S

Skycloak MCP

sky-cloak/skycloak · v0.16.0 · Grok Plugins

by sky-cloak

Manage Skycloak managed Keycloak clusters, realms, applications, SSO, and users from Grok via https://mcp.skycloak.io

InstallSourceClaim this plugin
Follow0
Trust Score80Security scanPartialComponents9
Protect this install with HOL Guard

Guard checks the skills and MCP servers a plugin adds on your machine and asks you before a risky action runs. The scores above are free, and no plan changes them.

Is Skycloak MCP a fit?

From the plugin's manifest and HOL's scan. Anything the plugin does not declare is shown as not declared.

Works with

  • Grok
  • MCP
  • Antigravity CLI
  • Agent Plugin
  • 8 skills
  • 1 MCP server

Before you install

Sign-in
Not declared
Declared access
Not declared
License
Apache-2.0

Check before relying on it

  • Some security checks did not finish: Cisco skill scan and Cisco MCP scan. See the evidence
  • The publisher has not verified ownership on HOL.

What is Skycloak MCP?

Skycloak MCP is a published grok plugins plugin for AI coding agents that works with Grok, MCP, Antigravity CLI and Agent Plugin, developed by sky-cloak and distributed through the HOL AI plugin registry. Manage Skycloak managed Keycloak clusters, realms, applications, SSO, and users from Grok via https://mcp.skycloak.io.

Canonical slug
sky-cloak/skycloak
Version
v0.16.0 · updated Nov 9, 2026

Registry snapshot

Owner verification
Not verified
Scanner
HOL plugin scanner
Security result
Partial scan
Digest verified
Yes
8 bundled skillsRead, copy or download each SKILL.mdOpen skills

Trust and security

Trust & reputation

80

HOL Trust Score

Per-metric points (0–100 each) combined via a weighted average into the overall score.

Installability
100/100
Maintenance
100/100
MCP server setup
100/100
Plugin Security
93/100
Provenance
70/100
Publisher Quality
75/100

Provenance

Plugin root
.
Source repo
https://github.com/sky-cloak/skycloak-mcp
Source commit
118b144b54b9…
Publisher verified
No
Owner verified
Not owner verified
Agent Plugins 1.0
Ready (structural check)

Continuous scanner CI not detected

This plugin remains listed. Its overall trust score is reduced by 10% because security checks are not maintained in the source repository's CI.

Optional: maintain the scanner in the source repository's CI to receive the full trust score. Listing does not require that change.

README badge not detected

Plugin owners can add the HOL badge to the repository README from Guard Plugins. Distribution, not security evidence. It adds a 2% engagement adjustment to the overall trust score and never changes the security result.

Security posture

See how the Trust Score is computed
Partial scan
Security result
93
Score from finished checks
0
High findings

Some checks did not finish: Cisco skill scan and Cisco MCP scan. No blocking issue was found in the checks that did finish, but this is not a passed scan.

Provider
codex-plugin-scanner
Grade
A · Excellent
Version
3.24.2
codex:hol-plugin-scanner-dl044u / cisco-skill-scanner: failedcodex:hol-plugin-scanner-dl044u / cisco-mcp-scanner: unavailable

[codex:.] Manifest Validation

25/31

9 checks

[codex:.] Security

24/24

9 checks

[codex:.] Operational Security

N/A

5 checks · not applicable

[codex:.] Best Practices

9/12

5 checks

[codex:.] Marketplace

N/A

3 checks · not applicable

[codex:.] Skill Security

5/5

4 checks

[codex:.] Code Quality

10/10

2 checks

[gemini:.] Gemini Extension

10/10

3 checks

[gemini:.] Security

24/24

6 checks

[gemini:.] Operational Security

N/A

5 checks · not applicable

[gemini:.] Code Quality

10/10

2 checks

Published advisories

None matched in GitHub security advisories, checked . This covers published advisories only, not problems nobody has reported.

GitHub security advisories are those the source repository has published.

Findings

infomanifest-validationPLUGIN_JSON_INTERFACE_SHORTDESCRIPTION

The interface object is missing a valid "shortDescription" value.

Add a valid "shortDescription" field to the interface metadata.

infomanifest-validationPLUGIN_JSON_INTERFACE_LONGDESCRIPTION

The interface object is missing a valid "longDescription" value.

