io.github.ChristophEnglisch/keycloak-model-context-protocol

Manage Keycloak users, groups, roles and realms through the Keycloak Admin REST API.

What does this entry provide?

io.github.ChristophEnglisch/keycloak-model-context-protocol is an MCP server entry in ChatHome Skills, sourced from Official MCP Registry and scored 78/100. As a Model Context Protocol server, it exposes tools that MCP-compatible LLM clients such as Claude, Cursor, and Copilot can call directly, extending an agent's reach beyond its built-in capabilities. ChatHome Skills discovered this entry through its daily ingest of official registries and GitHub discovery queries, and re-verifies repository facts, freshness signals, and install metadata on every run. The quality score weighs official-registry presence, a working install command, license clarity, GitHub star trajectory, and repository freshness — the full formula is on the Sources page. The install command above is ready to copy. Review the last-pushed date and repository status before adding io.github.ChristophEnglisch/keycloak-model-context-protocol to a production agent workflow; the snapshot facts below are point-in-time values from the most recent ingest.

Snapshot facts

Source: Official MCP Registry
Quality: 78/100
Install method: npm
Repo: ChristophEnglisch/keycloak-model-context-protocol
Repo updated: Oct 26, 2026

Install command

npx -y keycloak-model-context-protocol@1.1.0

Install method: npm

Review the upstream source before running this command.

GitHub project

Quality

Repo stars

Repo updated

Oct 26, 2026

How is this score calculated?

Weighted across six dimensions, scored 0-100.
Provenance (25): listed in an official or curated registry.
Installability (25): a runnable install command beats a declared transport, which beats a source checkout.
Maintenance (20): recency of the last push; archived entries score zero here.
Adoption (20): repository stars on a log curve.

MCP manifest

{
  "_meta": {
    "io.modelcontextprotocol.registry/official": {
      "status": "active",
      "isLatest": true,
      "updatedAt": "2026-10-26T20:33:56.445967Z",
      "publishedAt": "2026-10-26T20:33:56.445967Z",
      "statusChangedAt": "2026-10-26T20:33:56.445967Z"
    }
  },
  "server": {
    "name": "io.github.ChristophEnglisch/keycloak-model-context-protocol",
    "$schema": "https://static.modelcontextprotocol.io/schemas/2025-12-11/server.schema.json",
    "version": "1.1.0",
    "packages": [
      {
        "version": "1.1.0",
        "transport": {
          "type": "stdio"
        },
        "identifier": "keycloak-model-context-protocol",
        "registryType": "npm",
        "environmentVariables": [
          {
            "name": "KEYCLOAK_URL",
            "format": "string",
            "isRequired": true,
            "description": "Base URL of the Keycloak server, e.g. https://keycloak.example.com"
          },
          {
            "name": "KEYCLOAK_AUTH_REALM",
            "format": "string",
            "default": "master",
            "description": "Realm used to obtain the admin token"
          },
          {
            "name": "KEYCLOAK_CLIENT_ID",
            "format": "string",
            "description": "Client ID used for login (default admin-cli for the password grant, required for client_credentials)"
          },
          {
            "name": "KEYCLOAK_CLIENT_SECRET",
            "format": "string",
            "isSecret": true,
            "description": "Client secret for the client_credentials grant (recommended: a dedicated service account)"
          },
          {
            "name": "KEYCLOAK_USERNAME",
            "format": "string",
            "description": "Username for the password grant (alternative to client credentials)"
          },
          {
            "name": "KEYCLOAK_PASSWORD",
            "format": "string",
            "isSecret": true,
            "description": "Password for the password grant"
          },
          {
            "name": "KEYCLOAK_GRANT_TYPE",
            "format": "string",
            "choices": [
              "client_credentials",
              "password"
            ],
            "description": "Grant type; auto-detected if unset (client_credentials when a secret is set, else password)"
          },
          {
            "name": "KEYCLOAK_MCP_READ_ONLY",
            "format": "boolean",
            "default": "false",
            "description": "If true, only read-only tools are registered"
          },
          {
            "name": "KEYCLOAK_MCP_REALMS",
            "format": "string",
            "description": "Comma-separated allowlist of target realms; empty means all realms"
          },
          {
            "name": "KEYCLOAK_MCP_ALLOW_MASTER_WRITE",
            "format": "boolean",
            "default": "false",
            "description": "If true, write tools may modify the master realm"
          },
          {
            "name": "KEYCLOAK_MCP_TOOLSETS",
            "format": "string",
            "default": "core,groups,roles",
            "description": "Comma-separated enabled toolsets (core, groups, roles, clients, sessions, events, security) or all"
          },
          {
            "name": "KEYCLOAK_MCP_REQUIRE_CONFIRMATION",
            "format": "boolean",
            "default": "true",
            "description": "If true, destructive tools require confirm=true"
          },
          {
            "name": "KEYCLOAK_MCP_TIMEOUT_MS",
            "format": "number",
            "default": "30000",
            "description": "HTTP timeout for Keycloak requests in milliseconds"
          },
          {
            "name": "KEYCLOAK_MCP_LOG_LEVEL",
            "format": "string",
            "choices": [
              "debug",
              "info",
              "warn",
              "error"
            ],
            "default": "info",
            "description": "Log level written to stderr"
          }
        ]
      }
    ],
    "repository": {
      "url": "https://github.com/ChristophEnglisch/keycloak-model-context-protocol",
      "source": "github"
    },
    "description": "Manage Keycloak users, groups, roles and realms through the Keycloak Admin REST API."
  }
}

Report an issue with this listing