create-userLABSCO SUMMARY
Four calls, all about users — the everyday half of Keycloak administration.
Realms are listed so you can find the one you mean, users are listed within it, and a user can be created or removed. It is not the full admin API and does not pretend to be; it covers the request that lands in a developer's lap most often.
What it is
A small Keycloak administration server, pointed at a Keycloak URL with admin credentials, covering realms and their users.
What you get
- list-realms — the realms available on that Keycloak instance
- list-users — the users in a realm you name
- create-user — a new user in a realm, with username, email, firstName and lastName
- delete-user — a user removed from a realm by userId
Requirements
A Keycloak instance you can reach, and an admin username and password for it, both set in the client config alongside the server URL. It runs from npx.
Setup effort
One command plus credentials — npx -y keycloak-model-context-protocol, then supply credentials
USE CASES
01
Adding a user to a test realm
Find the realm, then create the account with its email and name in one call.
02
Finding out who has access
List the realms, then the users in the one that matters, without a console session.
03
Removing an account that should not exist
List the users to get the id, then delete it.
4 tools
Listed in project docs. Your client may show a different list.
delete-userlist-realmslist-usersBEFORE YOU INSTALL
What to know first
Tools you get
4 tools named in the project's documentation.
Requires
- npx on PATH
- Node.js 18
- KEYCLOAK_ADMIN in your environment
- KEYCLOAK_ADMIN_PASSWORD in your environment
Where it runs
The documented client runs the server on your machine.
INSTALLATION
Connect your client
Server setup
TERMINAL
npx -y keycloak-model-context-protocolMCP Clients
Claude Desktop
CLAUDE DESKTOP · JSON
{
"mcpServers": {
"keycloak": {
"command": "npx",
"args": [
"-y",
"keycloak-model-context-protocol"
],
"env": {
"KEYCLOAK_URL": "http://localhost:8080",
"KEYCLOAK_ADMIN": "admin",
"KEYCLOAK_ADMIN_PASSWORD": "admin"
}
}
}
}
