Keycloak Admin MCP Server

What this does

Keycloak Admin exposes a set of tools to Claude over the Model Context Protocol. After you add it to claude_desktop_config.json (snippet above) and restart Claude Desktop, those tools become callable inside any conversation.

Requirements

This server needs the following environment variables to be set before it can run:

KEYCLOAK_BASE_URL
KEYCLOAK_REALM
AUTH_MODE
KC_CLIENT_ID
KC_CLIENT_SECRET
KC_ADMIN_USERNAME
KC_ADMIN_PASSWORD
KC_ADMIN_REALM
READ_ONLY
ALLOWED_REALMS

Set these via the env object in your MCP config (see claude_desktop_config.json snippet above).

How do I install Keycloak Admin?

Run the Claude Code command in the install section to add Keycloak Admin to Claude Code, or copy the ready-made config for your client from the install section on this page. Restart your client afterwards and the tools appear in your next conversation.

Which clients work with Keycloak Admin?

This page carries setup and config for Claude Code, Claude Desktop, Cursor and VS Code. Any other MCP client that accepts a standard server config can connect to Keycloak Admin as well.

Does Keycloak Admin need an API key?

Yes. Before it can run, set these environment variables: KEYCLOAK_BASE_URL, KEYCLOAK_REALM, AUTH_MODE, KC_CLIENT_ID, KC_CLIENT_SECRET, KC_ADMIN_USERNAME, KC_ADMIN_PASSWORD, KC_ADMIN_REALM, READ_ONLY, ALLOWED_REALMS. They go in the env block of your MCP config.