Keycloak Admin

Package (npm 0.2.3)

npx -y mcp-keycloak-admin@0.2.3

Or add to your MCP client config:

{
  "mcpServers": {
    "mcp-keycloak-admin": {
      "command": "npx",
      "args": [
        "-y",
        "mcp-keycloak-admin@0.2.3"
      ],
      "env": {
        "KEYCLOAK_BASE_URL": "<YOUR_VALUE>",
        "KEYCLOAK_REALM": "<YOUR_VALUE>",
        "AUTH_MODE": "<YOUR_VALUE>",
        "KC_CLIENT_ID": "<YOUR_VALUE>",
        "KC_CLIENT_SECRET": "<YOUR_VALUE>",
        "KC_ADMIN_USERNAME": "<YOUR_VALUE>",
        "KC_ADMIN_PASSWORD": "<YOUR_VALUE>",
        "KC_ADMIN_REALM": "<YOUR_VALUE>",
        "READ_ONLY": "<YOUR_VALUE>",
        "ALLOWED_REALMS": "<YOUR_VALUE>"
      }
    }
  }
}

• KEYCLOAK_BASE_URL required — Base URL of the Keycloak server (no trailing slash).
• KEYCLOAK_REALM required — Realm the server operates on.
• AUTH_MODE required — Authentication mode: service_account or password.
• KC_CLIENT_ID — Confidential client id (service_account mode).
• KC_CLIENT_SECRET secret — Client secret (service_account mode).
• KC_ADMIN_USERNAME — Admin username (password mode).
• KC_ADMIN_PASSWORD secret — Admin password (password mode).
• KC_ADMIN_REALM — Realm holding the admin user (password mode; default master).
• READ_ONLY — When true, write and destructive tools are not registered.
• ALLOWED_REALMS — Comma-separated allow-list of realms the server may operate on.