get_user_credentials
Check a user's MFA status by listing their Keycloak credentials (password, OTP, WebAuthn). Read-only access to user credential types.
Instructions
List the credential types configured for one user (password, otp, webauthn, …).
Use this to check a single user's MFA status: an otp credential means
TOTP/HOTP is configured. Reads /users/{id}/credentials (read-only; does
not create a session).
Args: username: Exact username (email).
Tool call template
Replace each placeholder with a value matching the input schema. Only required parameters are included; add optional parameters as needed.
{
"id": 1,
"jsonrpc": "2.0",
"method": "tools/call",
"params": {
"arguments": {
"username": "<username>"
},
"name": "get_user_credentials"
}
}Input Schema
| Name | Required | Description | Default |
|---|---|---|---|
| username | Yes |
Output Schema
| Name | Required | Description | Default |
|---|---|---|---|
| result | Yes |