrets | `bws secret list` |
| List in project | `bws secret list <PROJECT_ID>` |
| List projects | `bws project list` |
| Create secret | `bws secret create <KEY> <VALUE> <PROJECT_ID>` |
| Edit secret | `bws secret edit <SECRET_ID> --value <VALUE>` |
| Delete secret | `bws secret delete <SECRET_ID>` |

## Outputs
Use `--output` flag: `json`, `yaml`, `table`, `tsv`, `env`

```bash
bws secret get <ID> --output json
bws secret list --output table
```

## Templates or Examples
- Use the `bws secret list --format json` output when a structured list is required.
- Use the `bws secret get --format json` output when the user needs an exact payload.

## Procedure

1. **List projects** to find where secrets are stored
2. **List secrets** in the relevant project
3. **Get secret** by ID to retrieve the value
4. Use the secret value in your task (don't log it)

## Checks & Guardrails
- Never echo or log secret values
- Don't commit secrets to git
- Use `--output json` for parsing in scripts