--- bezeichner: "io.github.tailscale-mcp/tailscale-mcp" art: "mcp_server" slug: "io-github-tailscale-mcp-tailscale-mcp" paketkoordinate: "npm:@tailscale-mcp/tailscale-mcp" status: "aktiv" homepage: "https://github.com/tailscale-mcp/tailscale-mcp" erhebungsstand: "2026-10-11T01:17:01.851Z" namensraum: "io.github.tailscale-mcp" registerseite: "https://tracevero.com/mcp/io-github-tailscale-mcp-tailscale-mcp" abgerufen_am: "2026-10-11" zugangsdaten_erforderlich: false ausfuehrungsort: "lokal" dateisystem_pfadargument: false quelloffen_einsehbar: true roh_beschreibung: "Drive a Tailscale node and its tailnet through the CLI and the control-plane API" version: "2.0.3" roh_umgebungsvariablen: "TAILSCALE_API_KEY, TAILSCALE_OAUTH_CLIENT_ID, TAILSCALE_OAUTH_CLIENT_SECRET, TAILSCALE_TAILNET, TAILSCALE_MCP_PRESET, TAILSCALE_MCP_ALLOW_WRITE, TAILSCALE_MCP_ALLOW_DESTRUCTIVE, TAILSCALE_API_KEY, TAILSCALE_OAUTH_CLIENT_ID, TAILSCALE_OAUTH_CLIENT_SECRET, TAILSCALE_TAILNET, TAILSCALE_MCP_PRESET, TAILSCALE_MCP_ALLOW_WRITE, TAILSCALE_MCP_ALLOW_DESTRUCTIVE" roh_geheime_pflichtvariablen: "" roh_transportarten: "stdio, stdio" roh_pfadargumente: "" roh_repository_url: "https://github.com/tailscale-mcp/tailscale-mcp" roh_paketquellen: "npm, oci" roh_geheime_pflichtkopfzeilen: "" roh_pfad_umgebungsvariablen: "" roh_remote_adressen: "" roh_remote_hosts: "" roh_statusmeldung: "" roh_veroeffentlicht_am: "2026-10-10" roh_aktualisiert_am: "2026-10-10" roh_schemafassung: "https://static.modelcontextprotocol.io/schemas/2025-12-11/server.schema.json" roh_bereitstellungsform: "paket" roh_repository_quelle: "github" roh_repository_unterordner: "" roh_paketbezeichner: "@tailscale-mcp/tailscale-mcp, ghcr.io/tailscale-mcp/tailscale-mcp:2.0.3" roh_paketversionen: "2.0.3" roh_laufzeithinweise: "" roh_umgebungsformate: "" roh_umgebungsbeschreibungen: "TAILSCALE_API_KEY=A control-plane API access token. One of this, the OAuth client pair, or the OAuth JWT file is needed for the tailnet tools; without any of them only the local tools are offered. · TAILSCALE_MCP_ALLOW_DESTRUCTIVE=Offer the tools that remove or sever something. Implies the write tier. · TAILSCALE_MCP_ALLOW_WRITE=Offer the tools that change something. Read-only without it. · TAILSCALE_MCP_PRESET=Which tools are offered: minimal, core or full. · TAILSCALE_OAUTH_CLIENT_ID=An OAuth client id, used with TAILSCALE_OAUTH_CLIENT_SECRET when there is no API access token. · TAILSCALE_OAUTH_CLIENT_SECRET=The OAuth client secret that goes with TAILSCALE_OAUTH_CLIENT_ID. · TAILSCALE_TAILNET=The tailnet the control-plane tools act on. Without it they act on the one the credential belongs to." roh_symbolformate: "" roh_verbindungswege: "{\"packages\":[{\"registryType\":\"npm\",\"identifier\":\"@tailscale-mcp/tailscale-mcp\",\"version\":\"2.0.3\",\"transport\":\"stdio\",\"environment\":[{\"name\":\"TAILSCALE_API_KEY\",\"description\":\"A control-plane API access token. One of this, the OAuth client pair, or the OAuth JWT file is needed for the tailnet tools; without any of them only the local tools are offered.\",\"required\":false,\"secret\":true},{\"name\":\"TAILSCALE_OAUTH_CLIENT_ID\",\"description\":\"An OAuth client id, used with TAILSCALE_OAUTH_CLIENT_SECRET when there is no API access token.