Be the first to get access to new connectors. Get early access →
ConnectorBay Early access

Tailscale (BYOK) — connector documentation

  • MCP endpoint: https://byok-tailscale.connectorbay.com/mcp
  • REST API: POST https://byok-tailscale.connectorbay.com/v1/tools/{tool_name}, described by the OpenAPI 3.1 spec at https://byok-tailscale.connectorbay.com/openapi.json
  • Transport: Streamable HTTP, stateless, MCP specification 2025-06-18 or later
  • Authentication: your own Tailscale Tailscale API access token, sent in the X-Upstream-Key header of every request (never stored, logged or cached)
  • Health: https://byok-tailscale.connectorbay.com/health · Tool schemas: https://byok-tailscale.connectorbay.com/tools.json
  • Publisher: Unify Dynamics LLC · connectorbay.com/byok-tailscale · agent@connectorbay.com

What Tailscale (BYOK) is for

Tailscale (BYOK) lets an AI assistant read your own Tailscale data through the Tailscale API with a key you supply (Tailscale API access token). Read-only: 12 tools (list_devices, get_device, get_device_routes, list_users, get_user, list_keys, get_key, get_contacts, get_dns_nameservers, get_dns_preferences, get_tailnet_settings, list_posture_integrations). The BYOK key travels with each request, is used for that one call only and is never stored, logged or cached; it is only ever sent to api.tailscale.com. Unofficial connector by Unify Dynamics LLC: not affiliated with, endorsed by or sponsored by Tailscale. Tailscale and its logos are trademarks of their owners and are used only to say which service the connector works with.

Ask your assistant things like:

  • "Which devices are in my tailnet and which are offline?"
  • "Show details of Tailscale device nodeid123CNTRL"
  • "Which subnet routes does device nodeid123CNTRL advertise?"
  • "Who are the users of my tailnet and what roles do they have?"
  • "Show Tailscale user u123"
  • "Which Tailscale keys exist in my tailnet?"

What it does

  • list_devices: List the devices of a tailnet with name, addresses, OS, client version, owner, tags, connection state and last seen time.
  • get_device: Get one device: name, addresses, OS, client version, owner, tags, key expiry and connection state.
  • get_device_routes: Get the subnet routes a device advertises and the ones that are enabled for it.
  • list_users: List the users of a tailnet with login name, role, type, status, device count and last seen time.
  • get_user: Get one tailnet user by id.
  • list_keys: List the ids of the API access tokens, auth keys and OAuth clients of the tailnet (secret values are never listed).
  • get_key: Get a key's metadata: type, description, created, expiry, revoked time, scopes and tags (the secret is not returned).
  • get_contacts: Get the account, support and security contact email addresses of the tailnet and whether they are verified.
  • get_dns_nameservers: Get the global DNS nameservers set for the tailnet.
  • get_dns_preferences: Get the tailnet DNS preferences, which tell whether MagicDNS is on.
  • get_tailnet_settings: Get the tailnet settings: device approval, key duration, user approval, flow logging, HTTPS and route selection.
  • list_posture_integrations: List the device posture integrations (provider and ids; no secrets) set up for the tailnet.

BYOK key

You bring your own Tailscale Tailscale API access token (https://login.tailscale.com/admin/settings/keys). Your assistant sends it in the X-Upstream-Key header with each request. ConnectorBay uses it for that one call only: it is never stored, logged or cached, never shown in an answer, and it is only sent to api.tailscale.com over https, with no redirects followed. Create a key with the fewest permissions the tools need (read-only if the provider offers it), and revoke it at the provider whenever you like.

Data sources

Live from the Tailscale API (api.tailscale.com) with a BYOK key; documentation: https://tailscale.com/docs/reference/tailscale-api. Endpoints checked against that documentation on 2026-10-16.

What it is not

Unofficial connector by Unify Dynamics LLC: not affiliated with, endorsed by or sponsored by Tailscale. Tailscale and its logos are trademarks of their owners and are used only to say which service the connector works with. It is read-only: it never creates, changes, sends or deletes anything in your Tailscale account.

Built for: Worldwide. Languages: English.