Lightning Talk: Effortlessly Integrating Keycloak Authentication To Your MCP Servers

on YouTube ↗11m

" summary

Shows adding Keycloak OpenID Connect auth the hard way by editing a Python MCP server, rebuilding and redeploying, then demonstrates an alternative: place an agent gateway in front of the unchanged server and enforce auth there. Uses a simple echo MCP tool on port 8000, exposes gateway on port 9000, and tests with MCP inspector. Claims no server code changes or redeploys are required; live demo has token caching glitches but the gateway approach secures multiple MCP instances.

AI-written summary · about

" chapters (6)

1. 0:00Introduction
2. 0:41Simple MCP echo server
3. 3:16Keycloak auth for MCP servers
4. 5:04Gateway for Keycloak auth
5. 8:37Live auth flow demo
6. 10:49Summary & Q&A

" related talks

• 25mSecure Your MCP Servers With OAuth, JWT, SPIFFE and MoreLin Sun, Yi Yang · Open Source SecurityCon Europe 2026
• 26mSecure Your MCP Servers with OAuth, JWT, SPIFFE and MoreLin Sun · apidays Paris 2025
• 32mAI Agents with Keycloak in MCPTakashi Norimatsu · KeycloakCon Japan 2025
• 17mSponsored Demo: MCP Auth Demo: CIMD With KeycloakTatsuya Kurosaka · KubeCon + CloudNativeCon Japan 2026
• 27mMCPIdentity: Keyless MCP Agent Authentication Patterns on Kubernetes With Keycloak…M. Dayıoğlu · KeycloakCon Japan 2026
• 26mWho Let the Agent In? Securing MCP Servers in ProductionPrachi Jamdade · apidays India 2026
• 27mSimple Control: Managing Multi-Domain MCP Access Via Keycloak IdP With ID-JAGYutaka Obuchi · KeycloakCon Japan 2026
• 45mSecuring MCP Servers with Spring AIDaniel Garnier-Moiroux · Devoxx France 2026