Back to catalog

Tailscale (Full Management)

Full Tailscale management with device, ACL, and DNS controls

Comprehensive Tailscale management — ~15 tools covering devices, ACLs, DNS, keys, and network configuration

community v0.4.0 overlay-network-v1 npx MIT
AuthorHexSleeves
Setuptrivial
Authapi_key
RepositoryHexSleeves/tailscale-mcp

Service Contract

overlay-network

Highlights

⚙️ ~15 tools — device management, ACL editing, DNS config
🔄 CLI + API hybrid — some tools use the Tailscale binary
📋 npm + Docker — multiple install methods
🔐 OAuth + API key — both auth methods supported

About

What it does

Tailscale (Full Management) wraps the Tailscale CLI and API as ~15 MCP tools covering the full configuration surface: device management, ACL editing, DNS configuration, auth key management, and network settings.

This is a community plugin for users who need write access to their tailnet configuration — editing ACLs, managing DNS, creating auth keys, and modifying device settings.

How it works

The plugin uses a hybrid approach: some tools call the Tailscale REST API directly while others invoke the local Tailscale CLI binary. Both OAuth and API key authentication are supported.

Safety considerations

This plugin provides full management capability including destructive operations like ACL editing and device removal. Changes to ACLs can lock you out of your tailnet if misconfigured. Review all write operations carefully.

When to use this vs tailscale-blade-mcp

  • This plugin — when you need to modify ACLs, DNS, keys, or device configuration
  • tailscale-blade-mcp (certified) — when you need read-only monitoring and security visibility with token-efficient output

Community plugin

This is a community-contributed plugin wrapping HexSleeves/tailscale-mcp. It is not maintained by Sidereal or Tailscale.

Conformance

Requireduntested
Recommendeduntested
Optionaluntested

Setup

Enter your Tailscale API key and tailnet name. This MCP provides full management capability including ACL editing and DNS configuration changes.

TAILSCALE_API_KEY API Key required secret
TAILSCALE_TAILNET Tailnet required

Prerequisites

  • Tailscale account
  • API access token
  • Node.js runtime
GitHub →

Scenarios

Pair with tailscale-blade-mcp

Both use overlay-network. Tailscale network monitoring and security — device inventory, ACL policy review, DNS configuration, auth key auditing, users, and audit logs.

overlay-network
Build a overlay-network workflow

Use the Forge to design an automation pack powered by hexsleeves-tailscale-mcp for overlay-network operations.

Links

Source Code npm Package

Install

sidereal install hexsleeves-tailscale-mcp