\",\"required\":false,\"secret\":false},{\"name\":\"TAILSCALE_OAUTH_CLIENT_SECRET\",\"description\":\"The OAuth client secret that goes with TAILSCALE_OAUTH_CLIENT_ID.\",\"required\":false,\"secret\":true},{\"name\":\"TAILSCALE_TAILNET\",\"description\":\"The tailnet the control-plane tools act on. Without it they act on the one the credential belongs to.\",\"required\":false,\"secret\":false},{\"name\":\"TAILSCALE_MCP_PRESET\",\"description\":\"Which tools are offered: minimal, core or full.\",\"required\":false,\"secret\":false},{\"name\":\"TAILSCALE_MCP_ALLOW_WRITE\",\"description\":\"Offer the tools that change something. Read-only without it.\",\"required\":false,\"secret\":false},{\"name\":\"TAILSCALE_MCP_ALLOW_DESTRUCTIVE\",\"description\":\"Offer the tools that remove or sever something. Implies the write tier.\",\"required\":false,\"secret\":false}],\"additional_arguments_declared\":false},{\"registryType\":\"oci\",\"identifier\":\"ghcr.io/tailscale-mcp/tailscale-mcp:2.0.3\",\"transport\":\"stdio\",\"environment\":[{\"name\":\"TAILSCALE_API_KEY\",\"description\":\"A control-plane API access token. One of this, the OAuth client pair, or the OAuth JWT file is needed for the tailnet tools; without any of them only the local tools are offered.\",\"required\":false,\"secret\":true},{\"name\":\"TAILSCALE_OAUTH_CLIENT_ID\",\"description\":\"An OAuth client id, used with TAILSCALE_OAUTH_CLIENT_SECRET when there is no API access token.\",\"required\":false,\"secret\":false},{\"name\":\"TAILSCALE_OAUTH_CLIENT_SECRET\",\"description\":\"The OAuth client secret that goes with TAILSCALE_OAUTH_CLIENT_ID.\",\"required\":false,\"secret\":true},{\"name\":\"TAILSCALE_TAILNET\",\"description\":\"The tailnet the control-plane tools act on. Without it they act on the one the credential belongs to.\",\"required\":false,\"secret\":false},{\"name\":\"TAILSCALE_MCP_PRESET\",\"description\":\"Which tools are offered: minimal, core or full.\",\"required\":false,\"secret\":false},{\"name\":\"TAILSCALE_MCP_ALLOW_WRITE\",\"description\":\"Offer the tools that change something. Read-only without it.\",\"required\":false,\"secret\":false},{\"name\":\"TAILSCALE_MCP_ALLOW_DESTRUCTIVE\",\"description\":\"Offer the tools that remove or sever something. Implies the write tier.\",\"required\":false,\"secret\":false}],\"additional_arguments_declared\":false}],\"remotes\":[]}" --- # Tailscale ## Measured values | Property | Value | Source | Collected on | Level of trust | Raw declaration | | --- | --- | --- | --- | --- | --- | | Required secrets declared | false | MCP-Register | 2026-09-06T01:17:02.381Z | abgeleitet | roh_geheime_pflichtvariablen: ; roh_geheime_pflichtkopfzeilen: | | Execution location | lokal | MCP-Register | 2026-09-06T01:17:02.381Z | abgeleitet | roh_transportarten: stdio, stdio | | Path argument present | false | MCP-Register | 2026-09-06T01:17:02.381Z | abgeleitet | roh_pfadargumente: ; roh_pfad_umgebungsvariablen: | | Repository URL listed | true | MCP-Register | 2026-09-06T01:17:02.381Z | abgeleitet | roh_repository_url: https://github.com/tailscale-mcp/tailscale-mcp | | Description (raw) | Drive a Tailscale node and its tailnet through the CLI and the control-plane API | MCP-Register | 2026-09-06T01:17:02.381Z | selbstauskunft | | | Declared version | 2.0.3 | MCP-Register | 