Keycloak Model Context Protocol MCP Server
Keycloak realm and user management tools for your AI agent workflow.
Data last scanned today · Reviewed today
Overview
The Keycloak Model Context Protocol server allows AI models to perform administrative tasks within a Keycloak identity environment. It provides functionality to list existing realms, enumerate users within those realms, and execute user creation or deletion operations directly from your MCP-compatible client. Designed for integration via npm or Smithery, the server requires configuration with a Keycloak URL and administrative credentials. It is implemented in TypeScript and includes basic tooling for identity resource lifecycle management.
Our verdict
This server carries a high-risk score of 15/100 and should be used with extreme caution. The project lacks a defined license, leaving its usage terms legally ambiguous, and it has seen no code updates in over 538 days, suggesting it may be abandoned. Users should be aware that it lacks a read-only mode and is community-maintained rather than vendor-supported; it is not recommended for production environments where administrative access security is paramount.
- Small supply-chain surface with only three direct dependencies
- Comprehensive documentation for tool inputs provided in README
- Standardized deployment via NPM package availability
- High security risk score of 15/100
- No detected license for legal use
- Project inactive for over 538 days
- Lacks read-only mode for safety
Setup
{
"mcpServers": {
"keycloak-model-context-protocol": {
"args": [
"-y",
"keycloak-model-context-protocol"
],
"command": "npx"
}
}
}Paste into ~/Library/Application Support/Claude/claude_desktop_config.json (macOS) or %APPDATA%\Claude\claude_desktop_config.json (Windows), then restart Claude Desktop. Some servers require API keys or tokens as environment variables — check the project's README and add an "env" object if needed.
- No read-only mode — running this grants full read/write access.
- No built-in authentication — anyone with access to this config can invoke every tool it exposes.
Tools
| Tool | Description | Risk |
|---|---|---|
| create-user | Creates a new user in a specified realm. | medium |
| delete-user | Deletes a user from a specified realm. | high |
| list-realms | Lists all available realms. | low |
| list-users | Lists all users in a specified realm. | low |
Compatibility
| Client | Local | Docker | Remote | Read-only |
|---|---|---|---|---|
| Claude Desktop | ||||
| Cursor | ||||
| VS Code | ||||
| Windsurf | ||||
| ChatGPT |
Frequently asked questions
›What are the core system requirements for this server?
You must have Node.js version 18 or higher installed and a running Keycloak instance to connect to.
›What environment variables must be configured for the server to function?
You need to provide the KEYCLOAK_URL for your instance, along with a KEYCLOAK_ADMIN username and KEYCLOAK_ADMIN_PASSWORD for authentication.
›What administrative actions can be performed through this MCP server?
The server allows you to list available realms, list users within a specific realm, create new users, and delete existing users by their ID.
›How can I verify the server is working correctly?
You can use the MCP Inspector by running the command 'npx -y @modelcontextprotocol/inspector npx -y keycloak-model-context-protocol'.
Badge
Maintain this server? Add the live badge to your README.