"Tailscale" matching MCP tools:

• tailscale_delete_keyA

  tailscaleA

  Delete (revoke) an auth key or API access token by id — a security response. Tailscale REST: DELETE /tailnet/{tailnet}/keys/{keyId}.

  Connector

  Destructive

  No auth

• tailscale_list_devicesA

  tailscaleA

  List all devices in the tailnet (name, addresses, OS, last seen, tags, etc.). Tailscale REST: GET /tailnet/{tailnet}/devices.

  ConnectorNo auth

• tailscale_get_split_dnsA

  tailscaleA

  Get the tailnet's split-DNS configuration — a map of domain → nameservers. Tailscale REST: GET /tailnet/{tailnet}/dns/split-dns.

  ConnectorNo auth

• tailscale_get_tailnet_settingsA

  tailscaleA

  Get the tailnet's settings (device approval, key expiry, posture, etc.). Tailscale REST: GET /tailnet/{tailnet}/settings.

  ConnectorNo auth

• tailscale_expire_device_keyA

  tailscaleA

  Expire a device's node key, forcing it to re-authenticate — a security response to a compromised or lost device. Tailscale REST: POST /device/{deviceId}/expire.

  Connector

  Destructive

  No auth

• tailscale_set_device_routesA

  tailscaleA

  Set the subnet routes ENABLED for a device (from the routes it advertises). REPLACES the enabled set. Tailscale REST: POST /device/{deviceId}/routes.

  Connector

  Destructive

  No auth

• tailscale_get_dns_preferencesA

  tailscaleA

  Get the tailnet's DNS preferences (e.g. whether MagicDNS is enabled). Tailscale REST: GET /tailnet/{tailnet}/dns/preferences.

  ConnectorNo auth

• tailscale_list_webhooksA

  tailscaleA

  List the webhook endpoints configured for the tailnet. Tailscale REST: GET /tailnet/{tailnet}/webhooks.

  ConnectorNo auth

• tailscale_get_deviceA

  tailscaleA

  Get a single device by id. Tailscale REST: GET /device/{deviceId}.

  ConnectorNo auth

• tailscale_set_device_tagsA

  tailscaleA

  Set a device's ACL tags. REPLACES the device's existing tags. Tailscale REST: POST /device/{deviceId}/tags.

  Connector

  Destructive

  No auth

• tailscale_list_device_routesA

  tailscaleA

  List the subnet routes a device advertises and which are enabled. Tailscale REST: GET /device/{deviceId}/routes.

  ConnectorNo auth

• tailscale_get_keyA

  tailscaleA

  Get details of a single auth key / API access token by id (capabilities, expiry, usage). Tailscale REST: GET /tailnet/{tailnet}/keys/{keyId}.

  ConnectorNo auth

• tailscale_get_policy_fileA

  tailscaleA

  Get the tailnet's ACL / policy file (returned as JSON via the Accept header, not HuJSON). Tailscale REST: GET /tailnet/{tailnet}/acl.

  ConnectorNo auth

• tailscale_list_usersA

  tailscaleA

  List users of the tailnet, optionally filtered by type, role or status. Tailscale REST: GET /tailnet/{tailnet}/users.

  ConnectorNo auth

• tailscale_authorize_deviceA

  tailscaleA

  Authorize or de-authorize a device (only relevant when device approval is enabled for the tailnet). Tailscale REST: POST /device/{deviceId}/authorized.

  Connector

  Destructive

  No auth

• tailscale_list_dns_nameserversA

  tailscaleA

  List the global DNS nameservers configured for the tailnet. Tailscale REST: GET /tailnet/{tailnet}/dns/nameservers.

  ConnectorNo auth

• tailscale_create_auth_keyA

  tailscaleA

  Create a new auth key for the tailnet (used to register new devices). Tailscale REST: POST /tailnet/{tailnet}/keys.

  Connector

  Destructive

  No auth

• tailscale_list_keysA

  tailscaleA

  List auth keys and API access tokens for the tailnet. Tailscale REST: GET /tailnet/{tailnet}/keys.

  ConnectorNo auth

• tailscale_list_dns_searchpathsA

  tailscaleA

  List the DNS search paths (search domains) configured for the tailnet. Tailscale REST: GET /tailnet/{tailnet}/dns/searchpaths.

  ConnectorNo auth

• tailscale_set_device_nameA

  tailscaleA

  Set (rename) a device's name. Tailscale REST: POST /device/{deviceId}/name.

  Connector

  Destructive

  No auth

• tailscale_get_userA

  tailscaleA

  Get a single user by id. Tailscale REST: GET /users/{userId}.

  ConnectorNo auth