"Tailscale" matching MCP tools:

• runtime_sandboxes_tailscaleA

  Runtime CloudA

  Join a paid sandbox to your Tailscale network with your auth key, see its addresses there, or take it off. up(id, authKeySecret?, hostname?, tags?): Paid sandboxes. authKeySecret names a job secret holding a Tailscale auth key. status(id): Whether it is on one, and its tailnet addresses. down(id): Logs the machine out; it leaves the tailnet at once.

  Connector

  Destructive

  API key

• tailscale_list_devices

  Tailscale MCP by usefulapiA

  List all devices in the tailnet (name, addresses, OS, last seen, tags, etc.). Tailscale REST: GET /tailnet/{tailnet}/devices.

  ConnectorNo auth

• tailscale_get_device

  Tailscale MCP by usefulapiA

  Get a single device by id. Tailscale REST: GET /device/{deviceId}.

  ConnectorNo auth

• tailscale_list_device_routes

  Tailscale MCP by usefulapiA

  List the subnet routes a device advertises and which are enabled. Tailscale REST: GET /device/{deviceId}/routes.

  ConnectorNo auth

• tailscale_list_keys

  Tailscale MCP by usefulapiA

  List auth keys and API access tokens for the tailnet. Tailscale REST: GET /tailnet/{tailnet}/keys.

  ConnectorNo auth

• tailscale_get_key

  Tailscale MCP by usefulapiA

  Get details of a single auth key / API access token by id (capabilities, expiry, usage). Tailscale REST: GET /tailnet/{tailnet}/keys/{keyId}.

  ConnectorNo auth

• tailscale_get_policy_file

  Tailscale MCP by usefulapiA

  Get the tailnet's ACL / policy file (returned as JSON via the Accept header, not HuJSON). Tailscale REST: GET /tailnet/{tailnet}/acl.

  ConnectorNo auth

• tailscale_list_dns_nameservers

  Tailscale MCP by usefulapiA

  List the global DNS nameservers configured for the tailnet. Tailscale REST: GET /tailnet/{tailnet}/dns/nameservers.

  ConnectorNo auth

• tailscale_get_dns_preferences

  Tailscale MCP by usefulapiA

  Get the tailnet's DNS preferences (e.g. whether MagicDNS is enabled). Tailscale REST: GET /tailnet/{tailnet}/dns/preferences.

  ConnectorNo auth

• tailscale_list_dns_searchpaths

  Tailscale MCP by usefulapiA

  List the DNS search paths (search domains) configured for the tailnet. Tailscale REST: GET /tailnet/{tailnet}/dns/searchpaths.

  ConnectorNo auth

• tailscale_get_split_dns

  Tailscale MCP by usefulapiA

  Get the tailnet's split-DNS configuration — a map of domain → nameservers. Tailscale REST: GET /tailnet/{tailnet}/dns/split-dns.

  ConnectorNo auth

• tailscale_list_users

  Tailscale MCP by usefulapiA

  List users of the tailnet, optionally filtered by type, role or status. Tailscale REST: GET /tailnet/{tailnet}/users.

  ConnectorNo auth

• tailscale_get_user

  Tailscale MCP by usefulapiA

  Get a single user by id. Tailscale REST: GET /users/{userId}.

  ConnectorNo auth

• tailscale_list_webhooks

  Tailscale MCP by usefulapiA

  List the webhook endpoints configured for the tailnet. Tailscale REST: GET /tailnet/{tailnet}/webhooks.

  ConnectorNo auth

• tailscale_get_tailnet_settings

  Tailscale MCP by usefulapiA

  Get the tailnet's settings (device approval, key expiry, posture, etc.). Tailscale REST: GET /tailnet/{tailnet}/settings.

  ConnectorNo auth

• tailscale_authorize_device

  Tailscale MCP by usefulapiA

  Authorize or de-authorize a device (only relevant when device approval is enabled for the tailnet). Tailscale REST: POST /device/{deviceId}/authorized.

  Connector

  Destructive

  No auth

• tailscale_set_device_name

  Tailscale MCP by usefulapiA

  Set (rename) a device's name. Tailscale REST: POST /device/{deviceId}/name.

  Connector

  Destructive

  No auth

• tailscale_set_device_tags

  Tailscale MCP by usefulapiA

  Set a device's ACL tags. REPLACES the device's existing tags. Tailscale REST: POST /device/{deviceId}/tags.

  Connector

  Destructive

  No auth

• tailscale_expire_device_key

  Tailscale MCP by usefulapiA

  Expire a device's node key, forcing it to re-authenticate — a security response to a compromised or lost device. Tailscale REST: POST /device/{deviceId}/expire.

  Connector

  Destructive

  No auth

• tailscale_set_device_routes

  Tailscale MCP by usefulapiA

  Set the subnet routes ENABLED for a device (from the routes it advertises). REPLACES the enabled set. Tailscale REST: POST /device/{deviceId}/routes.

  Connector

  Destructive

  No auth

• tailscale_create_auth_key

  Tailscale MCP by usefulapiA

  Create a new auth key for the tailnet (used to register new devices). Tailscale REST: POST /tailnet/{tailnet}/keys.

  Connector

  Destructive

  No auth