An identity and access management skill that automates authentication, user registration, and realm configuration through a secure, proxy-driven interface.
Install & Download
1. ClawHub CLI
The fastest way to install a skill directly from the registry.
npx clawhub@latest install keycloak
2. Manual Installation
Copy the skill folder to one of these locations
~/.openclaw/skills/ <project>/skills/ Priority: Workspace > Local > Bundled
3. Prompt Installation
Copy this prompt to OpenClaw to install it automatically.
Help me install keycloak using Clawhub. If Clawhub is not installed, install it first (npm i -g clawhub).
Prefer to download?
Get the raw skill files in a ZIP archive.
What is Keycloak?
Keycloak is a powerful open-source identity and access management solution designed to provide modern applications with authentication and authorization out of the box. This skill allows developers to integrate Keycloak management directly into their workflows using Openclaw Skills, handling complex tasks like single sign-on (SSO), user registration, and permission handling without manual intervention. By leveraging the Membrane framework, the skill abstracts the underlying auth plumbing, providing a simplified way to manage security infrastructure programmatically.
Keycloak Use Cases
- Automating the creation and configuration of new realms for multi-tenant applications.
- Programmatically managing user lifecycles, including registration, group assignments, and role mapping.
- Auditing client security settings and ensuring compliance across various environments within Openclaw Skills.
- Synchronizing authentication data between Keycloak and external developer tools or databases.
- Streamlining single sign-on (SSO) integrations for complex enterprise software stacks.
How Keycloak Works
- The skill initializes via the Membrane CLI, establishing a secure session with the Keycloak server.
- A connection is established using the connection ensure command, which handles the initial OAuth or API key handshake.
- Membrane manages the full authentication lifecycle server-side, ensuring that tokens are refreshed automatically without storing local secrets.
- Users search for specific management capabilities using natural language intents to find pre-built actions for users, groups, or realms.
- Actions are executed with structured JSON inputs, or raw API requests are proxied directly to Keycloak for advanced administrative tasks.
Keycloak Setup
Install the required CLI tool to begin using this skill with Openclaw Skills:
npm install -g @membranehq/cli@latest
Authenticate your agent environment:
membrane login --tenant --clientName=openclaw
Establish a connection to your Keycloak instance:
membrane connection ensure "https://your-keycloak-instance.com/" --json
If the connection requires further action, follow the provided UI URL or poll for readiness:
membrane connection get <id> --wait --json
Keycloak Data Schema & Taxonomy
The skill interacts with the standard Keycloak data model, organizing information into the following primary entities:
| Entity | Scope | Description |
|---|---|---|
| Realm | Global | The top-level security partition containing users and clients. |
| Client | Realm-level | Applications and services authorized to use Keycloak for auth. |
| User | Realm-level | Individual identity records including profiles and credentials. |
| Group | Realm-level | Hierarchical collections of users for bulk role management. |
| Role | Realm/Client | Specific permissions or access rights assigned to users or groups. |
Keycloak Advanced Features
- Intelligent action discovery that maps natural language queries to specific Keycloak API endpoints.
- Transparent proxy requests that automatically inject authentication headers and handle base URL normalization.
- Support for headless environments, allowing Openclaw Skills to be deployed on remote servers with manual authorization code completion.
- Built-in pagination and error handling for complex data queries involving large user directories.
- Multi-agent compatibility, allowing different agent types to share connections and security contexts securely.
SKILL.md
Loading
Related Openclaw Skills
DNSFilter
A powerful cloud-based security integration that enables AI agents to manage DNS content filtering, block threats, and handle network policies.
Mozilla Observatory
Automate comprehensive website security audits and HTTP header analysis using the industry-standard Mozilla Observatory platform.
Kindful
A comprehensive CRM and fundraising integration that allows AI agents to manage donor data and automate nonprofit workflows through Openclaw Skills.
FinAPI
A powerful integration for AI agents to securely access German open banking data and initiate payments via FinAPI.
DroneDeploy
A powerful integration for DroneDeploy that enables AI agents to manage aerial mapping data, 3D models, and automated flight workflows.
Icinga
A professional-grade integration for managing Icinga infrastructure monitoring and automating system administrator workflows through AI agents.
Featured*
