NestDaddy

Mcp Keycloak

io.github.dockndevai/mcp-keycloak · v0.3.3

Keycloak admin for AI agents — realms, users, clients, roles; safe-by-default governance.

Connect Runs on your machine

Terminal
claude mcp add mcp-keycloak -e KEYCLOAK_URL=<KEYCLOAK_URL> -e KEYCLOAK_CLIENT_ID=<KEYCLOAK_CLIENT_ID> -e KEYCLOAK_CLIENT_SECRET=<KEYCLOAK_CLIENT_SECRET> -e KEYCLOAK_MODE=<KEYCLOAK_MODE> -- npx -y @dockndevai/[email protected]
claude_desktop_config.json
{
  "mcpServers": {
    "mcp-keycloak": {
      "command": "npx",
      "args": [
        "-y",
        "@dockndevai/[email protected]"
      ],
      "env": {
        "KEYCLOAK_URL": "<KEYCLOAK_URL>",
        "KEYCLOAK_CLIENT_ID": "<KEYCLOAK_CLIENT_ID>",
        "KEYCLOAK_CLIENT_SECRET": "<KEYCLOAK_CLIENT_SECRET>",
        "KEYCLOAK_MODE": "<KEYCLOAK_MODE>"
      }
    }
  }
}
~/.cursor/mcp.json
{
  "mcpServers": {
    "mcp-keycloak": {
      "command": "npx",
      "args": [
        "-y",
        "@dockndevai/[email protected]"
      ],
      "env": {
        "KEYCLOAK_URL": "<KEYCLOAK_URL>",
        "KEYCLOAK_CLIENT_ID": "<KEYCLOAK_CLIENT_ID>",
        "KEYCLOAK_CLIENT_SECRET": "<KEYCLOAK_CLIENT_SECRET>",
        "KEYCLOAK_MODE": "<KEYCLOAK_MODE>"
      }
    }
  }
}
.vscode/mcp.json
{
  "servers": {
    "mcp-keycloak": {
      "type": "stdio",
      "command": "npx",
      "args": [
        "-y",
        "@dockndevai/[email protected]"
      ],
      "env": {
        "KEYCLOAK_URL": "<KEYCLOAK_URL>",
        "KEYCLOAK_CLIENT_ID": "<KEYCLOAK_CLIENT_ID>",
        "KEYCLOAK_CLIENT_SECRET": "<KEYCLOAK_CLIENT_SECRET>",
        "KEYCLOAK_MODE": "<KEYCLOAK_MODE>"
      }
    }
  }
}

Replace the values in angle brackets with your own. Keys stay on your machine; we never see them.

Tools

This server runs locally, so its tools are listed by your MCP client once it starts.

Environment variables

NameDescription
KEYCLOAK_URL
Required
Base URL of the Keycloak server (no trailing slash).
KEYCLOAK_CLIENT_ID
Optional
Client id used to authenticate (default admin-cli).
KEYCLOAK_CLIENT_SECRET
Optional, secret
Service-account client secret (or use KEYCLOAK_USERNAME/PASSWORD).
KEYCLOAK_MODE
Optional
Access mode: read-only | read-write | admin.

Details

Package@dockndevai/[email protected] (NPM, stdio)
First published26 Oct 2026
Last updated26 Oct 2026
Registry nameio.github.dockndevai/mcp-keycloak

More ai and media servers See all

Listing data from the official MCP registry. Status and tools from NestDaddy's daily check. Browse all MCP servers.