Can I update my network's security policy (ACL) using this server?

Yes! You can use `get_tailnet_acl` to view the current HuJSON policy and `update_tailnet_acl` to apply changes directly to your tailnet configuration.

How do I authorize a new device that is pending approval?

Use the `authorize_device` tool with the specific `device_id` and set the `authorized` parameter to true. This allows you to manage node entry without the admin console.

Is it possible to generate temporary authentication keys for my servers?

Absolutely. Use the `create_auth_key` tool. You can optionally provide capabilities like 'ephemeral' or 'reusable' in the JSON payload to define how the key should behave.

Tailscale MCP Connector for Claude

A+

Manage your Tailscale mesh network — list devices, update ACL policies, manage auth keys, and inspect users directly from any AI agent.

13 tools Official Updated Jun 28, 2026 Official Vinkius Partner

More Details Connect to Claude

Connect your Tailscale network (tailnet) to any AI agent and take full control of your zero-trust infrastructure through natural conversation.

What you can do

Device Management — List all nodes in your tailnet, fetch specific device details, authorize new machines, or update device tags to organize your fleet.
Network Security (ACLs) — Retrieve and update your HuJSON policy files (ACLs) to manage access control without leaving your chat interface.
Authentication Keys — List, create, and delete auth keys to automate node joining or manage ephemeral server access.
User Auditing — List all users within your tailnet and fetch detailed profile information for specific members.
Node Cleanup — Securely delete decommissioned devices from your tailnet using their unique IDs.

How it works

Subscribe to this server
Enter your Tailscale API Key
Start managing your private network from Claude, Cursor, or any MCP-compatible client

No more jumping between the Tailscale admin console and your terminal. Your AI acts as a network administrator that understands your infrastructure context.

Who is this for?

DevOps Engineers — quickly check node statuses, manage tags, and generate auth keys for CI/CD pipelines.
Security Teams — audit tailnet users and inspect or update ACL policies to ensure zero-trust compliance.
IT Administrators — authorize new devices and clean up old nodes from the network via simple commands.

vpnzero-trustmesh-networknetwork-securityaclremote-access