Keycloak for your agents.
Connect Keycloak once and every agent you run inside Even (Claude Code, Codex, OpenCode, Even Agents) can use it: 15 curated tools, discovered on demand, with your key stored on your machine and every call going direct to Keycloak.
What agents can do with Keycloak
Curated for agents: the calls that matter, with schemas and descriptions written for tool use, not an endpoint dump.
keycloak_list_realmsCheck the token: list all realms on the Keycloak server.
keycloak_get_realmGet details of a specific realm.
keycloak_list_usersList users in a realm.
keycloak_list_clientsList clients (applications) in a realm.
keycloak_list_groupsList groups in a realm.
keycloak_get_eventsGet admin events for a realm.
keycloak_get_userGet details of a specific user by their id in a realm.
keycloak_create_userCreate a new user in a realm with username, email, and optional credentials.
keycloak_update_userUpdate a user's attributes in a realm. Send only the fields to change.
keycloak_delete_userPermanently delete a user from a realm by their id.
keycloak_get_clientGet details of a specific client (application) in a realm by its id.
keycloak_create_clientCreate a new client (application) in a realm.
keycloak_get_groupGet details of a specific group by its id in a realm.
keycloak_create_groupCreate a new group in a realm with a name.
keycloak_list_rolesList all roles (realm-level) in a realm.
Connect it in a minute
The connect flow is agent-driven: Even opens the key page in its own browser and collects the key through a secure native field. It never passes through the chat.
- Paste the prompt below into any agent running inside Even, or click Connect in Even's catalog.
- Log into your Keycloak admin console as an admin user.
- Create a client, generate a client secret, and note the realm name.
- Enter your Keycloak server URL. Use admin username + password or client ID + secret.
- Paste the key into Even's secure field. Even verifies it and your agents are live.
Connect Keycloak to Even: call connect_begin("keycloak") on the even-connect MCP and walk me through it.
List Keycloak realms and users, retrieve client applications, and audit admin events across your authentication system.
More Even Connect services
One MCP server, a handful of meta-tools, every service below. Agents search for the right tool at run time, so context stays lean.