ts_approve_routes
Approve subnet routes on a Tailscale device. Additive by default to keep existing approvals; use replace=true to overwrite the entire route set.
Instructions
Approve subnet routes on a device. Requires TAILSCALE_WRITE_ENABLED=true.
Default (replace=false): additive — reads the device's currently
enabled routes first and approves the union, so previously approved
routes are preserved.
replace=true: raw Tailscale set-routes REPLACE semantics — the
enabled set becomes exactly routes; any currently enabled route not
listed is de-approved, which can sever subnet connectivity. Use only
when you intend to remove approvals.
Input Schema
TableJSON Schema
| Name | Required | Description | Default |
|---|---|---|---|
| device_id | Yes | Device nodeId (from ts_devices) | |
| routes | Yes | Subnet routes to approve (e.g. ['192.168.1.0/24']) | |
| replace | No | Replace the device's entire enabled-route set with exactly `routes` instead of additively approving. WARNING: replace=true de-approves every currently-enabled route not listed — this can disconnect subnets. |
Output Schema
TableJSON Schema
| Name | Required | Description | Default |
|---|---|---|---|
| result | Yes |