[EXTERNAL] Re: MCP Server

[Kushal Gupta]

Hi,

My thought was not to put MCP inside the live RADIUS authentication path,
but to use it as an administrative and diagnostic layer around FreeRADIUS.

A FreeRADIUS MCP server could be useful for things like:

   1.

   Reading selected FreeRADIUS configuration files, such as clients.conf,
   sites-enabled/default, mods-enabled/sql, and custom policy files.
   2.

   Helping generate and validate unlang policies for common use cases, for
   example MAC binding, VLAN assignment, MikroTik-Rate-Limit, static IP
   assignment, Simultaneous-Use, expired customer handling, and FUP rules.
   3.

   Running controlled diagnostic commands such as freeradius -XC,
   freeradius -X in a test environment, radtest, or radclient, then explaining
   the result in a human-readable way.
   4.

   Troubleshooting SQL-backed deployments by checking radcheck, radreply,
   radusergroup, radgroupreply, and radacct records.
   5.

   Creating reusable policy templates for common ISP/RADIUS scenarios,
   especially PPPoE, NAS-specific rules, customer suspension, speed profiles,
   and accounting issues.
   6.

   Producing documentation of an existing FreeRADIUS setup, for example
   enabled modules, virtual server flow, custom unlang logic, SQL
   configuration, and client/NAS definitions.
   7.

   Suggesting staged configuration changes by generating a patch, running
   validation, showing a diff, and requiring human approval before applying
   anything.

So my idea is that an MCP server for FreeRADIUS would act more like a safe
assistant for configuration, troubleshooting, and policy generation, rather
than something that directly handles Access-Request or Accounting-Request
packets.

For example, a useful workflow could be:

“User X is getting Access-Reject. Check the FreeRADIUS logs, SQL records,
NAS client configuration, and relevant unlang policy, then explain the
likely reason.”

Or:

“Generate an unlang policy to return MikroTik-Rate-Limit based on the
customer’s plan from SQL, validate it, and show the proposed config change.”

I agree that this would likely need to be built specifically for the local
deployment, because every FreeRADIUS installation has different modules,
database schema, NAS vendors, and business logic.

Best regards,
Kushal Gupta


On Thu, Jul 2, 2026 at 12:45 AM Diego Matute via Freeradius-Users <
freeradius-users at lists.freeradius.org> wrote:

> MCP server for radius ?
>
>
>
>
> --
> Diego Matute
> Founder, Cyphercor Inc.
> Address: LL10-4043 Carling Ave, Kanata ON Canada
> Office: +1 877 564 4682
> Mobile: +1 613 859 5756
> Email: dmatute at cyphercor.com
> Website: https://www.cyphercor.com
>
> On Wed, Jul 1, 2026 at 8:20 PM Turner, Ryan H via Freeradius-Users <
> freeradius-users at lists.freeradius.org> wrote:
>
> > I imagine one could write an MCP server which can dig into clients conf
> > file and other assorted settings/modules to return useful diagnostic
> > information.  Personally, I would just build it and not rely on something
> > else has supplied.
> >
> > Ryan
> >
> > From: Freeradius-Users <freeradius-users-bounces+rhturner=
> > email.unc.edu at lists.freeradius.org> on behalf of nabble at felix.world
> > <nabble at felix.world>
> > Date: Wednesday, July 1, 2026 at 1:40 PM
> > To: FreeRadius users mailing list <freeradius-users at lists.freeradius.org
> >
> > Subject: Re: MCP Server
> >
> > Hi Kushal,
> >
> > Just for interest. Which functionality do you imagine to get from a MCP
> > server of FreeRADIUS?
> >
> > BR,
> > Lineconnect
> >
> > > On 30. Jun 2026, at 13:23, Kushal Gupta <kushalgupta.me at gmail.com>
> > wrote:
> > >
> > > Hello,
> > >
> > > While reviewing the FreeRADIUS documentation, I would like to confirm
> if
> > > there is an MCP server available for this project.
> > >
> > > Best regards,
> > > Kushal Gupta
> > > -
> > > List info/subscribe/unsubscribe? See
> >
> https://nam12.safelinks.protection.outlook.com/?url=http%3A%2F%2Fwww.freeradius.org%2Flist%2Fusers.html&data=05%7C02%7C%7C83dbf96431af4b527b9108ded797d9f6%7C58b3d54f16c942d3af081fcabd095666%7C1%7C0%7C639185244363245718%7CUnknown%7CTWFpbGZsb3d8eyJFbXB0eU1hcGkiOnRydWUsIlYiOiIwLjAuMDAwMCIsIlAiOiJXaW4zMiIsIkFOIjoiTWFpbCIsIldUIjoyfQ%3D%3D%7C0%7C%7C%7C&sdata=7ECa5iUD7LTa7UaGSvzC9skRQ7Q%2Fn3CZTWcrVgDMco4%3D&reserved=0
> > <http://www.freeradius.org/list/users.html>
> >
> > -
> > List info/subscribe/unsubscribe? See
> >
> https://nam12.safelinks.protection.outlook.com/?url=http%3A%2F%2Fwww.freeradius.org%2Flist%2Fusers.html&data=05%7C02%7C%7C83dbf96431af4b527b9108ded797d9f6%7C58b3d54f16c942d3af081fcabd095666%7C1%7C0%7C639185244363269529%7CUnknown%7CTWFpbGZsb3d8eyJFbXB0eU1hcGkiOnRydWUsIlYiOiIwLjAuMDAwMCIsIlAiOiJXaW4zMiIsIkFOIjoiTWFpbCIsIldUIjoyfQ%3D%3D%7C0%7C%7C%7C&sdata=XF5dv9cPRo0b3zfo1lYsgEFJXBNR%2FP4o6EArK0SIipE%3D&reserved=0
> > <http://www.freeradius.org/list/users.html>
> > -
> > List info/subscribe/unsubscribe? See
> > http://www.freeradius.org/list/users.html
> >
> -
> List info/subscribe/unsubscribe? See
> http://www.freeradius.org/list/users.html
>