tailscale

connects

tailscale.usefulapi.io

Read devices, users, keys, ACLs and DNS for a tailnet; manage devices, routes and auth keys.

https://tailscale.usefulapi.io/mcpOAuthMCP 2025-06-18v1.0.0last checked 3 Sep 2026spoke MCP on 3 of 3 checks (30 days)initialize in 389 ms

Will my client connect?

Decided from what the probe found at the endpoint, and from what each client's own documentation says it can complete. Every row carries the day that documentation was read.

✓Claude CodeConnects

The authorization server advertises RFC 7591 registration, so Claude Code can register itself and sign you in through the browser.

claude mcp add --transport http tailscale https://tailscale.usefulapi.io/mcp

Claude Code docs · read on 2026-08-30

✓Claude (claude.ai & Desktop)Connects

The authorization server advertises RFC 7591 registration, so Claude (claude.ai & Desktop) can register itself and sign you in through the browser.

Settings → Connectors → Add custom connector, then paste https://tailscale.usefulapi.io/mcp.

Claude (claude.ai & Desktop) docs · read on 2026-08-30

✓ChatGPTConnects

The authorization server advertises RFC 7591 registration, so ChatGPT can register itself and sign you in through the browser.

Settings → Apps → Advanced settings → Developer mode, then create a connector pointing at https://tailscale.usefulapi.io/mcp.

ChatGPT docs · read on 2026-08-30

✓CursorConnects

The authorization server advertises RFC 7591 registration, so Cursor can register itself and sign you in through the browser.

{
  "mcpServers": {
    "tailscale": {
      "url": "https://tailscale.usefulapi.io/mcp"
    }
  }
}

Cursor docs · read on 2026-08-30

✓VS Code (Copilot)Connects

The authorization server advertises RFC 7591 registration, so VS Code (Copilot) can register itself and sign you in through the browser.

{
  "servers": {
    "tailscale": {
      "type": "http",
      "url": "https://tailscale.usefulapi.io/mcp"
    }
  }
}

VS Code (Copilot) docs · read on 2026-08-30

How to authenticate

Checked against the endpoint by our probe on 3 Sep 2026. These are the capabilities the server advertises, not a prediction about any particular client.

Scheme	OAuth
Issuer	https://tailscale.usefulapi.io
Dynamic client registration	✓Advertised (RFC 7591)
Client ID Metadata Document	✕Not advertised
PKCE	✓plain, S256
Grant types	authorization_code, refresh_token
Scopes	read, write
Protected-resource metadata	✓Published (RFC 9728)
Anonymous access	Handshake succeeds; 22 tools listable

What the probe found

22 tools usable without signing in

The server exposes a public surface before authorization: tailscale_list_devices, tailscale_get_device, tailscale_list_device_routes, tailscale_list_keys, tailscale_get_key, tailscale_get_policy_file, tailscale_list_dns_nameservers, tailscale_get_dns_preferences, tailscale_list_dns_searchpaths, tailscale_get_split_dns, tailscale_list_users, tailscale_get_user, tailscale_list_webhooks, tailscale_get_tailnet_settings, tailscale_authorize_device, tailscale_set_device_name, tailscale_set_device_tags, tailscale_expire_device_key, tailscale_set_device_routes, tailscale_create_auth_key, tailscale_delete_key, tailscale_delete_device.

Tools

tailscale_authorize_devicetailscale_create_auth_keytailscale_delete_devicetailscale_delete_keytailscale_expire_device_keytailscale_get_devicetailscale_get_dns_preferencestailscale_get_keytailscale_get_policy_filetailscale_get_split_dnstailscale_get_tailnet_settingstailscale_get_usertailscale_list_device_routestailscale_list_devicestailscale_list_dns_nameserverstailscale_list_dns_searchpathstailscale_list_keystailscale_list_userstailscale_list_webhookstailscale_set_device_nametailscale_set_device_routestailscale_set_device_tags

Contract history

3 Sep 2026v1.0.0first recorded contract

Get alerted when this contract changes

Depend on this server? Leave an email and get a message when a probe records a change — a tool removed, an argument newly required, an enum narrowed. Alerts are being built; signing up is what tells us to hurry.

Prefer a feed reader? This page's contract changes are also an Atom feed.

Own this server?

Status badge

Status for a README, from the last probe — cached an hour, so up to seven hours behind the endpoint. Links back to this page.

[![MCP status](https://mcpi.app/servers/tailscale/badge.svg)](https://mcpi.app/servers/tailscale)