4,000+ servers built on vurb.ts
Vinkius

Keycloak MCP Server for LangChainGive LangChain instant access to 34 tools to Create Auth Flow, Create Client, Create Group, and more

MCP Inspector GDPR Free for Subscribers

LangChain is the leading Python framework for composable LLM applications. Connect Keycloak through Vinkius and LangChain agents can call every tool natively. combine them with retrievers, memory, and output parsers for sophisticated AI pipelines.

Ask AI about this MCP Server for LangChain

The Keycloak MCP Server for LangChain is a standout in the Fort Knox category — giving your AI agent 34 tools to work with, ready to go from day one.

Built for AI Agents by Vinkius

Vinkius delivers Streamable HTTP and SSE to any MCP client

ClaudeClaude
ChatGPTChatGPT
CursorCursor
GeminiGemini
WindsurfWindsurf
VS CodeVS Code
JetBrainsJetBrains
VercelVercel
+ other MCP clients
python
import asyncio
from langchain_mcp_adapters.client import MultiServerMCPClient
from langchain_openai import ChatOpenAI
from langgraph.prebuilt import create_react_agent

async def main():
    # Your Vinkius token. get it at cloud.vinkius.com
    async with MultiServerMCPClient({
        "keycloak": {
            "transport": "streamable_http",
            "url": "https://edge.vinkius.com/[YOUR_TOKEN_HERE]/mcp",
        }
    }) as client:
        tools = client.get_tools()
        agent = create_react_agent(
            ChatOpenAI(model="gpt-4o"),
            tools,
        )
        response = await agent.ainvoke({
            "messages": [{
                "role": "user",
                "content": "Using Keycloak, show me what tools are available.",
            }]
        })
        print(response["messages"][-1].content)

asyncio.run(main())
Keycloak
Fully ManagedVinkius Servers
60%Token savings
High SecurityEnterprise-grade
IAMAccess control
EU AI ActCompliant
DLPData protection
V8 IsolateSandboxed
Ed25519Audit chain
<40msKill switch
Stream every event to Splunk, Datadog, or your own webhook in real-time

* Every MCP server runs on Vinkius-managed infrastructure inside AWS - a purpose-built runtime with per-request V8 isolates, Ed25519 signed audit chains, and sub-40ms cold starts optimized for native MCP execution. See our infrastructure

About Keycloak MCP Server

Connect your Keycloak instance to any AI agent to streamline your Identity and Access Management (IAM) workflows. This server provides comprehensive tools to audit, configure, and maintain your security infrastructure through natural language.

LangChain's ecosystem of 500+ components combines seamlessly with Keycloak through native MCP adapters. Connect 34 tools via Vinkius and use ReAct agents, Plan-and-Execute strategies, or custom agent architectures. with LangSmith tracing giving full visibility into every tool call, latency, and token cost.

What you can do

  • Realm Administration — List, import, and export realms, or monitor admin events to audit changes across your infrastructure.
  • User Management — Create, update, or delete users, reset passwords, and inspect user group memberships without leaving your chat interface.
  • Client Configuration — Manage OIDC/SAML clients, retrieve client secrets, and regenerate credentials instantly.
  • Groups & Roles — Organize your security hierarchy by managing groups and assigning roles at both realm and client levels.
  • Session Control — Force global logouts across entire realms to mitigate security threats in real-time.

The Keycloak MCP Server exposes 34 tools through the Vinkius. Connect it to LangChain in under two minutes — credentials fully managed, no infrastructure to provision, no vendor lock-in. Your configuration, your data, your control.

All 34 Keycloak tools available for LangChain

When LangChain connects to Keycloak through Vinkius, your AI agent gets direct access to every tool listed below — spanning iam, authentication, authorization, and more. Every call runs in a secure, isolated environment with full audit visibility. Beyond a simple connection, you get real-time monitoring of agent activity, enterprise governance, and optimized token usage.

