mrz1880/mcp-keycloak-admin

Overview

An MCP server that provides a bridge to administer Keycloak through its Admin REST API. It follows safe-by-default principles, Clean Architecture, and test-driven development in TypeScript.

Best for

Best for
Developers automating Keycloak administration through MCP-based assistants or workflows.

Use cases

• Manage Keycloak users, roles, and groups via MCP agents
• Automate realm configuration and client setup
• Integrate identity and access management into MCP-driven workflows

How to use

Install

npx -y mcp-keycloak-admin

Tools exposed

• KEYCLOAK_BASE_URL
• KEYCLOAK_REALM
• AUTH_MODE
• KC_CLIENT_ID
• KC_CLIENT_SECRET
• KC_ADMIN_USERNAME
• KC_ADMIN_PASSWORD
• KC_ADMIN_REALM
• READ_ONLY
• ALLOWED_REALMS
• keycloak_user_search
• keycloak_user_get
• keycloak_user_sessions_list
• keycloak_user_create
• keycloak_user_update
• keycloak_user_set_enabled
• keycloak_user_send_action_email
• keycloak_user_reset_password
• keycloak_user_logout
• keycloak_user_delete

Notes

An MCP server that provides a bridge to administer Keycloak through its Admin REST API. It follows safe-by-default principles, Clean Architecture, and test-driven development in TypeScript.

0 stars on GitHub. Last updated 2026-07-01. Licensed MIT.

Use cases

• Manage Keycloak users, roles, and groups via MCP agents
• Automate realm configuration and client setup
• Integrate identity and access management into MCP-driven workflows

Pros

• Safe-by-default design reduces accidental misconfiguration
• Clean Architecture and TDD support maintainability and correctness
• TypeScript implementation offers type safety and tooling

Cons

• No public stars suggests limited adoption or validation
• Requires a running Keycloak instance and MCP client setup
• Documentation and community support may be sparse

Indexed from awesome-mcp-servers-punkpeye and enriched against its public facts.