Check that the Tailscale API connection is working. Returns your tailnet name, device count, and confirms authentication is valid. Use this to verify setup.

List all devices in your tailnet with their status, IP addresses, OS, and last seen time.

Get detailed information about a specific device by its ID.

Authorize a device that is pending authorization.

Deauthorize a device, immediately removing its access to the tailnet. The device will need to be re-authorized to reconnect.

Permanently remove a device from the tailnet. This is irreversible — the device must re-authenticate to rejoin.

Set the name of a device in the tailnet.

Expire a device's key, forcing it to re-authenticate.

Get the subnet routes a device advertises and which are enabled.

Set the enabled subnet routes for a device. Replaces all currently enabled routes — pass the full list of routes you want enabled.

Get all posture attributes for a device, including custom and system-managed attributes.

Set a custom posture attribute on a device. Creates or updates the attribute. Attribute keys must start with 'custom:'. Useful for compliance tracking, JIT access, and custom security policies.

Delete a custom posture attribute from a device. This is irreversible.

Set ACL tags on a device. Replaces all existing tags — pass the full list of tags you want applied.

Set the Tailscale IPv4 address for a device.

Update a device's key settings, such as disabling key expiry. Useful for servers that should never need to re-authenticate.

Authorize or deauthorize multiple devices in one call. Each device's POST runs in parallel; per-device errors are returned alongside the successes so a partial failure doesn't lose the work that succeeded. On partial failure the call still returns success (ok) with data: { authorized, succeeded, failed } -- inspect data.failed for the per-device errors. Common use: authorize a batch of newly-enrolled CI hosts, or deauthorize a group of devices flagged by a security review.

Batch update custom posture attributes across multiple devices. Each attribute key must start with 'custom:'. Uses JSON Merge Patch semantics — pass null as the attribute config to delete.

Get the current ACL policy for your tailnet. Returns the raw policy text with original formatting preserved, including comments and trailing commas (HuJSON). Also returns an ETag — you must pass it to tailscale_update_acl to safely update the policy.

Update the ACL policy for your tailnet. Accepts the full policy as a string to preserve formatting, comments, and trailing commas (HuJSON). You MUST pass the ETag from tailscale_get_acl to prevent overwriting concurrent changes. Always get the current ACL first, make targeted edits to the text, and pass the full modified text back.

Validate an ACL policy without applying it. Returns any errors found, or confirms the policy is valid.

Preview the ACL rules that would apply to a specific user or IP address if a proposed policy were applied.

Get the DNS nameservers configured for your tailnet.

Set the DNS nameservers for your tailnet. Replaces all existing nameservers.

Get the DNS search paths configured for your tailnet.

Set the DNS search paths for your tailnet. Replaces all existing search paths.

Get the split DNS configuration for your tailnet.

Set split DNS configuration. Maps domains to specific nameservers. Replaces the entire split DNS configuration.

Get DNS preferences for your tailnet, including whether MagicDNS is enabled.

Set DNS preferences for your tailnet, such as enabling or disabling MagicDNS.

Partially update split DNS configuration. Merges the provided domains with the existing config — only the specified domains are changed, others are untouched. Set a domain's nameservers to an empty array to remove it.

Get the unified DNS configuration for your tailnet, including nameservers, search paths, split DNS, and MagicDNS preference in a single call.

Set the unified DNS configuration for your tailnet in a single call. Replaces all DNS settings (nameservers, search paths, split DNS, MagicDNS preference).

List keys in your tailnet. By default lists auth keys only. Set 'all' to true to include OAuth clients and federated identities.

Get details for a specific key (auth key, OAuth client, or federated identity).

Create a new key in your tailnet. Supports auth keys (for adding devices), OAuth clients (for programmatic API access), and federated identities (for OIDC-based CI/CD access). Returns the key value — save it immediately, as it cannot be retrieved again.

SECURITY: the response body contains a long-lived credential verbatim. MCP clients commonly persist tool responses to logs and conversation transcripts; treat this response as sensitive (do not commit it, avoid re-sharing it in unrelated chat history).

