tailscale_update_key
Update an existing Tailscale key by ID to change its description, scopes, tags, or federated settings.
Instructions
Update an existing key. Supported fields depend on the key type: all key types accept 'description'; OAuth clients and federated identities additionally accept 'scopes' and 'tags'; federated identities additionally accept 'issuer', 'subject', 'audience', and 'customClaimRules'. For auth keys, pass only 'description' — the Tailscale API will reject other fields.
Input Schema
| Name | Required | Description | Default |
|---|---|---|---|
| tags | No | Updated ACL tags (must start with 'tag:') | |
| keyId | Yes | The key ID to update | |
| issuer | No | (federated only) Updated OIDC issuer URL | |
| scopes | No | (client/federated) Updated OAuth scopes | |
| subject | No | (federated only) Updated subject claim pattern | |
| audience | No | (federated only) Updated audience claim | |
| description | No | Updated description (max 50 chars, alphanumeric/hyphens/spaces) | |
| customClaimRules | No | (federated only) Updated custom claim rules |