Add a valid "longDescription" field to the interface metadata.

infomanifest-validationPLUGIN_JSON_INTERFACE_CATEGORY

The interface object is missing a valid "category" value.

Add a valid "category" field to the interface metadata.

infomanifest-validationPLUGIN_JSON_INTERFACE_CAPABILITIES

The interface object is missing a valid "capabilities" value.

Add a valid "capabilities" field to the interface metadata.

infomanifest-validationPLUGIN_JSON_INTERFACE_ASSET_WEBSITEURL

The interface field "websiteURL" must use HTTPS or point to a safe in-repo asset.

Update "websiteURL" to use HTTPS or an existing relative asset path.

infomanifest-validationPLUGIN_JSON_INTERFACE_ASSET_PRIVACYPOLICYURL

The interface field "privacyPolicyURL" must use HTTPS or point to a safe in-repo asset.

Update "privacyPolicyURL" to use HTTPS or an existing relative asset path.

infomanifest-validationPLUGIN_JSON_INTERFACE_ASSET_TERMSOFSERVICEURL

The interface field "termsOfServiceURL" must use HTTPS or point to a safe in-repo asset.

Update "termsOfServiceURL" to use HTTPS or an existing relative asset path.

infomanifest-validationPLUGIN_JSON_INTERFACE_ASSET_COMPOSERICON

The interface field "composerIcon" must use HTTPS or point to a safe in-repo asset.

Update "composerIcon" to use HTTPS or an existing relative asset path.

infomanifest-validationPLUGIN_JSON_INTERFACE_ASSET_LOGO

The interface field "logo" must use HTTPS or point to a safe in-repo asset.

Update "logo" to use HTTPS or an existing relative asset path.

infomanifest-validationPLUGIN_JSON_INTERFACE_ASSET_SCREENSHOTS

The interface field "screenshots" must use HTTPS or point to a safe in-repo asset.

Update "screenshots" to use HTTPS or an existing relative asset path.

infobest-practicesCODEXIGNORE_MISSING

A .codexignore file helps prevent accidental inclusion of local artifacts and secrets.

Add a .codexignore file with generated assets, local state, and secret paths.

Install guidance

Install in Antigravity CLI

Install the bundled skills into Antigravity CLI with the open Skills CLI.

Skills CLI docs
  1. 1

    Install with the Skills CLI

    The open Skills CLI detects installed agents and installs this plugin's skills for Antigravity CLI.

    shell
  2. 2

    Restart and verify

    Start a new Antigravity CLI session and confirm the skill is listed before relying on it. The Skills CLI lists what it installed.

    shell

To remove it later, run npx [email protected] remove sky-cloak/skycloak-mcp.

Did setup work in Antigravity CLI?

No setup reports for Antigravity CLI yet. Self-reported by signed-in visitors. Copying a command is not counted, and most installs are never reported.

Attested installs: Fewer than 10 attested installs of this plugin in week 2026-W45, so no number is shown. Counted from opt-in HOL Guard install reports, once per machine and runtime, and never mixed with the answers above. How install reports work.

Loading reviews

Plugin manifest

{
  "name": "skycloak",
  "version": "0.16.0",
  "description": "Official MCP server for Skycloak managed Keycloak. Manage clusters, realms, applications, SSO, and users from Grok via https://mcp.skycloak.io.",
  "author": {
    "name": "Skycloak",
    "url": "https://github.com/sky-cloak"
  },
  "repository": "https://github.com/sky-cloak/skycloak-mcp",
  "homepage": "https://skycloak.io",
  "license": "Apache-2.0",
  "keywords": [
    "skycloak",
    "keycloak",
    "managed keycloak",
    "keycloak mcp"
  ],
  "interface": {
    "displayName": "skycloak",
    "developerName": "sky-cloak"
  },
  "skills": "./",
  "mcpServers": "./.registry/mcp.json",
  "holManifestOrigin": "repository",
  "registryIndexVersion": 9
}

Marketplace source

Repo URL
https://github.com/sky-cloak/skycloak-mcp
Marketplace path
Unknown
Source path
.
Install policy
Unspecified

Skills

8 SKILL.md files ship with this plugin. Preview, copy, or download each one, then install them with the Skills CLI.

Share
skills-cli

  • auth-incident-triage

    internal/tools/skills/auth-incident-triage/SKILL.md

    Triage a live authentication incident on a Skycloak-managed Keycloak cluster, separating platform outages from attacks and from configuration changes, using events, WAF logs and cluster health. Read-only. Use when users cannot log in, login failures spike, or SSO suddenly breaks.

