tailscale_update_key
Update an existing Tailscale key. Supported fields include description, scopes, tags, and federated identity settings, depending on the key type.
Instructions
Update an existing key. Supported fields depend on the key type: all key types accept 'description'; OAuth clients and federated identities additionally accept 'scopes' and 'tags'; federated identities additionally accept 'issuer', 'subject', 'audience', and 'customClaimRules'. For auth keys, pass only 'description' — the Tailscale API will reject other fields.
Input Schema
| Name | Required | Description | Default |
|---|---|---|---|
| tags | No | Updated ACL tags (must start with 'tag:') | |
| keyId | Yes | The key ID to update | |
| issuer | No | (federated only) Updated OIDC issuer URL | |
| scopes | No | (client/federated) Updated OAuth scopes | |
| subject | No | (federated only) Updated subject claim pattern | |
| audience | No | (federated only) Updated audience claim | |
| description | No | Updated description (max 50 chars, alphanumeric/hyphens/spaces) | |
| customClaimRules | No | (federated only) Updated custom claim rules |