Tailscale MCP by usefulapi

io.usefulapi由 usefulapi.io 發布官方發布者v1.36.3更新於 Nov 7, 2026

Read devices, users, keys, ACLs and DNS for a tailnet; manage devices, routes and auth keys.

發布方自己的服務:Ably MCP by usefulapi

已驗證Streamable HTTP可網頁執行雲端與基礎設施安全與監控

概覽

AI 產生的概覽

託管式 Tailscale MCP 伺服器,讓助理讀取 tailnet 的裝置、使用者、金鑰、ACL 與 DNS,並管理裝置、路由和驗證金鑰。

可以做什麼
  • 列出並檢視裝置、裝置公告及已啟用的子網路路由,以及 tailnet 使用者
  • 讀取驗證金鑰與 API 權杖,包括能力、到期時間與使用情形
  • 讀取 ACL 政策檔、DNS 名稱伺服器、搜尋網域、分割 DNS、DNS 偏好與 tailnet 設定
  • 列出已設定的 webhook 端點
  • 授權或取消授權裝置、重新命名裝置、取代標籤、啟用路由、讓節點金鑰過期、刪除裝置
  • 建立與撤銷驗證金鑰,查看用量或管理訂閱方案
適用情境
適合在聊天用戶端中稽核或管理 Tailscale tailnet 而不需本機安裝:找出長期未上線的裝置、檢視使用者與角色、找出即將到期的金鑰,或在資安事件應變時調整裝置與金鑰。
執行需求
透過 streamable HTTP 連線的遠端端點,不需本機安裝。登入採用 OAuth,首次連線時需提供自己的 Tailscale API 存取權杖(來自管理主控台,可選擇限定到某個 tailnet)。用戶端設定中不要加入 API 金鑰或 Authorization 標頭。免費方案每月 50 次工具呼叫,付費方案可提高上限。
安裝前請注意
多個工具會變更或刪除資料:授權裝置、重新命名、取代標籤、取代已啟用路由、讓節點金鑰過期、建立與撤銷驗證金鑰、刪除裝置。標籤與路由工具是整組取代而非合併。Tailscale API 權杖由第三方託管方依使用者儲存,所有呼叫都經其轉送。付費方案透過結帳連結付款,取消後當期不退款。

安裝

在 SourceWeft 中

  1. 開啟 儀表板中的 Tailscale MCP by usefulapi,將其新增到工作區。
  2. 為需要使用其工具的對話啟用該服務。

Web executable,透過 Streamable HTTP。 遠端服務在工作區中設定後即可從網頁執行環境執行。

交給代理程式安裝

把這段提示詞貼上到 Claude Code、Codex、Cursor 等代理程式,或 SourceWeft 對話中。代理程式會讀取該伺服器的安裝指南,先向你展示發布者、端點和登入方式,經你同意後再把它新增到你的客戶端。金鑰不會寫進任何命令。

閱讀 https://sourceweft.com/mcp/io.usefulapi%2Ftailscale/install.md,並按其中說明把這個 MCP 伺服器接入我的客戶端。修改任何設定之前,先告訴我它的發布者、端點和登入方式,等我確認。不要把 API 金鑰寫進命令或我會提交的檔案;問我金鑰應從哪裡取得。

檢視代理程式所依據的安裝指南

其他 MCP 客戶端

把它新增到你客戶端的 mcpServers 設定中。

{
  "mcpServers": {
    "tailscale-by-usefulapi": {
      "type": "http",
      "url": "https://tailscale.usefulapi.io/mcp"
    }
  }
}

README

Tailscale MCP by usefulapi

Use your Tailscale account from Claude, Cursor, or any MCP client — read devices, users, keys, ACLs and DNS for a tailnet, and manage devices, routes and auth keys. Hosted, no local install: connect with your own credentials.

Live endpoint: https://tailscale.usefulapi.io/mcp · Homepage: https://usefulapi.io

Connect

  • Claude (claude.ai, Desktop): open Customize → Connectors, click + Add → Add custom connector, and paste https://tailscale.usefulapi.io/mcp.
  • Claude Code: claude mcp add --transport http tailscale https://tailscale.usefulapi.io/mcp, then run /mcp to log in.
  • VS Code: Add to VS Code.
  • Cursor and other clients: add the URL as a remote MCP server:
json
{  "mcpServers": {    "tailscale": {      "url": "https://tailscale.usefulapi.io/mcp"    }  }}

Add only the URL. Do not add an Authorization header or an API key to the client config: the server signs you in with OAuth, and the login page asks for your Tailscale credentials.

