mcp-server-keycloak-auth
Verified Safeby rao-1706
Overview
An MCP server providing analytics tools, secured by Keycloak-based OAuth2 authentication.
Installation
uv run uvicorn main:app --reloadEnvironment Variables
- SERVER_HOST
- SERVER_PORT
- AUTH_HOST
- AUTH_PORT
- AUTH_REALM
- OAUTH_CLIENT_ID
- OAUTH_CLIENT_SECRET
- ENABLE_AUTH
Security Notes
The `verify_token` function explicitly skips scope and audience validation ('no scope/audience validation needed for dev'), making authorization less robust for production use cases. Keycloak's `docker-compose.yml` uses default, insecure credentials ('admin'/'admin'), which should never be used in production. The system relies on correct configuration of `OAUTH_CLIENT_SECRET` via environment variables.
Similar Servers
jetski
Jetski is an open-source platform providing analytics, authentication, and simplified client setup for Model Context Protocol (MCP) servers by acting as a proxy.
mcpcat-python-sdk
An analytics and observability SDK for Multi-modal Conversational Platform (MCP) servers, capturing user behavior and tool interactions for product development and debugging.
SageMCP
A scalable platform for hosting MCP servers with multi-tenant support, OAuth integration, and connector plugins for various services, deployed on Kubernetes.
mcp-s-oauth
Universal OAuth middleware for MCP (Model Context Protocol) servers, enabling authentication with various OAuth providers.