Keycloak MCP Server for Mastra AIGive Mastra AI instant access to 34 tools to Create Auth Flow, Create Client, Create Group, and more
GDPR Free for SubscribersMastra AI is a TypeScript-native agent framework built for modern web stacks. Connect Keycloak through Vinkius and Mastra agents discover all tools automatically. type-safe, streaming-ready, and deployable anywhere Node.js runs.
Ask AI about this MCP Server for Mastra AI
The Keycloak MCP Server for Mastra AI is a standout in the Fort Knox category — giving your AI agent 34 tools to work with, ready to go from day one.
Vinkius delivers Streamable HTTP and SSE to any MCP client
Geminiimport { Agent } from "@mastra/core/agent";
import { createMCPClient } from "@mastra/mcp";
import { openai } from "@ai-sdk/openai";
async function main() {
// Your Vinkius token. get it at cloud.vinkius.com
const mcpClient = await createMCPClient({
servers: {
"keycloak": {
url: "https://edge.vinkius.com/[YOUR_TOKEN_HERE]/mcp",
},
},
});
const tools = await mcpClient.getTools();
const agent = new Agent({
name: "Keycloak Agent",
instructions:
"You help users interact with Keycloak " +
"using 34 tools.",
model: openai("gpt-4o"),
tools,
});
const result = await agent.generate(
"What can I do with Keycloak?"
);
console.log(result.text);
}
main();
* Every MCP server runs on Vinkius-managed infrastructure inside AWS - a purpose-built runtime with per-request V8 isolates, Ed25519 signed audit chains, and sub-40ms cold starts optimized for native MCP execution. See our infrastructure
About Keycloak MCP Server
Connect your Keycloak instance to any AI agent to streamline your Identity and Access Management (IAM) workflows. This server provides comprehensive tools to audit, configure, and maintain your security infrastructure through natural language.
Mastra's agent abstraction provides a clean separation between LLM logic and Keycloak tool infrastructure. Connect 34 tools through Vinkius and use Mastra's built-in workflow engine to chain tool calls with conditional logic, retries, and parallel execution. deployable to any Node.js host in one command.
What you can do
- Realm Administration — List, import, and export realms, or monitor admin events to audit changes across your infrastructure.
- User Management — Create, update, or delete users, reset passwords, and inspect user group memberships without leaving your chat interface.
- Client Configuration — Manage OIDC/SAML clients, retrieve client secrets, and regenerate credentials instantly.
- Groups & Roles — Organize your security hierarchy by managing groups and assigning roles at both realm and client levels.
- Session Control — Force global logouts across entire realms to mitigate security threats in real-time.
The Keycloak MCP Server exposes 34 tools through the Vinkius. Connect it to Mastra AI in under two minutes — credentials fully managed, no infrastructure to provision, no vendor lock-in. Your configuration, your data, your control.
All 34 Keycloak tools available for Mastra AI
When Mastra AI connects to Keycloak through Vinkius, your AI agent gets direct access to every tool listed below — spanning iam, authentication, authorization, and more. Every call runs in a secure, isolated environment with full audit visibility. Beyond a simple connection, you get real-time monitoring of agent activity, enterprise governance, and optimized token usage.
Create auth flow on Keycloak
Create an authentication flow
Create client on Keycloak
Create a new client
Create group on Keycloak
Create a top-level group
Create role on Keycloak
Create a realm-level role
Create user on Keycloak
Create a new user
Delete client on Keycloak
Delete a client
Delete group on Keycloak
Delete a group
Delete realm on Keycloak
Delete a realm
Delete user on Keycloak
Delete a user
Get client on Keycloak
Get client representation
Get client secret on Keycloak
Get client secret
Get group on Keycloak
Get group representation
Get realm on Keycloak
Get realm representation
Get role on Keycloak
Get a role by name
Get user on Keycloak
Get user representation
Import realm on Keycloak
Import a realm
List admin events on Keycloak
Get admin events for a realm
List auth flows on Keycloak
Get authentication flows
List client roles on Keycloak
Get client-level roles
List clients on Keycloak
Get all clients in the realm
List groups on Keycloak
Get group hierarchy
List realms on Keycloak
Get accessible realms
List required actions on Keycloak
Get required actions
List roles on Keycloak
Get realm-level roles
List user groups on Keycloak
Get user groups
List users on Keycloak
Get users in a realm
Logout all users on Keycloak
Remove all user sessions in a realm
Partial export realm on Keycloak
Partial export of a realm
Regenerate client secret on Keycloak
Regenerate client secret
Reset user password on Keycloak
Reset user password
Update client on Keycloak
Update a client
Update group on Keycloak
Update a group
Update realm on Keycloak
Update realm information
Update user on Keycloak
Update a user
Connect Keycloak to Mastra AI via MCP
Follow these steps to wire Keycloak into Mastra AI. The entire setup takes under two minutes — your credentials stay safe behind Vinkius.
Install dependencies
npm install @mastra/core @mastra/mcp @ai-sdk/openaiReplace the token
[YOUR_TOKEN_HERE] with your Vinkius tokenRun the agent
agent.ts and run with npx tsx agent.tsExplore tools
Why Use Mastra AI with the Keycloak MCP Server
Mastra AI provides unique advantages when paired with Keycloak through the Model Context Protocol.
Mastra's agent abstraction provides a clean separation between LLM logic and tool infrastructure. add Keycloak without touching business code
Built-in workflow engine chains MCP tool calls with conditional logic, retries, and parallel execution for complex automation
TypeScript-native: full type inference for every Keycloak tool response with IDE autocomplete and compile-time checks
One-command deployment to any Node.js host. Vercel, Railway, Fly.io, or your own infrastructure
Keycloak + Mastra AI Use Cases
Practical scenarios where Mastra AI combined with the Keycloak MCP Server delivers measurable value.
Automated workflows: build multi-step agents that query Keycloak, process results, and trigger downstream actions in a typed pipeline
SaaS integrations: embed Keycloak as a first-class tool in your product's AI features with Mastra's clean agent API
Background jobs: schedule Mastra agents to query Keycloak on a cron and store results in your database automatically
Multi-agent systems: create specialist agents that collaborate using Keycloak tools alongside other MCP servers
Example Prompts for Keycloak in Mastra AI
Ready-to-use prompts you can give your Mastra AI agent to start working with Keycloak immediately.
"List all realms available in our Keycloak instance."
"Get the details for user ID '550e8400-e29b' in the 'production-apps' realm."
"Create a new group called 'Engineering-Leads' in the 'master' realm."
Troubleshooting Keycloak MCP Server with Mastra AI
Common issues when connecting Keycloak to Mastra AI through Vinkius, and how to resolve them.
createMCPClient not exported
npm install @mastra/mcpKeycloak + Mastra AI FAQ
Common questions about integrating Keycloak MCP Server with Mastra AI.
How does Mastra AI connect to MCP servers?
MCPClient with the server URL and pass it to your agent. Mastra discovers all tools and makes them available with full TypeScript types.Can Mastra agents use tools from multiple servers?
Does Mastra support workflow orchestration?
Explore More MCP Servers
View all →
Transloadit
12 toolsVersatile file uploading and processing API.
Namely
10 toolsManage HRIS data via Namely — track employee profiles, job info, and organization groups directly from your AI agent.
Evoliz
9 toolsHandle French business invoicing with quote generation, expense tracking, and accounting integrations designed for compliance.
Leadfeeder
9 toolsBring Leadfeeder B2B visit intelligence to your AI. Discover which companies visit your website natively.