Vinkius

Tailscale MCP. Administer your zero-trust network in natural conversation.

Tailscale MCP gives your agent full administrative control over a zero-trust mesh network. List devices, adjust access rules (ACLs), manage user identities, and audit node keys—all through natural conversation. Manage your private infrastructure without leaving your chat client.

Tailscale MCP is compatible with Claude Claude
Tailscale MCP is compatible with ChatGPT ChatGPT
Tailscale MCP is compatible with Cursor Cursor
Tailscale MCP is compatible with Gemini Gemini
Tailscale MCP is compatible with Windsurf Windsurf
Tailscale MCP is compatible with VS Code VS Code
Tailscale MCP is compatible with JetBrains JetBrains
Tailscale MCP is compatible with Vercel Vercel
See Vinkius in Action

Give Claude and any AI agent real-world access

Manage Node Inventory

List every connected machine or retrieve detailed information on a specific device within the tailnet.

Control Network Access Rules

Fetch and update complex access control policies, defining exactly which users and devices can communicate across your network.

Audit User and Key Status

List all registered users or generate, list, and delete authentication keys for automated node joining.

Secure Device Lifecycle Management

Authorize new machines to join the network, update device tags for organization, or securely remove retired devices.

Waiting for input…

AI Agent
Tailscale

What AI agents can do with Tailscale MCP – 13 Tools for Network Management

These tools allow your agent to perform every administrative function required for managing a complex zero-trust mesh network, from policy updates to user auditing.

Make your AI actually useful.

Add this MCP to Claude, Cursor, or Windsurf and your AI stops guessing. It gets real tools to look things up, take action, and handle the stuff you keep doing by hand.

Start using Tailscale MCP

Authorize Device

Approves a machine joining your tailnet.

Create Auth Key

Generates a new, reusable authentication key for the network.

Delete Auth Key

Removes an existing authentication key from the system.

Delete Device

Permanently removes a specified device from your tailnet inventory.

Get Tailnet Acl

Retrieves a full copy of the current network access control policy (ACL).

Get Auth Key

Fetches details about an existing authentication key.

Get Device

Retrieves specific operational details for a single device on the network.

Get User

Fetches detailed profile data for a specified user account.

List Auth Keys

Lists all current authentication keys associated with the network.

List Tailnet Devices

Provides a comprehensive list of every device connected to the tailnet.

List Users

Lists all user accounts registered within the network.

Update Tailnet Acl

Modifies or updates the entire set of network access control policies (ACLs).

Update Device Tags

Adds, changes, or removes organizational tags from one or more devices.

Security and governance baked right in.

Pick your AI client below to get set up. Just create a Vinkius account, subscribe, and you're instantly up and running. We handle the entire backend infrastructure, delivering out-of-the-box support for HTTPS Streamable, SSE, and OAuth2—zero messy routing required.

Tailscale MCP is compatible with Claude

Claude AI

1

Open Claude Settings

Go to claude.ai, click your profile icon, then navigate to Customize → Connectors.

2

Add Custom Connector

Click the "+" button and select Add custom connector. Paste your Vinkius endpoint URL:

https://edge.vinkius.com/[YOUR_TOKEN_HERE]/mcp

Replace [YOUR_TOKEN_HERE] with your token from cloud.vinkius.com. For OAuth-protected servers, expand Advanced settings to add credentials.

3

Start a conversation

Open a new chat. The Tailscale integration is available immediately — no restart needed.

Choose How to Get Started

Build a custom MCP for your own tools, or connect a ready-made integration from our catalog.

Build Your Own

Turn any API into an MCP. Import a spec, define Agent Skills, or deploy with MCPFusion.

  • Import from OpenAPI, Swagger, or YAML specs
  • Create Agent Skills with progressive disclosure
  • Deploy to edge with MCPFusion framework
  • Built in DLP, auth, and compliance on each call
  • Real time usage dashboard and cost metering
  • Publish to catalog or keep private
Start building

Make Your AI Do More

Start with Tailscale, then connect any of our 5,200+ other servers whenever your AI needs more. One click, no limits.

  • Use this MCP plus 5,200+ others, all in one place
  • Add new capabilities to your AI anytime you want
  • Connections are secured and governed automatically
  • Track usage and costs across all your servers
  • Works with Claude, ChatGPT, Cursor, and more
  • New servers added to the catalog weekly
Tailscale MCP server cover

Independent Platform Disclaimer: Vinkius is an independent platform and is not affiliated with, endorsed by, sponsored by, verified by, or otherwise authorized by Tailscale. All third-party trademarks, logos, and brand names are the property of their respective owners. Their use on this website is strictly for informational purposes to identify service compatibility and interoperability.

VINKIUS CLOUD

Cloud Hosted

Managed infra

V8 Isolated

Sandboxed per request

Zero-Trust Proxy

No stored credentials

DLP Enforced

Policy on each call

GDPR Compliant

EU data residency

Token Compression

~60% cost reduction

Your data is protected. See how we built it.

The headache of jumping between admin consoles and terminals is real.

Today, managing network access feels like a multi-tab circus. You check the web console for device status, then switch to the terminal to generate an auth key, and finally jump back to edit policy files in a separate YAML editor. Every time you switch context, you risk making a mistake or missing a dependency.

With this MCP, your agent handles all that complexity inside your chat window. You ask it to update access rules, and boom—the network is updated. Your AI acts as the single pane of glass for your entire infrastructure.

Tailscale's administrative tools through the Tailscale MCP.

Specific manual steps that vanish include checking device tags across multiple dashboards, manually generating and storing auth keys in a secure vault, and reconciling which users have which specific rights. All these actions are now invoked by simple conversation.

Your workflow isn't just faster; it's fundamentally different. You gain conversational control over an otherwise complex command-line domain.

What Tailscale MCP does for your AI

Connecting your Tailscale network to this MCP lets your AI agent act as an administrator for your entire zero-trust infrastructure. You gain complete visibility into every device connected to your tailnet, meaning you can query details about specific nodes or check the status of all registered machines instantly. Need to tighten security? Your agent handles updating complex access control policies (ACLs), allowing you to manage network permissions without ever touching a web console or writing a manual policy file.

It also manages authentication keys and users, letting you automate node joining or audit who's on the network right now. You can even delete decommissioned devices securely using their unique IDs. By connecting this MCP via Vinkius, your AI client gets all these administrative tools in one place, turning tedious infrastructure management into simple conversation.

Built · Hosted · Managed by Vinkius Tailscale-MCP - Manage Mesh Network Access & Policies
Server ID 019e38f7-ab7e-701b-8573-c1edd6364cb5
Vinkius Inspector
Compliance Grade A+
Score 100/100
Vinkius Inspector Badge — Score 100/100

Frequently asked questions about Tailscale MCP

How does the Tailscale MCP handle user identity? +

It gives your agent full access to list users and fetch detailed profile information using list_users and get_user. This lets you audit who is on the network without needing separate tools.

Can I use the Tailscale MCP to modify ACL policies? +

Yes, it's designed for that. You can retrieve existing policy files using get_tailnet_acl and then apply changes with update_tailnet_acl.

What if I need to remove a device entirely? +

You use the delete_device tool, providing the unique ID of the machine you want gone. This ensures it's securely removed from your tailnet inventory.

Do I need to manage keys separately if I use the MCP? +

No. The MCP handles key management directly. You can list existing keys with list_auth_keys or create a new one using create_auth_key.

Which role should use the Tailscale MCP first? +

Security teams benefit most. They need constant visibility into who is accessing what, making the audit tools like get_tailnet_acl indispensable for compliance checks.