A powerful Model Context Protocol server for Keycloak administration, providing a comprehensive set of tools to manage users, realms, roles, and other Keycloak resources through LLM interfaces.
keycloak-mcp source profile. From the maintainer documentation: “A powerful Model Context Protocol server for Keycloak administration, providing a comprehensive set of tools to manage users, realms, roles, and other Keycloak resources through LLM interfaces.”
The documented npm package is @octodet/keycloak-mcp. The configuration below comes from the maintainer’s example; adapt its paths and account values to your environment.
The example declares KEYCLOAK_URL, KEYCLOAK_ADMIN, KEYCLOAK_ADMIN_PASSWORD. Secret-looking values have been replaced with placeholders. Required and optional labels are shown only when the documentation states them.
Project documentation · Repository · Discovery listing. This profile records the public documentation checked on 2026-10-08.
Check the linked publisher documentation and your connected client's tool list. Names and availability can vary with the server version and account permissions.
| Tool | What it does |
|---|---|
| Non | existent roles are skipped with warnings |
| create-user | User Management |
| delete-user | User Management |
| list-users | User Management |
| list-realms | Realm Management |
| list-roles | Role Management |
| update-user-roles | Role Management |
{
"mcpServers": {
"keycloak": {
"command": "npx",
"args": [
"-y",
"@octodet/keycloak-mcp"
],
"env": {
"KEYCLOAK_URL": "YOUR_KEYCLOAK_URL",
"KEYCLOAK_ADMIN": "YOUR_KEYCLOAK_ADMIN",
"KEYCLOAK_ADMIN_PASSWORD": "YOUR_KEYCLOAK_ADMIN_PASSWORD"
}
}
}
}From the project documentation. Replace placeholders and example paths before connecting.
| Variable | Description | Required |
|---|---|---|
| KEYCLOAK_URL | Declared in the maintainer’s client configuration. | Check documentation |
| KEYCLOAK_ADMIN | Declared in the maintainer’s client configuration. | Check documentation |
| KEYCLOAK_ADMIN_PASSWORD | Declared in the maintainer’s client configuration. | Check documentation |
Queries the NIST National Vulnerability Database (NVD) via its API.
Scans projects for security vulnerabilities and automatically updates vulnerable dependencies using Trivy.
Search 1,032 verified smart contract vulnerability findings from Sherlock audits by pattern.
Remote MCP for A2A dependency inspector MCP, structured receipts, audit logs, and reviewer-ready evi
Remote MCP for A2A failure replay MCP, structured receipts, audit logs, and reviewer-ready evidence.
A comprehensive Model Context Protocol (MCP) server for ABP.IO framework with 48+ tools for application development, UI generation, and management