Skip to content
actionlake
Start free

Connectors · MSP & PSA

Tailscale MCP server for AI agents.

actionlake is an MCP gateway: one remote MCP server that connects Claude and other MCP clients to Tailscale and the rest of your systems. It gives your agent 93 Tailscale actions (38 reads, 40 writes and 15 that wait for a confirmation) and holds the Tailscale credential itself, so the agent never does. It paces Tailscale's limits and records every call.

Connect Tailscale freeSee pricing

100,000 free calls a month. No card, no email, no password: press Start a free sandbox on the next screen and keep the key it shows you.

claude mcp add --transport http actionlake https://connect.actionlake.com/mcp
the first call
do {  action: "tailscale.users.list",  intent: "check which Tailscale account is connected"}# List users · read · 1 upstream call
  • 93actionsin one signed file
  • 38readlook, never change
  • 40writecreate and update
  • 15wait for a yesdestructive, confirmed first

Set up

Connect Tailscale in three steps.

  1. 01

    Add actionlake to Claude.

    Run the command once in Claude Code; its consent page can create a free sandbox: 100,000 calls a month, no card. In the Claude app, add a custom connector with the URL below and paste your key on the consent page. Creating a new sandbox from the Claude app is not yet tested by us.

    https://connect.actionlake.com/mcp
  2. 02

    Connect Tailscale.

    Bearer token. No consent screen: your agent can connect it for you, but the key then passes through your chat. To keep it out of the model's context, paste it in the console instead. actionlake stores what you paste write-only, sealed under your tenant's key.

    • access_tokenTailscale API access token (tskey-api-...): admin console > Settings > Keys > Generate access token
    account { op: "connections.requirements", service: "tailscale" }
# free: exactly what to paste, and what is found for you
  3. 03

    Make the first call. Check before a write.

    Ask in plain words; Claude picks the action. Before anything changes, check validates the call and prices it, for free.

    do    { action: "tailscale.users.list" }# list users · read · 1 upstream callcheck { action: "tailscale.users.delete", input: { … } }# free: inputs, permissions, cost and confirmations, nothing sent

Tailscale at a glance

Sign-in
Bearer token. No consent screen: your agent can connect it for you, but the key then passes through your chat. To keep it out of the model's context, paste it in the console instead.
You provide
access_token
Limits we pace to
300 calls a minute, per connection
API covered
Tailscale API v2 (OpenAPI 3.1)api.tailscale.com/api/v2
Built from
Tailscale's documentation, read 23 October 2026api.tailscale.comtailscale.com
Service file
Version 1.0.0, signed (Ed25519)
Cached reads
35 of 38 reads, for up to 5 minutes; a write clears what it affects
Shared entities
2, so ask can line Tailscale up with your other systems
Data
Processed and stored in Sydney, Australia. No US region yet

Capabilities

What an AI agent can do in Tailscale.

93 actions in 26 areas. Every one carries its effect, so a key can allow the reads and hold the rest.

  • 38readlook, never change
  • 40writecreate and update
  • 15destructivewait for a confirmation

  1. Devices

    9

    2 read · 5 write · 2 destructive

    List tailnet devices · Get a device · Delete a device · Authorize device

  2. Users

    7

    2 read · 3 write · 2 destructive

    List users · Get a user · Delete a user · Approve a user

  3. Webhooks

    7

    2 read · 3 write · 2 destructive

    Create a webhook · List webhooks · Update webhook · Get webhook

  4. Device invites

    6

    2 read · 3 write · 1 destructive

    Create device invites · List device invites · Accept a device invite · Get a device invite

  5. Keys

    5

    2 read · 2 write · 1 destructive

    Create an auth key or trust credential · List tailnet keys · Get key · Delete key

  6. Oauth apps

    5

    2 read · 2 write · 1 destructive

    Create an OAuth app · List OAuth apps · Get OAuth app · Update OAuth app

  7. Posture integrations

    5

    2 read · 2 write · 1 destructive

    Create a posture integration · List all posture integrations · Get a posture integration · Delete a posture integration

  8. User invites

    5

    2 read · 2 write · 1 destructive

    List user invites · Create user invites · Delete a user invite · Get a user invite

18 more areas · 44 actions
  • Device posture attributes 4
  • Log streaming 4
  • Policy file 4
  • Services 4
  • Contacts 3
  • Split DNS 3
  • Tailnets 3
  • Aws external ids 2
  • Device routes 2
  • DNS configuration 2
  • DNS nameservers 2
  • DNS preferences 2
  • DNS search paths 2
  • Service device approvals 2
  • Tailnet settings 2
  • Configuration audit logs 1
  • Network flow logs 1
  • Service hosts 1

Top actions

The Tailscale API, shaped for agents.

