keycloak-model-context-protocol MCP Server

What this does

keycloak-model-context-protocol exposes a set of tools to Claude over the Model Context Protocol. After you add it to claude_desktop_config.json (snippet above) and restart Claude Desktop, those tools become callable inside any conversation.

Requirements

This server needs the following environment variables to be set before it can run:

KEYCLOAK_URL
KEYCLOAK_AUTH_REALM
KEYCLOAK_CLIENT_ID
KEYCLOAK_CLIENT_SECRET
KEYCLOAK_USERNAME
KEYCLOAK_PASSWORD
KEYCLOAK_GRANT_TYPE
KEYCLOAK_MCP_READ_ONLY
KEYCLOAK_MCP_REALMS
KEYCLOAK_MCP_ALLOW_MASTER_WRITE
KEYCLOAK_MCP_TOOLSETS
KEYCLOAK_MCP_REQUIRE_CONFIRMATION
KEYCLOAK_MCP_TIMEOUT_MS
KEYCLOAK_MCP_LOG_LEVEL

Set these via the env object in your MCP config (see claude_desktop_config.json snippet above).

How do I install keycloak-model-context-protocol?

Run the Claude Code command in the install section to add keycloak-model-context-protocol to Claude Code, or copy the ready-made config for your client from the install section on this page. Restart your client afterwards and the tools appear in your next conversation.

Which clients work with keycloak-model-context-protocol?

This page carries setup and config for Claude Code, Claude Desktop, Cursor and VS Code. Any other MCP client that accepts a standard server config can connect to keycloak-model-context-protocol as well.

Does keycloak-model-context-protocol need an API key?

Yes. Before it can run, set these environment variables: KEYCLOAK_URL, KEYCLOAK_AUTH_REALM, KEYCLOAK_CLIENT_ID, KEYCLOAK_CLIENT_SECRET, KEYCLOAK_USERNAME, KEYCLOAK_PASSWORD, KEYCLOAK_GRANT_TYPE, KEYCLOAK_MCP_READ_ONLY, KEYCLOAK_MCP_REALMS, KEYCLOAK_MCP_ALLOW_MASTER_WRITE, KEYCLOAK_MCP_TOOLSETS, KEYCLOAK_MCP_REQUIRE_CONFIRMATION, KEYCLOAK_MCP_TIMEOUT_MS, KEYCLOAK_MCP_LOG_LEVEL. They go in the env block of your MCP config.