# Keycloak + Salesforce — Pipedream Connect

> Connect a user's Keycloak and Salesforce accounts and expose tools for both apps directly in your product or your agent.

- Apps: Keycloak (`keycloak`) + Salesforce (`salesforce_rest_api`)
- This page (HTML): https://pipedream.com/apps/keycloak/integrations/salesforce-rest-api
- One `external_user_id` owns both connected accounts, and each account stays independently revocable.

## One session, both toolsets (recommended)

- Endpoint: `https://remote.mcp.pipedream.net/v3`
- Headers: `Authorization: Bearer <token>` · `x-pd-project-id` · `x-pd-environment` · `x-pd-external-user-id` · `x-pd-app-slug: keycloak,salesforce_rest_api`
- `x-pd-app-slug` takes a comma-separated list, so `keycloak,salesforce_rest_api` is one session on one transport. Both toolsets arrive from a single `listTools()`, and a tool is called exactly as it would be in a single-app session.

```ts
import { Client } from "@modelcontextprotocol/sdk/client/index.js"
import { StreamableHTTPClientTransport } from "@modelcontextprotocol/sdk/client/streamableHttp.js"
import { PipedreamClient } from "@pipedream/sdk"

const pd = new PipedreamClient({
  projectId: process.env.PIPEDREAM_PROJECT_ID!,
  clientId: process.env.PIPEDREAM_CLIENT_ID!,
  clientSecret: process.env.PIPEDREAM_CLIENT_SECRET!,
  projectEnvironment: "production",
})

const accessToken = await pd.rawAccessToken

const transport = new StreamableHTTPClientTransport(
  new URL("https://remote.mcp.pipedream.net/v3"),
  {
    requestInit: {
      headers: {
        Authorization: `Bearer ${accessToken}`,
        "x-pd-project-id": process.env.PIPEDREAM_PROJECT_ID!,
        "x-pd-environment": "production",
        "x-pd-external-user-id": "{external_user_id}", // any stable ID for this user in your system
        "x-pd-app-slug": "keycloak,salesforce_rest_api",
      },
    },
  },
)

const mcp = new Client({ name: "my-agent", version: "1.0.0" })
await mcp.connect(transport)

const { tools } = await mcp.listTools()

// One list, both toolsets: Keycloak and Salesforce tools arrive
// together, each keyed by its own app's slug.

// e.g. run Create User:
const result = await mcp.callTool({
  name: "keycloak-create-user",
  arguments: {
    realm: "Realm",
    username: "Username",
  },
})
```

Docs: [MCP guide](https://pipedream.com/docs/connect/mcp/developers.md)

## Both apps from your backend

```ts
import { PipedreamClient } from "@pipedream/sdk"

const pd = new PipedreamClient({
  projectId: process.env.PIPEDREAM_PROJECT_ID!,
  clientId: process.env.PIPEDREAM_CLIENT_ID!,
  clientSecret: process.env.PIPEDREAM_CLIENT_SECRET!,
  projectEnvironment: "production",
})

const externalUserId = "{external_user_id}" // any stable ID for this user in your system

const [keycloakTools, salesforceRestApiTools] =
  await Promise.all([
    pd.components.list({ app: "keycloak" }),
    pd.components.list({ app: "salesforce_rest_api" }),
  ])

// One external user owns both connected accounts, so either app's tools
// run on their behalf with the same externalUserId.
```

Docs: [Managed auth guide](https://pipedream.com/docs/connect/managed-auth/quickstart.md) · [Tools guide](https://pipedream.com/docs/connect/components.md)

## Keycloak

- API slug: `keycloak` (use in MCP headers and tool keys)
- Auth: OAuth (Pipedream-managed)
- Categories: Infrastructure & Cloud
- Website: https://www.keycloak.org/
- App page (HTML): https://pipedream.com/apps/keycloak
- Tools: 5 actions · 1 trigger

Full tool list, API proxy, and SDK quickstart: https://pipedream.com/apps/keycloak.md

### Actions (5)

- [Create User](https://pipedream.com/apps/keycloak/actions/create-user.md) — `keycloak-create-user`
- [Delete User](https://pipedream.com/apps/keycloak/actions/delete-user.md) — `keycloak-delete-user`
- [Get User](https://pipedream.com/apps/keycloak/actions/get-user.md) — `keycloak-get-user`
- [List Realm Options](https://pipedream.com/apps/keycloak/actions/list-realm-options.md) — `keycloak-list-realm-options`
- [Update User](https://pipedream.com/apps/keycloak/actions/update-user.md) — `keycloak-update-user`

### Triggers (1)

- [New Event Created](https://pipedream.com/apps/keycloak/triggers/new-event-created.md) — `keycloak-new-event-created`

## Salesforce

- API slug: `salesforce_rest_api` (use in MCP headers and tool keys)
- Auth: OAuth (Pipedream-managed)
- Categories: CRM
- Website: https://salesforce.com
- App page (HTML): https://pipedream.com/apps/salesforce-rest-api
- Tools: 61 actions · 12 triggers

Full tool list, API proxy, and SDK quickstart: https://pipedream.com/apps/salesforce-rest-api.md

### Actions (top 8 of 61)

- [Add Contact to Campaign](https://pipedream.com/apps/salesforce-rest-api/actions/add-contact-to-campaign.md) — `salesforce_rest_api-add-contact-to-campaign`
- [Add Lead to Campaign](https://pipedream.com/apps/salesforce-rest-api/actions/add-lead-to-campaign.md) — `salesforce_rest_api-add-lead-to-campaign`
- [Convert SOAP XML Object to JSON](https://pipedream.com/apps/salesforce-rest-api/actions/convert-soap-xml-to-json.md) — `salesforce_rest_api-convert-soap-xml-to-json`
- [Create Account](https://pipedream.com/apps/salesforce-rest-api/actions/create-account.md) — `salesforce_rest_api-create-account`
- [Create Accounts (Batch)](https://pipedream.com/apps/salesforce-rest-api/actions/create-accounts-batch.md) — `salesforce_rest_api-create-accounts-batch`
- [Create Attachment](https://pipedream.com/apps/salesforce-rest-api/actions/create-attachment.md) — `salesforce_rest_api-create-attachment`
- [Create Campaign](https://pipedream.com/apps/salesforce-rest-api/actions/create-campaign.md) — `salesforce_rest_api-create-campaign`
- [Create Case](https://pipedream.com/apps/salesforce-rest-api/actions/create-case.md) — `salesforce_rest_api-create-case`

### Triggers (top 4 of 12)

- [Case Updated (Instant, of Selectable Type)](https://pipedream.com/apps/salesforce-rest-api/triggers/case-updated-instant.md) — `salesforce_rest_api-case-updated-instant`
- [Email Template Updated (Instant, of Selectable Type)](https://pipedream.com/apps/salesforce-rest-api/triggers/email-template-updated-instant.md) — `salesforce_rest_api-email-template-updated-instant`
- [Knowledge Article Updated (Instant, of Selectable Type)](https://pipedream.com/apps/salesforce-rest-api/triggers/knowledge-article-updated-instant.md) — `salesforce_rest_api-knowledge-article-updated-instant`
- [New Case (Instant, of Selectable Type)](https://pipedream.com/apps/salesforce-rest-api/triggers/new-case-instant.md) — `salesforce_rest_api-new-case-instant`

---

- Keycloak: https://pipedream.com/apps/keycloak.md · Salesforce: https://pipedream.com/apps/salesforce-rest-api.md
- All apps: https://pipedream.com/apps — index: https://pipedream.com/llms.txt
- Pipedream docs for agents: https://pipedream.com/docs/llms.txt