Examples:

• Auth key: {keyType:'auth', reusable:true, tags:['tag:ci']}

• OAuth client: {keyType:'client', scopes:['devices:read','dns']}

• Federated (GitHub Actions): {keyType:'federated', scopes:['devices:read'], issuer:'https://token.actions.githubusercontent.com', subject:'repo:my-org/my-repo:*'}

Delete a key (auth key, OAuth client, or federated identity). This is irreversible. For auth keys, devices already authenticated are unaffected but no new devices can use it. For OAuth clients and federated identities, any integrations using them lose access immediately.

Update an existing key. Supported fields depend on the key type: all key types accept 'description'; OAuth clients and federated identities additionally accept 'scopes' and 'tags'; federated identities additionally accept 'issuer', 'subject', 'audience', and 'customClaimRules'. For auth keys, pass only 'description' — the Tailscale API will reject other fields.

Create an OAuth App for device provisioning (Tailscale alpha). Lets a third-party application enroll a device into your tailnet via the authorization-code flow, after a user consents. Returns the app's client secret -- save it immediately, it cannot be retrieved again.

SECURITY: the response body contains a long-lived credential verbatim. MCP clients commonly persist tool responses to logs and conversation transcripts; treat this response as sensitive.

The supported scope is 'auth_keys:create:once' (one auth key per authorization, no refresh token). Distinct from tailscale_create_key with keyType='client', which mints a machine-to-machine OAuth client instead.

Get an OAuth App's configuration (name, redirect URIs, scopes) by its app ID. Use this to verify an app was registered as intended. The client secret is not returned -- it is only available at creation time.

List the OAuth Apps registered in your tailnet (Tailscale alpha). Returns an oauthApps array describing each app (id, name, redirect URIs, scopes). Client secrets are NOT included -- a secret is only returned once, by tailscale_create_oauth_app at creation time. This is how you recover the id of an app you did not record; pass that id to tailscale_delete_oauth_app to revoke it.

Delete an OAuth App (Tailscale alpha). This is irreversible: the app's client secret stops working immediately and any integration using it loses its device-enrollment path, so no further device can be authorized through it. Devices already enrolled stay in the tailnet, exactly as they do when the auth key that added them is deleted. Use tailscale_list_oauth_apps to find the id.

List all users in your tailnet.

Get details for a specific user.

Approve a pending user, granting them access to the tailnet.

Suspend a user, immediately revoking their access to the tailnet. Their devices will be disconnected. Can be reversed with tailscale_restore_user.

Restore a previously suspended user, re-granting them access to the tailnet.

Update a user's role in the tailnet.

Delete a user from the tailnet. This is irreversible — the user and all their devices will be removed.

Get your tailnet settings (device approval, key expiry, HTTPS certificates, etc.).

Update tailnet settings (device approval, auto-updates, key expiry, HTTPS certificates, network flow logging, regional routing, posture identity collection).

Get the tailnet contact information (security, support, admin emails).

Update tailnet contact information. Each provided contact type (account/support/security) is PATCHed in parallel; per-type errors are returned alongside the successes so a partial failure doesn't lose the work that succeeded. On partial failure the response is data: { applied, failed } -- inspect data.failed for per-type error details.

Resend the verification email for a tailnet contact.

List the tailnets in your organization, including API-only tailnets created via the API. Paginated: returns at most limit results (Tailscale defaults to 100) plus a cursor. Pass that cursor back to fetch the next page; an empty cursor in the response means you have reached the end. Requires OAuth authentication.

Create a new API-only tailnet in your organization. Returns the tailnet (id, displayName, orgId, dnsName, createdAt) AND a freshly-minted OAuth client for it.

SECURITY: the response body contains that OAuth client's secret verbatim, and it cannot be retrieved again. MCP clients commonly persist tool responses to logs and conversation transcripts; treat this response as sensitive.

Requires an OAuth client with the 'tailnets' scope -- an API key will not work. To then operate on the new tailnet, set TAILSCALE_OAUTH_TAILNET to its id and use an OAuth client with the 'all' scope.

Permanently delete a tailnet. This is IRREVERSIBLE and removes every device, user, ACL, and key in it.

