ERAD App
⌘K
in
Server

Shared secret "radsec" (RFC 6614). ERAD: 2083 takes the tenant from the client certificate, 2084 (OpenRoaming) from the realm.

SNI
Request
Advanced

Add a test

This test as an erad command

Command line and MCP

From a terminal

Tab completion

From Claude (MCP)

The MCP server lists the servers, targets and keys saved here, lists a group's credentials and runs tests. It never returns passwords or secrets, never creates certificates in ERAD, and refuses Production servers unless you add --allow-production after mcp.

erad-api key

With a key, the collection's targets pick an ERAD group and list its credentials. The key stays in this computer's Keychain, for you only: for a shared collection, everyone sets their own.

What's new

Help

How a login travels: the app plays the device and the access point, and ERAD answers.

PEAP, TTLS and EAP-TLS: one EAP conversation between the device and ERAD, relayed by the access point. Outside the TLS tunnel goes the outer identity (anonymous@realm); inside it, the real identity and its password or certificate.

History

Each change to the collection, newest first: the last 20. Restoring one makes the collection hold what it held then (its targets, their servers, passwords and files) for everyone it's shared with. Who it's shared with stays as it is.

New webhook

Calling it

Calls

Export

Its targets, the servers they use, their Advanced settings, suites and notes, in one file to keep or to import elsewhere.

Without them, passwords in raw requests are replaced, and whoever imports it enters the passwords again and picks the files.

Passphrase

The desktop app

ERAD App on your computer: the same tests, and also the erad command line, MCP for Claude and load tests, and it works without erad.app. Signed in there, your collections on erad.app and your runs come along. It updates itself.

Sign in to erad.app