ts_audit_log
Retrieve recent Tailscale configuration audit logs showing who changed what and when. Optionally filter by device scope (infrastructure, personal, or home).
Instructions
Configuration audit log: who changed what, when. Recent entries first.
Optional scope arg filters audit entries to those whose target
is a device with a tag in the scope set. Requires a secondary fetch
of the device-tag map (uncached at v1). Entries with non-device
targets are excluded when scope is provided.
Input Schema
| Name | Required | Description | Default |
|---|---|---|---|
| count | No | Max entries returned, most-recent-first (default 50) | |
| days | No | Lookback window in days (default 7); wider windows risk the 30s API timeout | |
| scope | No | DD-278 scope filter: 'infrastructure' | 'personal' | 'home'. Filtered client-side — audit-log entries don't carry tags, so the filter resolves each entry's target.id against a secondary device-tag map fetch (one extra round-trip per call). |
Output Schema
| Name | Required | Description | Default |
|---|---|---|---|
| result | Yes |