Keycloak MCP server
Keycloak admin for AI agents — realms, users, clients, roles; safe-by-default governance.
not scanned yet
1 stars253 downloads/wk
Reviews
Write oneNobody has reviewed Keycloak yet.
If you have run it, two minutes of your experience saves the next person an afternoon.
Keycloak tools
No tool declarations could be read from the package source. They show once the server is installed.
How Keycloak compares
Against every graded MCP server, from our own scans and uptime checks. Updated after each scan run.
- Safety score
- 80/100
- higher than 60% of 48,255 servers
- GitHub stars
- 1
- more than 65% of 28,688 servers
- Downloads a week
- 253
- more than 78% of 12,191 servers with a package
Release history: 3 versions in the registry since 2026-09-12, latest 2026-10-26, typically one every 27 days.
Install Keycloak in Claude Code, Cursor or VS Code
Runs npx -y @dockndevai/mcp-keycloak on your machine. Read the scan report first; the gateway never runs local packages.
claude mcp add mcp-keycloak -- npx -y @dockndevai/mcp-keycloak
What the publisher says
From the Keycloak repository's README, as published. We do not edit it. Read it on GitHub
mcp-keycloak
A Model Context Protocol server for Keycloak. It lets an MCP-capable client (Claude Desktop, Claude Code, etc.) inspect and manage Keycloak realms, users, clients, roles, and groups — with security controlled entirely by flags.
The design goal is safe by default: it starts read-only, scopes to an allowlist of realms, protects sensitive realms from mutation, and gates destructive operations behind an explicit opt-in.
Features
- Multi-realm — every tool takes a realm argument; scope it with an allowlist.
- Access modes — read-only → read-write → admin, layered so a mode never exposes tools above its level.
- Security flags — realm allowlist, protected realms, delete gating, dry-run, and JSON audit logging (see below).
- Two auth strategies — confidential-client service account (recommended) or admin username/password.
- Zero heavy dependencies — a thin fetch-based Admin REST client, plus the MCP SDK and zod.
Security model
These layers are independent — for example admin mode with KEYCLOAKALLOWDELETE=false can create and update users but cannot delete them.
Tools
Read (read-only+): listrealms, getrealm, listusers, getuser, countusers, listclients, listrealmroles, list_groups
Write (read-write+): createuser, updateuser, resetpassword, logoutuser
Admin (admin): delete_user
Quickstart — add to your agent
Published on npm as @dockndevai/mcp-keycloak. No clone or build needed — your MCP client runs it on demand with npx. Start in read-only mode; see .env.example for every variable and docs/CLIENTS.md for the full per-client guide.
Claude Code (CLI)
claude mcp add keycloak -e KEYCLOAK_URL="https://keycloak.example.com" -e KEYCLOAK_CLIENT_ID="admin-cli" -e KEYCLOAK_CLIENT_SECRET="your-secret" -e KEYCLOAK_MODE="read-only" -- npx -y @dockndevai/mcp-keycloakClaude Desktop · Cursor · Windsurf — same block in claudedesktopconfig.json, .cursor/mcp.json, or ~/.codeium/windsurf/mcp_config.json:
Shortened. The full README is on GitHub.
Nothing above is checked by us. What we check is on the safety report.
Keycloak: common questions
- Is Keycloak MCP server safe?
- Mostly: it is graded B (80/100). Read the Keycloak safety report
- How do I install Keycloak?
- It runs on your machine. Copy the Claude Code, Cursor, VS Code or Claude Desktop config from the install section.
- Does Keycloak need an API key?
- Yes. The registry entry asks for
KEYCLOAK_CLIENT_SECRET. - Is Keycloak maintained?
- The last commit was 33 days ago (2026-10-02). The latest release is v0.3.3.
- How does Keycloak compare with other MCP servers?
- safety score 80/100 (higher than 60% of 48,255 servers); github stars 1 (more than 65% of 28,688 servers); downloads a week 253 (more than 78% of 12,191 servers with a package). Full comparison.