Home › Other › Tailscale

Tailscale

Drive a Tailscale node and its tailnet through the CLI and the control-plane API

Rust
★ 16 stars Last pushed 2026-10-29 License: Apache-2.0

Connect

Review any command before running it. Package names and URLs come from the server's own registry entry.

Package (npm 2.0.5)

npx -y @tailscale-mcp/[email protected]

Or add to your MCP client config:

{
  "mcpServers": {
    "tailscale-mcp": {
      "command": "npx",
      "args": [
        "-y",
        "@tailscale-mcp/[email protected]"
      ],
      "env": {
        "TAILSCALE_API_KEY": "<YOUR_VALUE>",
        "TAILSCALE_OAUTH_CLIENT_ID": "<YOUR_VALUE>",
        "TAILSCALE_OAUTH_CLIENT_SECRET": "<YOUR_VALUE>",
        "TAILSCALE_TAILNET": "<YOUR_VALUE>",
        "TAILSCALE_MCP_PRESET": "<YOUR_VALUE>",
        "TAILSCALE_MCP_ALLOW_WRITE": "<YOUR_VALUE>",
        "TAILSCALE_MCP_ALLOW_DESTRUCTIVE": "<YOUR_VALUE>"
      }
    }
  }
}
  • TAILSCALE_API_KEY secret — A control-plane API access token. One of this, the OAuth client pair, or the OAuth JWT file is needed for the tailnet tools; without any of them only the local tools are offered.
  • TAILSCALE_OAUTH_CLIENT_ID — An OAuth client id, used with TAILSCALE_OAUTH_CLIENT_SECRET when there is no API access token.
  • TAILSCALE_OAUTH_CLIENT_SECRET secret — The OAuth client secret that goes with TAILSCALE_OAUTH_CLIENT_ID.
  • TAILSCALE_TAILNET — The tailnet the control-plane tools act on. Without it they act on the one the credential belongs to.
  • TAILSCALE_MCP_PRESET — Which tools are offered: minimal, core or full.
  • TAILSCALE_MCP_ALLOW_WRITE — Offer the tools that change something. Read-only without it.
  • TAILSCALE_MCP_ALLOW_DESTRUCTIVE — Offer the tools that remove or sever something. Implies the write tier.

Package (oci)

docker run -i --rm ghcr.io/tailscale-mcp/tailscale-mcp:2.0.5

Or add to your MCP client config:

{
  "mcpServers": {
    "tailscale-mcp": {
      "command": "docker",
      "args": [
        "run",
        "-i",
        "--rm",
        "ghcr.io/tailscale-mcp/tailscale-mcp:2.0.5"
      ],
      "env": {
        "TAILSCALE_API_KEY": "<YOUR_VALUE>",
        "TAILSCALE_OAUTH_CLIENT_ID": "<YOUR_VALUE>",
        "TAILSCALE_OAUTH_CLIENT_SECRET": "<YOUR_VALUE>",
        "TAILSCALE_TAILNET": "<YOUR_VALUE>",
        "TAILSCALE_MCP_PRESET": "<YOUR_VALUE>",
        "TAILSCALE_MCP_ALLOW_WRITE": "<YOUR_VALUE>",
        "TAILSCALE_MCP_ALLOW_DESTRUCTIVE": "<YOUR_VALUE>"
      }
    }
  }
}
  • TAILSCALE_API_KEY secret — A control-plane API access token. One of this, the OAuth client pair, or the OAuth JWT file is needed for the tailnet tools; without any of them only the local tools are offered.
  • TAILSCALE_OAUTH_CLIENT_ID — An OAuth client id, used with TAILSCALE_OAUTH_CLIENT_SECRET when there is no API access token.
  • TAILSCALE_OAUTH_CLIENT_SECRET secret — The OAuth client secret that goes with TAILSCALE_OAUTH_CLIENT_ID.
  • TAILSCALE_TAILNET — The tailnet the control-plane tools act on. Without it they act on the one the credential belongs to.
  • TAILSCALE_MCP_PRESET — Which tools are offered: minimal, core or full.
  • TAILSCALE_MCP_ALLOW_WRITE — Offer the tools that change something. Read-only without it.
  • TAILSCALE_MCP_ALLOW_DESTRUCTIVE — Offer the tools that remove or sever something. Implies the write tier.

Related servers

Data from the Official MCP Registry