The ids your agent types, what each does, and the one name it shares with other systems. 25 of Tailscale's 25 action names are shared with at least one other connector, so an agent learns them once.

ActionWhat it doesEffectSame name in
tailscale.users.listList usersList users.readidentity.user.list474 connectors
tailscale.users.getGet a userGet a user.readidentity.user.get399 connectors
tailscale.users.deleteDelete a userDelete a user.destructiveidentity.user.delete253 connectors
tailscale.devices.listList tailnet devicesList tailnet devices.readdevice.endpoint.list65 connectors
tailscale.keys.createCreate an auth key or trust credentialCreate an auth key or trust credential.writeidentity.api_key.create100 connectors
tailscale.keys.listList tailnet keysList tailnet keys.readidentity.api_key.list96 connectors
tailscale.devices.getGet a deviceGet a device.readdevice.endpoint.get57 connectors
tailscale.webhooks.createCreate a webhookCreate a webhook.writeautomation.webhook.create209 connectors
tailscale.webhooks.listList webhooksList webhooks.readautomation.webhook.list202 connectors
tailscale.policy_file.getGet policy fileGet policy file.readsecurity.policy.get30 connectors
tailscale.policy_file.setSet policy fileSet policy file.writesecurity.policy.update25 connectors
tailscale.tailnets.createCreate a tailnetCreate a tailnet.writeplatform.tenant.create35 connectors

Try it

Prompts to paste into Claude.

Each one names the Tailscale actions it will call, so you know what it reads and what it changes before you send it.

  1. Readread

    Which Tailscale devices have not checked in for a week?

    callstailscale.devices.list

  2. Writewrite

    Create an auth key or trust credential in Tailscale. Show me exactly what you will send before you save it.

    callstailscale.keys.create

Governance for Tailscale

Destructive actions wait for a yes.

15 Tailscale actions are destructive. These are all of them:

  • Delete a usertailscale.users.delete
  • Delete keytailscale.keys.delete
  • Delete a devicetailscale.devices.delete
  • Delete webhooktailscale.webhooks.delete
  • Delete a user invitetailscale.user_invites.delete
  • Delete a tailnettailscale.tailnets.delete
  • Suspend a usertailscale.users.suspend
  • Expire a device's keytailscale.devices.expire_key
  • Delete a Servicetailscale.services.delete
  • Delete OAuth apptailscale.oauth_apps.delete
  • Delete a device invitetailscale.device_invites.delete
  • Disable log streamingtailscale.log_streaming.disable
  • Rotate webhook secrettailscale.webhooks.rotate_secret
  • Delete a posture integrationtailscale.posture_integrations.delete
  • Delete custom device posture attributestailscale.device_posture_attributes.delete

A destructive action runs only with confirm: true. Under the human policy the agent cannot confirm for itself: the run stops until a named person approves, in the console or from a signed link in an email. The cap on a key is refused before the call is sent, never after.

dotailscale.users.deleteconfirm_policy: human

Delete a user?

intent: the user asked me to delete a user

run suspended · waiting for a named person · key tailscale-agent cannot confirm itself
In the console, or from an emailed signed link.
a key for this connector
account {  op: "keys.create", name: "tailscale-agent",  allowed_actions: ["tailscale.*"], cap_calls: 2000,  confirm_policy: "human_for_writes",  approval_rules: [    { match: "tailscale.users.delete", approver: "[email protected]" },    { match: "tailscale.keys.delete", approver: "[email protected]" },    { match: "tailscale.devices.delete", approver: "[email protected]" }  ]}
Illustrative. Scoped to Tailscale only, capped at 2,000 upstream calls, every write confirmed, and the destructive ones approved by a named person.

Cost

What Tailscale costs on actionlake.

Every Tailscale action is one upstream call, the only thing actionlake bills. Searching, check, cost, account and any call Tailscale refused with 401, 403, 429 or a 5xx are free. Paid plans start at US$49 a month for 250,000 calls, with overage from US$0.30 down to US$0.18 per 1,000.

  • 1upstream call per actionall 93 Tailscale actions
  • 93actions pageeach page of a long list is one call
  • 35reads can be cacheda cache hit costs nothing
  • 100,000calls a month, freepaid plans from US$49 a month for 250,000

See pricing

Action index

Every Tailscale action.

93 actions by area: the id your agent calls, what it does, and its effect.

