Keycloak Admin MCP Server

Keycloak Admin is an MCP integration. Administer Keycloak via its Admin REST API: users, roles, clients, groups, IdP, events.

Packages and local setup

The published npm package is mcp-keycloak-admin, version 0.2.3. Its declared MCP transport is stdio.

The package declares KEYCLOAK_BASE_URL (required): Base URL of the Keycloak server (no trailing slash).; KEYCLOAK_REALM (required): Realm the server operates on.; AUTH_MODE (required): Authentication mode: service_account or password.; KC_CLIENT_ID: Confidential client id (service_account mode).; KC_CLIENT_SECRET: Client secret (service_account mode).; KC_ADMIN_USERNAME: Admin username (password mode).; KC_ADMIN_PASSWORD: Admin password (password mode).; KC_ADMIN_REALM: Realm holding the admin user (password mode; default master).; READ_ONLY: When true, write and destructive tools are not registered.; ALLOWED_REALMS: Comma-separated allow-list of realms the server may operate on..

Before connecting

Check the maintainer’s instructions for account access, authentication and the supported client configuration. Once connected, inspect the tools your client receives and try a small task that matches the server’s stated purpose. The registry description does not include a verified, complete tool list.

Project and source

View the publisher’s registry entry · Project repository. This profile uses version 0.2.3 from the registry. Registration identifies the publisher namespace; it does not establish that this is a first-party integration for every service it connects.

Browse related security & identity MCP servers for tools that cover the same kind of work.