Tailscale MCP server

by tailscale-mcp·io.github.tailscale-mcp/tailscale-mcp·v1.3.1

No reviews yet

Drive a Tailscale node and its tailnet through the CLI and the control-plane API

B82/100grade B

Write a review Install

What users say

No reviews yet

Be the first

Safety scan

B82/100

full report

Adoption

Growing

9 stars109 downloads/wk

Reviews

Write one

Nobody has reviewed Tailscale yet.

If you have run it, two minutes of your experience saves the next person an afternoon.

Tailscale tools

No tool declarations could be read from the package source. They show once the server is installed.

Public scan report

scanner v0.1.9 · 2026-09-20 · same rubric, same numbers if you re-run it

no findings

Code scan3 source files scanned25/25
–Live reliabilityno gateway calls yet and no remote to proben/a
–Tool poisoningtools not inspected (local package is not executed); not countedn/a
Auth qualitystatic API keys via environment variables6/15
Maintenancelast push 12 days ago15/15
Maintainer identityregistry namespace matches repository owner7/10

Overall 82/100. Components that don't apply are left out of the denominator. Any critical finding is an F.Rubric Appeal a finding JSON

Install directly

Runs npx -y @tailscale-mcp/tailscale-mcp on your machine. Read the scan report first; the gateway never runs local packages.

claude mcp add tailscale-mcp -- npx -y @tailscale-mcp/tailscale-mcp

Add to Cursor

Tailscale: common questions

Is Tailscale MCP server safe?: Mostly: it is graded B (82/100). Read the Tailscale safety report
How do I install Tailscale?: It runs on your machine. Copy the Claude Code, Claude Desktop or Cursor config from the install section.
Does Tailscale need an API key?: Yes. The registry entry asks for TAILSCALE_API_KEY, TAILSCALE_OAUTH_CLIENT_SECRET.
Is Tailscale maintained?: The last commit was 12 days ago (2026-09-07). The latest release is v1.3.1.
What can I use instead of Tailscale?: Servers from other publishers that do the same job: Hunch MCP server, gflow-cli MCP server and Mac Control MCP server. Compare all Tailscale alternatives.

Alternatives to Tailscale

Same job from other publishers: the closest match first, then the best rated.

All Tailscale alternatives →

Hunch
Focus-free macOS control for AI agents: drive your real Mac apps in the background, no stolen focus.
not reviewed
Growing
A
gflow-cli
Drive Google Flow from an agent: Veo video and Imagen image generation
not reviewed
Growing
A
Mac Control
Full macOS control — drive a Mac like a human: shell, AppleScript, files, and human-like GUI.
not reviewed
Growing
A
Google Drive MCP
Secure access to Google Drive, Docs, Sheets, Slides, and Calendar through MCP.
not reviewed
Growing
B
SimMirror
Mirror and drive the iOS Simulator: token-efficient UI snapshots, gestures and a live viewer.
not reviewed
Growing
A

Tailscale vs Hunch Tailscale vs gflow-cli Tailscale vs Mac Control

Run it through the gateway

Local package. It runs on your machine, not through the gateway.

Rating: —
Safety grade: B · 82/100
Stars: 9
Downloads/wk: 109
Price: Free
Licence: Apache-2.0
Transport: Local · mixed
Version: 1.3.1
Category: Productivity
Last release: 2026-09-07

Credentials it needs

TAILSCALE_API_KEYsecretA control-plane API access token. One of this, the OAuth client pair, or the OAuth JWT file is needed for the tailnet tools; without any of them only the local tools are offered.
TAILSCALE_OAUTH_CLIENT_IDAn OAuth client id, used with TAILSCALE_OAUTH_CLIENT_SECRET when there is no API access token.
TAILSCALE_OAUTH_CLIENT_SECRETsecretThe OAuth client secret that goes with TAILSCALE_OAUTH_CLIENT_ID.
TAILSCALE_TAILNETThe tailnet the control-plane tools act on. Without it they act on the one the credential belongs to.
TAILSCALE_MCP_PRESETWhich tools are offered: minimal, core or full.
TAILSCALE_MCP_ALLOW_WRITEOffer the tools that change something. Read-only without it.
TAILSCALE_MCP_ALLOW_DESTRUCTIVEOffer the tools that remove or sever something. Implies the write tier.
TAILSCALE_API_KEYsecretA control-plane API access token. One of this, the OAuth client pair, or the OAuth JWT file is needed for the tailnet tools; without any of them only the local tools are offered.
TAILSCALE_OAUTH_CLIENT_IDAn OAuth client id, used with TAILSCALE_OAUTH_CLIENT_SECRET when there is no API access token.
TAILSCALE_OAUTH_CLIENT_SECRETsecretThe OAuth client secret that goes with TAILSCALE_OAUTH_CLIENT_ID.
TAILSCALE_TAILNETThe tailnet the control-plane tools act on. Without it they act on the one the credential belongs to.
TAILSCALE_MCP_PRESETWhich tools are offered: minimal, core or full.
TAILSCALE_MCP_ALLOW_WRITEOffer the tools that change something. Read-only without it.
TAILSCALE_MCP_ALLOW_DESTRUCTIVEOffer the tools that remove or sever something. Implies the write tier.

Own this server?

Claim it to keep the listing current and reply to reviews. Claiming never changes the grade or hides a review.

Claim listing

Badge for your README

Shows the safety grade and links back to this page. It updates itself after every scan and review.

[![mcp.market](https://mcp.market/badge/tailscale-mcp.svg)](https://mcp.market/server/tailscale-mcp)

How the badge works