Step-by-step setup, where to find your credentials, and FAQ: https://usefulapi.io/tailscale/

On first connect you'll provide your Tailscale API access token (admin console → Settings → Keys), optionally scoped to a tailnet. It is validated, stored per-user, and scoped to you — no keys in config files.

Tools

ToolTypeWhat it does
tailscale_list_devicesreadList devices
tailscale_get_devicereadGet device
tailscale_list_device_routesreadList device routes
tailscale_list_keysreadList keys
tailscale_get_keyreadGet key
tailscale_get_policy_filereadGet policy file
tailscale_list_dns_nameserversreadList DNS nameservers
tailscale_get_dns_preferencesreadGet DNS preferences
tailscale_list_dns_searchpathsreadList DNS search paths
tailscale_get_split_dnsreadGet split DNS
tailscale_list_usersreadList users
tailscale_get_userreadGet user
tailscale_list_webhooksreadList webhooks
tailscale_get_tailnet_settingsreadGet tailnet settings
tailscale_authorize_devicewriteAuthorize device
tailscale_set_device_namewriteSet device name
tailscale_set_device_tagswriteSet device tags
tailscale_expire_device_keywriteExpire device key
tailscale_set_device_routeswriteSet device routes
tailscale_create_auth_keywriteCreate auth key
tailscale_delete_keywriteDelete key
tailscale_delete_devicewriteDelete device
tailscale_usage_statusmetaUsage status (free-tier meter)
tailscale_request_featuremetaRequest a missing feature
tailscale_upgrademetaUpgrade to Pro or Pro+
tailscale_cancel_subscriptionmetaCancel the Pro subscription

read tools are read-only; write tools mutate data (clients should confirm them); meta tools report usage, manage your subscription or send a feature request.

Pricing

PlanPriceLimit
Free$050 tool calls / month
Pro$9/mo or $90/yr (2 months free)Unlimited*

*Pro has a fair use limit of 10,000 tool calls a month on this server. For more, write to [email protected].

Pro covers this server only. Subscribe with tailscale_upgrade (it returns a Stripe Checkout link). Cancel any time with tailscale_cancel_subscription: Pro continues to the end of the paid period, with no refund for the current period, and running tailscale_upgrade before then undoes the cancel. Or write to [email protected].

License

MIT — see LICENSE. Documentation only; the server is hosted.

來源:servers/tailscale/README.md,提交 4046075

工具

22

tailscale_list_devices

List devices

List all devices in the tailnet (name, addresses, OS, last seen, tags, etc.). Tailscale REST: GET /tailnet/{tailnet}/devices.

輸入參數fields

tailscale_get_device

Get device

Get a single device by id. Tailscale REST: GET /device/{deviceId}.

輸入參數fieldsdeviceId必填

tailscale_list_device_routes

List device routes

List the subnet routes a device advertises and which are enabled. Tailscale REST: GET /device/{deviceId}/routes.

輸入參數deviceId必填

tailscale_list_keys

List keys

List auth keys and API access tokens for the tailnet. Tailscale REST: GET /tailnet/{tailnet}/keys.

輸入參數all

tailscale_get_key

Get key

Get details of a single auth key / API access token by id (capabilities, expiry, usage). Tailscale REST: GET /tailnet/{tailnet}/keys/{keyId}.

輸入參數keyId必填

tailscale_get_policy_file

Get policy file

Get the tailnet's ACL / policy file (returned as JSON via the Accept header, not HuJSON). Tailscale REST: GET /tailnet/{tailnet}/acl.

輸入參數details

tailscale_list_dns_nameservers

List DNS nameservers

List the global DNS nameservers configured for the tailnet. Tailscale REST: GET /tailnet/{tailnet}/dns/nameservers.

無需輸入參數。

tailscale_get_dns_preferences

Get DNS preferences

Get the tailnet's DNS preferences (e.g. whether MagicDNS is enabled). Tailscale REST: GET /tailnet/{tailnet}/dns/preferences.

無需輸入參數。

tailscale_list_dns_searchpaths

List DNS search paths

List the DNS search paths (search domains) configured for the tailnet. Tailscale REST: GET /tailnet/{tailnet}/dns/searchpaths.

