Secure MCP tool calls by validating OAuth2 tokens with Keycloak.
Copy the install command and let the AI configure it · recommended for beginners
No copy-paste install info for "mcp-keycloak" yet — see the docs or source repo.
Use a Keycloak OAuth2 token to call the MCP add tool, calculate 12 + 30, and validate the token before execution.
Returns the addition result after token validation, yielding 42 on success.
Call the MCP multiply tool with a valid OAuth2 access token to calculate 7 × 8.
After the token passes Keycloak introspection, it returns the multiplication result 56.
Try calling the add tool with an invalid or expired OAuth2 token and observe how unauthorized requests are handled.
The tool call is rejected, demonstrating token-based access control.
Developers can restrict MCP tool access by validating tokens with Keycloak so only authorized requests can execute tools. It fits tool services that need basic security controls.
DevOps engineers or developers can use it to verify how OAuth2 token validation affects MCP calls such as add and multiply. It is useful for testing authentication and tool execution together.
It validates OAuth2 tokens using Keycloak token introspection and only then executes protected MCP tool calls. Known example tools include addition and multiplication.
Based on the provided information, it requires OAuth2 tokens and Keycloak token validation capability. For exact configuration details, see the source repository.
The difference is that it does not just perform addition or multiplication; it first validates an OAuth2 access token before execution. Its focus is adding security control to MCP tool calls.
Manage Keycloak users, roles, and access controls with natural language.
Manage Keycloak users, roles, and clients through automated admin API access.
Build secure MCP servers with auth, rate limits, scoped tools, and confirmations.
A simple MCP server for testing OAuth 2.0 support in mcp-cli.
Let AI agents use secrets safely for server-side HTTP, shell, and SSH actions.
Build an API-key protected MCP server with realistic e-commerce tools and prompts.