    Raw SKILL.md

    SKILL.md content is not in this snapshot. Open the raw file to copy it from the source repository.

  • enterprise-sso-rollout

    internal/tools/skills/enterprise-sso-rollout/SKILL.md

    Wire an enterprise identity provider (Entra ID, Okta, Google, or any OIDC issuer) into a Keycloak realm end to end, including the upstream app registration, broker configuration, connection testing, and verification against real login events. Use when asked to set up SSO, connect an IdP, or onboard a customer's identity provider.

    Raw SKILL.md

    SKILL.md content is not in this snapshot. Open the raw file to copy it from the source repository.

  • keycloak-migration-doctor

    internal/tools/skills/keycloak-migration-doctor/SKILL.md

    Preflight a Keycloak export, import or migration on a Skycloak-managed cluster against the known blockers, and diagnose a job that already failed by reading the failure reason the API records but the dashboard notice does not show. Use when an export or import fails, a migration stalls, or before moving realm data in or out.

    Raw SKILL.md

    SKILL.md content is not in this snapshot. Open the raw file to copy it from the source repository.

  • keycloak-upgrade-readiness

    internal/tools/skills/keycloak-upgrade-readiness/SKILL.md

    Assess whether Skycloak-managed Keycloak clusters are ready to upgrade, work out what the new version breaks, and sequence the rollout across environments with a tested rollback plan. Use when asked to upgrade Keycloak, review version drift, or plan an upgrade rollout.

    Raw SKILL.md

    SKILL.md content is not in this snapshot. Open the raw file to copy it from the source repository.

  • auth-incident-triage

    plugins/skycloak/skills/auth-incident-triage/SKILL.md

    Triage a live authentication incident on a Skycloak-managed Keycloak cluster, separating platform outages from attacks and from configuration changes, using events, WAF logs and cluster health. Read-only. Use when users cannot log in, login failures spike, or SSO suddenly breaks.

    Raw SKILL.md

    SKILL.md content is not in this snapshot. Open the raw file to copy it from the source repository.

  • enterprise-sso-rollout

    plugins/skycloak/skills/enterprise-sso-rollout/SKILL.md

    Wire an enterprise identity provider (Entra ID, Okta, Google, or any OIDC issuer) into a Keycloak realm end to end, including the upstream app registration, broker configuration, connection testing, and verification against real login events. Use when asked to set up SSO, connect an IdP, or onboard a customer's identity provider.

    Raw SKILL.md

    SKILL.md content is not in this snapshot. Open the raw file to copy it from the source repository.

  • keycloak-migration-doctor

    plugins/skycloak/skills/keycloak-migration-doctor/SKILL.md

    Preflight a Keycloak export, import or migration on a Skycloak-managed cluster against the known blockers, and diagnose a job that already failed by reading the failure reason the API records but the dashboard notice does not show. Use when an export or import fails, a migration stalls, or before moving realm data in or out.

    Raw SKILL.md

    SKILL.md content is not in this snapshot. Open the raw file to copy it from the source repository.

  • keycloak-upgrade-readiness

    plugins/skycloak/skills/keycloak-upgrade-readiness/SKILL.md

    Assess whether Skycloak-managed Keycloak clusters are ready to upgrade, work out what the new version breaks, and sequence the rollout across environments with a tested rollback plan. Use when asked to upgrade Keycloak, review version drift, or plan an upgrade rollout.

    Raw SKILL.md

    SKILL.md content is not in this snapshot. Open the raw file to copy it from the source repository.

