Tailscale MCP Server

A Model Context Protocol (MCP) server that provides seamless integration with Tailscale's CLI commands and REST API, enabling automated network management and monitoring through a standardized interface.

What This Tool Does

Provides programmatic access to Tailscale network operations including:

Installation

NPX (Recommended)

```bash

npx --package=@hexsleeves/tailscale-mcp-server tailscale-mcp-server

```

Docker

```bash

docker run -d \

--name tailscale-mcp \

-e TAILSCALE_API_KEY=your_api_key \

-e TAILSCALE_TAILNET=your_tailnet \

ghcr.io/hexsleeves/tailscale-mcp-server:latest

```

Global Installation

```bash

npm install -g @hexsleeves/tailscale-mcp-server

```

Configuration

Add to your Claude Desktop configuration file (`~/.claude/claude_desktop_config.json`):

```json

{

"mcpServers": {

"tailscale": {

"command": "npx",

"args": [

"--package=@hexsleeves/tailscale-mcp-server",

"tailscale-mcp-server"

],

"env": {

"TAILSCALE_API_KEY": "your-api-key-here",

"TAILSCALE_TAILNET": "your-tailnet-name"

}

}

}

}

```

Environment Variables

Authentication (choose one)

**Option 1: API Key**

**Option 2: OAuth (Recommended for automation)**

Optional Configuration

Available Tools

Device Management

Network Operations

System Information

Usage Examples

List All Devices

Use the `list_devices` tool to see all devices in your Tailscale network with their status, IP addresses, and online/offline state.

Authorize a New Device

Use `device_action` with action `authorize` and provide the device ID to authorize a pending device on your network.

Check Network Status

Use `get_network_status` to see your current Tailscale connection status, IP addresses, and peer information.

Manage Device Routes

Use `manage_routes` to enable or disable subnet routing for specific devices, allowing them to act as gateways for other networks.

Ping a Peer

Use `ping_peer` with a peer's hostname or IP to test connectivity and measure latency between devices.

OAuth Setup (Recommended for Automation)

1. Go to [Tailscale OAuth Settings](https://login.tailscale.com/admin/settings/oauth)

2. Click "Generate OAuth client"

3. Select required scopes (e.g., `devices:read`, `devices:core` for device management)

4. Copy the client ID and secret

5. Use in your configuration instead of API key

OAuth provides scoped permissions, doesn't expire, and isn't tied to a specific user account.

Constraints

Development

```bash

Clone repository

git clone https://github.com/HexSleeves/tailscale-mcp-server.git

cd tailscale-mcp-server

Install dependencies (Bun recommended, npm supported)

bun install # or: npm install

Setup environment

cp .env.example .env

Edit .env with your Tailscale credentials

Build and run

bun run build # or: npm run build

bun start # or: npm start

```

Resources