Keycloak MCP Server
Server Configuration
Describes the environment variables required to run the server.
| Name | Required | Description | Default |
|---|---|---|---|
| KEYCLOAK_URL | Yes | URL of your Keycloak instance | http://localhost:8080 |
| KEYCLOAK_ADMIN | Yes | Keycloak admin username | admin |
| KEYCLOAK_ADMIN_PASSWORD | Yes | Keycloak admin password | admin |
Instructions
Guidance the server publishes about itself, which clients place ahead of the tool catalog so the model reads it before choosing anything.
This server publishes no instructions, or was last inspected before Glama recorded them.
Capabilities
Server capabilities have not been inspected yet.
Tools
Functions exposed to the LLM to take actions
| Name | Description |
|---|---|
| create-userC | Create a new user in a specific realm |
| delete-userC | Delete a user from a specific realm |
| list-realmsB | List all available realms |
| list-usersC | List users in a specific realm |
| assign-client-role-to-userC | Assign a client role to a user |
| add-user-to-groupC | Add a user to a group |
| list-clientsC | List clients in a specific realm |
| list-groupsC | List groups in a specific realm |
| list-client-rolesC | List roles in a specific client |
Prompts
Interactive templates invoked by user choice
| Name | Description |
|---|---|
No prompts | |
Resources
Contextual data attached and managed by the client
| Name | Description |
|---|---|
No resources | |
TDQS
Scored across 9 tools
Every tool has a clearly distinct purpose targeting specific resources and actions in Keycloak's identity management domain. The tools cover different entities (users, groups, clients, realms, roles) with specific operations, leaving no ambiguity about which tool to use for each task.
All tools follow a consistent verb_noun pattern with snake_case naming throughout. The naming convention is perfectly predictable: action-target pairs like 'create-user', 'list-clients', 'add-user-to-group' make the tool purposes immediately understandable.
With 9 tools, this server is well-scoped for Keycloak user and identity management operations. Each tool earns its place by covering essential CRUD operations for users and listing functions for other entities, providing a focused yet complete surface for the domain.
The toolset provides excellent coverage for user management (create, delete, list, group assignment, role assignment) and listing functions for realms, clients, groups, and roles. Minor gaps include missing update operations for users/groups/clients and role management beyond assignment, but core workflows are well-covered.