File inventory

.codex-plugin/plugin.json

plugin-manifest

621 bytes

1f7eace3bc9c2b36…

.grok-plugin/plugin.json

file

518 bytes

66cd424bd587cad2…

.mcp.json

file

327 bytes

65884b0d7107ef1a…

.registry/mcp.json

mcp-config

283 bytes

e454b84cd45e8d07…

gemini-extension.json

file

284 bytes

1decaaaad57a4a27…

go.mod

file

2,584 bytes

8b6b62f99893f462…

go.sum

file

26,660 bytes

7a5b878d1877093b…

internal/tools/skills/auth-incident-triage/SKILL.md

skill

5,195 bytes

794bb1f82cad42b2…

internal/tools/skills/enterprise-sso-rollout/SKILL.md

skill

4,943 bytes

4997cc45a131fc73…

internal/tools/skills/keycloak-migration-doctor/SKILL.md

skill

6,692 bytes

ff062180dc2f1380…

internal/tools/skills/keycloak-upgrade-readiness/SKILL.md

skill

4,880 bytes

157c617bdab66e45…

LICENSE

file

15,144 bytes

1b212acc0754044e…

plugin.json

file

790 bytes

f43ad7e7913beca6…

plugins/skycloak/skills/auth-incident-triage/SKILL.md

skill

5,195 bytes

794bb1f82cad42b2…

plugins/skycloak/skills/enterprise-sso-rollout/SKILL.md

skill

4,943 bytes

4997cc45a131fc73…

plugins/skycloak/skills/keycloak-migration-doctor/SKILL.md

skill

6,692 bytes

ff062180dc2f1380…

plugins/skycloak/skills/keycloak-upgrade-readiness/SKILL.md

skill

4,880 bytes

157c617bdab66e45…

README.md

file

26,501 bytes

e22fc1ff9c238ad7…

SECURITY.md

file

1,497 bytes

45a88f606481f0f4…

Skycloak MCP — Frequently asked questions

What is Skycloak MCP?
Skycloak MCP is an AI plugin in the HOL registry. Manage Skycloak managed Keycloak clusters, realms, applications, SSO, and users from Grok via https://mcp.skycloak.io.
How do I install Skycloak MCP?
Install Skycloak MCP in your harness: Antigravity CLI — npx [email protected] add sky-cloak/skycloak-mcp; MCP — git clone https://github.com/sky-cloak/skycloak-mcp; Any agent — npx [email protected] add sky-cloak/skycloak-mcp. Full step-by-step guidance is on the HOL plugin page.
How do I install Skycloak MCP in Antigravity CLI?
To install Skycloak MCP in Antigravity CLI, start with npx [email protected] add sky-cloak/skycloak-mcp. The complete step-by-step install guide for Antigravity CLI is on the HOL plugin page.
How do I install Skycloak MCP in MCP?
To install Skycloak MCP in MCP, start with git clone https://github.com/sky-cloak/skycloak-mcp. The complete step-by-step install guide for MCP is on the HOL plugin page.
How do I install Skycloak MCP in Grok?
To install Skycloak MCP in Grok, start with grok plugin install sky-cloak/skycloak-mcp --trust. The complete step-by-step install guide for Grok is on the HOL plugin page.
How is the Trust Score for Skycloak MCP computed?
Skycloak MCP has a HOL Trust Score of 80 out of 100. The score is a weighted sum of six components from a static scan of the source, capped for high-severity findings and adjusted by two disclosed policies. Memberships and payments are not inputs, and a scan is not a safety guarantee. Full breakdown: https://hol.org/registry/plugins/sky-cloak%2Fskycloak/trust
Who publishes Skycloak MCP?
Skycloak MCP is published by sky-cloak and listed on HOL.

Directory acceptance

Listed in 0 of 5 directory lists

Read from the list each directory publishes on GitHub. Being listed means the directory accepted the plugin; it is not a HOL security rating.

Lists last read . HOL re-reads them every day.

Submitting it? Check it against each directory's rules

Install signal

HOL cannot see every install. These are separate signals from different sources, so they are not added together. Counts under each floor show as <N.

Install commands issued here
<5
HOL Guard install commands issued from this listing, last 28 days.
Opt-in install reports
<10
Machines that reported installing it through HOL Guard in week 2026-W45. Reporting is opt-in, so most installs are not counted.
HOL Guard workspaces
<5
Workspaces that approved it or include it in an approved-plugin feed, as of today.

Related plugins

Ordered by Trust Score. Listings cannot pay for these positions. Check each one fits your task before switching from Skycloak MCP.

Alternatives in Grok Plugins

See all Grok Plugins plugins

Reviews and similar plugins