2026-10-11T01:17:01.851Z | selbstauskunft | | | Environment variables (raw) | TAILSCALE_API_KEY, TAILSCALE_OAUTH_CLIENT_ID, TAILSCALE_OAUTH_CLIENT_SECRET, TAILSCALE_TAILNET, TAILSCALE_MCP_PRESET, TAILSCALE_MCP_ALLOW_WRITE, TAILSCALE_MCP_ALLOW_DESTRUCTIVE, TAILSCALE_API_KEY, TAILSCALE_OAUTH_CLIENT_ID, TAILSCALE_OAUTH_CLIENT_SECRET, TAILSCALE_TAILNET, TAILSCALE_MCP_PRESET, TAILSCALE_MCP_ALLOW_WRITE, TAILSCALE_MCP_ALLOW_DESTRUCTIVE | MCP-Register | 2026-09-06T01:17:02.381Z | selbstauskunft | | | Required secret variables (raw) | | MCP-Register | 2026-09-06T01:17:02.381Z | selbstauskunft | | | Transports (raw) | stdio, stdio | MCP-Register | 2026-09-06T01:17:02.381Z | selbstauskunft | | | Path arguments (raw) | | MCP-Register | 2026-09-06T01:17:02.381Z | selbstauskunft | | | Repository (raw) | https://github.com/tailscale-mcp/tailscale-mcp | MCP-Register | 2026-09-06T01:17:02.381Z | selbstauskunft | | | Package registries (raw) | npm, oci | MCP-Register | 2026-09-06T01:17:02.381Z | selbstauskunft | | | Required secret headers (raw) | | MCP-Register | 2026-09-06T01:17:02.381Z | selbstauskunft | | | Path environment variables (raw) | | MCP-Register | 2026-09-06T01:17:02.381Z | selbstauskunft | | | Remote URLs (raw) | | MCP-Register | 2026-09-06T01:17:02.381Z | selbstauskunft | | | Remote hosts (raw) | | MCP-Register | 2026-09-06T01:17:02.381Z | selbstauskunft | | | Registry status message (raw) | | MCP-Register | 2026-09-06T01:17:02.381Z | selbstauskunft | | | First listed in the registry (raw) | 2026-10-10 | MCP-Register | 2026-10-10T01:17:01.464Z | selbstauskunft | | | Last changed in the registry (raw) | 2026-10-10 | MCP-Register | 2026-10-10T01:17:01.464Z | selbstauskunft | | | Schema version of the raw record (raw) | https://static.modelcontextprotocol.io/schemas/2025-12-11/server.schema.json | MCP-Register | 2026-09-06T01:17:02.381Z | selbstauskunft | | | Delivery form (raw) | paket | MCP-Register | 2026-09-06T01:17:02.381Z | selbstauskunft | | | Repository platform (raw) | github | MCP-Register | 2026-09-06T01:17:02.381Z | selbstauskunft | | | Repository subfolder (raw) | | MCP-Register | 2026-09-06T01:17:02.381Z | selbstauskunft | | | Package identifiers (raw) | @tailscale-mcp/tailscale-mcp, ghcr.io/tailscale-mcp/tailscale-mcp:2.0.3 | MCP-Register | 2026-10-11T01:17:01.851Z | selbstauskunft | | | Package versions (raw) | 2.0.3 | MCP-Register | 2026-10-11T01:17:01.851Z | selbstauskunft | | | Runtime hints (raw) | | MCP-Register | 2026-09-06T01:17:02.381Z | selbstauskunft | | | Environment variable formats (raw) | | MCP-Register | 2026-09-06T01:17:02.381Z | selbstauskunft | | | Environment variable descriptions (raw) | TAILSCALE_API_KEY=A control-plane API access token. One of this, the OAuth client pair, or the OAuth JWT file is needed for the tailnet tools; without any of them only the local tools are offered. · TAILSCALE_MCP_ALLOW_DESTRUCTIVE=Offer the tools that remove or sever something. Implies the write tier. · TAILSCALE_MCP_ALLOW_WRITE=Offer the tools that change something. Read-only without it. · TAILSCALE_MCP_PRESET=Which tools are offered: minimal, core or full. · TAILSCALE_OAUTH_CLIENT_ID=An OAuth client id, used with TAILSCALE_OAUTH_CLIENT_SECRET when there is no API access token. · TAILSCALE_OAUTH_CLIENT_SECRET=The OAuth client secret