As described in this post File permission for third party apps Keepass2 has no WRITE permission to the keepass file opened from the Cryptomator app.
We are planing in a future release to enable third party apps with WRITE permission and write back changes to the cloud.
In the mean time try out the following workaround Export keepass file from Cryptomator.