--- bezeichner: "io.github.tailscale-mcp/tailscale-mcp" art: "mcp_server" slug: "io-github-tailscale-mcp-tailscale-mcp" paketkoordinate: "npm:@tailscale-mcp/tailscale-mcp" status: "aktiv" homepage: "https://github.com/tailscale-mcp/tailscale-mcp" erhebungsstand: "2026-10-10T01:17:01.464Z" namensraum: "io.github.tailscale-mcp" registerseite: "https://tracevero.de/mcp/io-github-tailscale-mcp-tailscale-mcp" abgerufen_am: "2026-10-10" zugangsdaten_erforderlich: false ausfuehrungsort: "lokal" dateisystem_pfadargument: false quelloffen_einsehbar: true roh_beschreibung: "Drive a Tailscale node and its tailnet through the CLI and the control-plane API" version: "2.0.2" roh_umgebungsvariablen: "TAILSCALE_API_KEY, TAILSCALE_OAUTH_CLIENT_ID, TAILSCALE_OAUTH_CLIENT_SECRET, TAILSCALE_TAILNET, TAILSCALE_MCP_PRESET, TAILSCALE_MCP_ALLOW_WRITE, TAILSCALE_MCP_ALLOW_DESTRUCTIVE, TAILSCALE_API_KEY, TAILSCALE_OAUTH_CLIENT_ID, TAILSCALE_OAUTH_CLIENT_SECRET, TAILSCALE_TAILNET, TAILSCALE_MCP_PRESET, TAILSCALE_MCP_ALLOW_WRITE, TAILSCALE_MCP_ALLOW_DESTRUCTIVE" roh_geheime_pflichtvariablen: "" roh_transportarten: "stdio, stdio" roh_pfadargumente: "" roh_repository_url: "https://github.com/tailscale-mcp/tailscale-mcp" roh_paketquellen: "npm, oci" roh_geheime_pflichtkopfzeilen: "" roh_pfad_umgebungsvariablen: "" roh_remote_adressen: "" roh_remote_hosts: "" roh_statusmeldung: "" roh_veroeffentlicht_am: "2026-10-10" roh_aktualisiert_am: "2026-10-10" roh_schemafassung: "https://static.modelcontextprotocol.io/schemas/2025-12-11/server.schema.json" roh_bereitstellungsform: "paket" roh_repository_quelle: "github" roh_repository_unterordner: "" roh_paketbezeichner: "@tailscale-mcp/tailscale-mcp, ghcr.io/tailscale-mcp/tailscale-mcp:2.0.2" roh_paketversionen: "2.0.2" roh_laufzeithinweise: "" roh_umgebungsformate: "" roh_umgebungsbeschreibungen: "TAILSCALE_API_KEY=A control-plane API access token. One of this, the OAuth client pair, or the OAuth JWT file is needed for the tailnet tools; without any of them only the local tools are offered. · TAILSCALE_MCP_ALLOW_DESTRUCTIVE=Offer the tools that remove or sever something. Implies the write tier. · TAILSCALE_MCP_ALLOW_WRITE=Offer the tools that change something. Read-only without it. · TAILSCALE_MCP_PRESET=Which tools are offered: minimal, core or full. · TAILSCALE_OAUTH_CLIENT_ID=An OAuth client id, used with TAILSCALE_OAUTH_CLIENT_SECRET when there is no API access token. · TAILSCALE_OAUTH_CLIENT_SECRET=The OAuth client secret that goes with TAILSCALE_OAUTH_CLIENT_ID. · TAILSCALE_TAILNET=The tailnet the control-plane tools act on. Without it they act on the one the credential belongs to." roh_symbolformate: "" roh_verbindungswege: "{\"packages\":[{\"registryType\":\"npm\",\"identifier\":\"@tailscale-mcp/tailscale-mcp\",\"version\":\"2.0.2\",\"transport\":\"stdio\",\"environment\":[{\"name\":\"TAILSCALE_API_KEY\",\"description\":\"A control-plane API access token. One of this, the OAuth client pair, or the OAuth JWT file is needed for the tailnet tools; without any of them only the local tools are offered.\",\"required\":false,\"secret\":true},{\"name\":\"TAILSCALE_OAUTH_CLIENT_ID\",\"description\":\"An OAuth client id, used with TAILSCALE_OAUTH_CLIENT_SECRET when there is no API access token.