How to Use the Keycloak MCP in Claude

Q: Can Claude Desktop handle multiple Keycloak realms?

Yes. You can use the listrealms tool to identify available namespaces. Once you have the realm name, simply target it with your subsequent commands.

Q: Does Claude Desktop support Keycloak secret management?

Yes. You can use getclientsecret or regenerateclientsecret to handle credentials. Always ensure your agent has the correct permissions assigned in your IAM instance.

Manage your Keycloak identity infrastructure directly from the Claude Desktop interface with 34 specialized admin tools.

See Vinkius in Action

Works with every AI agent you already use

…and any MCP-compatible client

MCP Servers - Free for Subscribers

Connect Keycloak MCP to Claude Desktop

Create your Vinkius account to connect Keycloak to Claude Desktop and route execution through our secure gateway. The platform manages server hosting, runtime updates, and security layers. Configuration requires no manual server provisioning.

GDPR Free for Subscribers

Setup Keycloak with Claude Desktop

Ask AI about this MCP

ChatGPT

Claude

Perplexity

Full IAM control in Claude Desktop

Stop context switching between your browser tabs and the terminal. You can run `create_user` or `reset_user_password` without leaving the chat window. This MCP Server connects your local environment to your auth instance. Use `list_users` or `get_realm` to see live data right where you write your documentation.

Automate client and role management

Configure your application access points by invoking `create_client` or `update_client` through your agent. It handles the API handshake so you don't have to write manual requests. Check your security posture by using `list_client_roles` and `get_role`. You get immediate feedback on who has access to what, without digging through the admin console.

Track admin events in real-time

Keep an eye on realm activity by calling `list_admin_events` whenever you need a quick audit. It surfaces the logs you need to troubleshoot failed logins or configuration changes. If you need to clear out stale sessions, `logout_all_users` executes the task instantly. It gives you precise control over your auth environment from the desktop.

Setup guide

Set up Keycloak MCP in Claude Web or Desktop

1

Open Claude Settings

Go to claude.ai, click your profile icon, then navigate to Customize → Connectors.
2

Add Custom Connector

Click the "+" button and select Add custom connector. Paste your Vinkius endpoint URL: https://edge.vinkius.com/[YOUR_TOKEN_HERE]/mcp Replace [YOUR_TOKEN_HERE] with your token from cloud.vinkius.com. For OAuth-protected servers, expand Advanced settings to add credentials.
3

Start a conversation

Open a new chat. The Keycloak MCP tools are available immediately — no restart needed.

Endpoint URL

https://edge.vinkius.com/[YOUR_TOKEN_HERE]/mcp

No configuration file needed — paste the URL directly in the Claude web interface.

Available on Free (1 connector), Pro, Max, Team, and Enterprise plans.

Prerequisites

Claude Desktop installed (macOS or Windows)
Active Vinkius subscription with a valid endpoint token

1

Open Claude Desktop Settings

Click the menu icon at the top-left corner, go to Settings → Developer → Edit Config. This opens claude_desktop_config.json in your default text editor.
2

Paste the Keycloak MCP configuration

Copy the JSON snippet on the right into the mcpServers object. Replace [YOUR_TOKEN_HERE] with your endpoint token from cloud.vinkius.com.
3

Restart Claude Desktop

Close and reopen the application. Claude needs a full restart to load new MCPs — refreshing a conversation is not enough.
4

Verify the connection

Open a new conversation. Click the 🔌 icon at the bottom of the message input. You should see tools listed under keycloak-mcp.

json

{
  "mcpServers": {
    "keycloak-mcp": {
      "url": "https://edge.vinkius.com/[YOUR_TOKEN_HERE]/mcp"
    }
  }
}

Get your connection token →

Independent Platform Disclaimer: Vinkius is an independent platform and is not affiliated with, endorsed by, sponsored by, verified by, or otherwise authorized by Keycloak. All third-party trademarks, logos, and brand names are the property of their respective owners. Their use on this website is strictly for informational purposes to identify service compatibility and interoperability.

Why Choose Vinkius

Vinkius connects your tools to AI with real-time monitoring and automatic cost savings — all from one dashboard.

Connect Keycloak now

Real-time monitoring

Live

visibility into every interaction

Connect your favorite tools to your AI and see exactly what's happening — every request, every response, in real time.

Built-in savings

60%

lower AI costs

Vinkius compresses data between your apps and your AI automatically. Lower bills every month — no configuration required.

Single dashboard

One

place for every integration

Every tool your AI connects to, managed from a single screen. One account, complete control.

Common questions about Keycloak MCP in Claude Desktop

Open your configuration file located in the Claude application support directory. Add this MCP Server to the mcpServers key with your required environment variables for the admin credentials.

Yes. You can use the `list_realms` tool to identify available namespaces. Once you have the realm name, simply target it with your subsequent commands.

The server transmits your requests over encrypted channels. It only touches the user metadata and configuration settings you explicitly authorize via tool calls.

Yes. You can use `get_client_secret` or `regenerate_client_secret` to handle credentials. Always ensure your agent has the correct permissions assigned in your IAM instance.

You must ensure your local machine has a network path to the instance. The server uses standard HTTPS to talk to the admin API, so verify your connectivity before initializing.

Use it with your favorite AI tools

Connect this server to Cursor, Claude, VS Code, and more.

OpenAI Agents SDK sdk-python

Google ADK sdk-python

Pydantic AI sdk-python

Vercel AI SDK sdk-typescript