mcp-keycloak v0.3.0

What's Changed

• docs: restructure README and move detail into docs/ by @erikhoward in #40
• feat: add user session tools by @erikhoward in #41
• feat: add membership read tools by @erikhoward in #42
• feat: add group get and update tools by @erikhoward in #43
• feat: add role and server status tools by @erikhoward in #44
• [codex] feat: add pagination to list tools by @erikhoward in #45
• [codex] feat: add IdP and service account tools by @erikhoward in #46

New Contributors

• @erikhoward made their first contribution in #40

Full Changelog: v0.2.0...v0.3.0

mcp-keycloak v0.2.0

Highlights

• Added client scope management, administrative/login event queries, and OIDC identity provider tools.
• Added service-account authentication and read-only mode.
• Added configurable HTTP timeouts and private CA trust bundles.
• Bounded event queries and redacted sensitive audit data.
• Added vulnerability scanning, a patched Go minimum, and immutable GitHub Action pins.

Upgrade notes

• Remote Keycloak URLs now require HTTPS; HTTP is allowed only for localhost or literal loopback IPs.
• Client secrets are omitted by default. Explicit includeSecret: true returns sensitive data in structured output; read-only mode still permits this operation.
• Configure exactly one authentication mode: username/password or service-account client credentials.
• Building from source requires Go 1.25.13 or newer.

Downloads

Archives are available for Linux and macOS (amd64/arm64), and Windows (amd64), with SHA-256 hashes in checksums.txt.

Full changelog

mcp-keycloak v0.1.0

Full Changelog: https://github.com/erikhoward/mcp-keycloak/commits/v0.1.0