\",\"required\":false,\"secret\":false},{\"name\":\"TAILSCALE_OAUTH_CLIENT_SECRET\",\"description\":\"The OAuth client secret that goes with TAILSCALE_OAUTH_CLIENT_ID.\",\"required\":false,\"secret\":true},{\"name\":\"TAILSCALE_TAILNET\",\"description\":\"The tailnet the control-plane tools act on. Without it they act on the one the credential belongs to.\",\"required\":false,\"secret\":false},{\"name\":\"TAILSCALE_MCP_PRESET\",\"description\":\"Which tools are offered: minimal, core or full.\",\"required\":false,\"secret\":false},{\"name\":\"TAILSCALE_MCP_ALLOW_WRITE\",\"description\":\"Offer the tools that change something. Read-only without it.\",\"required\":false,\"secret\":false},{\"name\":\"TAILSCALE_MCP_ALLOW_DESTRUCTIVE\",\"description\":\"Offer the tools that remove or sever something. Implies the write tier.\",\"required\":false,\"secret\":false}],\"additional_arguments_declared\":false},{\"registryType\":\"oci\",\"identifier\":\"ghcr.io/tailscale-mcp/tailscale-mcp:2.0.2\",\"transport\":\"stdio\",\"environment\":[{\"name\":\"TAILSCALE_API_KEY\",\"description\":\"A control-plane API access token. One of this, the OAuth client pair, or the OAuth JWT file is needed for the tailnet tools; without any of them only the local tools are offered.\",\"required\":false,\"secret\":true},{\"name\":\"TAILSCALE_OAUTH_CLIENT_ID\",\"description\":\"An OAuth client id, used with TAILSCALE_OAUTH_CLIENT_SECRET when there is no API access token.\",\"required\":false,\"secret\":false},{\"name\":\"TAILSCALE_OAUTH_CLIENT_SECRET\",\"description\":\"The OAuth client secret that goes with TAILSCALE_OAUTH_CLIENT_ID.\",\"required\":false,\"secret\":true},{\"name\":\"TAILSCALE_TAILNET\",\"description\":\"The tailnet the control-plane tools act on. Without it they act on the one the credential belongs to.\",\"required\":false,\"secret\":false},{\"name\":\"TAILSCALE_MCP_PRESET\",\"description\":\"Which tools are offered: minimal, core or full.\",\"required\":false,\"secret\":false},{\"name\":\"TAILSCALE_MCP_ALLOW_WRITE\",\"description\":\"Offer the tools that change something. Read-only without it.\",\"required\":false,\"secret\":false},{\"name\":\"TAILSCALE_MCP_ALLOW_DESTRUCTIVE\",\"description\":\"Offer the tools that remove or sever something. Implies the write tier.\",\"required\":false,\"secret\":false}],\"additional_arguments_declared\":false}],\"remotes\":[]}" --- # Tailscale ## Gemessene Werte | Merkmal | Wert | Quelle | Erhoben am | Vertrauensgrad | Rohangabe | | --- | --- | --- | --- | --- | --- | | Pflicht-Geheimnisse deklariert | false | MCP-Register | 2026-09-06T01:17:02.381Z | abgeleitet | roh_geheime_pflichtvariablen: ; roh_geheime_pflichtkopfzeilen: | | Ausführungsort | lokal | MCP-Register | 2026-09-06T01:17:02.381Z | abgeleitet | roh_transportarten: stdio, stdio | | Pfadargument vorhanden | false | MCP-Register | 2026-09-06T01:17:02.381Z | abgeleitet | roh_pfadargumente: ; roh_pfad_umgebungsvariablen: | | Repository-Adresse geführt | true | MCP-Register | 2026-09-06T01:17:02.381Z | abgeleitet | roh_repository_url: https://github.com/tailscale-mcp/tailscale-mcp | | Beschreibung (Rohangabe) | Drive a Tailscale node and its tailnet through the CLI and the control-plane API | MCP-Register | 2026-09-06T01:17:02.381Z | selbstauskunft | | | Deklarierte Version | 2.0.2 | MCP-Register | 2026-10-10T01:17:01.464Z | selbstauskunft | | | Umgebungsvariablen (Rohangabe) | TAILSCALE_API_KEY, TAILSCALE_OAUTH_CLIENT_ID, TAILSCALE_OAUTH_CLIENT_SECRET, TAILSCALE_TAILNET, TAILSCALE_MCP_PRESET, TAILSCALE_MCP_ALLOW_WRITE, TAILSCALE_MCP_ALLOW_DESTRUCTIVE, TAILSCALE_API_KEY, TAILSCALE_OAUTH_CLIENT_ID, TAILSCALE_OAUTH_CLIENT_SECRET, TAILSCALE_TAILNET, TAILSCALE_MCP_PRESET, TAILSCALE_MCP_ALLOW_WRITE, TAILSCALE_MCP_ALLOW_DESTRUCTIVE | MCP-Register | 2026-09-06T01:17:02.381Z | selbstauskunft | | | Geheime Pflichtvariablen (Rohangabe) | | MCP-Register | 2026-09-06T01:17:02.381Z | selbstauskunft | | | Transportarten (Rohangabe) | stdio, stdio | MCP-Register | 2026-09-06T01:17:02.381Z | selbstauskunft | | | Pfadargumente (Rohangabe) | | MCP-Register | 2026-09-06T01:17:02.381Z | selbstauskunft | | | Repository (Rohangabe) | https://github.com/tailscale-mcp/tailscale-mcp | MCP-Register | 2026-09-06T01:17:02.381Z | selbstauskunft | | | Paketquellen (Rohangabe) | npm, oci | MCP-Register | 2026-09-06T01:17:02.381Z | selbstauskunft | | | Geheime Pflichtkopfzeilen (Rohangabe) | | MCP-Register | 2026-09-06T01:17:02.381Z | selbstauskunft | | | Pfad-Umgebungsvariablen (Rohangabe) | | MCP-Register | 2026-09-06T01:17:02.381Z | selbstauskunft | | | Remote-Adressen (Rohangabe) | | MCP-Register | 2026-09-06T01:17:02.381Z | selbstauskunft | | | Remote-Hosts (Rohangabe) | | MCP-Register | 2026-09-06T01:17:02.381Z | selbstauskunft | | | Statusmeldung des Registers (Rohangabe) | | MCP-Register | 2026-09-06T01:17:02.381Z | selbstauskunft | | | Im Register eingetragen am (Rohangabe) | 2026-10-10 | MCP-Register | 2026-10-10T01:17:01.464Z | selbstauskunft | | | Im Register geändert am (Rohangabe) | 2026-10-10 | MCP-Register | 2026-10-10T01:17:01.464Z | selbstauskunft | | | Schemafassung des Rohsatzes (Rohangabe) | https://static.modelcontextprotocol.io/schemas/2025-12-11/server.schema.json | MCP-Register | 2026-09-06T01:17:02.381Z | selbstauskunft | | | Bereitstellungsform (Rohangabe) | paket | MCP-Register | 2026-09-06T01:17:02.381Z | selbstauskunft | | | Repository-Plattform (Rohangabe) | github | MCP-Register | 2026-09-06T01:17:02.381Z | selbstauskunft | | | Repository-Unterordner (Rohangabe) | | MCP-Register | 2026-09-06T01:17:02.381Z | selbstauskunft | | | Paketbezeichner (Rohangabe) | @tailscale-mcp/tailscale-mcp, ghcr.io/tailscale-mcp/tailscale-mcp:2.0.2 | MCP-Register | 2026-10-10T01:17:01.464Z | selbstauskunft | | | Paketversionen (Rohangabe) | 2.0.2 | MCP-Register | 2026-10-10T01:17:01.464Z | selbstauskunft | | | Laufzeithinweise (Rohangabe) | | MCP-Register | 2026-09-06T01:17:02.381Z | selbstauskunft | | | Formate der Umgebungsvariablen (Rohangabe) | | MCP-Register | 2026-09-06T01:17:02.381Z | selbstauskunft | | | Beschreibungen der Umgebungsvariablen (Rohangabe) | TAILSCALE_API_KEY=A control-plane API access token. One of this, the OAuth client pair, or the OAuth JWT file is needed for the tailnet tools; without any of them only the local tools are offered. · TAILSCALE_MCP_ALLOW_DESTRUCTIVE=Offer the tools that remove or sever something. Implies the write tier. · TAILSCALE_MCP_ALLOW_WRITE=Offer the tools that change something. Read-only without it. · TAILSCALE_MCP_PRESET=Which tools are offered: minimal, core or full. · TAILSCALE_OAUTH_CLIENT_ID=An OAuth client id, used with TAILSCALE_OAUTH_CLIENT_SECRET when there is no API access token. · TAILSCALE_OAUTH_CLIENT_SECRET=The