How do I connect this MCP to my AI client?

You subscribe to the MCP on Vinkius and then connect your client like Claude or Cursor. Once connected, the capabilities are immediately available to your agent.

Do I need to provide my Tailscale credentials?

Yes, you will need to enter your Tailscale API Key to authorize the MCP to manage your tailnet.

Can I manage my ACLs through this MCP?

Yes, the MCP includes capabilities to retrieve and update your HuJSON policy files directly.

Which AI clients are compatible?

This MCP works with any MCP-compatible client, including Claude, Cursor, and Windsurf.

Is my network data secure?

The MCP uses your Tailscale API key to perform authorized actions, maintaining the zero-trust principles of your existing infrastructure.

Can I update my network's security policy (ACL) using this server?

Yes! You can use get_tailnet_acl to view the current HuJSON policy and update_tailnet_acl to apply changes directly to your tailnet configuration.

How do I authorize a new device that is pending approval?

Use the authorize_device capability with the specific device_id and set the authorized parameter to true. This allows you to manage node entry without the admin console.

Is it possible to generate temporary authentication keys for my servers?

Absolutely. Use the create_auth_key capability. You can optionally provide capabilities like 'ephemeral' or 'reusable' in the JSON payload to define how the key should behave.

An astronaut overseeing a futuristic data hub

Download PDF Markdown Version

Connect Tailscale to ChatGPT, Claude and Gemini

Set it up once and it works in ChatGPT, Claude, Cursor, and any other client you love. It all runs safely in the background, so you can relax and focus on what really matters. Run your zero-trust infrastructure through your AI agent.

Ask AI about this Connector

Developed, maintained, and hosted by Vinkius.

MCP VERIFIED · PRODUCTION READY · VINKIUS GUARANTEED

Waiting for input…

Works with modern AI clients that support MCP, including ChatGPT, Claude, Cursor, and more.

Your AI does the work. We keep it safe and sound.

No other AI tool gives you this. Your workflow runs in the client you already love, your account stays protected, and you decide what the agent can and cannot do. It is the whole reason to make the switch.

Each Connector lives inside our infrastructure, the same place where your workflow runs. The three things below are already part of it, working quietly in the background so you never have to think about them. Nothing to add, nothing to set up, nothing to worry about.

V8 Isolate01

Each Connector runs inside its own sealed environment.

Each Connector runs inside its own sealed V8 runtime — no access to your files, your system, or other servers. A Connector never sees past its own request.

Kill Switch02

One switch stops every agent. Instantly.

One action deactivates every Connector, revokes every token, and ends every session at once. AI Governance keeps the record.

FinOps per User03

Spending limits that pause instead of surprise.

Every user keeps their own connections and credentials, isolated from everyone else. Anything that would cross your spending limit is held for your approval, not billed.

Three controls, built into the layer your AI connects through.

Curated set · 13 capabilities

We ship only the actions that matter.

Capability set01 / 04

01-04

4 capabilities in this set.

Part of 13 available through Tailscale.

01
Get device
This capability fetches specific details for a single device in your tailnet.
02
Delete device
Use this to remove a decommissioned device from your network using its ID.
03
Get tailnet acl
This capability retrieves your current HuJSON policy files for access control.
04
Get auth key
This capability pulls the details of a specific authentication key.

Capability set02 / 04

05-07

3 capabilities in this set.

Part of 13 available through Tailscale.

05
Get user
Use this to fetch profile information for a specific user in your tailnet.
06
List auth keys
This capability returns a list of all existing authentication keys.
07
List tailnet devices
This capability provides a full list of all nodes currently in your tailnet.

Capability set03 / 04

08-10

3 capabilities in this set.

Part of 13 available through Tailscale.

08
Authorize device
Use this to grant authorization to a new machine joining the network.
09
Create auth key
This capability generates a new authentication key for node onboarding.
10
Delete auth key
Use this to revoke or remove an authentication key.

Capability set04 / 04

11-13

3 capabilities in this set.

Part of 13 available through Tailscale.

11
List users
This capability returns a list of all users within your tailnet.
12
Update device tags
Use this to modify the tags assigned to a specific device.
13
Update tailnet acl
This capability allows you to modify your HuJSON access control policies.

Real work

What teams actually run

Automated Node Onboarding

Ask your agent to create a new auth key and use it to bring a new server into the tailnet.

Security Policy Updates

Request an update to your ACLs to change access permissions for specific user groups.

Fleet Organization

Use the agent to apply tags to groups of devices for better network management.

Network Auditing

Quickly check which users are active and which devices are currently connected.

Automate a task

Put Tailscale to work on one thing.

Step-by-step automations your AI runs through this Connector: the workflow, the prompts to start with, and the exact capabilities behind each move.

One connector, every AI

Tailscale works with the most popular AI clients.

These are the most popular clients, each with a step-by-step guide: one link, set up once, with governance and visibility built in. And because everything runs on the MCP standard, the same connection also works in any other compatible client — nothing to rebuild.

Building your own app? The connector is yours to use.

