Tailscale MCP Server

Name: Tailscale MCP Server
Author: Jacob

Manage a Tailscale tailnet's devices, ACLs, DNS, keys and local connection from an MCP client

By Jacob (individual) TypeScript Local · stdio DevOps and monitoring Security

GitHub npm Website

57 popularity score ★ 150 ↓ 1.8k/wk

Connect your client

Local (npm)

Add in one click

Add to Cursor Add to VS Code Add to LM Studio Add to Goose

Opens the app, which asks before it adds the server. Then replace each <NAME> in its settings with your value.

Or add it by command or config

It needs TAILSCALE_API_KEY. Replace each <NAME> with your value.

Claude CodeTerminal

claude mcp add tailscale -e TAILSCALE_API_KEY=<TAILSCALE_API_KEY> -- npx -y @hexsleeves/tailscale-mcp-server

Claude Desktopclaude_desktop_config.json

{
  "mcpServers": {
    "tailscale": {
      "command": "npx",
      "args": [
        "-y",
        "@hexsleeves/tailscale-mcp-server"
      ],
      "env": {
        "TAILSCALE_API_KEY": "<TAILSCALE_API_KEY>"
      }
    }
  }
}

Cursor~/.cursor/mcp.json

{
  "mcpServers": {
    "tailscale": {
      "command": "npx",
      "args": [
        "-y",
        "@hexsleeves/tailscale-mcp-server"
      ],
      "env": {
        "TAILSCALE_API_KEY": "<TAILSCALE_API_KEY>"
      }
    }
  }
}

VS Code.vscode/mcp.json

{
  "servers": {
    "tailscale": {
      "type": "stdio",
      "command": "npx",
      "args": [
        "-y",
        "@hexsleeves/tailscale-mcp-server"
      ],
      "env": {
        "TAILSCALE_API_KEY": "<TAILSCALE_API_KEY>"
      }
    }
  }
}

Codex~/.codex/config.toml

[mcp_servers.tailscale]
command = "npx"
args = ["-y", "@hexsleeves/tailscale-mcp-server"]

[mcp_servers.tailscale.env]
TAILSCALE_API_KEY = "<TAILSCALE_API_KEY>"

Gemini CLITerminal

gemini mcp add --scope user -e TAILSCALE_API_KEY=<TAILSCALE_API_KEY> tailscale npx -- -y @hexsleeves/tailscale-mcp-server

Settings 12

`TAILSCALE_API_KEY`	Required: Tailscale API key. Alternatively set TAILSCALE_OAUTH_CLIENT_ID and TAILSCALE_OAUTH_CLIENT_SECRET (preferred by its docs); one of the two is needed to start.
`TAILSCALE_OAUTH_CLIENT_ID`	Optional: OAuth client ID, used instead of an API key; needs the secret too.
`TAILSCALE_OAUTH_CLIENT_SECRET`	Optional: OAuth client secret, set together with the client ID.
`TAILSCALE_TAILNET`	Optional: Tailnet name; defaults to - (the credential's default tailnet).
`TAILSCALE_ALLOWED_TOOL_RISK`	Optional: Highest allowed tool risk: read (default), write or admin.
`TAILSCALE_CLI_PATH`	Optional: Path to the tailscale binary; defaults to tailscale.
`TAILSCALE_API_BASE_URL`	Optional: API base URL; defaults to https://api.tailscale.com, https required except localhost.
`MCP_TRANSPORT`	Optional: stdio (default) or http.
`MCP_HTTP_BEARER_TOKEN`	Optional: Bearer token of 32+ characters, required in HTTP mode.
`MCP_HTTP_BIND_HOST`	Optional: HTTP bind address; defaults to 127.0.0.1.
`MCP_HTTP_PORT`	Optional: HTTP port; defaults to 3000.
`LOG_LEVEL`	Optional: debug, info (default), warn or error.

What it does

Tailscale MCP Server is a community-built server, not from Tailscale, that works on a tailnet in two ways. Most of its tools call the Tailscale REST API: they list devices, authorize or remove them, turn subnet routes on or off, and read or change the ACL, policy file, DNS settings, auth keys, webhooks, device tags, file sharing and network lock. A smaller set runs the local tailscale CLI on the machine where the server runs: status, version, ping to a peer, bringing the host up or down, and choosing an exit node.

Version 1.3.4 registers 19 tools (src/mcp/tools at the v1.3.4 tag). It also offers four read-only resources (tailnet summary, device list, one device, current ACL) and two prompts, one to diagnose connectivity and one to review an ACL change.

Each tool has a risk level. With TAILSCALE_ALLOWED_TOOL_RISK left at its default of read, every tool still shows up in the client, but any call that would change something is refused when it runs. Setting it to write allows changes to ACLs, DNS, routes, tags, webhooks and the policy file. Setting it to admin also allows deleting or deauthorizing devices, connecting or disconnecting the host, creating or deleting auth keys, changing network lock and controlling exit nodes.

It runs over stdio by default. An HTTP mode that requires a bearer token is meant for reaching it privately inside a tailnet.

