Tailscale MCP Server
Looking to manage your Tailscale network through Claude or other AI assistants? This server bridges the Tailscale API so you can query device status, manage ACLs, and control your tailnet without switching contexts. Reach for it when you're troubleshooting connectivity issues during a conversation, need to quickly check which devices are online, or want to adjust network settings while working through infrastructure tasks. The source repository doesn't detail every exposed operation, but the core premise is solid: keep your VPN management in the same interface where you're already doing your thinking and planning.
- GitHub stars
- 35
- tools
- 30
- transport
- STDIO
- last updated
- Nov 12, 2026
Tools
30 toolsPublic tool metadata for what this MCP can expose to an agent.
tailscale_tool_groupsAlways-registered tool that reports which tool groups are loaded and why a given tool is unavailable, and lists each group with its availability and the environment change needed to restore withheld tools.
Always-registered tool that reports which tool groups are loaded and why a given tool is unavailable, and lists each group with its availability and the environment change needed to restore withheld tools.
No parameter schema in public metadata yet.
tailscale_update_aclReplaces the tailnet ACL policy file, which can lock every device out of the tailnet.
Replaces the tailnet ACL policy file, which can lock every device out of the tailnet.
No parameter schema in public metadata yet.
tailscale_delete_deviceDeletes a device from the tailnet; the device must re-enroll.
Deletes a device from the tailnet; the device must re-enroll.
No parameter schema in public metadata yet.
tailscale_delete_userDeletes a user from the tailnet; there is no undelete.
Deletes a user from the tailnet; there is no undelete.
No parameter schema in public metadata yet.
tailscale_delete_tailnetDestroys an entire tailnet.
Destroys an entire tailnet.
No parameter schema in public metadata yet.
tailscale_delete_keyDeletes an auth key; the secret is never returned again.
Deletes an auth key; the secret is never returned again.
No parameter schema in public metadata yet.
tailscale_delete_oauth_appDeletes an OAuth app; the secret is never returned again.
Deletes an OAuth app; the secret is never returned again.
No parameter schema in public metadata yet.
tailscale_delete_webhookDeletes a webhook endpoint; the secret is never returned again.
Deletes a webhook endpoint; the secret is never returned again.
No parameter schema in public metadata yet.
tailscale_delete_log_stream_configDeletes a log streaming configuration; the secret is never returned again.
Deletes a log streaming configuration; the secret is never returned again.
No parameter schema in public metadata yet.
tailscale_delete_posture_integrationDeletes a posture integration; the secret is never returned again.
Deletes a posture integration; the secret is never returned again.
No parameter schema in public metadata yet.
tailscale_suspend_userSuspends a user; reversed by tailscale_restore_user.
Suspends a user; reversed by tailscale_restore_user.
No parameter schema in public metadata yet.
tailscale_restore_userRestores a suspended user.
Restores a suspended user.
No parameter schema in public metadata yet.
tailscale_deauthorize_deviceDeauthorizes a device; reversed by tailscale_authorize_device.
Deauthorizes a device; reversed by tailscale_authorize_device.
No parameter schema in public metadata yet.
tailscale_authorize_deviceAuthorizes a device.
Authorizes a device.
No parameter schema in public metadata yet.
tailscale_list_devicesLists devices in the tailnet.
Lists devices in the tailnet.
No parameter schema in public metadata yet.
tailscale_list_usersLists users in the tailnet.
Lists users in the tailnet.
No parameter schema in public metadata yet.
tailscale_get_aclGets the tailnet ACL policy file.
Gets the tailnet ACL policy file.
No parameter schema in public metadata yet.
tailscale_diff_acl_accessDiffs access between ACL policy versions.
Diffs access between ACL policy versions.
No parameter schema in public metadata yet.
tailscale_get_audit_logGets the tailnet audit log.
Gets the tailnet audit log.
No parameter schema in public metadata yet.
tailscale_get_network_flow_logsGets network flow logs.
Gets network flow logs.
No parameter schema in public metadata yet.
tailscale_local_statusGets local Tailscale CLI status.
Gets local Tailscale CLI status.
No parameter schema in public metadata yet.
tailscale_get_dns_configurationGets the tailnet DNS configuration.
Gets the tailnet DNS configuration.
No parameter schema in public metadata yet.
tailscale_set_dns_configurationSets the tailnet DNS configuration.
Sets the tailnet DNS configuration.
No parameter schema in public metadata yet.
tailscale_create_device_inviteCreates a device invite.
Creates a device invite.
No parameter schema in public metadata yet.
tailscale_resend_device_inviteResends a device invite.
Resends a device invite.
No parameter schema in public metadata yet.
tailscale_accept_device_inviteAccepts a device invite.
Accepts a device invite.
No parameter schema in public metadata yet.
tailscale_create_user_inviteCreates a user invite.
Creates a user invite.
No parameter schema in public metadata yet.
tailscale_delete_user_inviteDeletes a user invite.
Deletes a user invite.
No parameter schema in public metadata yet.
tailscale_resend_user_inviteResends a user invite.
Resends a user invite.
No parameter schema in public metadata yet.
tailscale_create_oauth_appCreates an OAuth app.
Creates an OAuth app.
No parameter schema in public metadata yet.
Sponsors
Agent CaffeineSponsoredClose your lid, come back to finished work
SnugSponsoredThe clipboard manager for the AI eraPromote your product hereReach 125k+ visitors monthly
WaxSponsoredBlock anything with supervision, without erasing your iPhonePromote your product hereReach 125k+ visitors monthly
knobsSponsoredSee your site on any phone, any day, in any languageReadme
@yawlabs/tailscale-mcp
One click adds this to your local Yaw MCP config so it's available in every Yaw Terminal session. Or install manually below.
Details
- Repository
- github.com/yawlabs/tailscale-mcp
- Website
- yaw.sh/mcp-servers/tailscale-mcp
- Package
@yawlabs/tailscale-mcp- Transport
- STDIO
- Registry
- MCP registry, active