I imagine one could write an MCP server which can dig into clients conf file and other assorted settings/modules to return useful diagnostic information. Personally, I would just build it and not rely on something else has supplied. Ryan From: Freeradius-Users <freeradius-users-bounces+rhturner=email.unc.edu@lists.freeradius.org> on behalf of nabble@felix.world <nabble@felix.world> Date: Wednesday, July 1, 2026 at 1:40 PM To: FreeRadius users mailing list <freeradius-users@lists.freeradius.org> Subject: Re: MCP Server Hi Kushal, Just for interest. Which functionality do you imagine to get from a MCP server of FreeRADIUS? BR, Lineconnect

On 30. Jun 2026, at 13:23, Kushal Gupta <kushalgupta.me@gmail.com> wrote:

Hello,

While reviewing the FreeRADIUS documentation, I would like to confirm if there is an MCP server available for this project.

Best regards, Kushal Gupta - List info/subscribe/unsubscribe? See https://nam12.safelinks.protection.outlook.com/?url=http%3A%2F%2Fwww.freeradius.org%2Flist%2Fusers.html&data=05%7C02%7C%7C83dbf96431af4b527b9108ded797d9f6%7C58b3d54f16c942d3af081fcabd095666%7C1%7C0%7C639185244363245718%7CUnknown%7CTWFpbGZsb3d8eyJFbXB0eU1hcGkiOnRydWUsIlYiOiIwLjAuMDAwMCIsIlAiOiJXaW4zMiIsIkFOIjoiTWFpbCIsIldUIjoyfQ%3D%3D%7C0%7C%7C%7C&sdata=7ECa5iUD7LTa7UaGSvzC9skRQ7Q%2Fn3CZTWcrVgDMco4%3D&reserved=0<http://www.freeradius.org/list/users.html>

- List info/subscribe/unsubscribe? See https://nam12.safelinks.protection.outlook.com/?url=http%3A%2F%2Fwww.freeradius.org%2Flist%2Fusers.html&data=05%7C02%7C%7C83dbf96431af4b527b9108ded797d9f6%7C58b3d54f16c942d3af081fcabd095666%7C1%7C0%7C639185244363269529%7CUnknown%7CTWFpbGZsb3d8eyJFbXB0eU1hcGkiOnRydWUsIlYiOiIwLjAuMDAwMCIsIlAiOiJXaW4zMiIsIkFOIjoiTWFpbCIsIldUIjoyfQ%3D%3D%7C0%7C%7C%7C&sdata=XF5dv9cPRo0b3zfo1lYsgEFJXBNR%2FP4o6EArK0SIipE%3D&reserved=0<http://www.freeradius.org/list/users.html>

Hi, My thought was not to put MCP inside the live RADIUS authentication path, but to use it as an administrative and diagnostic layer around FreeRADIUS. A FreeRADIUS MCP server could be useful for things like: 1. Reading selected FreeRADIUS configuration files, such as clients.conf, sites-enabled/default, mods-enabled/sql, and custom policy files. 2. Helping generate and validate unlang policies for common use cases, for example MAC binding, VLAN assignment, MikroTik-Rate-Limit, static IP assignment, Simultaneous-Use, expired customer handling, and FUP rules. 3. Running controlled diagnostic commands such as freeradius -XC, freeradius -X in a test environment, radtest, or radclient, then explaining the result in a human-readable way. 4. Troubleshooting SQL-backed deployments by checking radcheck, radreply, radusergroup, radgroupreply, and radacct records. 5. Creating reusable policy templates for common ISP/RADIUS scenarios, especially PPPoE, NAS-specific rules, customer suspension, speed profiles, and accounting issues. 6. Producing documentation of an existing FreeRADIUS setup, for example enabled modules, virtual server flow, custom unlang logic, SQL configuration, and client/NAS definitions. 7. Suggesting staged configuration changes by generating a patch, running validation, showing a diff, and requiring human approval before applying anything. So my idea is that an MCP server for FreeRADIUS would act more like a safe assistant for configuration, troubleshooting, and policy generation, rather than something that directly handles Access-Request or Accounting-Request packets. For example, a useful workflow could be: “User X is getting Access-Reject. Check the FreeRADIUS logs, SQL records, NAS client configuration, and relevant unlang policy, then explain the likely reason.” Or: “Generate an unlang policy to return MikroTik-Rate-Limit based on the customer’s plan from SQL, validate it, and show the proposed config change.” I agree that this would likely need to be built specifically for the local deployment, because every FreeRADIUS installation has different modules, database schema, NAS vendors, and business logic. Best regards, Kushal Gupta On Thu, Jul 2, 2026 at 12:45 AM Diego Matute via Freeradius-Users < freeradius-users@lists.freeradius.org> wrote:

MCP server for radius ?

-- Diego Matute Founder, Cyphercor Inc. Address: LL10-4043 Carling Ave, Kanata ON Canada Office: +1 877 564 4682 Mobile: +1 613 859 5756 Email: dmatute@cyphercor.com Website: https://www.cyphercor.com

On Wed, Jul 1, 2026 at 8:20 PM Turner, Ryan H via Freeradius-Users < freeradius-users@lists.freeradius.org> wrote:

...

I imagine one could write an MCP server which can dig into clients conf file and other assorted settings/modules to return useful diagnostic information. Personally, I would just build it and not rely on something else has supplied.

Ryan

From: Freeradius-Users <freeradius-users-bounces+rhturner= email.unc.edu@lists.freeradius.org> on behalf of nabble@felix.world <nabble@felix.world> Date: Wednesday, July 1, 2026 at 1:40 PM To: FreeRadius users mailing list <freeradius-users@lists.freeradius.org

Subject: Re: MCP Server

Hi Kushal,

Just for interest. Which functionality do you imagine to get from a MCP server of FreeRADIUS?

BR, Lineconnect

...

On 30. Jun 2026, at 13:23, Kushal Gupta <kushalgupta.me@gmail.com> wrote:

Hello,

While reviewing the FreeRADIUS documentation, I would like to confirm if there is an MCP server available for this project.

Best regards, Kushal Gupta - List info/subscribe/unsubscribe? See

https://nam12.safelinks.protection.outlook.com/?url=http%3A%2F%2Fwww.freerad...

...

<http://www.freeradius.org/list/users.html>

- List info/subscribe/unsubscribe? See

https://nam12.safelinks.protection.outlook.com/?url=http%3A%2F%2Fwww.freerad...

...

<http://www.freeradius.org/list/users.html> - List info/subscribe/unsubscribe? See http://www.freeradius.org/list/users.html

- List info/subscribe/unsubscribe? See http://www.freeradius.org/list/users.html