MCP.so
ログイン

Advanced Keycloak MCP Server

@Octodet

基本情報

カテゴリ

その他

トランスポート

stdio

作者

Octodet

投稿者

fateh mohamed

Advanced Keycloak MCP Server について

Advanced Keycloak Mcp Server with many tools

#keycloak#identity#users#roles

Advanced Keycloak MCP Server の設定

以下の設定を使って、このサーバーを MCP 対応クライアントに追加してください。

{
  "mcpServers": {
    "keycloak": {
      "command": "npx",
      "args": [
        "-y",
        "@octodet/keycloak-mcp"
      ],
      "env": {
        "KEYCLOAK_URL": "http://localhost:8080",
        "KEYCLOAK_ADMIN": "admin",
        "KEYCLOAK_ADMIN_PASSWORD": "admin"
      }
    }
  }
}

Advanced Keycloak MCP Server のツール

7

Create a new user in a specific realm

Delete a user from a specific realm

List all available realms

List users in a specific realm

List all roles of a specific client in a specific realm

Add and/or remove client roles for a user in a specific realm and client

Reset or set a new password for a user in a specific realm

概要

What is Advanced Keycloak Mcp Server?

A Model Context Protocol (MCP) server that provides a comprehensive set of tools for Keycloak administration, covering user, realm, and role management. It is intended for developers and administrators who need to automate Keycloak tasks via MCP-compatible clients.

How to use Advanced Keycloak Mcp Server?

The README does not describe installation, configuration, or invocation steps. Once set up, the server exposes tools such as create-user, delete-user, list-users, list-realms, list-roles, and update-user-roles, which accept JSON parameters as shown in the documentation.

Key features of Advanced Keycloak Mcp Server

  • Create users in specified realms with credentials and attributes.
  • Delete users permanently from a realm.
  • List all users in a realm with basic information.
  • Display all available realms in the Keycloak instance.
  • List all roles for a specific client within a realm.
  • Add or remove client roles for a user in a single operation.

Use cases of Advanced Keycloak Mcp Server

  • Automate user provisioning and deprovisioning across multiple realms.
  • Manage role-based access control for applications by assigning/removing client roles.
  • Audit and explore Keycloak realms, users, and role assignments via MCP tools.
  • Integrate identity management workflows into AI assistants or automation pipelines.

よくある質問

1

What tools does the server provide?

The server provides six tools: `create-user`, `delete-user`, `list-users`, `list-realms`, `list-roles`, and `update-user-roles`, each for specific Keycloak administrative tasks.

2

What parameters are required for create-user?

`realm`, `username`, `email`, `firstName`, and `lastName` are required. Optional parameters include `enabled`, `emailVerified`, and `credentials` (an array of credential objects with `type`, `value`, and `temporary`).

3

Can roles be added and removed in one call?

Yes. The `update-user-roles` tool accepts both `rolesToAdd` and `rolesToRemove` arrays in a single operation. At least one of the two must be provided.

4

Is the delete-user operation reversible?

No. Deleting a user is permanent and irreversible. The README explicitly warns to ensure the correct `userId` before execution.

5

Does the server require any specific transport or authentication setup?

The README does not specify transport, authentication, or runtime dependencies. It assumes a Keycloak instance is accessible and configured for the server.

コメント

「その他」の他のコンテンツ