
keycloak-api-mcp
io.github.sferarc/keycloak-api-mcp
Unofficial: one tool per Keycloak admin operation on a realm, read-only unless writes are enabled
Documentation
openapi
Type-safe TypeScript clients generated from public OpenAPI specs, plus the site at openapi.sferadev.com that lists them.
| Package | API |
|---|---|
cloudflare-api-js | Cloudflare |
keycloak-api | Keycloak |
litellm-api | LiteLLM |
netlify-api | Netlify |
nuki-api-js | Nuki |
v0-api | Vercel v0 |
vercel-api-js | Vercel |
zoom-api-js | Zoom |
Coding agents can load skills/openapi-clients, an Agent Skill on picking a client, auth, finding an operation, errors, streaming and Effect: npx skills add sferarc/openapi.
packages/openapi-utils holds the shared kubb config, spec fetching and runtime helpers every client is generated with. apps/openapi is the website.
Development
The toolchain is pinned in mise.toml. With mise installed:
mise install
pnpm install
pnpm tsc && pnpm check && pnpm test
pnpm generate --filter=<package> # regenerate one client from its live spec
The Update OpenAPI workflow regenerates each client from its upstream spec and opens a PR with a changeset written from the diff. Releases go through changesets: merging the version PR publishes to npm.
keycloak-apinpm install keycloak-api