By default it acts on the tailnet the current credentials point at (TAILSCALE_TAILNET, or TAILSCALE_OAUTH_TAILNET when targeting an API-only tailnet). Pass tailnet to name a different one -- e.g. an id returned by tailscale_list_org_tailnets -- which requires credentials scoped to reach it; UNVERIFIED against a live tailnet, so expect a 403/404 if your token cannot. You must always pass confirmTailnet matching the effective target exactly; the call is refused locally otherwise. That check is a typo guard, not an authorization gate: when you also pass tailnet you are supplying both halves of the comparison, so it proves only that they agree -- it is a genuine second look only on the omit-tailnet path, where the value has to match the operator's environment. Restricting who may delete at all is TAILSCALE_READONLY / TAILSCALE_TOOLS, which drop this tool from the server entirely. Intended for tearing down API-only tailnets created by tailscale_create_org_tailnet.

List all webhooks configured for your tailnet.

Get details for a specific webhook.

Create a new webhook. The response includes the webhook's signing secret -- this is the only opportunity to capture it; save it immediately.

SECURITY: the response body contains the secret verbatim. MCP clients commonly persist tool responses to logs and conversation transcripts; treat this response as sensitive.

Update an existing webhook's endpoint URL and/or subscriptions.

Delete a webhook. This is irreversible — the webhook secret cannot be recovered.

Rotate a webhook's secret. Returns the new secret — save it immediately, as it cannot be retrieved again. The old secret is immediately invalidated.

SECURITY: the response body contains the secret verbatim. MCP clients commonly persist tool responses to logs and conversation transcripts; treat this response as sensitive.

Send a test event to a webhook endpoint to verify it is configured correctly and receiving events.

List all device posture integrations configured for your tailnet.

Get details for a specific device posture integration.

Create a new device posture integration.

Update an existing posture integration's credentials or configuration.

Delete a posture integration. This is irreversible.

Get the tailnet audit/configuration log. Shows who changed what and when — useful for troubleshooting and compliance.

Get network traffic flow logs showing connections between devices. Shows source/destination nodes, timestamps, and traffic metadata — useful for security monitoring and debugging connectivity.

List all device invites for a specific device.

Create a device share invitation that allows an external user to access a specific device in your tailnet.

Get details for a specific device invite.

Delete a device invite. This is irreversible — the invite link will stop working.

Accept a device share invitation using the invite URL or code.

List all user invites for your tailnet.

Create a new user invite that allows someone to join your tailnet.

Get details for a specific user invite.

Delete a user invite. This is irreversible — the invite link will stop working.

Resend a device invite email.

Resend a user invite email.

List all Tailscale Services in your tailnet. Services provide stable MagicDNS names and virtual IPs, decoupled from individual devices. Note: services are created implicitly when a node first advertises one (tailscale up --advertise-services=svc:name); there is no API endpoint to create a service from this MCP. Use the update/delete/approval tools here once the service exists.

Get details for a specific Tailscale Service, including its MagicDNS name, virtual IP, and configuration.

Update a Tailscale Service's configuration.

Delete a Tailscale Service. This is irreversible — the service's MagicDNS name and virtual IP will be released.

List devices hosting a specific Tailscale Service.

Get the approval status of a specific device for a Tailscale Service.

Approve or reject a device to host a Tailscale Service.

List all log streaming configurations for your tailnet. Fetches both 'configuration' (audit) and 'network' (flow) log stream configs. Log streaming sends logs to external destinations like Axiom, Datadog, Splunk, Elasticsearch, or S3.

Get the log streaming configuration for a specific log type.

Set the log streaming configuration for a specific log type. Configures where logs are sent (e.g. Axiom, Datadog, Splunk, Elasticsearch, S3).

Per-destination required fields:

• splunk / elastic / panther / cribl / datadog / axiom: url + token (user optional)

• s3: s3Bucket + s3Region + s3AuthenticationType, plus either (s3AccessKeyId + s3SecretAccessKey) for 'accesskey' auth or s3RoleArn for 'rolearn' auth. Call tailscale_create_aws_external_id first when using 'rolearn'.

Delete a log streaming configuration. Logs will stop being sent to the configured destination.

Get the status of log streaming for a specific log type. Shows whether logs are being delivered successfully.

Create or get an AWS external ID for your tailnet. Used when configuring log streaming to S3 — the external ID is included in the IAM role trust policy.

Validate that an AWS IAM role trust policy is correctly configured with the Tailscale external ID. Use this after setting up the IAM role for S3 log streaming.