MCP server · Developer tools
Keycloak MCP server
by dockndevai
Lets your AI look up and manage Keycloak users, clients, roles, and groups, with safety switches you control.
This is a helper that connects your AI assistant to Keycloak, the system many companies use to manage who can log in and what they are allowed to do. Once it is connected, you can ask your AI questions about your Keycloak setup or have it make changes for you. It is handy for anyone who works with user accounts and access, even if you are not a Keycloak expert.
What is an MCP server? The 30-second version
On its own, your AI can only chat with you. An MCP server is a small helper program that gives your AI a new skill or a connection to another app. This one connects your AI to Keycloak, so it can look things up or make changes there when you ask. You stay in charge, and the helper has safety switches so it does not do more than you allow.
What this MCP server does
You ask your AI something about Keycloak, like how many users are in a realm or who belongs to a group. Your AI sends that request to this helper program running on your computer. The helper talks to your Keycloak server using the details you set up, and brings the answer back. Your AI then shows you the result in plain language in the chat. If you have allowed it, the helper can also make changes, like creating a user or resetting a password.
What you can do with it
- List the realms, users, clients, roles, and groups in your Keycloak setup
- Look up details about a specific user or client
- Count how many users are in a realm
- Create a new user or update an existing one
- Reset a user's password or log them out
- Delete a user when you have turned on the right permissions
Try asking your AI
- “How many users are in the sales realm?”
- “Show me the details for the user jane.doe in the marketing realm”
- “Create a new user called test.user in the staging realm”
- “Reset the password for john.smith in the support realm”
What it gives back to you
You get answers in the chat, like a list of users, a count, or the details of one account. When it makes a change, it tells you what it did, such as confirming a user was created or a password was reset. If you turn on dry-run mode, it will describe what it would do without actually changing anything. It also writes a simple log line for each action so you can see what happened.
Before you start
What you need
- A Keycloak server address (the web link your team uses to sign in to Keycloak)
- A client ID and client secret from Keycloak (like a username and password for this helper; your Keycloak admin can set this up)
- Node.js installed on your computer, so the npx command can run
- An MCP client like Claude Desktop, Claude Code, Cursor, Windsurf, or VS Code
Good to know
This helper can change or delete real user accounts in Keycloak, so start in read-only mode and only turn on write or delete permissions when you are sure.
Install it with your AI
Add Keycloak MCP server to your AI, no technical skills needed
You don't install anything by hand. You copy one prompt, paste it into an AI that can work on your computer, and it checks, installs and connects the server for you, asking you when it needs something.
Sign in to get the install prompt
Members get a ready-made prompt that lets the Claude desktop app check Keycloak MCP server, install it and connect it for them, step by step. You don't need any technical skills: you copy, paste and answer a few questions. Your connected AI can also find and install any of the 4,609 MCP servers here for you.
Who it's for
IT support staff, system administrators, and anyone who manages user accounts and access in Keycloak but does not want to click through the admin console for every small task.
