irq-freeipa-mcp
Server Configuration
Describes the environment variables required to run the server.
| Name | Required | Description | Default |
|---|---|---|---|
No arguments | |||
Instructions
Guidance the server publishes about itself, which clients place ahead of the tool catalog so the model reads it before choosing anything.
This server publishes no instructions, or was last inspected before Glama recorded them.
Capabilities
Features and capabilities supported by this server
Protocol revision2025-11-25
| Capability | Details |
|---|---|
| tools | {} |
Tools
Functions exposed to the LLM to take actions
| Name | Description |
|---|---|
| freeipa_user_findB | Search for users in FreeIPA. Returns list of users matching the search pattern. |
| freeipa_user_showB | Get detailed information about a specific user |
| freeipa_user_addB | Create a new user in FreeIPA |
| freeipa_check_user_groupsB | Check which groups a user belongs to |
| freeipa_group_findC | Search for groups in FreeIPA |
| freeipa_group_add_memberC | Add users to a group |
| freeipa_group_remove_memberB | Remove users from a group |
| freeipa_sudorule_findA | List all sudo rules in FreeIPA |
| freeipa_sudorule_showB | Get detailed information about a specific sudo rule |
| freeipa_sudorule_addB | Create a new sudo rule |
| freeipa_sudorule_enableB | Enable a sudo rule |
| freeipa_sudorule_disableC | Disable a sudo rule |
| freeipa_sudorule_add_userC | Add users or groups to a sudo rule |
| freeipa_sudorule_add_hostB | Add hosts or hostgroups to a sudo rule |
| freeipa_sudorule_add_commandB | Add allowed commands to a sudo rule |
| freeipa_sudocmdgroup_addB | Create a new sudo command group |
| freeipa_sudocmdgroup_add_memberB | Add commands to a sudo command group |
| freeipa_hbacrule_findB | List all HBAC (Host-Based Access Control) rules |
| freeipa_hbacrule_showA | Get detailed information about a specific HBAC rule |
| freeipa_hbacrule_addB | Create a new HBAC rule |
| freeipa_hbacrule_enableB | Enable an HBAC rule |
| freeipa_hbacrule_disableB | Disable an HBAC rule |
| freeipa_hbacrule_add_userB | Add users or groups to an HBAC rule |
| freeipa_hbacrule_add_hostB | Add hosts or hostgroups to an HBAC rule |
| freeipa_hbacrule_add_serviceB | Add services to an HBAC rule |
| freeipa_service_addB | Create a service principal for certificate management |
| freeipa_cert_requestB | Request a certificate from FreeIPA CA |
| freeipa_host_findC | Search for hosts in FreeIPA |
| freeipa_host_addC | Add a new host to FreeIPA |
| freeipa_clear_sssd_cacheA | Clear SSSD cache on one or more hosts to force policy refresh |
| freeipa_update_sssd_timeoutB | Update SSSD cache timeout settings on hosts |
| freeipa_check_sssd_statusC | Check SSSD service status on hosts |
| freeipa_invalidate_user_cacheB | Invalidate cache for a specific user on hosts |
| freeipa_test_ssh_connectivityB | Test SSH connectivity to hosts |
| freeipa_pingB | Test connection to FreeIPA server |
| freeipa_get_server_infoA | Get FreeIPA server information and environment details |
Prompts
Interactive templates invoked by user choice
| Name | Description |
|---|---|
No prompts | |
Resources
Contextual data attached and managed by the client
| Name | Description |
|---|---|
No resources | |
TDQS
Scored across 36 tools
Each tool targets a distinct area (users, groups, sudo rules, HBAC rules, hosts, etc.) with clear action verbs. There is minimal overlap; e.g., freeipa_sudorule_enable and freeipa_hbacrule_enable operate on different resource types.
All tools follow a consistent 'freeipa_<domain>_<action>' pattern using snake_case. The naming is predictable and makes it easy to infer the purpose of each tool from its name.
With 36 tools, the count is slightly high for the typical range, but it is justified by the comprehensive coverage of FreeIPA's various subdomains (users, groups, sudo rules, HBAC rules, hosts, services, certificates, SSSD cache).
The tool set covers many operations but lacks update and delete actions for key resources such as users, groups, sudo rules, HBAC rules, and hosts. This leaves noticeable gaps for full lifecycle management.