"Tailscale" matching MCP servers:

Production-ready MCP server for Tailscale management with 48 tools across 9 domains: Devices, DNS/Split DNS, ACL policies, Auth Keys, Users, Webhooks, Posture Integrations, Tailnet Settings, and Diagnostics. Supports stdio and SSE transport with Bearer token authentication. Built with TypeScript strict mode, Zod validation, and zero shell execution. AGPL-3.0 + Commercial dual-licensed.

Enables an MCP client to inspect and administer a Tailscale node through the local tailscale CLI and the wider tailnet through the control-plane REST API, exposing 186 read, write, and destructive tools plus resources, prompts, and completions. Tier and preset dials keep dangerous operations unlisted until explicitly enabled, and both surfaces degrade gracefully when the CLI or a credential is absent.

MCP server and CLI for Tailscale that lets agents inspect and manage tailnet devices, routes, users, keys, DNS, and ACL policy over stdio or streamable HTTP.

Enables AI agents to securely interact with Tailscale tailnets for device inventory, ACL review, key hygiene, and more, with token-efficient output and write-gated mutations.

Enables Claude to connect and disconnect the host machine from its Tailscale network via the local CLI, and to manage the wider tailnet (devices, routes, DNS, ACL policy, auth keys, webhooks, users, audit log) through the Tailscale REST API. Access is governed by configurable risk tiers, with destructive operations gated behind interactive human approval.

Manage your Tailscale tailnet - devices, ACLs, DNS, keys, and more - through natural language queries.

An identity-aware MCP server that runs inside a Tailscale tailnet, using Tailscale's identity headers to provide user-specific functionality such as greeting the logged-in user by email.

Enables interaction with the Tailscale API to manage devices, ACLs, keys, and DNS configurations directly from MCP clients like Claude Desktop or Raycast.

Enables comprehensive management of Tailscale networks including device management, DNS configuration, file sharing via Taildrop, security monitoring, and network automation with built-in Grafana/Prometheus observability stack.

Enables a cloud orchestrator to query a local Ollama model over Tailscale or a LAN as a side-channel for drafts, summaries, and other helper output, with tools to list available models and to redact text. Answers leaving the server are passed through output-only DLP that masks card numbers, IBANs, emails, phone numbers, API keys, and similar secrets before they reach the cloud.

Enables MCP clients to securely inspect and control registered Windows PCs over a private Tailscale network, with risk-based approvals for actions such as launching apps, capturing screens, managing files, and simulating input.

Production-grade MCP gateway that provides controlled access to the Bloomberg Desktop API on a Windows terminal via Tailscale, with policy, quotas, and audit safety.