Permanently deletes a Keycloak user after verifying the username matches the user ID and receiving explicit confirmation.
MIT
458,010 tools. Updated 2026-08-14 16:49
"Keycloak" matching MCP tools:
- Permanently delete a Keycloak client by its clientId. Requires confirm=true to execute; without confirmation the operation aborts to prevent accidental removal.MIT
- List active sessions for a Keycloak client by internal ID, with paging and truncation status. Use for per-client session monitoring and RCA.MIT
- Lists authorization permissions for a Keycloak client, showing bindings of resources/scopes to policies. Use to inspect resource protection configuration.MIT
- Fully paginate every Keycloak event type to investigate all activity from a single IP address, delivering exhaustive summaries, per-user/client details, and a timeline for security analysis.MIT
- Removes a default client scope from a Keycloak client. Requires explicit confirmation to prevent accidental removal.MIT
Matching MCP Servers
- AlicenseAqualityCmaintenanceAn MCP server that lets an AI assistant inspect and modify Keycloak realm, client, and protocol-mapper configuration across multiple Keycloak hosts.757MIT
- AlicenseAqualityAmaintenanceAn MCP server for Keycloak Admin REST API, enabling user, group, event, and security management through service account authentication.30MIT
- Delete an identity provider from a Keycloak realm by alias. Requires explicit confirmation to proceed.MIT
- Synchronizes users from a user federation provider (e.g., LDAP) into the Keycloak realm, importing or updating users. Use 'full' mode for a complete re-import or 'changed' for incremental sync.MIT
- Enable or disable a required action in Keycloak by providing its alias. Idempotent operation that leaves the action unchanged if already in the requested state.MIT
- Rotate a Keycloak confidential client's secret, writing the new value to a local file for secure retrieval; perform a dry run or apply with write=true.MIT
- Check Keycloak MCP server health: report version, verify Admin API connectivity and service account authentication, and return status (healthy, degraded, or error) with details.MIT
- Retrieve Keycloak admin events to audit changes made via Admin REST API. Filter by operation type, resource, and date to trace modifications when user events are missing.MIT
- List all active sessions for a Keycloak user to inspect login status before revoking access.MIT
- Lists all realm-level roles in a Keycloak realm without parameters. Use to discover role names before assigning them.MIT
- Retrieve client-level roles for a Keycloak client using its internal ID. Returns a JSON array of role objects with id, name, and description to identify roles for assignment.MIT
- Retrieve a list of all OAuth/OIDC clients in the Keycloak realm to discover existing clients before updating, deleting, or viewing details.MIT
- Retrieve a Keycloak client by clientId, returning its UUID, enabled status, and publicClient flag. Returns 'Client not found' if no match.MIT
- Lists all client scopes in the Keycloak realm. Returns scope IDs, names, and protocols to use with assign/unassign operations.MIT
- Retrieve the list of default client scopes currently assigned to a client by its UUID. Use this read-only operation to inspect default scopes before making changes.MIT
- Lists all required actions configured in a Keycloak realm, including alias, name, and status. Use to discover aliases before enabling or disabling actions.MIT