diff --git a/src/transport/SecureSession.h b/src/transport/SecureSession.h
index ba586a3095e3dd..574d5f40ccfe5a 100644
--- a/src/transport/SecureSession.h
+++ b/src/transport/SecureSession.h
@@ -158,7 +158,11 @@ class SecureSession : public Session, public ReferenceCounted<SecureSession, Sec
 
     bool IsCommissioningSession() const override;
 
-    bool AllowsMRP() const override { return GetPeerAddress().GetTransportType() == Transport::Type::kUdp; }
+    bool AllowsMRP() const override
+    {
+        return ((GetPeerAddress().GetTransportType() == Transport::Type::kUdp) ||
+                (GetPeerAddress().GetTransportType() == Transport::Type::kWiFiPAF));
+    }
 
     bool AllowsLargePayload() const override { return GetPeerAddress().GetTransportType() == Transport::Type::kTcp; }
 
diff --git a/src/transport/UnauthenticatedSessionTable.h b/src/transport/UnauthenticatedSessionTable.h
index d77bf7080d8fb9..707d4014f01167 100644
--- a/src/transport/UnauthenticatedSessionTable.h
+++ b/src/transport/UnauthenticatedSessionTable.h
@@ -84,7 +84,11 @@ class UnauthenticatedSession : public Session, public ReferenceCounted<Unauthent
         return Access::SubjectDescriptor(); // return an empty ISD for unauthenticated session.
     }
 
-    bool AllowsMRP() const override { return GetPeerAddress().GetTransportType() == Transport::Type::kUdp; }
+    bool AllowsMRP() const override
+    {
+        return ((GetPeerAddress().GetTransportType() == Transport::Type::kUdp) ||
+                (GetPeerAddress().GetTransportType() == Transport::Type::kWiFiPAF));
+    }
 
     bool AllowsLargePayload() const override { return GetPeerAddress().GetTransportType() == Transport::Type::kTcp; }