Tailscale MCP Server

Drive a Tailscale node and its tailnet through the CLI and the control-plane API

Local serverstdio

What is the Tailscale MCP Server?

Tailscale is an MCP integration. Drive a Tailscale node and its tailnet through the CLI and the control-plane API.

Packages and local setup

The published npm package is @tailscale-mcp/tailscale-mcp, version 1.3.2. Its declared MCP transport is stdio.

The package declares TAILSCALE_API_KEY: A control-plane API access token. One of this, the OAuth client pair, or the OAuth JWT file is needed for the tailnet tools; without any of them only the local tools are offered.; TAILSCALE_OAUTH_CLIENT_ID: An OAuth client id, used with TAILSCALE_OAUTH_CLIENT_SECRET when there is no API access token.; TAILSCALE_OAUTH_CLIENT_SECRET: The OAuth client secret that goes with TAILSCALE_OAUTH_CLIENT_ID.; TAILSCALE_TAILNET: The tailnet the control-plane tools act on. Without it they act on the one the credential belongs to.; TAILSCALE_MCP_PRESET: Which tools are offered: minimal, core or full.; TAILSCALE_MCP_ALLOW_WRITE: Offer the tools that change something. Read-only without it.; TAILSCALE_MCP_ALLOW_DESTRUCTIVE: Offer the tools that remove or sever something. Implies the write tier..

The published oci package is ghcr.io/tailscale-mcp/tailscale-mcp:1.3.2. Its declared MCP transport is stdio.

Before connecting

Check the maintainer’s instructions for account access, authentication and the supported client configuration. Once connected, inspect the tools your client receives and try a small task that matches the server’s stated purpose. The registry description does not include a verified, complete tool list.

Project and source

View the publisher’s registry entry · Project repository · Project website. This profile uses version 1.3.2 from the registry. Registration identifies the publisher namespace; it does not establish that this is a first-party integration for every service it connects.

Browse related other integrations MCP servers for tools that cover the same kind of work.

Configuration

VariableDescriptionRequired
TAILSCALE_API_KEYA control-plane API access token. One of this, the OAuth client pair, or the OAuth JWT file is needed for the tailnet tools; without any of them only the local tools are offered.Optional
TAILSCALE_OAUTH_CLIENT_IDAn OAuth client id, used with TAILSCALE_OAUTH_CLIENT_SECRET when there is no API access token.Optional
TAILSCALE_OAUTH_CLIENT_SECRETThe OAuth client secret that goes with TAILSCALE_OAUTH_CLIENT_ID.Optional
TAILSCALE_TAILNETThe tailnet the control-plane tools act on. Without it they act on the one the credential belongs to.Optional
TAILSCALE_MCP_PRESETWhich tools are offered: minimal, core or full.Optional
TAILSCALE_MCP_ALLOW_WRITEOffer the tools that change something. Read-only without it.Optional
TAILSCALE_MCP_ALLOW_DESTRUCTIVEOffer the tools that remove or sever something. Implies the write tier.Optional