MCP.so
登录

Advanced Keycloak MCP Server

@Octodet

基本信息

分类

其他

传输方式

stdio

作者

Octodet

提交者

fateh mohamed

关于 Advanced Keycloak MCP Server

Advanced Keycloak Mcp Server with many tools

#keycloak#identity#users#roles

Advanced Keycloak MCP Server 配置

使用下面的配置,将此服务器添加到你的 MCP 客户端。

{
  "mcpServers": {
    "keycloak": {
      "command": "npx",
      "args": [
        "-y",
        "@octodet/keycloak-mcp"
      ],
      "env": {
        "KEYCLOAK_URL": "http://localhost:8080",
        "KEYCLOAK_ADMIN": "admin",
        "KEYCLOAK_ADMIN_PASSWORD": "admin"
      }
    }
  }
}

Advanced Keycloak MCP Server 工具

7

Create a new user in a specific realm

Delete a user from a specific realm

List all available realms

List users in a specific realm

List all roles of a specific client in a specific realm

Add and/or remove client roles for a user in a specific realm and client

Reset or set a new password for a user in a specific realm

概览

What is Advanced Keycloak Mcp Server?

A Model Context Protocol (MCP) server that provides a comprehensive set of tools for Keycloak administration, covering user, realm, and role management. It is intended for developers and administrators who need to automate Keycloak tasks via MCP-compatible clients.

How to use Advanced Keycloak Mcp Server?

The README does not describe installation, configuration, or invocation steps. Once set up, the server exposes tools such as create-user, delete-user, list-users, list-realms, list-roles, and update-user-roles, which accept JSON parameters as shown in the documentation.

Key features of Advanced Keycloak Mcp Server

  • Create users in specified realms with credentials and attributes.
  • Delete users permanently from a realm.
  • List all users in a realm with basic information.
  • Display all available realms in the Keycloak instance.
  • List all roles for a specific client within a realm.
  • Add or remove client roles for a user in a single operation.

Use cases of Advanced Keycloak Mcp Server

  • Automate user provisioning and deprovisioning across multiple realms.
  • Manage role-based access control for applications by assigning/removing client roles.
  • Audit and explore Keycloak realms, users, and role assignments via MCP tools.
  • Integrate identity management workflows into AI assistants or automation pipelines.

常见问题

1

What tools does the server provide?

The server provides six tools: `create-user`, `delete-user`, `list-users`, `list-realms`, `list-roles`, and `update-user-roles`, each for specific Keycloak administrative tasks.

2

What parameters are required for create-user?

`realm`, `username`, `email`, `firstName`, and `lastName` are required. Optional parameters include `enabled`, `emailVerified`, and `credentials` (an array of credential objects with `type`, `value`, and `temporary`).

3

Can roles be added and removed in one call?

Yes. The `update-user-roles` tool accepts both `rolesToAdd` and `rolesToRemove` arrays in a single operation. At least one of the two must be provided.

4

Is the delete-user operation reversible?

No. Deleting a user is permanent and irreversible. The README explicitly warns to ensure the correct `userId` before execution.

5

Does the server require any specific transport or authentication setup?

The README does not specify transport, authentication, or runtime dependencies. It assumes a Keycloak instance is accessible and configured for the server.

评论

其他 分类下的更多 MCP 服务器