# Keycloak

**Canonical:** https://apis.io/providers/keycloak/  
**Website:** https://www.keycloak.org/  
**APIs profiled:** 6

Keycloak is an open source identity and access management solution for modern applications and services, providing single sign-on, identity brokering, user federation, and fine-grained authorization using OAuth 2.0 and OpenID Connect.

## Kin Score — 40.2 / 100 (developing)

Scored 2026-08-20 under rubric 0.12.0. Trend: flat (+1.1 from 39.1).

| Facet | Score |
|---|---|
| Discoverability | 83.3 |
| Contract Quality | 55.4 |
| Governance | 40.2 |
| Contract Governance | 40.2 |
| Operational Transparency | 26.3 |
| Developer Ergonomics | 33.3 |
| Commercial Clarity | 15.8 |
| Access Clarity | 15.8 |

## Agent readiness — 31.6 (agent-aware)

| Dimension | Value |
|---|---|
| Spec Presence | yes |
| Agentic Access | derived |
| Reversibility Documented | no |
| MCP Server | no |
| Auth Clarity | yes |
| Idempotency | no |
| Error Semantics | no |
| OpenAPI Examples | no |
| Rate Limit Signal | documented |
| Event Surface Described | no |
| Agent Skills | no |
| Well Known Catalog | no |
| Consent Identity | yes |
| Agent Card | no |
| Dry Run Mode | no |

## Access

Freemium · Self-serve signup — onboarding: self-serve, pricing: freemium, trial: no (confidence: high).

## APIs (6)

- **Keycloak Clients API** — Manage OAuth/OIDC clients within a realm
- **Keycloak Groups API** — Manage user groups within a realm
- **Keycloak Identity Providers API** — Manage identity providers for federated authentication
- **Keycloak Realms API** — Manage Keycloak realms
- **Keycloak Roles API** — Manage realm-level and client-level roles
- **Keycloak Users API** — Manage users within a realm

## MCP servers (1)

- **Keycloak MCP Server**

## Agentic access (1)

- **Keycloak Agentic Access** — 40 operations · 24 acting · 1 human-in-the-loop

## Security (3)

- **Keycloak Authentication** — http · 1 scheme
- **Keycloak Domain Security** — TLSv1.3 · DMARC
- **Keycloak Vulnerability Disclosure** — security.txt · contact published

## Plans (1)

- **Keycloak Plans Pricing**

## Tags

Authentication, Authorization, Identity Management, OpenID Connect, Security, SSO

---

Profiled by [API Evangelist](https://apievangelist.com) and published on [APIs.io](https://apis.io/providers/keycloak/). Scores are computed from the provider's own public artifacts under a published rubric.