Tailscale MCP Server logo

Tailscale MCP Server

by paulsmith

A simple MCP server that provides read-only access to your Tailscale network directly from Claude Desktop and other MCP-compatible clients. It exposes your Tailscale network to an external application, allowing interaction through read-only commands.

View on GitHub

Last updated: N/A

What is Tailscale MCP Server?

The Tailscale MCP Server is a tool that allows MCP-compatible clients, such as Claude Desktop, to interact with your Tailscale network. It exposes a set of read-only commands as tools and prompts, enabling you to query information about your Tailscale network.

How to use Tailscale MCP Server?

  1. Install the Tailscale MCP Server (either by building from source or using a pre-built binary when available).
  2. Configure Claude Desktop to use the server by adding the server's command to the claude_desktop_config.json file.
  3. Ensure the server is accessible in your $PATH.
  4. Restart Claude Desktop.
  5. Use prompts within Claude to query your Tailscale network.

Key features of Tailscale MCP Server

  • Read-only access to Tailscale network

  • Integration with Claude Desktop

  • Exposes Tailscale status and connected devices

  • Provides network diagnostics

  • Supports listing available exit nodes

  • Enables pinging Tailscale hosts

  • Allows looking up information about Tailscale IPs

  • Offers safe Tailscale command execution

Use cases of Tailscale MCP Server

  • Checking Tailscale network status from Claude

  • Diagnosing network connectivity issues using Claude

  • Getting a summary of devices in your tailnet

  • Finding available exit nodes

  • Automating Tailscale network queries within Claude

FAQ from Tailscale MCP Server

What is MCP?

MCP stands for Model Context Protocol. It's a protocol that allows applications to interact with LLMs by providing them with tools and prompts.

Is this server secure?

The server is designed to be read-only, but it's important to be aware of the potential risks involved in exposing any part of your network to third-party applications, especially when interacting with LLMs.

What Tailscale commands are considered safe?

The list of safe subcommands includes: netcheck, ip, dns status, status, metrics, ping <peer>, version, exit-node list, and whois <ip>.

The server is not appearing in Claude Desktop, what should I do?

Check that the path to the binary in your configuration is correct, verify Tailscale CLI is installed and accessible in your $PATH, and check Claude Desktop logs for errors.

What if I get command errors?

Try running the command directly using the Tailscale CLI to verify it works, check that your Tailscale is correctly configured and connected, and ensure the command is in the allowed safe list.