Summary
Keycloak user admin without the admin console.
It covers the requests that actually arrive on a Friday afternoon — add this person, remove that one, give them this role — which is most of what the console gets opened for.
What it is
An MCP server for Keycloak administration, published to npm and run with npx. It authenticates with admin credentials and works across realms, covering user management and role assignment.
What you get
- A user created in a named realm, or deleted
- Users listed for a realm
- Every realm on the server listed
- Roles listed
- A user's role assignments updated
Requirements
A Keycloak server URL and admin credentials — KEYCLOAK_URL, KEYCLOAK_ADMIN and KEYCLOAK_ADMIN_PASSWORD, plus the realm to use when a call does not name one. These are administrator credentials, so whatever the assistant does here, it does as an administrator.
Setup effort
One command plus a key — npx -y @octodet/keycloak-mcp, then supply credentials