AI Agents with Keycloak in MCP
summary
Claims that Keycloak can serve as the OAuth 2.1 authorization server for MCP deployments, using Keycloak as OAuth 2.1 authorization server plus a reverse proxy to route AI agent requests. Proof of concept builds an MCP server and MCP client with the official MCP SDKs (MCP client/server using official SDKs in TypeScript/Python/Java), leverages PKCE, dynamic client registration and passkeys, and schedules a first-step demo at KubeCon Japan; integration is presented as viable though the POC is described as planned.
AI-written summary · about
chapters (6)
- 0:00AI agents and MCP intro
- 7:27MCP auth and authorization
- 13:44Keycloak for MCP auth
- 24:27Keycloak and MCP PoC
- 26:38Keycloak benefits in MCP
- 30:33Summary
related talks
44mMCP Security: Keep Your AI Agents from Spilling the Tea
11mLightning Talk: Effortlessly Integrating Keycloak Authentication To Your MCP Servers
27mDesigning an Agentic AI-Ready Secure Authentication and Authorization Platform
25mModel Context Protocol(MCP) Authorization for Enterprise Use Case With Keycloak
26mSecure Your MCP Servers with OAuth, JWT, SPIFFE and More
45mSecuring MCP Servers with Spring AI
46mMCP and A2A Revolutionizing Interconnection and Collaboration of AI Agents
29mMCP Security: Keep Your AI Agents from Spilling the Tea