An astronaut overseeing a futuristic data hub
Download PDFMarkdown Version

Connect Keycloak to ChatGPT, Claude and Gemini

Set it up once and it works in ChatGPT, Claude, Cursor, and any other client you love. It all runs safely in the background, so you can relax and focus on what really matters. Control your security infrastructure through natural language commands.

Ask AI about this Connector

Developed, maintained, and hosted by Vinkius.

MCP VERIFIED · PRODUCTION READY · VINKIUS GUARANTEED

Waiting for input…

Works with modern AI clients that support MCP, including ChatGPT, Claude, Cursor, and more.

ChatGPTClaudeCursorPerplexityGeminiMicrosoft CopilotRaycastMeta AI

Your AI does the work. We keep it safe and sound.

No other AI tool gives you this. Your workflow runs in the client you already love, your account stays protected, and you decide what the agent can and cannot do. It is the whole reason to make the switch.

Each Connector lives inside our infrastructure, the same place where your workflow runs. The three things below are already part of it, working quietly in the background so you never have to think about them. Nothing to add, nothing to set up, nothing to worry about.

A futuristic MCP client docking bay
V8 Isolate01

Each Connector runs inside its own sealed environment.

Each Connector runs inside its own sealed V8 runtime — no access to your files, your system, or other servers. A Connector never sees past its own request.

Kill Switch02

One switch stops every agent. Instantly.

One action deactivates every Connector, revokes every token, and ends every session at once. AI Governance keeps the record.

FinOps per User03

Spending limits that pause instead of surprise.

Every user keeps their own connections and credentials, isolated from everyone else. Anything that would cross your spending limit is held for your approval, not billed.

Three controls, built into the layer your AI connects through.

Curated set · 34 capabilities

We ship only the actions that matter.

Capability set01 / 09

01-04

4 capabilities in this set.

Part of 34 available through Keycloak.

  1. 01

    Create group

    This capability creates a new top-level group in your realm.

  2. 02

    Create role

    Use this to establish a new realm-level role.

  3. 03

    List users

    This capability retrieves a list of users within a specific realm.

  4. 04

    Logout all users

    This command clears all active user sessions in a realm.

Capability set02 / 09

05-08

4 capabilities in this set.

Part of 34 available through Keycloak.

  1. 05

    Reset user password

    Use this to reset a specific user's password.

  2. 06

    Update group

    This capability modifies the properties of an existing group.

  3. 07

    Update realm

    Use this to change realm-wide configuration settings.

  4. 08

    Update client

    This capability updates the settings for a specific client.

Capability set03 / 09

09-12

4 capabilities in this set.

Part of 34 available through Keycloak.

  1. 09

    Create auth flow

    This capability sets up a new authentication flow.

  2. 10

    Create client

    Use this to register a new client in the realm.

  3. 11

    Partial export realm

    This capability performs a partial export of realm data.

  4. 12

    Regenerate client secret

    Use this to generate a new secret for a client.

Capability set04 / 09

13-16

4 capabilities in this set.

Part of 34 available through Keycloak.

  1. 13

    Update user

    This capability updates existing user information.

  2. 14

    Create user

    Use this to add a new user to a realm.

  3. 15

    Delete client

    This capability removes a client from the realm.

  4. 16

    Delete group

    Use this to remove a group from the hierarchy.

Capability set05 / 09

17-20

4 capabilities in this set.

Part of 34 available through Keycloak.

  1. 17

    Delete realm

    This capability deletes an entire realm.

  2. 18

    Delete user

    Use this to remove a user from the system.

  3. 19

    Get client

    This capability retrieves the full representation of a client.

  4. 20

    Get client secret

    Use this to fetch a client's secret.

Capability set06 / 09

21-24

4 capabilities in this set.

Part of 34 available through Keycloak.

  1. 21

    Get group

    This capability fetches the details of a specific group.

  2. 22

    Get realm

    Use this to get the full details of a realm.

  3. 23

    Get role

    This capability finds a specific role by its name.

  4. 24

    Get user

    Use this to retrieve a user's full profile.

Capability set07 / 09

25-28

4 capabilities in this set.

Part of 34 available through Keycloak.

  1. 25

    Import realm

    This capability imports a realm into your instance.

  2. 26

    List admin events

    Use this to pull admin event logs for a realm.

  3. 27

    List auth flows

    This capability lists all configured authentication flows.

  4. 28

    List client roles

    Use this to see roles assigned to a specific client.

Capability set08 / 09

29-31

3 capabilities in this set.

Part of 34 available through Keycloak.

  1. 29

    List clients

    This capability lists all clients within a realm.

  2. 30

    List groups

    Use this to view the current group hierarchy.

  3. 31

    List realms

    This capability returns a list of all accessible realms.

Capability set09 / 09

32-34

3 capabilities in this set.

Part of 34 available through Keycloak.

  1. 32

    List required actions

    Use this to see available required actions.

  2. 33

    List roles

    This capability retrieves all realm-level roles.

  3. 34

    List user groups

    Use this to see which groups a user belongs to.

Real work

What teams actually run

01

Rapid User Onboarding

Create new users and assign them to specific groups using a single chat command.

