Keycloak Admin runs on your own machine — the client starts it, so there is no endpoint to ping. 45 installs a week from npm. Last commit 16 Aug 2026.
Administer Keycloak via its Admin REST API: users, roles, clients, groups, IdP, events.
Today is the operative word: we check Keycloak Admin every 15 minutes and re-read its code on every release. Watch it and you find out the day that stops being true.
This server runs on your own machine — install it with the package manager and the client starts it for you. Package name taken from the official registry entry.
claude mcp add mcp-keycloak-admin -- npx -y mcp-keycloak-admin
{
"mcpServers": {
"mcp-keycloak-admin": {
"args": [
"-y",
"mcp-keycloak-admin"
],
"command": "npx"
}
}
}
[mcp_servers.mcp-keycloak-admin]
command = "npx"
args = ["-y", "mcp-keycloak-admin"]
{
"mcpServers": {
"mcp-keycloak-admin": {
"args": [
"-y",
"mcp-keycloak-admin"
],
"command": "npx"
}
}
}
{
"mcpServers": {
"mcp-keycloak-admin": {
"args": [
"-y",
"mcp-keycloak-admin"
],
"command": "npx"
}
}
}
This one needs environment variables set before it will start:
KEYCLOAK_BASE_URL (Base URL of the Keycloak server (no trailing slash).), KEYCLOAK_REALM (Realm the server operates on.), AUTH_MODE (Authentication mode: service_account or password.), KC_CLIENT_ID (Confidential client id (service_account mode).), KC_CLIENT_SECRET (Client secret (service_account mode).), KC_ADMIN_USERNAME (Admin username (password mode).), KC_ADMIN_PASSWORD (Admin password (password mode).), KC_ADMIN_REALM (Realm holding the admin user (password mode; default master).), READ_ONLY (When true, write and destructive tools are not registered.), ALLOWED_REALMS (Comma-separated allow-list of realms the server may operate on.).
The author declared them in the registry entry; get the values from the project itself.
Keycloak admin for AI agents — realms, users, clients, roles; safe-by-default governance.
MCP server for KeyCloak Admin REST API via Service Account
Governed Keycloak + authentik identity ops: users, events, clients, MFA, RCA. 29 tools.
Managed Keycloak from any MCP client: clusters, realms, apps, SSO, users, domains, audit events.
Google Workspace Admin via MCP. Manage users, groups, aliases, org units.
MCP server for consuming and managing Groups.io data via the Groups.io REST API
Search, read and edit Wiki.js pages, and manage its assets, users, groups and comments
Real-time Korean corporate disclosure (DART) events. Pay per call in USDC via x402. No API key.
Answers built from our own checks of this server.