Back to Home
rao-1706 icon

mcp-server-keycloak-auth

Verified Safe

by rao-1706

Overview

An MCP server providing analytics tools, secured by Keycloak-based OAuth2 authentication.

Installation

Run Command
uv run uvicorn main:app --reload

Environment Variables

  • SERVER_HOST
  • SERVER_PORT
  • AUTH_HOST
  • AUTH_PORT
  • AUTH_REALM
  • OAUTH_CLIENT_ID
  • OAUTH_CLIENT_SECRET
  • ENABLE_AUTH

Security Notes

The `verify_token` function explicitly skips scope and audience validation ('no scope/audience validation needed for dev'), making authorization less robust for production use cases. Keycloak's `docker-compose.yml` uses default, insecure credentials ('admin'/'admin'), which should never be used in production. The system relies on correct configuration of `OAUTH_CLIENT_SECRET` via environment variables.

Similar Servers

Stats

Interest Score0
Security Score7
Cost ClassLow
Stars0
Forks0
Last Update2025-12-02

Tags

MCPKeycloakFastAPIAuthenticationAnalytics