OAuth client secret that goes with TAILSCALE_OAUTH_CLIENT_ID. · TAILSCALE_TAILNET=The tailnet the control-plane tools act on. Without it they act on the one the credential belongs to. | MCP-Register | 2026-09-06T01:17:02.381Z | selbstauskunft | | | Symbolformate (Rohangabe) | | MCP-Register | 2026-09-06T01:17:02.381Z | selbstauskunft | | | Verbindungswege (Quellstruktur) | {"packages":[{"registryType":"npm","identifier":"@tailscale-mcp/tailscale-mcp","version":"2.0.2","transport":"stdio","environment":[{"name":"TAILSCALE_API_KEY","description":"A control-plane API access token. One of this, the OAuth client pair, or the OAuth JWT file is needed for the tailnet tools; without any of them only the local tools are offered.","required":false,"secret":true},{"name":"TAILSCALE_OAUTH_CLIENT_ID","description":"An OAuth client id, used with TAILSCALE_OAUTH_CLIENT_SECRET when there is no API access token.","required":false,"secret":false},{"name":"TAILSCALE_OAUTH_CLIENT_SECRET","description":"The OAuth client secret that goes with TAILSCALE_OAUTH_CLIENT_ID.","required":false,"secret":true},{"name":"TAILSCALE_TAILNET","description":"The tailnet the control-plane tools act on. Without it they act on the one the credential belongs to.","required":false,"secret":false},{"name":"TAILSCALE_MCP_PRESET","description":"Which tools are offered: minimal, core or full.","required":false,"secret":false},{"name":"TAILSCALE_MCP_ALLOW_WRITE","description":"Offer the tools that change something. Read-only without it.","required":false,"secret":false},{"name":"TAILSCALE_MCP_ALLOW_DESTRUCTIVE","description":"Offer the tools that remove or sever something. Implies the write tier.","required":false,"secret":false}],"additional_arguments_declared":false},{"registryType":"oci","identifier":"ghcr.io/tailscale-mcp/tailscale-mcp:2.0.2","transport":"stdio","environment":[{"name":"TAILSCALE_API_KEY","description":"A control-plane API access token. One of this, the OAuth client pair, or the OAuth JWT file is needed for the tailnet tools; without any of them only the local tools are offered.","required":false,"secret":true},{"name":"TAILSCALE_OAUTH_CLIENT_ID","description":"An OAuth client id, used with TAILSCALE_OAUTH_CLIENT_SECRET when there is no API access token.","required":false,"secret":false},{"name":"TAILSCALE_OAUTH_CLIENT_SECRET","description":"The OAuth client secret that goes with TAILSCALE_OAUTH_CLIENT_ID.","required":false,"secret":true},{"name":"TAILSCALE_TAILNET","description":"The tailnet the control-plane tools act on. Without it they act on the one the credential belongs to.","required":false,"secret":false},{"name":"TAILSCALE_MCP_PRESET","description":"Which tools are offered: minimal, core or full.","required":false,"secret":false},{"name":"TAILSCALE_MCP_ALLOW_WRITE","description":"Offer the tools that change something. Read-only without it.","required":false,"secret":false},{"name":"TAILSCALE_MCP_ALLOW_DESTRUCTIVE","description":"Offer the tools that remove or sever something. Implies the write tier.","required":false,"secret":false}],"additional_arguments_declared":false}],"remotes":[]} | MCP-Register | 2026-10-10T01:17:01.464Z | selbstauskunft | | ## Verweise - Namensraum: [[namensraum/io-github-tailscale-mcp|io.github.tailscale-mcp]] --- - Registerseite: - Abgerufen am: 2026-10-10