create

Create auth flow on Keycloak

Create an authentication flow

create

Create client on Keycloak

Create a new client

create

Create group on Keycloak

Create a top-level group

create

Create role on Keycloak

Create a realm-level role

create

Create user on Keycloak

Create a new user

delete

Delete client on Keycloak

Delete a client

delete

Delete group on Keycloak

Delete a group

delete

Delete realm on Keycloak

Delete a realm

delete

Delete user on Keycloak

Delete a user

get

Get client on Keycloak

Get client representation

get

Get client secret on Keycloak

Get client secret

get

Get group on Keycloak

Get group representation

get

Get realm on Keycloak

Get realm representation

get

Get role on Keycloak

Get a role by name

get

Get user on Keycloak

Get user representation

import

Import realm on Keycloak

Import a realm

list

List admin events on Keycloak

Get admin events for a realm

list

List auth flows on Keycloak

Get authentication flows

list

List client roles on Keycloak

Get client-level roles

list

List clients on Keycloak

Get all clients in the realm

list

List groups on Keycloak

Get group hierarchy

list

List realms on Keycloak

Get accessible realms

list

List required actions on Keycloak

Get required actions

list

List roles on Keycloak

Get realm-level roles

list

List user groups on Keycloak

Get user groups

list

List users on Keycloak

Get users in a realm

logout

Logout all users on Keycloak

Remove all user sessions in a realm

partial

Partial export realm on Keycloak

Partial export of a realm

regenerate

Regenerate client secret on Keycloak

Regenerate client secret

reset

Reset user password on Keycloak

Reset user password

update

Update client on Keycloak

Update a client

update

Update group on Keycloak

Update a group

update

Update realm on Keycloak

Update realm information

update

Update user on Keycloak

Update a user

Connect Keycloak to LangChain via MCP

Follow these steps to wire Keycloak into LangChain. The entire setup takes under two minutes — your credentials stay safe behind Vinkius.

01

Install dependencies

Run pip install langchain langchain-mcp-adapters langgraph langchain-openai
02

Replace the token

Replace [YOUR_TOKEN_HERE] with your Vinkius token
03

Run the agent

Save the code and run python agent.py
04

Explore tools

The agent discovers 34 tools from Keycloak via MCP

Why Use LangChain with the Keycloak MCP Server

LangChain provides unique advantages when paired with Keycloak through the Model Context Protocol.

01

The largest ecosystem of integrations, chains, and agents. combine Keycloak MCP tools with 500+ LangChain components

02

Agent architecture supports ReAct, Plan-and-Execute, and custom strategies with full MCP tool access at every step

03

LangSmith tracing gives you complete visibility into tool calls, latencies, and token usage for production debugging

04

Memory and conversation persistence let agents maintain context across Keycloak queries for multi-turn workflows

Keycloak + LangChain Use Cases

Practical scenarios where LangChain combined with the Keycloak MCP Server delivers measurable value.

01

RAG with live data: combine Keycloak tool results with vector store retrievals for answers grounded in both real-time and historical data

02

Autonomous research agents: LangChain agents query Keycloak, synthesize findings, and generate comprehensive research reports

03

Multi-tool orchestration: chain Keycloak tools with web scrapers, databases, and calculators in a single agent run

04

Production monitoring: use LangSmith to trace every Keycloak tool call, measure latency, and optimize your agent's performance

Example Prompts for Keycloak in LangChain

Ready-to-use prompts you can give your LangChain agent to start working with Keycloak immediately.

01

"List all realms available in our Keycloak instance."

02

"Get the details for user ID '550e8400-e29b' in the 'production-apps' realm."

03

"Create a new group called 'Engineering-Leads' in the 'master' realm."

Troubleshooting Keycloak MCP Server with LangChain

Common issues when connecting Keycloak to LangChain through Vinkius, and how to resolve them.

01

MultiServerMCPClient not found

Install: pip install langchain-mcp-adapters

Keycloak + LangChain FAQ

Common questions about integrating Keycloak MCP Server with LangChain.

01

How does LangChain connect to MCP servers?

Use langchain-mcp-adapters to create an MCP client. LangChain discovers all tools and wraps them as native LangChain tools compatible with any agent type.
02

Which LangChain agent types work with MCP?

All agent types including ReAct, OpenAI Functions, and custom agents work with MCP tools. The tools appear as standard LangChain tools after the adapter wraps them.
03

Can I trace MCP tool calls in LangSmith?

Yes. All MCP tool invocations appear as traced steps in LangSmith, showing input parameters, response payloads, latency, and token usage.

Explore More MCP Servers

View all →