npm · mcp-keycloak-admin
$npx -y mcp-keycloak-admin@0.2.3 KEYCLOAK_BASE_URL (required) — Base URL of the Keycloak server (no trailing slash).
KEYCLOAK_REALM (required) — Realm the server operates on.
AUTH_MODE (required) — Authentication mode: service_account or password.
KC_CLIENT_ID — Confidential client id (service_account mode).
KC_CLIENT_SECRET · secret — Client secret (service_account mode).
KC_ADMIN_USERNAME — Admin username (password mode).
KC_ADMIN_PASSWORD · secret — Admin password (password mode).
KC_ADMIN_REALM — Realm holding the admin user (password mode; default master).
READ_ONLY — When true, write and destructive tools are not registered.
ALLOWED_REALMS — Comma-separated allow-list of realms the server may operate on.