Keycloak MCP Server for Google ADKGive Google ADK instant access to 34 tools to Create Auth Flow, Create Client, Create Group, and more
GDPR Free for SubscribersGoogle Agent Development Kit (ADK) is Google's framework for building production AI agents. Add Keycloak as an MCP tool provider through Vinkius and your ADK agents can call every tool with full schema introspection.
Ask AI about this MCP Server for Google ADK
The Keycloak MCP Server for Google ADK is a standout in the Fort Knox category — giving your AI agent 34 tools to work with, ready to go from day one.
Vinkius delivers Streamable HTTP and SSE to any MCP client
Geminifrom google.adk.agents import Agent
from google.adk.tools.mcp_tool import McpToolset
from google.adk.tools.mcp_tool.mcp_session_manager import (
StreamableHTTPConnectionParams,
)
# Your Vinkius token. get it at cloud.vinkius.com
mcp_tools = McpToolset(
connection_params=StreamableHTTPConnectionParams(
url="https://edge.vinkius.com/[YOUR_TOKEN_HERE]/mcp",
)
)
agent = Agent(
model="gemini-2.5-pro",
name="keycloak_agent",
instruction=(
"You help users interact with Keycloak "
"using 34 available tools."
),
tools=[mcp_tools],
)
* Every MCP server runs on Vinkius-managed infrastructure inside AWS - a purpose-built runtime with per-request V8 isolates, Ed25519 signed audit chains, and sub-40ms cold starts optimized for native MCP execution. See our infrastructure
About Keycloak MCP Server
Connect your Keycloak instance to any AI agent to streamline your Identity and Access Management (IAM) workflows. This server provides comprehensive tools to audit, configure, and maintain your security infrastructure through natural language.
Google ADK natively supports Keycloak as an MCP tool provider. declare Vinkius Edge URL and the framework handles discovery, validation, and execution automatically. Combine 34 tools with Gemini's long-context reasoning for complex multi-tool workflows, with production-ready session management and evaluation built in.
What you can do
- Realm Administration — List, import, and export realms, or monitor admin events to audit changes across your infrastructure.
- User Management — Create, update, or delete users, reset passwords, and inspect user group memberships without leaving your chat interface.
- Client Configuration — Manage OIDC/SAML clients, retrieve client secrets, and regenerate credentials instantly.
- Groups & Roles — Organize your security hierarchy by managing groups and assigning roles at both realm and client levels.
- Session Control — Force global logouts across entire realms to mitigate security threats in real-time.
The Keycloak MCP Server exposes 34 tools through the Vinkius. Connect it to Google ADK in under two minutes — credentials fully managed, no infrastructure to provision, no vendor lock-in. Your configuration, your data, your control.
All 34 Keycloak tools available for Google ADK
When Google ADK connects to Keycloak through Vinkius, your AI agent gets direct access to every tool listed below — spanning iam, authentication, authorization, and more. Every call runs in a secure, isolated environment with full audit visibility. Beyond a simple connection, you get real-time monitoring of agent activity, enterprise governance, and optimized token usage.
Create auth flow on Keycloak
Create an authentication flow
Create client on Keycloak
Create a new client
Create group on Keycloak
Create a top-level group
Create role on Keycloak
Create a realm-level role
Create user on Keycloak
Create a new user
Delete client on Keycloak
Delete a client
Delete group on Keycloak
Delete a group
Delete realm on Keycloak
Delete a realm
Delete user on Keycloak
Delete a user
Get client on Keycloak
Get client representation
Get client secret on Keycloak
Get client secret
Get group on Keycloak
Get group representation
Get realm on Keycloak
Get realm representation
Get role on Keycloak
Get a role by name
Get user on Keycloak
Get user representation
Import realm on Keycloak
Import a realm
List admin events on Keycloak
Get admin events for a realm
List auth flows on Keycloak
Get authentication flows
List client roles on Keycloak
Get client-level roles
List clients on Keycloak
Get all clients in the realm
List groups on Keycloak
Get group hierarchy
List realms on Keycloak
Get accessible realms
List required actions on Keycloak
Get required actions
List roles on Keycloak
Get realm-level roles
List user groups on Keycloak
Get user groups
List users on Keycloak
Get users in a realm
Logout all users on Keycloak
Remove all user sessions in a realm
Partial export realm on Keycloak
Partial export of a realm
Regenerate client secret on Keycloak
Regenerate client secret
Reset user password on Keycloak
Reset user password
Update client on Keycloak
Update a client
Update group on Keycloak
Update a group
Update realm on Keycloak
Update realm information
Update user on Keycloak
Update a user
Connect Keycloak to Google ADK via MCP
Follow these steps to wire Keycloak into Google ADK. The entire setup takes under two minutes — your credentials stay safe behind Vinkius.
Install Google ADK
pip install google-adkReplace the token
[YOUR_TOKEN_HERE] with your Vinkius tokenCreate the agent
Explore tools
Why Use Google ADK with the Keycloak MCP Server
Google ADK provides unique advantages when paired with Keycloak through the Model Context Protocol.
Google ADK natively supports MCP tool servers. declare a tool provider and the framework handles discovery, validation, and execution
Built on Gemini models, ADK provides long-context reasoning ideal for complex multi-tool workflows with Keycloak
Production-ready features like session management, evaluation, and deployment come built-in. not bolted on
Seamless integration with Google Cloud services means you can combine Keycloak tools with BigQuery, Vertex AI, and Cloud Functions
Keycloak + Google ADK Use Cases
Practical scenarios where Google ADK combined with the Keycloak MCP Server delivers measurable value.
Enterprise data agents: ADK agents query Keycloak and cross-reference results with internal databases for comprehensive analysis
Multi-modal workflows: combine Keycloak tool responses with Gemini's vision and language capabilities in a single agent
Automated compliance checks: schedule ADK agents to query Keycloak regularly and flag policy violations or configuration drift
Internal tool platforms: build self-service agent platforms where teams connect their own MCP servers including Keycloak
Example Prompts for Keycloak in Google ADK
Ready-to-use prompts you can give your Google ADK agent to start working with Keycloak immediately.
"List all realms available in our Keycloak instance."
"Get the details for user ID '550e8400-e29b' in the 'production-apps' realm."
"Create a new group called 'Engineering-Leads' in the 'master' realm."
Troubleshooting Keycloak MCP Server with Google ADK
Common issues when connecting Keycloak to Google ADK through Vinkius, and how to resolve them.
McpToolset not found
pip install --upgrade google-adkKeycloak + Google ADK FAQ
Common questions about integrating Keycloak MCP Server with Google ADK.
How does Google ADK connect to MCP servers?
Can ADK agents use multiple MCP servers?
Which Gemini models work best with MCP tools?
Explore More MCP Servers
View all →
ClassPass
7 toolsManage your ClassPass schedule, reservations, inventory, and performance analytics for your fitness venue through natural conversation.
Phone Validator Engine
1 toolsStop LLMs from hallucinating phone numbers. Validates and formats numbers to E.164 natively.
ClickSend
8 toolsManage SMS and multi-channel messaging via ClickSend — send messages, track history, and monitor inbound SMS directly from any AI agent.
SAP S/4HANA
9 toolsManage purchase orders, business partners, inventory, and financial postings on SAP S/4HANA — the intelligent ERP.