Keycloak logo
Security · self-hosted

Keycloak in one click.

Keycloak is an open source identity and access management you can run on your own machine. Launch it in Even Stacks in one click, serve it over trusted HTTPS, and let your AI agents operate it.

What is Keycloak?

Keycloak is an open-source identity and access management server from Red Hat that provides SSO, OAuth 2.0, OpenID Connect, and SAML 2.0. It includes user federation, social login, and a fine-grained authorization service.

CategorySecurity
Default port8609
Container imagequay.io/keycloak/keycloak:26.0
Official sitewww.keycloak.org

Run Keycloak in Even

Even Stacks launches Keycloak as a managed container on your own machine. No compose files, no manual setup.

  1. Open the Even Stacks panel in Even. The container engine starts on demand.
  2. Find Keycloak in the one-click services and click Launch.
  3. Even pulls the image, starts it on port 8609, and serves it over trusted HTTPS at https://keycloak.localhost.

Drive Keycloak with your AI agents

Even ships an MCP, so any agent you run inside Even (Claude Code, Codex, and more) can operate Keycloak directly, at both the UI level and the container level.

Through the Even MCP an agent can run commands inside it, manage entries, and read its logs. It runs commands inside the container, reads its logs, and for web apps opens and clicks through the interface in Even's own browser pane. Ask once, for example "set up Keycloak and get it ready", and the agent handles it end to end.

How agents reach it: Use the Admin Console at http://localhost:8609/admin (credentials set by KEYCLOAK_ADMIN env vars) to manage realms, clients, and users. Admin REST API at `/admin/realms/{realm}/` requires a Bearer token from `/realms/master/protocol/openid-connect/token`. Default DB is H2; configure Postgres env vars for production.

More Security services

Other one-click services you can launch in Even Stacks.