Tailscale
Drive a Tailscale node and its tailnet through the CLI and the control-plane API
Connect
Review any command before running it. Package names and URLs come from the server's own registry entry.
Package (npm 2.0.5)
npx -y @tailscale-mcp/[email protected]
Or add to your MCP client config:
{
"mcpServers": {
"tailscale-mcp": {
"command": "npx",
"args": [
"-y",
"@tailscale-mcp/[email protected]"
],
"env": {
"TAILSCALE_API_KEY": "<YOUR_VALUE>",
"TAILSCALE_OAUTH_CLIENT_ID": "<YOUR_VALUE>",
"TAILSCALE_OAUTH_CLIENT_SECRET": "<YOUR_VALUE>",
"TAILSCALE_TAILNET": "<YOUR_VALUE>",
"TAILSCALE_MCP_PRESET": "<YOUR_VALUE>",
"TAILSCALE_MCP_ALLOW_WRITE": "<YOUR_VALUE>",
"TAILSCALE_MCP_ALLOW_DESTRUCTIVE": "<YOUR_VALUE>"
}
}
}
}
TAILSCALE_API_KEYsecret — A control-plane API access token. One of this, the OAuth client pair, or the OAuth JWT file is needed for the tailnet tools; without any of them only the local tools are offered.TAILSCALE_OAUTH_CLIENT_ID— An OAuth client id, used with TAILSCALE_OAUTH_CLIENT_SECRET when there is no API access token.TAILSCALE_OAUTH_CLIENT_SECRETsecret — The OAuth client secret that goes with TAILSCALE_OAUTH_CLIENT_ID.TAILSCALE_TAILNET— The tailnet the control-plane tools act on. Without it they act on the one the credential belongs to.TAILSCALE_MCP_PRESET— Which tools are offered: minimal, core or full.TAILSCALE_MCP_ALLOW_WRITE— Offer the tools that change something. Read-only without it.TAILSCALE_MCP_ALLOW_DESTRUCTIVE— Offer the tools that remove or sever something. Implies the write tier.
Package (oci)
docker run -i --rm ghcr.io/tailscale-mcp/tailscale-mcp:2.0.5
Or add to your MCP client config:
{
"mcpServers": {
"tailscale-mcp": {
"command": "docker",
"args": [
"run",
"-i",
"--rm",
"ghcr.io/tailscale-mcp/tailscale-mcp:2.0.5"
],
"env": {
"TAILSCALE_API_KEY": "<YOUR_VALUE>",
"TAILSCALE_OAUTH_CLIENT_ID": "<YOUR_VALUE>",
"TAILSCALE_OAUTH_CLIENT_SECRET": "<YOUR_VALUE>",
"TAILSCALE_TAILNET": "<YOUR_VALUE>",
"TAILSCALE_MCP_PRESET": "<YOUR_VALUE>",
"TAILSCALE_MCP_ALLOW_WRITE": "<YOUR_VALUE>",
"TAILSCALE_MCP_ALLOW_DESTRUCTIVE": "<YOUR_VALUE>"
}
}
}
}
TAILSCALE_API_KEYsecret — A control-plane API access token. One of this, the OAuth client pair, or the OAuth JWT file is needed for the tailnet tools; without any of them only the local tools are offered.TAILSCALE_OAUTH_CLIENT_ID— An OAuth client id, used with TAILSCALE_OAUTH_CLIENT_SECRET when there is no API access token.TAILSCALE_OAUTH_CLIENT_SECRETsecret — The OAuth client secret that goes with TAILSCALE_OAUTH_CLIENT_ID.TAILSCALE_TAILNET— The tailnet the control-plane tools act on. Without it they act on the one the credential belongs to.TAILSCALE_MCP_PRESET— Which tools are offered: minimal, core or full.TAILSCALE_MCP_ALLOW_WRITE— Offer the tools that change something. Read-only without it.TAILSCALE_MCP_ALLOW_DESTRUCTIVE— Offer the tools that remove or sever something. Implies the write tier.
Related servers
REA
Reverse engineer anything from your terminal or agent with one CLI and MCP server.
browser-use
Browser agents and stealth cloud browsers for AI: run web tasks, fill forms, extract data.
paperclip
Trending hip-hop artist momentum scores across four cultural dimensions.
World Monitor
Real-time global intelligence across conflict, markets, energy, trade, shipping and cyber. 99 tools.
ruflo
AI orchestration with hive-mind swarms, neural networks, and 87 MCP tools for enterprise dev.
Front-End Checklist
Review frontend code and live pages against 386 quality-gated web development rules.
Data from the Official MCP Registry