INDIVIDUAL MCP TOOL

tailscale_create_auth_key

Create a new auth key for the tailnet (used to register new devices).

usefulapi.ionone authenticationAvailability not checked

LIVE ENDPOINT

https://tailscale.usefulapi.io/mcp

No auth detected

Connect to this endpoint to inspect the live schema for tailscale_create_auth_key and invoke it with your own arguments.

{}

Potential side effects detected · medium confidence · heuristic, not a guarantee.

CONNECT WITH APPROVAL

Review this server and its permissions before adding it. Secret placeholders must be set locally.

Codex

~/.codex/config.toml

[mcp_servers.tailscale-mcp]
url = "https://tailscale.usefulapi.io/mcp"
enabled = true

Claude Code

.mcp.json

{
  "mcpServers": {
    "tailscale-mcp": {
      "type": "http",
      "url": "https://tailscale.usefulapi.io/mcp"
    }
  }
}

Claude Desktop

Settings → Connectors → Add custom connector

Name: tailscale-mcp
Remote MCP URL: https://tailscale.usefulapi.io/mcp

Add this remote URL as a custom connector in Claude Desktop. Availability depends on the user plan and workspace policy.

Cursor

.cursor/mcp.json

{
  "mcpServers": {
    "tailscale-mcp": {
      "url": "https://tailscale.usefulapi.io/mcp"
    }
  }
}

Visual Studio Code

.vscode/mcp.json

Add to Visual Studio Code

{
  "servers": {
    "tailscale-mcp": {
      "type": "http",
      "url": "https://tailscale.usefulapi.io/mcp"
    }
  }
}

Generic MCP

Client-specific MCP configuration

{
  "name": "tailscale-mcp",
  "transport": "streamable-http",
  "url": "https://tailscale.usefulapi.io/mcp"
}

MCP Inspector

Run the official MCP Inspector locally and enter the indexed Streamable HTTP endpoint.

tailscale_list_devices — List all devices in the tailnet (name, addresses, OS, last seen, tags, etc.
tailscale_get_device — Get a single device by id.
tailscale_list_device_routes — List the subnet routes a device advertises and which are enabled.
tailscale_list_keys — List auth keys and API access tokens for the tailnet.
tailscale_get_key — Get details of a single auth key / API access token by id (capabilities, expiry, usage).
tailscale_get_policy_file — Get the tailnet's ACL / policy file (returned as JSON via the Accept header, not HuJSON).
tailscale_list_dns_nameservers — List the global DNS nameservers configured for the tailnet.
tailscale_get_dns_preferences — Get the tailnet's DNS preferences (e.