Permanently delete a Keycloak client by its clientId. Requires confirm=true to execute; without confirmation the operation aborts to prevent accidental removal.
MIT
Destructive
521,380 tools. Updated 2026-09-06 10:57
"Keycloak" matching MCP tools:
- List active sessions for a Keycloak client by internal ID, with paging and truncation status. Use for per-client session monitoring and RCA.MIT
- Lists authorization permissions for a Keycloak client, showing bindings of resources/scopes to policies. Use to inspect resource protection configuration.MIT
- Enable or disable a Keycloak user account to block authentication for compromised or decommissioned users, while preserving custom attributes.MIT
- Call any Keycloak Admin REST endpoint directly, covering operations no curated tool handles. Read-only by default; enable writes via configuration.MIT
- Removes a default client scope from a Keycloak client. Requires explicit confirmation to prevent accidental removal.MITDestructive
Matching MCP Servers
- AlicenseAqualityCmaintenanceAn MCP server that lets an AI assistant inspect and modify Keycloak realm, client, and protocol-mapper configuration across multiple Keycloak hosts.748MIT
- AlicenseAqualityAmaintenanceEnables MCP-capable clients to inspect and manage Keycloak realms, users, clients, roles, and groups with layered security modes, realm allowlisting, protected realms, delete gating, dry-run, and audit logging.83661MIT
Matching MCP Connectors
Keycloak identity management expert with semantic search, protocol guides, and config analysis
- SkycloakOAuth
Managed Keycloak from any MCP client: clusters, realms, apps, SSO, users, domains, audit events.
- Delete an identity provider from a Keycloak realm by alias. Requires explicit confirmation to proceed.MITDestructive
- Synchronizes users from a user federation provider (e.g., LDAP) into the Keycloak realm, importing or updating users. Use 'full' mode for a complete re-import or 'changed' for incremental sync.MIT
- Enable or disable a required action in Keycloak by providing its alias. Idempotent operation that leaves the action unchanged if already in the requested state.MIT
- Rotate a Keycloak confidential client's secret, writing the new value to a local file for secure retrieval; perform a dry run or apply with write=true.MIT
- Verify Keycloak Admin API connectivity and authentication status at session start or after a timeout. Returns health status, server version, and auth state to confirm the MCP is operational.MIT
- Retrieve Keycloak admin events for changes like attribute updates, role assignments, and client configs. Filter by operation, resource, and date to trace administrative actions.MIT
- List all active sessions for a Keycloak user to inspect login status before revoking access.MIT
- Lists all realm-level roles in a Keycloak realm without parameters. Use to discover role names before assigning them.MIT
- Retrieve client-level roles for a Keycloak client using its internal ID. Returns a JSON array of role objects with id, name, and description to identify roles for assignment.MIT
- Retrieve a list of all OAuth/OIDC clients in the Keycloak realm to discover existing clients before updating, deleting, or viewing details.MIT
- Retrieve a Keycloak client by clientId, returning its UUID, enabled status, and publicClient flag. Returns 'Client not found' if no match.MIT
- Lists all client scopes in the Keycloak realm. Returns scope IDs, names, and protocols to use with assign/unassign operations.MIT
- Retrieve the list of default client scopes currently assigned to a client by its UUID. Use this read-only operation to inspect default scopes before making changes.MIT
- Lists all required actions configured in a Keycloak realm, including alias, name, and status. Use to discover aliases before enabling or disabling actions.MIT
- List authorization resources defined on a Keycloak client to inspect its fine-grained authorization model. Requires client internal ID.MIT