無需輸入參數。

tailscale_get_split_dns

Get split DNS

Get the tailnet's split-DNS configuration — a map of domain → nameservers. Tailscale REST: GET /tailnet/{tailnet}/dns/split-dns.

無需輸入參數。

tailscale_list_users

List users

List users of the tailnet, optionally filtered by type, role or status. Tailscale REST: GET /tailnet/{tailnet}/users.

輸入參數roletypestatus

tailscale_get_user

Get user

Get a single user by id. Tailscale REST: GET /users/{userId}.

輸入參數userId必填

tailscale_list_webhooks

List webhooks

List the webhook endpoints configured for the tailnet. Tailscale REST: GET /tailnet/{tailnet}/webhooks.

無需輸入參數。

tailscale_get_tailnet_settings

Get tailnet settings

Get the tailnet's settings (device approval, key expiry, posture, etc.). Tailscale REST: GET /tailnet/{tailnet}/settings.

無需輸入參數。

tailscale_authorize_device

Authorize device

Authorize or de-authorize a device (only relevant when device approval is enabled for the tailnet). Tailscale REST: POST /device/{deviceId}/authorized.

輸入參數deviceId必填authorized必填

tailscale_set_device_name

Set device name

Set (rename) a device's name. Tailscale REST: POST /device/{deviceId}/name.

輸入參數name必填deviceId必填

tailscale_set_device_tags

Set device tags

Set a device's ACL tags. REPLACES the device's existing tags. Tailscale REST: POST /device/{deviceId}/tags.

輸入參數tags必填deviceId必填

tailscale_expire_device_key

Expire device key

Expire a device's node key, forcing it to re-authenticate — a security response to a compromised or lost device. Tailscale REST: POST /device/{deviceId}/expire.

輸入參數deviceId必填

tailscale_set_device_routes

Set device routes

Set the subnet routes ENABLED for a device (from the routes it advertises). REPLACES the enabled set. Tailscale REST: POST /device/{deviceId}/routes.

輸入參數routes必填deviceId必填

tailscale_create_auth_key

Create auth key

Create a new auth key for the tailnet (used to register new devices). Tailscale REST: POST /tailnet/{tailnet}/keys.

輸入參數tagsreusableephemeraldescriptionexpirySecondspreauthorized

tailscale_delete_key

Delete key

Delete (revoke) an auth key or API access token by id — a security response. Tailscale REST: DELETE /tailnet/{tailnet}/keys/{keyId}.

輸入參數keyId必填

tailscale_delete_device

Delete device

Delete a device, removing it from the tailnet. Tailscale REST: DELETE /device/{deviceId}.

輸入參數deviceId必填

版本歷史

21
  1. v1.36.3最新Nov 7, 2026
  2. v1.35.3Nov 5, 2026
  3. v1.35.2Nov 5, 2026
  4. v1.35.1Nov 4, 2026
  5. v1.35.0Nov 3, 2026
  6. v1.34.1Nov 3, 2026
  7. v1.33.0Nov 1, 2026
  8. v1.31.0Oct 31, 2026
  9. v1.30.0Oct 31, 2026
  10. v1.29.2Oct 30, 2026
  11. v1.29.0Oct 30, 2026
  12. v1.24.0Oct 26, 2026
  13. v1.21.3Oct 25, 2026
  14. v1.21.0Oct 25, 2026
  15. v1.20.0Oct 24, 2026
  16. v1.17.0Oct 23, 2026
  17. v1.16.4Oct 22, 2026
  18. v1.16.3Oct 21, 2026
  19. v1.11.1Oct 9, 2026
  20. v1.10.0Oct 9, 2026
  21. v1.0.0Sep 16, 2026

評分

已滿足適用檢查項的 100%

該評分衡量此收錄條目的完整程度,依據註冊中心條目、端點與公開來源計算得出。它不是對伺服器本身的評價,也不表示伺服器安全或目前可用:可連通性是帶日期的檢查結果,評分也不包含安裝量或使用者評價。

  • 近 30 天內可連通必需25 分
  • 已宣告認證方式必需10 分
  • 已列出工具必需15 分
  • 描述必需15 分
  • 圖示10 分
  • 文件15 分
  • 授權條款10 分

其他 Usefulapi 整合