You don't need a client to put Tailscale to work: the same hosted connection plugs into your own applications and agent code, with the same governance on every request. Build with it, chat with it — one connection for both.

Observed, not estimated

993ms average. Fast in production.

Tailscale is checked daily against the live service.

Daily averagePeak 1143ms

Oct 3Today

Fastest day: 803ms
Slowest day: 1143ms
14-day trend: Improving-7%

Connect your client

One URL. Every client.

Activate the Connector, copy your link, and paste it into the client you already use. 13 capabilities arrive ready to run.

Preview access · not provider authentication

The vk_preview_* token belongs to Vinkius preview infrastructure. It lets Claude discover and display the capabilities of Tailscale, so you can see the experience inside your AI.

It does not authenticate your account with Tailscale. Actions requiring credentials or live account data may not run until you activate the Connector and authorize the service.

Tailscale Connector

You're all set. Choose your MCP client and follow the setup instructions.

Connector linkhttps://edge.vinkius.com/vk_preview_rCjYDxccyBQHR5o8xMpQrvp3OV1s24bpVdqdPLwd/mcp

Claude Desktop

Follow the steps below to connect in seconds.

1In Claude Desktop, open Settings → Connectors.
2Click “Add custom connector” and paste the connector link above as the remote MCP server URL.
3Click Add and start a new chat — Tailscale capabilities are ready to use.

Configuration · claude_desktop_config.jsonCopy

{
  "mcpServers": {
    "tailscale-mcp": {
      "url": "https://edge.vinkius.com/vk_preview_rCjYDxccyBQHR5o8xMpQrvp3OV1s24bpVdqdPLwd/mcp"
    }
  }
}

Claude
ChatGPT
Cursor
VS Code
Windsurf
Claude Code
JetBrains
Cline

Step-by-step instructions for each client are in the guide. How to connect

Guided setup for Claude? Set up Tailscale in Claude and other AIs

See all the AI clients this connector works with ↑

Who it's for

Built for the work Tailscale owners hand off.

This MCP is built for technical professionals managing zero-trust networks.

01
DevOps Engineers
They use the agent to manage node tags and generate keys for CI/CD pipelines.
02
Security Teams
They use the agent to audit users and update ACL policies for compliance.
03
IT Administrators
They use the agent to authorize new devices and clean up old nodes.

FAQ

Questions Tailscale owners ask.

01
How do I connect this MCP to my AI client?
You subscribe to the MCP on Vinkius and then connect your client like Claude or Cursor. Once connected, the capabilities are immediately available to your agent.
02
Do I need to provide my Tailscale credentials?
Yes, you will need to enter your Tailscale API Key to authorize the MCP to manage your tailnet.
03
Can I manage my ACLs through this MCP?
Yes, the MCP includes capabilities to retrieve and update your HuJSON policy files directly.
04
Which AI clients are compatible?
This MCP works with any MCP-compatible client, including Claude, Cursor, and Windsurf.
05
Is my network data secure?
The MCP uses your Tailscale API key to perform authorized actions, maintaining the zero-trust principles of your existing infrastructure.
06
Can I update my network's security policy (ACL) using this server?
Yes! You can use get_tailnet_acl to view the current HuJSON policy and update_tailnet_acl to apply changes directly to your tailnet configuration.
07
How do I authorize a new device that is pending approval?
Use the authorize_device capability with the specific device_id and set the authorized parameter to true. This allows you to manage node entry without the admin console.
08
Is it possible to generate temporary authentication keys for my servers?
Absolutely. Use the create_auth_key capability. You can optionally provide capabilities like 'ephemeral' or 'reusable' in the JSON payload to define how the key should behave.

Explore

More in Loved By Devs

Connect Tailscale to Claude, Cursor, ChatGPT & more

Your AI does the work. We keep it safe and sound.

Each Connector runs inside its own sealed environment.

One switch stops every agent. Instantly.

Spending limits that pause instead of surprise.

We ship only the actions that matter.

01-04

Get device

Delete device

Get tailnet acl

Get auth key

05-07

Get user

List auth keys

List tailnet devices

08-10

Authorize device

Create auth key

Delete auth key

11-13

List users

Update device tags

Update tailnet acl

What teams actually run

Automated Node Onboarding

Security Policy Updates

Fleet Organization

Network Auditing

Building your own app? The connector is yours to use.

Tailscale Connector

Claude Desktop

DevOps Engineers

Security Teams

IT Administrators

How do I connect this MCP to my AI client?

Do I need to provide my Tailscale credentials?

Can I manage my ACLs through this MCP?

Which AI clients are compatible?

Is my network data secure?

Can I update my network's security policy (ACL) using this server?

How do I authorize a new device that is pending approval?

Is it possible to generate temporary authentication keys for my servers?

NetBird AI Connector

Cloudflare Tunnel AI Connector

ZeroTier AI Connector

Headscale (Tailscale Alternative) AI Connector

Suggestions

Security and Key Access Plan AI Connector

Cilium (eBPF Networking) AI Connector

Aikido Security AI Connector

Cisco Meraki AI Connector