Advanced Keycloak Mcp Server
@Octodet
About Advanced Keycloak Mcp Server
Advanced Keycloak Mcp Server with many tools
Basic information
Config
Add this server to your MCP-compatible client using the configuration below.
{
"mcpServers": {
"keycloak": {
"command": "npx",
"args": [
"-y",
"@octodet/keycloak-mcp"
],
"env": {
"KEYCLOAK_URL": "http://localhost:8080",
"KEYCLOAK_ADMIN": "admin",
"KEYCLOAK_ADMIN_PASSWORD": "admin"
}
}
}
}Tools
7Create a new user in a specific realm
Delete a user from a specific realm
List all available realms
List users in a specific realm
List all roles of a specific client in a specific realm
Add and/or remove client roles for a user in a specific realm and client
Reset or set a new password for a user in a specific realm
Overview
What is Advanced Keycloak Mcp Server?
A Model Context Protocol (MCP) server that provides a comprehensive set of tools for Keycloak administration, covering user, realm, and role management. It is intended for developers and administrators who need to automate Keycloak tasks via MCP-compatible clients.
How to use Advanced Keycloak Mcp Server?
The README does not describe installation, configuration, or invocation steps. Once set up, the server exposes tools such as create-user, delete-user, list-users, list-realms, list-roles, and update-user-roles, which accept JSON parameters as shown in the documentation.
Key features of Advanced Keycloak Mcp Server
- Create users in specified realms with credentials and attributes.
- Delete users permanently from a realm.
- List all users in a realm with basic information.
- Display all available realms in the Keycloak instance.
- List all roles for a specific client within a realm.
- Add or remove client roles for a user in a single operation.
Use cases of Advanced Keycloak Mcp Server
- Automate user provisioning and deprovisioning across multiple realms.
- Manage role-based access control for applications by assigning/removing client roles.
- Audit and explore Keycloak realms, users, and role assignments via MCP tools.
- Integrate identity management workflows into AI assistants or automation pipelines.
FAQ from Advanced Keycloak Mcp Server
What tools does the server provide?
The server provides six tools: create-user, delete-user, list-users, list-realms, list-roles, and update-user-roles, each for specific Keycloak administrative tasks.
What parameters are required for create-user?
realm, username, email, firstName, and lastName are required. Optional parameters include enabled, emailVerified, and credentials (an array of credential objects with type, value, and temporary).
Can roles be added and removed in one call?
Yes. The update-user-roles tool accepts both rolesToAdd and rolesToRemove arrays in a single operation. At least one of the two must be provided.
Is the delete-user operation reversible?
No. Deleting a user is permanent and irreversible. The README explicitly warns to ensure the correct userId before execution.
Does the server require any specific transport or authentication setup?
The README does not specify transport, authentication, or runtime dependencies. It assumes a Keycloak instance is accessible and configured for the server.
More Other MCP servers
IDA Pro MCP
mrexodiaAI-powered reverse engineering assistant that bridges IDA Pro with language models through MCP.
Blender
ahujasidOpen-source MCP to use Blender with any LLM
Core Philosophy: Connect, Unify, Respond
mindsdbDelegate anything. It comes back done.
Reactive Resume
amruthpillaiA one-of-a-kind resume builder that keeps your privacy in mind. Completely secure, customizable, portable, open-source and free forever. Try it out today!
MCP Registry
modelcontextprotocolA community driven registry service for Model Context Protocol (MCP) servers.
Comments