Keycloak MCP Server for WindsurfGive Windsurf instant access to 34 tools to Create Auth Flow, Create Client, Create Group, and more
GDPR Free for SubscribersWindsurf brings agentic AI coding to a purpose-built IDE. Connect Keycloak through Vinkius and Cascade will auto-discover every tool. ask questions, generate code, and act on live data without leaving your editor.
Ask AI about this MCP Server for Windsurf
The Keycloak MCP Server for Windsurf is a standout in the Fort Knox category — giving your AI agent 34 tools to work with, ready to go from day one.
Vinkius delivers Streamable HTTP and SSE to any MCP client
Gemini{
"mcpServers": {
"keycloak": {
"url": "https://edge.vinkius.com/[YOUR_TOKEN_HERE]/mcp"
}
}
}Vinkius Desktop App
The modern way to manage MCP Servers — no config files, no terminal commands. Install Keycloak and 4,000+ MCP Servers from a single visual interface.
* Every MCP server runs on Vinkius-managed infrastructure inside AWS - a purpose-built runtime with per-request V8 isolates, Ed25519 signed audit chains, and sub-40ms cold starts optimized for native MCP execution. See our infrastructure
About Keycloak MCP Server
Connect your Keycloak instance to any AI agent to streamline your Identity and Access Management (IAM) workflows. This server provides comprehensive tools to audit, configure, and maintain your security infrastructure through natural language.
Windsurf's Cascade agent chains multiple Keycloak tool calls autonomously. query data, analyze results, and generate code in a single agentic session. Paste Vinkius Edge URL, reload, and all 34 tools are immediately available. Real-time tool feedback appears inline, so you see API responses directly in your editor.
What you can do
- Realm Administration — List, import, and export realms, or monitor admin events to audit changes across your infrastructure.
- User Management — Create, update, or delete users, reset passwords, and inspect user group memberships without leaving your chat interface.
- Client Configuration — Manage OIDC/SAML clients, retrieve client secrets, and regenerate credentials instantly.
- Groups & Roles — Organize your security hierarchy by managing groups and assigning roles at both realm and client levels.
- Session Control — Force global logouts across entire realms to mitigate security threats in real-time.
The Keycloak MCP Server exposes 34 tools through the Vinkius. Connect it to Windsurf in under two minutes — credentials fully managed, no infrastructure to provision, no vendor lock-in. Your configuration, your data, your control.
All 34 Keycloak tools available for Windsurf
When Windsurf connects to Keycloak through Vinkius, your AI agent gets direct access to every tool listed below — spanning iam, authentication, authorization, and more. Every call runs in a secure, isolated environment with full audit visibility. Beyond a simple connection, you get real-time monitoring of agent activity, enterprise governance, and optimized token usage.
Create auth flow on Keycloak
Create an authentication flow
Create client on Keycloak
Create a new client
Create group on Keycloak
Create a top-level group
Create role on Keycloak
Create a realm-level role
Create user on Keycloak
Create a new user
Delete client on Keycloak
Delete a client
Delete group on Keycloak
Delete a group
Delete realm on Keycloak
Delete a realm
Delete user on Keycloak
Delete a user
Get client on Keycloak
Get client representation
Get client secret on Keycloak
Get client secret
Get group on Keycloak
Get group representation
Get realm on Keycloak
Get realm representation
Get role on Keycloak
Get a role by name
Get user on Keycloak
Get user representation
Import realm on Keycloak
Import a realm
List admin events on Keycloak
Get admin events for a realm
List auth flows on Keycloak
Get authentication flows
List client roles on Keycloak
Get client-level roles
List clients on Keycloak
Get all clients in the realm
List groups on Keycloak
Get group hierarchy
List realms on Keycloak
Get accessible realms
List required actions on Keycloak
Get required actions
List roles on Keycloak
Get realm-level roles
List user groups on Keycloak
Get user groups
List users on Keycloak
Get users in a realm
Logout all users on Keycloak
Remove all user sessions in a realm
Partial export realm on Keycloak
Partial export of a realm
Regenerate client secret on Keycloak
Regenerate client secret
Reset user password on Keycloak
Reset user password
Update client on Keycloak
Update a client
Update group on Keycloak
Update a group
Update realm on Keycloak
Update realm information
Update user on Keycloak
Update a user
Connect Keycloak to Windsurf via MCP
Follow these steps to wire Keycloak into Windsurf. The entire setup takes under two minutes — your credentials stay safe behind Vinkius.
Open MCP Settings
Cmd+Shift+P and search "MCP"Add the server
mcp_config.jsonSave and reload
Start using Keycloak
Why Use Windsurf with the Keycloak MCP Server
Windsurf provides unique advantages when paired with Keycloak through the Model Context Protocol.
Windsurf's Cascade agent autonomously chains multiple tool calls in sequence, solving complex multi-step tasks without manual intervention
Purpose-built for agentic workflows. Cascade understands context across your entire codebase and integrates MCP tools natively
JSON-based configuration means zero code changes: paste a URL, reload, and all 34 tools are immediately available
Real-time tool feedback is displayed inline, so you see API responses directly in your editor without switching contexts
Keycloak + Windsurf Use Cases
Practical scenarios where Windsurf combined with the Keycloak MCP Server delivers measurable value.
Automated code generation: ask Cascade to fetch data from Keycloak and generate models, types, or handlers based on real API responses
Live debugging: query Keycloak tools mid-session to inspect production data while debugging without leaving the editor
Documentation generation: pull schema information from Keycloak and have Cascade generate comprehensive API docs automatically
Rapid prototyping: combine Keycloak data with Cascade's code generation to scaffold entire features in minutes
Example Prompts for Keycloak in Windsurf
Ready-to-use prompts you can give your Windsurf agent to start working with Keycloak immediately.
"List all realms available in our Keycloak instance."
"Get the details for user ID '550e8400-e29b' in the 'production-apps' realm."
"Create a new group called 'Engineering-Leads' in the 'master' realm."
Troubleshooting Keycloak MCP Server with Windsurf
Common issues when connecting Keycloak to Windsurf through Vinkius, and how to resolve them.
Server not connecting
Keycloak + Windsurf FAQ
Common questions about integrating Keycloak MCP Server with Windsurf.
How does Windsurf discover MCP tools?
mcp_config.json file on startup and connects to each configured server via Streamable HTTP. Tools are listed in the MCP panel and available to Cascade automatically.Can Cascade chain multiple MCP tool calls?
Does Windsurf support multiple MCP servers?
mcp_config.json. Each server's tools appear in the MCP panel and Cascade can use tools from different servers in a single flow.Explore More MCP Servers
View all →
Good Grants
7 toolsDiscover and manage grant applications with a platform that matches your organization to the right funding opportunities.
Rancher
10 toolsEquip your AI to manage Kubernetes environments directly through Rancher, overseeing clusters, namespaces, and active pods.
JustCall
10 toolsManage phone calls, SMS, and recordings via JustCall API.
iFLYTEK Open Platform / 讯飞开放平台
8 toolsChina's leading voice and NLP platform — convert speech to text, synthesize voice, and analyze text via AI.