---
title: "List realms"
method: GET
path: "/clusters/{cluster_id}/realms"
tags: ["Realms"]
---

# List realms

`GET /clusters/{cluster_id}/realms`

## Request

- Base URL: `http://localhost:8000`
- URL: `http://localhost:8000/clusters/{cluster_id}/realms`
- Auth: API key in header `API-Key`

Returns all non-system realms for the specified cluster.

Required scope: `realms:read`

## Path parameters

- `cluster_id` string, uuid, required

## Headers

- `API-Version` '2026-06-01.beta', required

## Response `200`

The request has succeeded.

- Realm[]
  - `id` string, uuid, required: Keycloak realm ID. This is a UUID generated by Keycloak.
  - `name` string, required: Keycloak realm name (not ID). Must start with a letter; allows letters, digits, and hyphens.
  - `display_name` string, required
  - `enabled` boolean, required: Whether users can sign in to this realm.
  - `ssl_required` 'external' | 'all' | 'none', required: Keycloak SSL requirement. Maps directly to Keycloak's `sslRequired` realm setting.
  - `registration_allowed` boolean, required: Whether self-registration is open to anyone.
  - `registration_email_as_username` boolean, required: Whether email addresses are used as usernames during registration.
  - `login_with_email_allowed` boolean, required: Whether users can sign in with their email address instead of username.
  - `duplicate_emails_allowed` boolean, required: Whether multiple accounts may share the same email address.
  - `created_at` string, date-time: Time when the realm was created, when available.

## Other responses

- `401`: Access is unauthorized.
- `403`: Access is forbidden.
- `404`: The server cannot find the requested resource.
- `429`: Client error
- `500`: Server error
- `501`: Server error

---

[API](https://skmtc.dev/skycloak/apis/skycloak-public-api.md) · [All operations](https://skmtc.dev/skycloak/apis/skycloak-public-api/llms.txt) · [OpenAPI document](https://skmtc.dev/skycloak/apis/skycloak-public-api/revisions/33a69e2ce35f?raw)