Permanently delete a Keycloak client by its clientId. Requires confirm=true to execute; without confirmation the operation aborts to prevent accidental removal.
MIT
Destructive
650,501 tools. Updated 2026-10-13 21:41
"Keycloak" matching MCP tools:
- List active sessions for a Keycloak client by internal ID, with paging and truncation status. Use for per-client session monitoring and RCA.MIT
- Lists authorization permissions for a Keycloak client, showing bindings of resources/scopes to policies. Use to inspect resource protection configuration.MIT
- Call any Keycloak Admin REST endpoint directly, covering operations no curated tool handles. Read-only by default; enable writes via configuration.MIT
- Enable or disable a Keycloak user account to block authentication for compromised or decommissioned users, while preserving custom attributes.MIT
- Removes a default client scope from a Keycloak client. Requires explicit confirmation to prevent accidental removal.MITDestructive
Matching MCP Servers
- AlicenseAqualityDmaintenanceAn MCP server that lets an AI assistant inspect and modify Keycloak realm, client, and protocol-mapper configuration across multiple Keycloak hosts.730 npmMIT
- AlicenseAqualityAmaintenanceAn MCP server for Keycloak Admin REST API, enabling user, group, event, and security management through service account authentication.32218 PyPIMIT
Matching MCP Connectors
Keycloak identity management expert with semantic search, protocol guides, and config analysis
- SkycloakOAuth
Managed Keycloak from any MCP client: clusters, realms, apps, SSO, users, domains, audit events.
- Delete an identity provider from a Keycloak realm by alias. Requires explicit confirmation to proceed.MITDestructive
- Synchronizes users from a user federation provider (e.g., LDAP) into the Keycloak realm, importing or updating users. Use 'full' mode for a complete re-import or 'changed' for incremental sync.MIT
- Enable or disable a required action in Keycloak by providing its alias. Idempotent operation that leaves the action unchanged if already in the requested state.MIT
- Rotate a Keycloak confidential client's secret, writing the new value to a local file for secure retrieval; perform a dry run or apply with write=true.MIT
- Verify Keycloak Admin API connectivity and authentication status at session start or after a timeout. Returns health status, server version, and auth state to confirm the MCP is operational.MIT
- Retrieve Keycloak admin events for changes like attribute updates, role assignments, and client configs. Filter by operation, resource, and date to trace administrative actions.MIT
- Retrieves a client's configuration with resolved authentication flow aliases, showing which browser flow overrides apply while excluding credential material.MIT
- Run a morning Keycloak health check to detect anomalies: failed logins, active sessions, password updates, admin events, and flag brute-force or credential-spraying attacks.MIT
- List all active sessions for a Keycloak user to inspect login status before revoking access.MIT
- Lists all realm-level roles in a Keycloak realm without parameters. Use to discover role names before assigning them.MIT
- Retrieve client-level roles for a Keycloak client using its internal ID. Returns a JSON array of role objects with id, name, and description to identify roles for assignment.MIT
- Retrieve a list of all OAuth/OIDC clients in the Keycloak realm to discover existing clients before updating, deleting, or viewing details.MIT
- Retrieve a Keycloak client by clientId, returning its UUID, enabled status, and publicClient flag. Returns 'Client not found' if no match.MIT
- Lists all client scopes in the Keycloak realm. Returns scope IDs, names, and protocols to use with assign/unassign operations.MIT
- Retrieve the list of default client scopes currently assigned to a client by its UUID. Use this read-only operation to inspect default scopes before making changes.MIT