Automic Vault

brew package intelligence

bitwarden-cli

Automic Vault tracks bitwarden-cli because plain text bitwarden cli tokens matters when AI agents run command-line tools on macOS.

Read docs Run scanner

overview

What Automic Vault knows about bitwarden-cli

Secure and free password manager for all of your devices

Homepage

Not present in the local metadata.

Commands and aliases

No executable aliases were found in the local package database.

radioisotope

Plain Text Bitwarden CLI Tokens

Bitwarden CLI stores app state in data.json. The CLI platform reports that secure storage is unsupported, so access and refresh token state can be stored in that plaintext file. Our isotope stores token-bearing data.json contents in the macOS keychain and injects them through a temporary BITWARDENCLI_APPDATA_DIR while `bw` runs.

Local README excerpt

Bitwarden CLI Radioisotope

Bitwarden CLI stores its app state in data.json. In the CLI build, supportsSecureStorage() returns false, so access and refresh token state can fall back to that plaintext lowdb file.

The radioisotope moves token-bearing data.json contents into the macOS keychain and runs bw with a temporary BITWARDENCLI_APPDATA_DIR.

Caveats

  • Only the default app data path and explicit BITWARDENCLI_APPDATA_DIR are

migrated.

  • Login, logout, sync, and token refreshes write to temporary runtime state and

are not persisted back to the keychain.

  • Direct execution of the original binary will not receive credentials.

Source: data/radioisotopes/bitwarden-cli/README.md

Caveats

  • Only the default app data path and explicit BITWARDENCLI_APPDATA_DIR are migrated.
  • Runtime state changes are not persisted back to keychain.
  • Direct execution of the original binary will not receive credentials.

install metadata

Resolver facts

Package keybrew:bitwarden-cli
Last updated2026-05-20T21:03:56Z
Pulseupdated

source trail

Generated from repository data

This page is regenerated by scripts/generate-pkg-pages.py. Deployments refuse to publish if www/pkg/ is stale relative to local package data.

Used sources

  • Nucleus package database
  • local isotope README
  • radioisotope security manifest