Mcp-keycloak MCP Server

A Model Context Protocol server for Keycloak. It lets an MCP-capable client (Claude Desktop, Claude Code, etc.) inspect and manage Keycloak realms, users, clients, roles, and groups — with security…

Local serverstdioMIT

What is the Mcp-keycloak MCP Server?

mcp-keycloak is an MCP project maintained in the dockndevai/mcp-keycloak repository. The maintainer describes its purpose as “A Model Context Protocol server for Keycloak. It lets an MCP-capable client (Claude Desktop, Claude Code, etc.) inspect and manage Keycloak realms, users, clients, roles…”. Read the project documentation for the complete scope.

Installation

The documented npm package is @dockndevai/mcp-keycloak. The configuration below comes from the maintainer’s example; adapt its paths and account values to your environment.

Configuration values

The example declares KEYCLOAK_URL, KEYCLOAK_CLIENT_ID, KEYCLOAK_CLIENT_SECRET, KEYCLOAK_MODE. Secret-looking values have been replaced with placeholders. Required and optional labels are shown only when the documentation states them.

Source

Project documentation · Repository · Discovery listing. This profile records the public documentation checked on 2026-10-08.

How to install the Mcp-keycloak MCP Server

{
  "mcpServers": {
    "keycloak": {
      "command": "npx",
      "args": [
        "-y",
        "@dockndevai/mcp-keycloak"
      ],
      "env": {
        "KEYCLOAK_URL": "YOUR_KEYCLOAK_URL",
        "KEYCLOAK_CLIENT_ID": "YOUR_KEYCLOAK_CLIENT_ID",
        "KEYCLOAK_CLIENT_SECRET": "YOUR_KEYCLOAK_CLIENT_SECRET",
        "KEYCLOAK_MODE": "YOUR_KEYCLOAK_MODE"
      }
    }
  }
}

From the project documentation. Replace placeholders and example paths before connecting.

Configuration

VariableDescriptionRequired
KEYCLOAK_URLDeclared in the maintainer’s client configuration.Check documentation
KEYCLOAK_CLIENT_IDDeclared in the maintainer’s client configuration.Check documentation
KEYCLOAK_CLIENT_SECRETDeclared in the maintainer’s client configuration.Check documentation
KEYCLOAK_MODEDeclared in the maintainer’s client configuration.Check documentation