dockndevai/mcp-keycloak

Overview

MCP server for Keycloak. Provides multi-realm admin with security modes (read-only, read-write, admin) and access-control flags. Written in TypeScript.

Best for

Best for
Developers building MCP-based tooling that needs controlled Keycloak administration.

Use cases

• Administer multiple Keycloak realms through MCP clients
• Apply read-only or read-write restrictions to admin operations
• Expose Keycloak management to AI assistant workflows

How to use

Install

claude mcp add keycloak -e KEYCLOAK_URL="https://keycloak.example.com" -e KEYCLOAK_CLIENT_ID="admin-cli" -e KEYCLOAK_CLIENT_SECRET="your-secret" -e KEYCLOAK_MODE="read-only" -- npx -y @dockndevai/mcp-keycloak

Tools exposed

• list_realms
• get_realm
• list_users
• get_user
• count_users
• list_clients
• list_realm_roles
• list_groups
• create_user
• update_user
• reset_password
• logout_user
• delete_user

Tested with

Claude Desktop, Claude Code, Cursor, Windsurf, VS Code, OpenAI Codex CLI

Example client config

{\n  "mcpServers": {\n    "keycloak": {\n      "command": "npx",\n      "args": [\n        "-y",\n        "@dockndevai/mcp-keycloak"\n      ],\n      "env": {\n        "KEYCLOAK_URL": "https://keycloak.example.com",\n        "KEYCLOAK_CLIENT_ID": "admin-cli",\n        "KEYCLOAK_CLIENT_SECRET": "your-secret",\n        "KEYCLOAK_MODE": "read-only"\n      }\n    }\n  }\n}

Notes

MCP server for Keycloak. Provides multi-realm admin with security modes (read-only, read-write, admin) and access-control flags. Written in TypeScript.

1 stars on GitHub. Last updated 2026-10-02. Licensed MIT.

Use cases

• Administer multiple Keycloak realms through MCP clients
• Apply read-only or read-write restrictions to admin operations
• Expose Keycloak management to AI assistant workflows

Pros

• Security modes and access-control flags for safer admin operations
• Multi-realm support in a single server
• TypeScript implementation for easy integration in JS/TS ecosystems

Cons

• Very low community adoption (1 star)
• Early-stage project with limited proven track record
• Features limited to what the server currently exposes

Indexed from awesome-mcp-servers-punkpeye and enriched against its public facts.