io.github.mrz1880

mcp-keycloak-admin

Keycloak Admin

Administer Keycloak via its Admin REST API: users, roles, clients, groups, IdP, events.

stdiocommunityservice

Package Details

Transportstdio

Environment Variables

KEYCLOAK_BASE_URL
Required

Base URL of the Keycloak server (no trailing slash).

KEYCLOAK_REALM
Required

Realm the server operates on.

AUTH_MODE
Required

Authentication mode: service_account or password.

KC_CLIENT_ID

Confidential client id (service_account mode).

KC_CLIENT_SECRET
Secret

Client secret (service_account mode).

KC_ADMIN_USERNAME

Admin username (password mode).

KC_ADMIN_PASSWORD
Secret

Admin password (password mode).

KC_ADMIN_REALM

Realm holding the admin user (password mode; default master).

READ_ONLY

When true, write and destructive tools are not registered.

ALLOWED_REALMS

Comma-separated allow-list of realms the server may operate on.