Advanced Keycloak Mcp Server

Name: Advanced Keycloak Mcp Server
Author: Octodet

@Octodet

代码仓库

关于 Advanced Keycloak Mcp Server

Advanced Keycloak Mcp Server with many tools

#keycloak #identity #users #roles

基本信息

分类

其他

传输方式

stdio

发布者

Octodet

提交者

fateh mohamed

配置

使用下面的配置,将此服务器添加到你的 MCP 客户端。

{
  "mcpServers": {
    "keycloak": {
      "command": "npx",
      "args": [
        "-y",
        "@octodet/keycloak-mcp"
      ],
      "env": {
        "KEYCLOAK_URL": "http://localhost:8080",
        "KEYCLOAK_ADMIN": "admin",
        "KEYCLOAK_ADMIN_PASSWORD": "admin"
      }
    }
  }
}

工具

Create a new user in a specific realm

Delete a user from a specific realm

List all available realms

List users in a specific realm

List all roles of a specific client in a specific realm

Add and/or remove client roles for a user in a specific realm and client

Reset or set a new password for a user in a specific realm

概览

What is Advanced Keycloak Mcp Server?

A Model Context Protocol (MCP) server that provides a comprehensive set of tools for Keycloak administration, covering user, realm, and role management. It is intended for developers and administrators who need to automate Keycloak tasks via MCP-compatible clients.

How to use Advanced Keycloak Mcp Server?

The README does not describe installation, configuration, or invocation steps. Once set up, the server exposes tools such as create-user, delete-user, list-users, list-realms, list-roles, and update-user-roles, which accept JSON parameters as shown in the documentation.

Key features of Advanced Keycloak Mcp Server

Create users in specified realms with credentials and attributes.
Delete users permanently from a realm.
List all users in a realm with basic information.
Display all available realms in the Keycloak instance.
List all roles for a specific client within a realm.
Add or remove client roles for a user in a single operation.

Use cases of Advanced Keycloak Mcp Server

Automate user provisioning and deprovisioning across multiple realms.
Manage role-based access control for applications by assigning/removing client roles.
Audit and explore Keycloak realms, users, and role assignments via MCP tools.
Integrate identity management workflows into AI assistants or automation pipelines.

FAQ from Advanced Keycloak Mcp Server

What tools does the server provide?

The server provides six tools: create-user, delete-user, list-users, list-realms, list-roles, and update-user-roles, each for specific Keycloak administrative tasks.

What parameters are required for create-user?

realm, username, email, firstName, and lastName are required. Optional parameters include enabled, emailVerified, and credentials (an array of credential objects with type, value, and temporary).

Can roles be added and removed in one call?

Yes. The update-user-roles tool accepts both rolesToAdd and rolesToRemove arrays in a single operation. At least one of the two must be provided.

Is the delete-user operation reversible?

No. Deleting a user is permanent and irreversible. The README explicitly warns to ensure the correct userId before execution.

Does the server require any specific transport or authentication setup?

The README does not specify transport, authentication, or runtime dependencies. It assumes a Keycloak instance is accessible and configured for the server.