Skip to main content
Glama

Authorize device

tailscale_authorize_device
Destructive

Authorize or de-authorize a device (only relevant when device approval is enabled for the tailnet). Tailscale REST: POST /device/{deviceId}/authorized.

Input Schema

TableJSON Schema
NameRequiredDescriptionDefault
deviceIdYesThe device id.
authorizedYesTrue to authorize the device into the tailnet, false to de-authorize it.

Schema Changelog

Changes observed during successful MCP inspections. Dates show when Glama detected each change.

  1. First observed

TDQS

A4/5.0
Behavior3/5

Does the description disclose side effects, auth requirements, rate limits, or destructive behavior?

The annotation destructiveHint: true already signals that this tool can have a destructive effect (de-authorization). The description adds the context about device approval being enabled, which is useful. However, it does not disclose additional behavioral details such as reversibility or immediate network impact, though the schema's parameter description partly covers the meaning of 'authorize' vs 'de-authorize'.

Agents need to know what a tool does to the world before calling it. Descriptions should go beyond structured annotations to explain consequences.

Conciseness5/5

Is the description appropriately sized, front-loaded, and free of redundancy?

The description is only two sentences, with the main action front-loaded. The first sentence states the purpose, and the second provides the REST endpoint. No unnecessary words or repetition; every part adds value and it is highly efficient.

Shorter descriptions cost fewer tokens and are easier for agents to parse. Every sentence should earn its place.

Completeness4/5

Given the tool's complexity, does the description cover enough for an agent to succeed on first attempt?

For a simple tool with two required parameters and no output schema, the description covers the core context: what it does, when it's relevant, and the API call. The only minor gap is the lack of any return value description, but since there is no output schema and the tool's effect is straightforward, this is a minor omission.

Complex tools with many parameters or behaviors need more documentation. Simple tools need less. This dimension scales expectations accordingly.

Parameters3/5

Does the description clarify parameter syntax, constraints, interactions, or defaults beyond what the schema provides?

The input schema already provides 100% coverage with clear descriptions for both parameters (deviceId and authorized). The tool description does not add extra meaning beyond the schema, so it does not exceed the baseline score of 3. The parameter descriptions are self-explanatory.

Input schemas describe structure but not intent. Descriptions should explain non-obvious parameter relationships and valid value ranges.

Purpose5/5

Does the description clearly state what the tool does and how it differs from similar tools?

The description clearly states the tool's function: 'Authorize or de-authorize a device' with a specific resource (device) and verb. It also adds the REST endpoint, reinforcing the exact action. This distinguishes it from sibling tools like tailscale_get_device or tailscale_delete_device, which perform different operations.

Agents choose between tools based on descriptions. A clear purpose with a specific verb and resource helps agents select the right tool.

Usage Guidelines4/5

Does the description explain when to use this tool, when not to, or what alternatives exist?

The description provides a clear usage condition: 'only relevant when device approval is enabled for the tailnet.' This tells the agent when this tool applies. While it doesn't explicitly exclude alternative tools, the tool's unique purpose and the relevance condition offer sufficient guidance for selection.

Agents often have multiple tools that could apply. Explicit usage guidance like "use X instead of Y when Z" prevents misuse.

Try in Browser

Glama MCP Gateway

Add one secure layer between your agents and this server.

TDQS

A3.9/5.0
Disambiguation5/5

Each tool targets a distinct resource and action. For example, list/get/delete keys are clearly separated by operation, and DNS-related tools each address a different aspect (preferences, nameservers, searchpaths, split-dns). No two tools overlap in purpose.

Naming Consistency5/5

All tools follow the `tailscale_<verb>_<noun>` pattern with consistent vocabulary (list, get, create, delete, set, expire, authorize). The style is uniformly snake_case, making the set predictable.

Tool Count4/5

22 tools is on the higher end but still within a manageable scope for a comprehensive Tailscale API wrapper. Each tool covers a distinct endpoint, and no obvious duplication exists, though the number edges toward heavy.

Completeness3/5

The server provides strong coverage for devices and auth keys (CRUD plus actions), but DNS preferences, nameservers, search paths, split-DNS, policy file, tailnet settings, and webhooks are read-only. Missing update operations for these tailnet configuration resources are notable gaps for a management tool.