Keycloak admin for AI agents — realms, users, clients, roles; safe-by-default governance.
Connect Runs on your machine
claude mcp add mcp-keycloak -e KEYCLOAK_URL=<KEYCLOAK_URL> -e KEYCLOAK_CLIENT_ID=<KEYCLOAK_CLIENT_ID> -e KEYCLOAK_CLIENT_SECRET=<KEYCLOAK_CLIENT_SECRET> -e KEYCLOAK_MODE=<KEYCLOAK_MODE> -- npx -y @dockndevai/[email protected]
{
"mcpServers": {
"mcp-keycloak": {
"command": "npx",
"args": [
"-y",
"@dockndevai/[email protected]"
],
"env": {
"KEYCLOAK_URL": "<KEYCLOAK_URL>",
"KEYCLOAK_CLIENT_ID": "<KEYCLOAK_CLIENT_ID>",
"KEYCLOAK_CLIENT_SECRET": "<KEYCLOAK_CLIENT_SECRET>",
"KEYCLOAK_MODE": "<KEYCLOAK_MODE>"
}
}
}
}
{
"mcpServers": {
"mcp-keycloak": {
"command": "npx",
"args": [
"-y",
"@dockndevai/[email protected]"
],
"env": {
"KEYCLOAK_URL": "<KEYCLOAK_URL>",
"KEYCLOAK_CLIENT_ID": "<KEYCLOAK_CLIENT_ID>",
"KEYCLOAK_CLIENT_SECRET": "<KEYCLOAK_CLIENT_SECRET>",
"KEYCLOAK_MODE": "<KEYCLOAK_MODE>"
}
}
}
}
{
"servers": {
"mcp-keycloak": {
"type": "stdio",
"command": "npx",
"args": [
"-y",
"@dockndevai/[email protected]"
],
"env": {
"KEYCLOAK_URL": "<KEYCLOAK_URL>",
"KEYCLOAK_CLIENT_ID": "<KEYCLOAK_CLIENT_ID>",
"KEYCLOAK_CLIENT_SECRET": "<KEYCLOAK_CLIENT_SECRET>",
"KEYCLOAK_MODE": "<KEYCLOAK_MODE>"
}
}
}
}
Replace the values in angle brackets with your own. Keys stay on your machine; we never see them.
Tools
This server runs locally, so its tools are listed by your MCP client once it starts.
Environment variables
| Name | Description |
|---|---|
KEYCLOAK_URLRequired | Base URL of the Keycloak server (no trailing slash). |
KEYCLOAK_CLIENT_IDOptional | Client id used to authenticate (default admin-cli). |
KEYCLOAK_CLIENT_SECRETOptional, secret | Service-account client secret (or use KEYCLOAK_USERNAME/PASSWORD). |
KEYCLOAK_MODEOptional | Access mode: read-only | read-write | admin. |
Details
| Package | @dockndevai/[email protected] (NPM, stdio) |
| First published | 26 Oct 2026 |
| Last updated | 26 Oct 2026 |
| Registry name | io.github.dockndevai/mcp-keycloak |
More ai and media servers See all
Listing data from the official MCP registry. Status and tools from NestDaddy's daily check. Browse all MCP servers.