Devices9
  • tailscale.devices.authorizeAuthorize devicewrite
  • tailscale.devices.deleteDelete a devicedestructive
  • tailscale.devices.expire_keyExpire a device's keydestructive
  • tailscale.devices.getGet a deviceread
  • tailscale.devices.listList tailnet devicesread
  • tailscale.devices.set_ipSet device IPv4 addresswrite
  • tailscale.devices.set_nameSet device namewrite
  • tailscale.devices.set_tagsSet device tagswrite
  • tailscale.devices.update_keyUpdate device keywrite
Users7
  • tailscale.users.approveApprove a userwrite
  • tailscale.users.deleteDelete a userdestructive
  • tailscale.users.getGet a userread
  • tailscale.users.listList usersread
  • tailscale.users.restoreRestore a userwrite
  • tailscale.users.suspendSuspend a userdestructive
  • tailscale.users.update_roleUpdate user rolewrite
Webhooks7
  • tailscale.webhooks.createCreate a webhookwrite
  • tailscale.webhooks.deleteDelete webhookdestructive
  • tailscale.webhooks.getGet webhookread
  • tailscale.webhooks.listList webhooksread
  • tailscale.webhooks.rotate_secretRotate webhook secretdestructive
  • tailscale.webhooks.testTest a webhookwrite
  • tailscale.webhooks.updateUpdate webhookwrite
Device invites6
  • tailscale.device_invites.acceptAccept a device invitewrite
  • tailscale.device_invites.createCreate device inviteswrite
  • tailscale.device_invites.deleteDelete a device invitedestructive
  • tailscale.device_invites.getGet a device inviteread
  • tailscale.device_invites.listList device invitesread
  • tailscale.device_invites.resendResend a device invitewrite
Keys5
  • tailscale.keys.createCreate an auth key or trust credentialwrite
  • tailscale.keys.deleteDelete keydestructive
  • tailscale.keys.getGet keyread
  • tailscale.keys.listList tailnet keysread
  • tailscale.keys.updateSet keywrite
Oauth apps5
  • tailscale.oauth_apps.createCreate an OAuth appwrite
  • tailscale.oauth_apps.deleteDelete OAuth appdestructive
  • tailscale.oauth_apps.getGet OAuth appread
  • tailscale.oauth_apps.listList OAuth appsread
  • tailscale.oauth_apps.updateUpdate OAuth appwrite
Posture integrations5
  • tailscale.posture_integrations.createCreate a posture integrationwrite
  • tailscale.posture_integrations.deleteDelete a posture integrationdestructive
  • tailscale.posture_integrations.getGet a posture integrationread
  • tailscale.posture_integrations.listList all posture integrationsread
  • tailscale.posture_integrations.updateUpdate a posture integrationwrite
User invites5
  • tailscale.user_invites.createCreate user inviteswrite
  • tailscale.user_invites.deleteDelete a user invitedestructive
  • tailscale.user_invites.getGet a user inviteread
  • tailscale.user_invites.listList user invitesread
  • tailscale.user_invites.resendResend a user invitewrite
Device posture attributes4
  • tailscale.device_posture_attributes.batch_updateBatch update custom device posture attributeswrite
  • tailscale.device_posture_attributes.deleteDelete custom device posture attributesdestructive
  • tailscale.device_posture_attributes.getGet device posture attributesread
  • tailscale.device_posture_attributes.setSet custom device posture attributeswrite
Log streaming4
  • tailscale.log_streaming.disableDisable log streamingdestructive
  • tailscale.log_streaming.getGet log streaming configurationread
  • tailscale.log_streaming.get_statusGet log streaming statusread
  • tailscale.log_streaming.setSet log streaming configurationwrite
Policy file4
  • tailscale.policy_file.getGet policy fileread
  • tailscale.policy_file.previewPreview rule matchesread
  • tailscale.policy_file.setSet policy filewrite
  • tailscale.policy_file.validateValidate and test policy fileread
Services4
  • tailscale.services.deleteDelete a Servicedestructive
  • tailscale.services.getGet a Serviceread
  • tailscale.services.listList all Servicesread
  • tailscale.services.upsertUpdate a Servicewrite
Contacts3
  • tailscale.contacts.getGet contactsread
  • tailscale.contacts.resend_verificationResend verification emailwrite
  • tailscale.contacts.updateUpdate contactwrite
Split DNS3
  • tailscale.split_dns.getGet split DNSread
  • tailscale.split_dns.setSet split DNSwrite
  • tailscale.split_dns.updateUpdate split DNSwrite
Tailnets3
  • tailscale.tailnets.createCreate a tailnetwrite
  • tailscale.tailnets.deleteDelete a tailnetdestructive
  • tailscale.tailnets.listList tailnetsread
Aws external ids2
  • tailscale.aws_external_ids.createCreate or get AWS external idwrite
  • tailscale.aws_external_ids.validateValidate external ID integration with IAM role trust policyread
Device routes2
  • tailscale.device_routes.getList device routesread
  • tailscale.device_routes.setSet device routeswrite
DNS configuration2
  • tailscale.dns_configuration.getGet DNS configurationread
  • tailscale.dns_configuration.setSet DNS configurationwrite
DNS nameservers2
  • tailscale.dns_nameservers.listList DNS nameserversread
  • tailscale.dns_nameservers.setSet DNS nameserverswrite
DNS preferences2
  • tailscale.dns_preferences.getGet DNS preferencesread
  • tailscale.dns_preferences.setSet DNS preferenceswrite
DNS search paths2
  • tailscale.dns_search_paths.listList DNS search pathsread
  • tailscale.dns_search_paths.setSet DNS search pathswrite
Service device approvals2
  • tailscale.service_device_approvals.getGet approval status of Service on a deviceread
  • tailscale.service_device_approvals.updateUpdate approval status of Service on a devicewrite
Tailnet settings2
  • tailscale.tailnet_settings.getGet tailnet settingsread
  • tailscale.tailnet_settings.updateUpdate tailnet settingswrite
Configuration audit logs1
  • tailscale.configuration_audit_logs.listList configuration audit logsread
Network flow logs1
  • tailscale.network_flow_logs.listList network flow logsread
Service hosts1
  • tailscale.service_hosts.listList devices hosting a Serviceread