02

Security Incident Response

Instantly kill all active sessions in a realm if a breach is suspected.

03

Automated Client Setup

Configure new OIDC clients and retrieve secrets without manual entry.

04

Infrastructure Auditing

Query admin event logs to see who changed what in your realms.

Automate a task

Put Keycloak to work on one thing.

Step-by-step automations your AI runs through this Connector: the workflow, the prompts to start with, and the exact capabilities behind each move.

One connector, every AI

Keycloak works with the most popular AI clients.

These are the most popular clients, each with a step-by-step guide: one link, set up once, with governance and visibility built in. And because everything runs on the MCP standard, the same connection also works in any other compatible client — nothing to rebuild.

ClaudeClaudeChatGPTChatGPTGeminiGeminiPerplexityPerplexityGrokGrokMicrosoft CopilotMicrosoft CopilotCursorCursorVS CodeVS CodeWindsurfWindsurfJetBrainsJetBrainsClineClineLangChainLangChainVercel AI SDKVercel AI SDKLovableLovableZ.aiZ.aiRaycastRaycastQwen CodeQwen CodeKimi CodeKimi CodeLe ChatLe Chat

Building your own app? The connector is yours to use.

You don't need a client to put Keycloak to work: the same hosted connection plugs into your own applications and agent code, with the same governance on every request. Build with it, chat with it — one connection for both.

Observed, not estimated

1243ms average. Fast in production.

Keycloak is checked daily against the live service.

Daily averagePeak 1755ms
Oct 3Today
Fastest day
974ms
Slowest day
1755ms
14-day trend
Slowing+17%

Connect your client

One URL. Every client.

Activate the Connector, copy your link, and paste it into the client you already use. 34 capabilities arrive ready to run.

Preview access · not provider authentication

The vk_preview_* token belongs to Vinkius preview infrastructure. It lets Claude discover and display the capabilities of Keycloak, so you can see the experience inside your AI.

It does not authenticate your account with Keycloak. Actions requiring credentials or live account data may not run until you activate the Connector and authorize the service.

Keycloak Connector

You're all set. Choose your MCP client and follow the setup instructions.

Connector linkhttps://edge.vinkius.com/vk_preview_VDd8VBVZZLNJBW8pUCGwjhe4HqDkWkhkqiAnNHpc/mcp

Claude Desktop

Follow the steps below to connect in seconds.

  1. 1In Claude Desktop, open Settings → Connectors.
  2. 2Click “Add custom connector” and paste the connector link above as the remote MCP server URL.
  3. 3Click Add and start a new chat — Keycloak capabilities are ready to use.
Configuration · claude_desktop_config.jsonCopy
{
  "mcpServers": {
    "keycloak-mcp": {
      "url": "https://edge.vinkius.com/vk_preview_VDd8VBVZZLNJBW8pUCGwjhe4HqDkWkhkqiAnNHpc/mcp"
    }
  }
}
  • Claude
  • ChatGPT
  • Cursor
  • VS Code
  • Windsurf
  • Claude Code
  • JetBrains
  • Cline

Step-by-step instructions for each client are in the guide. How to connect

Guided setup for Claude? Set up Keycloak in Claude and other AIs

See all the AI clients this connector works with ↑

Who it's for

Built for the work Keycloak owners hand off.

This MCP is built for technical professionals who manage identity infrastructure and need to perform rapid administrative tasks.

  • 01

    DevOps & SREs

    They use the agent to audit realm events and adjust client settings during deployments.

  • 02

    Security Administrators

    They hand off emergency tasks like password resets or session terminations to the agent.

  • 03

    Backend Developers

    They use the agent to set up test users and grab client credentials within their IDE.

FAQ

Questions Keycloak owners ask.

  • 01

    How do I connect this MCP to my Keycloak instance?

    You need to provide your Keycloak Base URL and a valid Admin Access Token through the Vinkius interface to establish the connection.

  • 02

    Which AI clients can I use with this MCP?

    You can use any MCP-compatible client, including Claude, Cursor, Windsurf, and VS Code.

  • 03

    Can I use this for emergency security actions?

    Yes, you can use the logout_all_users capability to remove all user sessions in a realm immediately.

  • 04

    Does this MCP handle client secrets?

    Yes, you can use capabilities to retrieve client secrets or regenerate them when needed.

  • 05

    Is my Keycloak data secure?

    Vinkius manages the connection and credentials, allowing your agent to interact with your existing Keycloak security protocols.

  • 06

    Can I reset a user's password using this integration?

    Yes. You can use the reset_user_password capability by providing the realm name, the user ID, and the new credential representation. This allows for immediate password management via the AI.

  • 07

    Is it possible to audit administrative changes in a specific realm?

    Absolutely. The list_admin_events capability retrieves the history of administrative actions for a target realm, helping you track who changed what and when.

  • 08

    Can I retrieve OIDC client secrets for my applications?

    Yes, the get_client_secret capability allows you to fetch the secret for any configured client in a realm. You can also use regenerate_client_secret if a rotation is required.

Explore

More in Fort Knox

Suggestions

Connect Keycloak to Claude, Cursor, ChatGPT & more