Tailscale

Overview

Tailscale is a zero-config mesh VPN built on WireGuard that makes it easy to connect devices, services, and users across any network. The Tailscale block lets you automate network management tasks like device provisioning, access control, route management, and DNS configuration directly from your Sim workflows.

Authentication

The Tailscale block uses API key authentication. To get an API key:

1. Go to the Tailscale admin console
2. Navigate to Settings > Keys
3. Click Generate API key
4. Set an expiry (1-90 days) and copy the key (starts with tskey-api-)

You must have an Owner, Admin, IT admin, or Network admin role to generate API keys.

Tailnet Identifier

Every operation requires a tailnet parameter. This is typically your organization's domain name (e.g., example.com). You can also use "-" to refer to your default tailnet.

Common Use Cases

• Device inventory: List and monitor all devices connected to your network
• Automated provisioning: Create and manage auth keys to pre-authorize new devices
• Access control: Authorize or deauthorize devices, manage device tags for ACL policies
• Route management: View and enable subnet routes for devices acting as subnet routers
• DNS management: Configure nameservers, MagicDNS, and search paths
• Key lifecycle: Create, list, inspect, and revoke auth keys
• User auditing: List all users in the tailnet and their roles
• Policy review: Retrieve the current ACL policy for inspection or backup

Tools

tailscale_list_devices

List all devices in the tailnet

Input

Output

tailscale_get_device

Get details of a specific device by ID

Input

Output

tailscale_delete_device

Remove a device from the tailnet

Input

Output

tailscale_authorize_device

Authorize or deauthorize a device on the tailnet

Input

Output

tailscale_set_device_tags

Set tags on a device in the tailnet

Input

Output

tailscale_get_device_routes

Get the subnet routes for a device

Input

Output

tailscale_set_device_routes

Set the enabled subnet routes for a device

Input

Output

tailscale_update_device_key

Enable or disable key expiry on a device

Input

Output

tailscale_list_dns_nameservers

Get the DNS nameservers configured for the tailnet

Input

Output

tailscale_set_dns_nameservers

Set the DNS nameservers for the tailnet

Input

Output

tailscale_get_dns_preferences

Get the DNS preferences for the tailnet including MagicDNS status

Input

Output

tailscale_set_dns_preferences

Set DNS preferences for the tailnet (enable/disable MagicDNS)

Input

Output

tailscale_get_dns_searchpaths

Get the DNS search paths configured for the tailnet

Input

Output

tailscale_set_dns_searchpaths

Set the DNS search paths for the tailnet

Input

Output

tailscale_list_users

List all users in the tailnet

Input

Output

tailscale_create_auth_key

Create a new auth key for the tailnet to pre-authorize devices

Input

Output

tailscale_list_auth_keys

List all auth keys in the tailnet

Input

Output

tailscale_get_auth_key

Get details of a specific auth key

Input

Output

tailscale_delete_auth_key

Revoke and delete an auth key

Input

Output

tailscale_get_acl

Get the current ACL policy for the tailnet

Input

Output