Questions

The Tailscale MCP server, answered.

Is there a Tailscale MCP server for Claude?

Yes. actionlake is an MCP gateway: a remote MCP server that gives Claude, or another MCP client, 93 Tailscale actions across devices, users, webhooks and device invites, through the same eight tools it uses for every other connector. actionlake is independent; it is not made or endorsed by Tailscale.

What do I need to connect Tailscale?

Tailscale API access token (tskey-api-...): admin console > Settings > Keys > Generate access token. The free call account { op: "connections.requirements", service: "tailscale" } lists exactly what to paste.

Can an AI agent delete or change things in Tailscale?

Only if its key allows it, and only with an explicit confirmation. 15 Tailscale actions are destructive, including delete a user, delete key and delete a device. Each runs only with confirm: true. Under the human confirm policy, or an approval rule on the key, the run waits until a named person approves it.

Will an AI agent use up my Tailscale API limit?

actionlake paces every call to the limits in the Tailscale service file: 300 calls a minute per connection. Repeated reads are answered from cache (35 Tailscale actions can be), which never reaches Tailscale.

What does a Tailscale action cost?

One upstream call, the only unit actionlake bills. A list that pages bills one call per page (93 Tailscale actions page). Cache hits, searches, dry runs and calls Tailscale refused with 401, 403, 429 or a 5xx are free. The Free plan includes 100,000 calls a month with no card. Paid plans start at US$49 a month for 250,000 calls, with overage from US$0.30 down to US$0.18 per 1,000.

Which Tailscale API does it cover?

The Tailscale API v2 (OpenAPI 3.1) at api.tailscale.com/api/v2. It is built from Tailscale's documentation as read on 23 October 2026. 93 actions in 26 areas, each one in the signed service file (version 1.0.0).

Does actionlake keep my Tailscale data, and where?

actionlake processes and stores data in Sydney, Australia; there is no US region yet. Reads may be cached for up to 5 minutes, and a write clears the reads it affects. Each run's request and response is kept, sealed, for your plan's trace window: 1 day on Free, 3 days on Starter, 7 days on Pro, 14 days on Team, 30 days on Business and 30 days on Enterprise. Your Tailscale credential is sealed under your tenant's key, never logged and never returned. Your traffic is not used to train models.

Which AI clients can use it?

Claude Code, tested by us end to end, and the Claude app as a custom connector, tested by us with an existing key. Other MCP clients that support remote servers over Streamable HTTP (MCP revisions 2025-06-18 and 2025-11-25) and OAuth dynamic client registration, or a bearer header, should connect the same way; we have not tested them. Or plain REST, under the same action names.

More connectors like Tailscale

Shares the most action names with

Joins with, on shared entities

Browse

actionlake is independent. It is not made or endorsed by Tailscale; the name is the vendor's own. Counts are from the Tailscale service file, version 1.0.0.

Give your agent Tailscale today.

Connect Tailscale freeSee pricing

Start free - 100,000 calls/month, no card. No signup. Hard caps on every key. Cached answers are free.