keycloak skills

authgear/authgear-server

Skill Claude CodeCodex

Add screens or components to the portal frontend. Use when the user asks to create a new portal page, screen, tab, or UI component.

authgear/authgear-server

Skill Claude CodeCodex

Review or design APIs for Authgear. In review mode, evaluates a design draft against the checklist. In ideation mode, develops a design from a description and self-reviews it.

authgear/authgear-server

Skill Claude CodeCodex

Write end-to-end (e2e) tests for authgear-server. Use when the user asks to write, add, or create e2e tests. The tests live in e2e/tests/ and are YAML-driven.

qauth-labs/qauth

Skill Claude CodeCodex

Implements and reviews OAuth 2.0/2.1 flows following RFC 6749, RFC 9700 (BCP), and PKCE (RFC 7636). Use when implementing authorization code flow, token handling, client registration, or securing OAuth endpoints.

qauth-labs/qauth

Skill Claude CodeCodex

Fastify usage for QAuth — plugin authoring (encapsulation, decorators, lifecycle), route schemas with the Zod type provider, production/reverse-proxy setup, and the Fastify version/CVE requirement. Use when adding or modifying @qauth-labs/fastify-plugin- libraries, auth-server routes, or deployment config.

qauth-labs/qauth

Skill Claude CodeCodex

Database schema rules for QAuth. Use when working with the identity model, Drizzle ORM, migrations, repositories, or claim resolution. Reflects the CURRENT shipped schema — the identifier-abstraction model (ADR-002, IMPLEMENTED via Epic.

dockndevai/mcp-keycloak

Skill Claude CodeCodex

Maintain and extend the dockndevai MCP server suite (mcp-keycloak, mcp-kubernetes, mcp-oci, mcp-kafka, mcp-clickhouse, mcp-debezium, mcp-azure, mcp-azure-devops, mcp-percona-pg). Use when adding or changing a tool, touching the security/policy layer, bumping dependencies, cutting a release, or publishing to npm or an…

sky-cloak/skycloak-mcp

Skill Claude CodeCodex

Triage a live authentication incident on a Skycloak-managed Keycloak cluster, separating platform outages from attacks and from configuration changes, using events, WAF logs and cluster health. Read-only. Use when users cannot log in, login failures spike, or SSO suddenly breaks.

sky-cloak/skycloak-mcp

Skill Claude CodeCodex

Wire an enterprise identity provider (Entra ID, Okta, Google, or any OIDC issuer) into a Keycloak realm end to end, including the upstream app registration, broker configuration, connection testing, and verification against real login events. Use when asked to set up SSO, connect an IdP, or onboard a customer's…

sky-cloak/skycloak-mcp

Skill Claude CodeCodex

Preflight a Keycloak export, import or migration on a Skycloak-managed cluster against the known blockers, and diagnose a job that already failed by reading the failure reason the API records but the dashboard notice does not show. Use when an export or import fails, a migration stalls, or before moving realm data in…