Skip to content
Verified official

Keycloak Admin API MCP

v3.8.0

io.github.sferarc/keycloak-api-mcp

Unofficial: one tool per Keycloak admin operation on a realm, read-only unless writes are enabled

transport:stdio runtime:npm

Target client

run in your project directory

Held in this page only — never stored, logged, or sent anywhere but back to your screen.

claude mcp add keycloak-api-mcp -e KEYCLOAK_URL=<KEYCLOAK_URL> -e KEYCLOAK_REALM=<KEYCLOAK_REALM> -e KEYCLOAK_TOKEN=<KEYCLOAK_TOKEN> -e KEYCLOAK_CLIENT_ID=<KEYCLOAK_CLIENT_ID> -e KEYCLOAK_CLIENT_SECRET=<KEYCLOAK_CLIENT_SECRET> -e KEYCLOAK_TOKEN_REALM=<KEYCLOAK_TOKEN_REALM> -e KEYCLOAK_MCP_ALLOW_WRITES=<KEYCLOAK_MCP_ALLOW_WRITES> -e KEYCLOAK_MCP_RESOURCES=<KEYCLOAK_MCP_RESOURCES> -- npx -y keycloak-api

setup guides: Claude Code Claude Desktop Cursor VS Code Zed Windsurf Cline Gemini CLI Grok LangChain

Adds it for this project only. Append --scope user to make it available everywhere. Claude Code docs

This listing does not declare its tools. Connect the server and your client will discover them on the handshake.