Keycloak Model Context Protocol MCP Server

Connect this server

This server runs on your own machine — install it with the package manager and the client starts it for you. Package name taken from the official registry entry.

claude mcp add keycloak-model-context-protocol -e 'KEYCLOAK_URL=<KEYCLOAK_URL>' -- npx -y keycloak-model-context-protocol

{
  "mcpServers": {
    "keycloak-model-context-protocol": {
      "command": "npx",
      "args": [
        "-y",
        "keycloak-model-context-protocol"
      ],
      "env": {
        "KEYCLOAK_URL": "<KEYCLOAK_URL>"
      }
    }
  }
}

[mcp_servers.keycloak-model-context-protocol]
command = "npx"
args = ["-y", "keycloak-model-context-protocol"]
env = { KEYCLOAK_URL = "<KEYCLOAK_URL>" }

{
  "mcpServers": {
    "keycloak-model-context-protocol": {
      "command": "npx",
      "args": [
        "-y",
        "keycloak-model-context-protocol"
      ],
      "env": {
        "KEYCLOAK_URL": "<KEYCLOAK_URL>"
      }
    }
  }
}

{
  "servers": {
    "keycloak-model-context-protocol": {
      "type": "stdio",
      "command": "npx",
      "args": [
        "-y",
        "keycloak-model-context-protocol"
      ],
      "env": {
        "KEYCLOAK_URL": "<KEYCLOAK_URL>"
      }
    }
  }
}

Put your own value in place of <KEYCLOAK_URL> (Base URL of the Keycloak server, e.g. https://keycloak.example.com). The author’s registry entry marks it as required.

Optional settings from the registry entry, left out of the block above: KEYCLOAK_AUTH_REALM (Realm used to obtain the admin token), KEYCLOAK_CLIENT_ID (Client ID used for login (default admin-cli for the password grant, required for client_credentials)), KEYCLOAK_CLIENT_SECRET (Client secret for the client_credentials grant (recommended: a dedicated service account)), KEYCLOAK_USERNAME (Username for the password grant (alternative to client credentials)), KEYCLOAK_PASSWORD (Password for the password grant), KEYCLOAK_GRANT_TYPE (Grant type; auto-detected if unset (client_credentials when a secret is set, else password)), KEYCLOAK_MCP_READ_ONLY (If true, only read-only tools are registered), KEYCLOAK_MCP_REALMS (Comma-separated allowlist of target realms; empty means all realms), KEYCLOAK_MCP_ALLOW_MASTER_WRITE (If true, write tools may modify the master realm), KEYCLOAK_MCP_TOOLSETS (Comma-separated enabled toolsets (core, groups, roles, clients, sessions, events, security) or all), KEYCLOAK_MCP_REQUIRE_CONFIRMATION (If true, destructive tools require confirm=true), KEYCLOAK_MCP_TIMEOUT_MS (HTTP timeout for Keycloak requests in milliseconds), KEYCLOAK_MCP_LOG_LEVEL (Log level written to stderr).