Skip to content
mcp/harbor
Windsurf

Keycloak Admin for Windsurf

io.github.mrz1880/mcp-keycloak-admin

Administer Keycloak via its Admin REST API: users, roles, clients, groups, IdP, events.

client:Windsurf transport:stdio runtime:npm

Install Keycloak Admin in Windsurf

~/.codeium/windsurf/mcp_config.json · windows: %USERPROFILE%\.codeium\windsurf\mcp_config.json

Held in this page only — never stored, logged, or sent anywhere but back to your screen. 

{
  "mcpServers": {
    "mcp-keycloak-admin": {
      "command": "npx",
      "args": [
        "-y",
        "mcp-keycloak-admin"
      ],
      "env": {
        "KEYCLOAK_BASE_URL": "<KEYCLOAK_BASE_URL>",
        "KEYCLOAK_REALM": "<KEYCLOAK_REALM>",
        "AUTH_MODE": "<AUTH_MODE>",
        "KC_CLIENT_ID": "<KC_CLIENT_ID>",
        "KC_CLIENT_SECRET": "<KC_CLIENT_SECRET>",
        "KC_ADMIN_USERNAME": "<KC_ADMIN_USERNAME>",
        "KC_ADMIN_PASSWORD": "<KC_ADMIN_PASSWORD>",
        "KC_ADMIN_REALM": "<KC_ADMIN_REALM>",
        "READ_ONLY": "<READ_ONLY>",
        "ALLOWED_REALMS": "<ALLOWED_REALMS>"
      }
    }
  }
}

Global only — Windsurf has no per-project MCP config. Refresh Cascade after saving. Windsurf docs

Keycloak Admin in other clients

Keycloak Admin MCP server