that goes with TAILSCALE_OAUTH_CLIENT_ID. · TAILSCALE_TAILNET=The tailnet the control-plane tools act on. Without it they act on the one the credential belongs to. | MCP-Register | 2026-09-06T01:17:02.381Z | selbstauskunft | | | Icon formats (raw) | | MCP-Register | 2026-09-06T01:17:02.381Z | selbstauskunft | | | Connection paths (source structure) | {"packages":[{"registryType":"npm","identifier":"@tailscale-mcp/tailscale-mcp","version":"2.0.3","transport":"stdio","environment":[{"name":"TAILSCALE_API_KEY","description":"A control-plane API access token. One of this, the OAuth client pair, or the OAuth JWT file is needed for the tailnet tools; without any of them only the local tools are offered.","required":false,"secret":true},{"name":"TAILSCALE_OAUTH_CLIENT_ID","description":"An OAuth client id, used with TAILSCALE_OAUTH_CLIENT_SECRET when there is no API access token.","required":false,"secret":false},{"name":"TAILSCALE_OAUTH_CLIENT_SECRET","description":"The OAuth client secret that goes with TAILSCALE_OAUTH_CLIENT_ID.","required":false,"secret":true},{"name":"TAILSCALE_TAILNET","description":"The tailnet the control-plane tools act on. Without it they act on the one the credential belongs to.","required":false,"secret":false},{"name":"TAILSCALE_MCP_PRESET","description":"Which tools are offered: minimal, core or full.","required":false,"secret":false},{"name":"TAILSCALE_MCP_ALLOW_WRITE","description":"Offer the tools that change something. Read-only without it.","required":false,"secret":false},{"name":"TAILSCALE_MCP_ALLOW_DESTRUCTIVE","description":"Offer the tools that remove or sever something. Implies the write tier.","required":false,"secret":false}],"additional_arguments_declared":false},{"registryType":"oci","identifier":"ghcr.io/tailscale-mcp/tailscale-mcp:2.0.3","transport":"stdio","environment":[{"name":"TAILSCALE_API_KEY","description":"A control-plane API access token. One of this, the OAuth client pair, or the OAuth JWT file is needed for the tailnet tools; without any of them only the local tools are offered.","required":false,"secret":true},{"name":"TAILSCALE_OAUTH_CLIENT_ID","description":"An OAuth client id, used with TAILSCALE_OAUTH_CLIENT_SECRET when there is no API access token.","required":false,"secret":false},{"name":"TAILSCALE_OAUTH_CLIENT_SECRET","description":"The OAuth client secret that goes with TAILSCALE_OAUTH_CLIENT_ID.","required":false,"secret":true},{"name":"TAILSCALE_TAILNET","description":"The tailnet the control-plane tools act on. Without it they act on the one the credential belongs to.","required":false,"secret":false},{"name":"TAILSCALE_MCP_PRESET","description":"Which tools are offered: minimal, core or full.","required":false,"secret":false},{"name":"TAILSCALE_MCP_ALLOW_WRITE","description":"Offer the tools that change something. Read-only without it.","required":false,"secret":false},{"name":"TAILSCALE_MCP_ALLOW_DESTRUCTIVE","description":"Offer the tools that remove or sever something. Implies the write tier.","required":false,"secret":false}],"additional_arguments_declared":false}],"remotes":[]} | MCP-Register | 2026-10-11T01:17:01.851Z | selbstauskunft | | ## Links - Namespace: [[namensraum/io-github-tailscale-mcp|io.github.tailscale-mcp]] --- - Registry page: - Retrieved on: 2026-10-11