Tailscale MCP
An MCP server that lets AI agents safely interact with the local Tailscale daemon over stdio. It enables tailnet discovery, SSH config generation, port sharing via Serve/Funnel, and latency matrices without handling auth keys or credentials directly.
Package and access
Local package with source-attributed installation metadata. Koskamo does not execute packages during review.
What you can do with it
- List devices and check tailnet status
- Generate and write SSH configuration
- Share dev servers via Serve/Funnel
- Check link latency with ping matrix
Source and maintenance
- Maintenance checked
Packages and installation
Source-provided package data. Koskamo has not executed or live-probed this package.
@tmhs/tailscale-mcp 0.4.0
{
"version": "0.4.0",
"transport": "stdio",
"identifier": "@tmhs/tailscale-mcp",
"registryType": "npm",
"environmentVariables": [
{
"name": "TAILSCALE_MCP_ALLOW_FUNNEL",
"format": "boolean",
"description": "Set to 1 to let share_port expose a port to the open internet with Funnel (off by default)"
},
{
"name": "TAILSCALE_MCP_READONLY",
"format": "boolean",
"description": "Set to 1 for monitoring only: no share tools, and no SSH config writes"
},
{
"name": "TAILSCALE_MCP_BIN",
"format": "filepath",
"description": "Path to the tailscale binary if it is not on PATH or in the default install location"
},
{
"name": "TAILSCALE_MCP_TIMEOUT_MS",
"format": "number",
"description": "Per-call timeout for tailscale commands in milliseconds (default 10000)"
}
]
}Tools
Reported by the attributed source; not independently observed by Koskamo.
Connect from your client
Each snippet configures the same source-provided package; replace placeholders before use.
Cursor
{
"mcpServers": {
"tailscale-mcp": {
"command": "npx",
"args": [
"-y",
"@tmhs/tailscale-mcp@0.4.0"
],
"env": {
"TAILSCALE_MCP_ALLOW_FUNNEL": "<YOUR_TAILSCALE_MCP_ALLOW_FUNNEL>",
"TAILSCALE_MCP_READONLY": "<YOUR_TAILSCALE_MCP_READONLY>",
"TAILSCALE_MCP_BIN": "<YOUR_TAILSCALE_MCP_BIN>",
"TAILSCALE_MCP_TIMEOUT_MS": "<YOUR_TAILSCALE_MCP_TIMEOUT_MS>"
}
}
}
}Cline
{
"mcpServers": {
"tailscale-mcp": {
"command": "npx",
"args": [
"-y",
"@tmhs/tailscale-mcp@0.4.0"
],
"env": {
"TAILSCALE_MCP_ALLOW_FUNNEL": "<YOUR_TAILSCALE_MCP_ALLOW_FUNNEL>",
"TAILSCALE_MCP_READONLY": "<YOUR_TAILSCALE_MCP_READONLY>",
"TAILSCALE_MCP_BIN": "<YOUR_TAILSCALE_MCP_BIN>",
"TAILSCALE_MCP_TIMEOUT_MS": "<YOUR_TAILSCALE_MCP_TIMEOUT_MS>"
}
}
}
}VS Code
{
"servers": {
"tailscale-mcp": {
"type": "stdio",
"command": "npx",
"args": [
"-y",
"@tmhs/tailscale-mcp@0.4.0"
],
"env": {
"TAILSCALE_MCP_ALLOW_FUNNEL": "<YOUR_TAILSCALE_MCP_ALLOW_FUNNEL>",
"TAILSCALE_MCP_READONLY": "<YOUR_TAILSCALE_MCP_READONLY>",
"TAILSCALE_MCP_BIN": "<YOUR_TAILSCALE_MCP_BIN>",
"TAILSCALE_MCP_TIMEOUT_MS": "<YOUR_TAILSCALE_MCP_TIMEOUT_MS>"
}
}
}
}Claude Desktop
{
"mcpServers": {
"tailscale-mcp": {
"command": "npx",
"args": [
"-y",
"@tmhs/tailscale-mcp@0.4.0"
],
"env": {
"TAILSCALE_MCP_ALLOW_FUNNEL": "<YOUR_TAILSCALE_MCP_ALLOW_FUNNEL>",
"TAILSCALE_MCP_READONLY": "<YOUR_TAILSCALE_MCP_READONLY>",
"TAILSCALE_MCP_BIN": "<YOUR_TAILSCALE_MCP_BIN>",
"TAILSCALE_MCP_TIMEOUT_MS": "<YOUR_TAILSCALE_MCP_TIMEOUT_MS>"
}
}
}
}Let your agent find its tools
Find servers like Tailscale MCP from your agent. Add Koskamo once to search the index for endpoints, access requirements, and client setup. Public discovery needs no key.