Keycloak MCP

An MCP server for Keycloak administration, enabling AI-assisted management of users and realms. Lets agents create, look up, and disable users, assign roles and groups, and inspect realm configuration through the Keycloak Admin API, which is useful for identity operations and onboarding or offboarding workflows.

{
  "mcpServers": {
    "keycloak": {
      "command": "npx",
      "args": [],
      "env": {
        "KEYCLOAK_URL": "<YOUR_KEYCLOAK_URL>",
        "KEYCLOAK_ADMIN": "<YOUR_KEYCLOAK_ADMIN>",
        "KEYCLOAK_ADMIN_PASSWORD": "<YOUR_KEYCLOAK_ADMIN_PASSWORD>"
      }
    }
  }
}

{
  "type": "object",
  "properties": {}
}

{
  "type": "object",
  "required": [
    "realm",
    "username"
  ],
  "properties": {
    "email": {
      "type": "string",
      "description": "Email address"
    },
    "realm": {
      "type": "string",
      "description": "Target realm name"
    },
    "username": {
      "type": "string",
      "description": "Username for the new user"
    }
  }
}

{
  "type": "object",
  "required": [
    "realm",
    "user_id"
  ],
  "properties": {
    "realm": {
      "type": "string",
      "description": "Target realm name"
    },
    "user_id": {
      "type": "string",
      "description": "Identifier of the user to delete"
    }
  }
}