Tailscale for AI agents
Agents read Tailscale at once. Changes and sends are held for a person's approval by default.
About Tailscale
Tailscale is a secure networking platform for managing tailnets, devices, users, DNS, access policies, services, and other network administration resources.
What an agent can do in Tailscale
Every Tailscale action is classed by the platform as a read, a change or a send. Reads run at once. Changes and sends are held for a person by default.
Runs at once (reads)
Looks things up in Tailscale without asking first. 10 actions.
- Get DeviceGet the full current record for one manageable Tailscale device by ID.
- Get DNS ConfigurationReturn the selected tailnet's combined MagicDNS, nameserver, search-path, and split-DNS configuration.
- Get Policy FileReturn the active Tailscale policy file for a tailnet as complete provider-native JSON.
- Get Tailnet SettingsReturn current tailnet-wide approval, update, key-duration, HTTPS, routing, logging, and posture settings.
- List Configuration Audit LogsReturn configuration audit events for an explicit RFC3339 time window in the selected tailnet, optionally filtered by actor, target, or event name.
- List Device RoutesReturn the subnet routes advertised and currently enabled for a Tailscale device.
- List Tailnet DevicesReturn all devices in the selected tailnet, including identifiers, names, addresses, tags, authorization state, and connectivity metadata. Supports exact server-side filtering by hostname, tags, and e
- List Tailnet KeysReturn active auth keys, API access tokens, OAuth clients, and federated identities visible in the selected tailnet, without secret key material.
- List UsersReturn users in the selected tailnet, optionally filtered by membership type or role.
- Validate Policy FileValidate a hypothetical JSON policy file and run its tests without changing the active Tailscale policy.
Held for approval by default (changes and sends)
Held for a person's approval by default. The approval is recorded and the action is sent once, never twice, with 10 seconds to undo. 3 actions.
- Set Device AuthorizationApprove or revoke approval for one device when device approval is enabled on the tailnet.
- Set Device RoutesReplace the enabled subnet routes for one device with an explicit list of routes. Routes may be enabled before the device advertises them.
- Set Device TagsReplace all ACL tags assigned to one Tailscale device.
Changes wait in Needs you
Changes and sends in Tailscale are held for a person's approval by default. The approval is recorded, and the action is sent once, never twice, with 10 seconds to undo.
Tailscale questions
Can an agent change data in Tailscale on its own?
Not by default. Changes and sends in Tailscale are held for a person's approval. The approval is recorded, and the action is sent once, never twice, with 10 seconds to undo.
What can an agent read in Tailscale?
This connector lists 10 read actions. Reads run at once, without waiting for approval.
How does Tailscale connect?
It connects with API key. Connectors are built and maintained by third-party developers; availability is confirmed during scoping.