I've got an error when I ask for a collection for my bitwarden provider

[mikaelmorvan]

Hi,

My fnox.toml file looks like that

[providers]
bitwarden = { type = "bitwarden", collection = "08caxxx-xxx-xxx3247", organization_id = "7fc5799-xxx-xxx-xxx7c1c38" }  

and when I launch the fnox command via mise, I've got an error
If I remove the organization_id from my Toml file, I don't have the error ( and the BW connection works)

mise exec -- fnox  get STRIPE_API_KEY
Error: fnox::provider::error

  × Provider error: Bitwarden CLI command failed: error: unknown option '--collectionid'

My BW cli version bitwarden-cli 2025.10.0
Fnox is

mise exec -- fnox --version
fnox 1.3.0

Any idea ?
Thanks for you help
Mikaël Morvan

[mikaelmorvan]

Some more information,

I've successfully tested adding and retrieving secrets for a specific organization_id and it works. As soon as I had a collection, it fails.

Hope it will help
Mikaël

[denniseffing]

Just here to confirm that I am experiencing the same issue.

[bhamon]

Same error here.

fnox/src/providers/bitwarden.rs

Line 93 in 0460968

cmd.args(["--collectionid", coll]);

The option to filter out by collection for bw get item doesn't exist on recent bw cli (I haven't checked it on older ones).

For reference, here is the bw 2026.2.0 cli usage output:

Usage: bw get [options] <object> <id>

Get an object from the vault.

Arguments:
  object                             Valid objects are: item, username, password, uri, totp, notes, exposed, attachment, folder,
                                     collection, org-collection, organization, template, fingerprint, send
  id                                 Search term or object's globally unique `id`.

Options:
  --itemid <itemid>                  Attachment's item id.
  --output <output>                  Output directory or filename for attachment.
  --organizationid <organizationid>  Organization id for an organization object.
  -h, --help                         display help for command

  If raw output is specified and no output filename or directory is given for
  an attachment query, the attachment content is written to stdout.

  Examples:

    bw get item 99ee88d2-6046-4ea7-92c2-acac464b1412
    bw get password https://google.com
    bw get totp google.com
    bw get notes google.com
    bw get exposed yahoo.com
    bw get attachment b857igwl1dzrs2 --itemid 99ee88d2-6046-4ea7-92c2-acac464b1412 --output ./photo.jpg
    bw get attachment photo.jpg --itemid 99ee88d2-6046-4ea7-92c2-acac464b1412 --raw
    bw get folder email
    bw get template folder

In the meantime, you can retrieve the items list for a specific collection, extract the item id and put it inside the secret value:

bw list items --collectionid xxxxx | jq

[
  {
    "passwordHistory": [],
    "revisionDate": "2026-03-23T14:06:48.917Z",
    "creationDate": "2026-03-23T14:06:48.911Z",
    "object": "item",
    "id": "00000000-1111-2222-3333-000000000000",
#...

[secrets]
GET_USER= { provider = "bitwarden", value = "00000000-1111-2222-3333-000000000000/username" }
GET_PASSWORD= { provider = "bitwarden", value = "00000000-1111-2222-3333-000000000000/password" }