Tailscale MCP Server

Ask your agent questions about your tailnet and have it act on the answers. 97 admin-API tools + 6 optional local-CLI diagnostics + 1 always-on catalog tool + 4 resources spanning the Tailscale v2 API - devices, ACLs, DNS, keys and trust credentials, users, invites, webhooks, log streaming, posture, services, and organization tailnets. Backed by 1100+ unit tests and an opt-in live-tailnet integration suite. Its 40 documented tools cover tailscale, device, dns, acl.

People who work with tailscale, device and dns and want it reachable from Claude, Cursor, VS Code, or another MCP client. The project is written in TypeScript.

VERIFIED ACTIVE

LAST COMMIT 2026-09-15 · ★ 29 · #57 OF 945 MAINTAINED OTHER · VERIFIED 2026-09-18

MIT · TypeScript servers · how we verify → /methodology

01 · Install Tailscale MCP Server

before you install - you'll need

Set TAILSCALE_PROFILE, TAILSCALE_TOOLS, TAILSCALE_READONLY, TAILSCALE_WRITE_GROUPS, TAILSCALE_REQUIRE_APPROVAL, TAILSCALE_API_KEY before connecting.

Claude Code

claude mcp add yawlabs-tailscale-mcp -- npx -y @yawlabs/tailscale-mcp

Claude Desktop / Cursor / VS Code - add to config

{
  "mcpServers": {
    "yawlabs-tailscale-mcp": {
      "command": "npx",
      "args": [
        "-y",
        "@yawlabs/tailscale-mcp"
      ]
    }
  }
}

Same JSON for Cursor. For VS Code, rename the top-level key from `mcpServers` to `servers`.

Using another client? Same JSON, different key

Claude Desktop · mcpServers

Cursor · mcpServers

VS Code · servers

Windsurf · mcpServers

Zed · context_servers

Cline · mcpServers

Roo Code · mcpServers

Continue · mcpServers

LibreChat · mcpServers

Gemini CLI · mcpServers

Codex CLI · mcp_servers

Full setup guides: every client.

02 · Evidence

Security posture

What to check before giving this server access to your agent - from the registry, GitHub, and our own probes. We don't score safety; we show what's verifiable.

runs as local process (stdio) - runs on your machine with your user's permissions

license MIT - declared in the repository

npm package @yawlabs/tailscale-mcp - published under the repo owner's npm scope (@yawlabs)

registry namespace io.github.YawLabs is GitHub-verified and matches the repo owner

03 · What Tailscale MCP Server can do

Prose above is summarized from the project's README and registry record - no invented capabilities.

What you can build

With this server connected, an agent can list all devices with status, IPs, OS, and last seen, get detailed info for a specific device, remove a device from the tailnet, and rename a device.

Capability map

Tools grouped from the project's README - what Tailscale MCP Server lets an agent do.

Tailscale

36 tools - e.g. Verify API connection, see tailnet info and device count; List all devices with status, IPs, OS, and last seen; Get detailed info for a specific device

tailscale_status · tailscale_list_devices · tailscale_get_device · tailscale_delete_device · tailscale_rename_device · tailscale_expire_device…

auth & access

4 tools - e.g. Authorize a pending device; Deauthorize a device; Authorize/deauthorize many devices in one call (parallel, per-id error reporting)

tailscale_authorize_device · tailscale_deauthorize_device · tailscale_set_devices_authorized · tailscale_create_oauth_app

Latest releases

v0.20.2 · 2026-09-14

Fixed · The MCP SDK devDependency moves from ^1.29.0 to ^1.30.0, and npm audit goes from 7 findings (3 high) to 0. Every advisory arrived transitively through the SDK: fast-uri 3.1.2 -> 3.1.7, hono 4.12.25 -> 4.13.7…

v0.20.1 · 2026-09-14

Changed · npm and MCP Registry listing metadata: bugs URL, core keywords, and server.json title/repository/websiteUrl · release.sh writes a ## [x.y.z] changelog entry for every release -- promoting [Unreleased] when it…

v0.20.0 · 2026-09-14

Documentation and release tooling only; no change to the published package's behavior. · Changed · the X follow badge moved from the top of the page to the bottom, so the description leads on npm and GitHub (#57).…

04 · Who maintains Tailscale MCP Server

Tailscale MCP Server is maintained by yawlabs. We track 12 MCP servers from yawlabs - 12 actively maintained, 77 combined GitHub stars, oldest repo from Apr 2026. Full record: all servers from yawlabs.

05 · Facts

repository: github.com/yawlabs/tailscale-mcp
website: https://yaw.sh/mcp-servers/tailscale-mcp/
category: other - ranked #57 of 945 actively-maintained other servers as of 2026-09-18.
release cadence: 10+ releases in the last 90 days (latest 2026-09-14)
registry: io.github.YawLabs/tailscale-mcp (active, first published 2026-05-15 · 26 versions)
packages: npm:@yawlabs/tailscale-mcp

06 · Tailscale MCP Server FAQ

Is Tailscale MCP Server still maintained?

Yes - as of 2026-09-18, its last commit was 2026-09-15 and it shipped 10+ releases in the last 90 days. We re-verify nightly.

What can Tailscale MCP Server do?

With this server connected, an agent can list all devices with status, IPs, OS, and last seen, get detailed info for a specific device, remove a device from the tailnet, and rename a device.

How do I install Tailscale MCP Server?

Run `npx -y @yawlabs/tailscale-mcp`. The README documents 6 environment variables (TAILSCALE_PROFILE, TAILSCALE_TOOLS, TAILSCALE_READONLY…) to set first. Set TAILSCALE_PROFILE, TAILSCALE_TOOLS, TAILSCALE_READONLY, TAILSCALE_WRITE_GROUPS, TAILSCALE_REQUIRE_APPROVAL, TAILSCALE_API_KEY before connecting. You can also paste the ready-made client config above.

Does Tailscale MCP Server run locally?

Yes - it's a stdio server: it runs on your machine (via npx) with your user's permissions. Your data stays local unless the server itself calls external APIs.

07 · Alternatives to Tailscale MCP Server

Alternatives to Tailscale MCP Server

Maintained other servers if Tailscale MCP Server isn't the fit.

More MCP servers to compare · 1c Platform Tools · Siren · Time MCP · Creator SEO MCP · Dotnet Template MCP

More TypeScript MCP servers · Thebrain · Md Feedback · Biopharma Catalyst MCP · Bio MCP TS · see all