What it needs

Runtime	Node.js 20+

Node.js 20+ for npx (Bun 1.3+ also works). A Tailscale account and either an OAuth client (TAILSCALE_OAUTH_CLIENT_ID plus TAILSCALE_OAUTH_CLIENT_SECRET, which its docs prefer) or an API key (TAILSCALE_API_KEY) from the admin console; the server will not start without one of them. The CLI-backed tools (get_network_status, connect_network, disconnect_network, ping_peer, get_version, exit node set or clear) also need the tailscale CLI installed on the same machine.

Limits

Read-only unless TAILSCALE_ALLOWED_TOOL_RISK is set to write or admin; the code checks this on each call. Credentials are needed even for the CLI-only tools: the config check exits without OAuth or an API key (src/config/env.ts). HTTP mode exits without an MCP_HTTP_BEARER_TOKEN of at least 32 characters and binds to 127.0.0.1 unless --host or MCP_HTTP_BIND_HOST is given. The published Docker image starts in HTTP mode (its Dockerfile CMD passes --http), so the README's docker run -i stdio snippet stops because no bearer token is set. The GitHub README still shows an older 9-tool list and LOG_LEVEL numbers; the npm README for 1.3.4 matches the code.

Who it suits

It suits Tailscale admins who want an assistant to look over devices, ACLs and DNS, starting read-only and opening write or admin access only when they decide to. Because it can also bring the host machine up or down and pick exit nodes through the local CLI, it fits best on a machine that is itself on the tailnet. It is a third-party project, not Tailscale's own. Anyone who only needs to read inventory can keep the default read level. Anyone who wants a hosted endpoint will not find one here: it runs on your own machine, or on your own server in HTTP mode.

Tools 19

list_devices: Lists the devices in the configured tailnet
device_action: Authorizes a device or expires its key (write), or deauthorizes or deletes it (admin)
manage_routes: Turns a device's advertised subnet routes on or off
get_network_status: Shows this host's Tailscale status from the local CLI
connect_network: Brings this host up on Tailscale, with options such as routes, hostname or auth key
disconnect_network: Takes this host off Tailscale
ping_peer: Pings a peer through the local CLI
get_version: Reports the local tailscale CLI version
get_tailnet_info: Returns details about the configured tailnet
manage_file_sharing: Reads or changes the tailnet's file sharing setting
manage_exit_nodes: Lists exit nodes, or sets, clears or advertises one
manage_webhooks: Lists, creates, deletes or tests tailnet webhooks
manage_device_tags: Reads or replaces a device's tags
get_version_info: Returns this server's own version
manage_acl: Reads, validates or updates the tailnet ACL
manage_dns: Reads or updates tailnet DNS settings
manage_keys: Lists auth keys, or creates and deletes them
manage_policy_file: Reads or updates the tailnet policy file
manage_network_lock: Shows network lock status and changes it

Popularity

57 popularity score, on our list (the bar is 36)

★ 150 ↓ 1.8k/wk

GitHub stars	150	26.1 points
Stars in 30 days	+6	4.2 points
npm downloads, last week	1,829	26.1 points

Measured 2026-11-07. How the score works.

Where it is published

Code	hexsleeves/tailscale-mcp ★ 150
npm	@hexsleeves/tailscale-mcp-server 1.3.4, 2026-07-25, the one the command runs
Docker Hub	hexsleeves/tailscale-mcp-server

What it can reach

Runs	On your machine
Reaches	The internet, Your account at a service, Runs shell commands
Changes things	Yes: it can write, send, create or delete
Sign-in	An API key or token
Licence	MIT (npm)
Last code change	2026-10-26

Runs on your machine and calls the Tailscale API (api.tailscale.com by default) with an API key or OAuth client credentials you provide. With write or admin risk allowed, it can change the tailnet ACL, DNS and policy file, delete or deauthorize devices, and create or delete auth keys. Its CLI tools run the local tailscale binary and, at admin level, can connect or disconnect the host, change its exit node, or pass an auth key and login server to tailscale up. The risk level defaults to read and is checked on every call. HTTP mode requires a bearer token and checks the Host header; its docs advise against exposing it with Tailscale Funnel because that makes it public.

Over time

GitHub stars 150 +6 (+4 %)

151144

12 Oct 20267 Nov 2026

npm downloads a week 1.8k +1.8k (+4473 %)

187k16

20 Oct 20257 Nov 2026

Before the site measured it, read from npm's daily download counts.

Popularity score 57 +5 (+9 %)

5746

12 Oct 20267 Nov 2026

What is rising across the directory

Sources

Page checked 2026-10-15.

Badge for your README

Shows this server's rank in its category, and stars for a server that runs on your machine. It updates every hour.

MarkdownREADME.md

[![Tailscale MCP Server on EveryMCPServer](https://everymcpserver.com/badge/tailscale-mcp.svg)](https://everymcpserver.com/servers/tailscale-mcp)

Connect your client

Add in one click

Or add it by command or config

Settings 12

What it does

What it needs

Limits

Who it suits

Tools 19

Similar servers

SSH MCP Server

Linux MCP Server

MCP Server Docker

Harness MCP Server

MCP Server Kubernetes

StackQL MCP Server