Name: Octodet Keycloak
Author: Octodet

LABSCO SUMMARY

Keycloak user admin without the admin console.

It covers the requests that actually arrive on a Friday afternoon — add this person, remove that one, give them this role — which is most of what the console gets opened for.

What it is

An MCP server for Keycloak administration, published to npm and run with npx. It authenticates with admin credentials and works across realms, covering user management and role assignment.

What you get

A user created in a named realm, or deleted
Users listed for a realm
Every realm on the server listed
Roles listed
A user's role assignments updated

Requirements

A Keycloak server URL and admin credentials — KEYCLOAK_URL, KEYCLOAK_ADMIN and KEYCLOAK_ADMIN_PASSWORD, plus the realm to use when a call does not name one. These are administrator credentials, so whatever the assistant does here, it does as an administrator.

Setup effort

One command plus credentials — npx -y @octodet/keycloak-mcp, then supply credentials

See installation options

USE CASES

01

Onboarding someone into the right realm

Check which realms exist, then create the account in the correct one.

list-realmscreate-user

02

Granting the access somebody is blocked on

See which roles are defined, then update that user's assignments.

list-rolesupdate-user-roles

03

Removing an account on a leaver's last day

Find the user in the realm and delete the account.

list-usersdelete-user

04

Auditing who is in a realm

List the users for that realm and read them back in the conversation.

list-users

6 tools

Listed in project docs. Your client may show a different list.

create-user

delete-user

list-users

list-realms

list-roles

update-user-roles

BEFORE YOU INSTALL

What to know first

Tools you get

6 tools named in the project's documentation.

Requires

npx on PATH
Node.js 18 or later
KEYCLOAK_ADMIN in your environment
KEYCLOAK_ADMIN_PASSWORD in your environment

Where it runs

Both documented clients run the server on your machine.

INSTALLATION

Connect your client

Server setup

TERMINAL

npx -y @octodet/keycloak-mcp

MCP Clients

VS Code

VS CODE · JSON

{
  "servers": {
    "keycloak": {
      "command": "npx",
      "args": [
        "-y",
        "@octodet/keycloak-mcp"
      ],
      "env": {
        "KEYCLOAK_URL": "http://localhost:8080",
        "KEYCLOAK_ADMIN": "admin",
        "KEYCLOAK_ADMIN_PASSWORD": "admin"
      }
    }
  }
}

Claude Desktop

CLAUDE DESKTOP · JSON

{
  "mcpServers": {
    "keycloak": {
      "command": "npx",
      "args": [
        "-y",
        "@octodet/keycloak-mcp"
      ],
      "env": {
        "KEYCLOAK_URL": "http://localhost:8080",
        "KEYCLOAK_ADMIN": "admin",
        "KEYCLOAK_ADMIN_PASSWORD": "admin"
      }
    }
  }
}

Octodet Keycloak