Tailscale

Live 89 Actions 21 Events

Tailscale Integration for AI Agents

Connect your AI agent to 89 Tailscale actions via MCP, A2A, or SDK, with agent authentication, tool-calling execution, and security built-in, plus 21 events to subscribe to.

Start Free Book Demo Tailscale MCP Server

Tailscale AI Agent Actions

89 production-ready actions for your agent to do more on Tailscale.

Read the Tailscale docs

89 Actions

Get Contacts - Get the account, support and security contacts of the tailnet.

Update Contact - Change a tailnet contact email.

Resend Verification Email - Resend the verification email for a contact.

List Device Invites - List the share invites for a device.

Get A Device Invite - Get a device share invite by ID.

Create Device Invites - Create invites to share a device with other users.

Resend A Device Invite - Resend the email for a device share invite.

Accept A Device Invite - Accept a device share invite as the calling user.

Delete A Device Invite - Delete a device share invite.

List Tailnet Devices - List the devices in the Tailscale tailnet.

List Device Routes - List the subnet routes a device advertises and which are enabled.

Get A Device - Get a Tailscale device by ID.

Get Device Posture Attributes - Get the posture attributes of a device.

Batch Update Device Posture Attributes - Set or delete custom posture attributes on several devices at once.

Expire A Device'S Key - Expire a device's node key.

Set Device Routes - Set the enabled subnet routes for a device.

Authorize Device - Authorize or deauthorize a device in the tailnet.

Set Device Name - Set the MagicDNS name of a device.

Set Device Tags - Set the ACL tags on a device.

Update Device Key Expiry - Turn key expiry on or off for a device.

Set Device IPv4 Address - Set the Tailscale IPv4 address of a device.

Set Device Posture Attribute - Create or update one custom posture attribute on a device.

Delete A Device - Remove a device from the Tailscale tailnet.

Delete Device Posture Attribute - Delete one custom posture attribute from a device.

List DNS Nameservers - List the global DNS nameservers of the tailnet.

List DNS Search Paths - List the DNS search domains of the tailnet.

Get DNS Preferences - Get the MagicDNS preference of the tailnet.

Get Split DNS - Get the split DNS settings of the tailnet.

Get DNS Configuration - Get the full DNS configuration of the tailnet.

Set DNS Nameservers - Replace the global DNS nameservers of the tailnet.

Set DNS Preferences - Turn MagicDNS on or off for the tailnet.

Set DNS Search Paths - Replace the DNS search domains of the tailnet.

Update Split DNS - Add, change or remove split DNS domains.

Set Split DNS - Replace all split DNS settings of the tailnet.

Set DNS Configuration - Replace the full DNS configuration of the tailnet.

List Unified Groups - List the policy file groups of a Tailscale tailnet.

Get Unified Group - Get a Tailscale policy file group by its key.

List Unified Roles - List the built-in user roles of Tailscale.

Get Unified Role - Get a built-in Tailscale user role by ID.

List Unified Users - List unified users in a Tailscale tailnet.

Get Unified User - Get a unified Tailscale user by ID.

List Keys - List the auth keys, API access tokens and trust credentials of the tailnet.

Get Key - Get a key by ID.

Create An Auth Key Or Trust Credential - Create an auth key, OAuth client or federated identity.

Update Key - Update an OAuth client or federated identity.

Delete Key - Revoke a key.

List Configuration Audit Logs - List configuration audit log events for the tailnet.

List Network Flow Logs - List network flow logs for the tailnet.

Get Log Streaming Status - Get the delivery status of a log stream.

Get Log Streaming Configuration - Get the destination settings of a log stream.

Get AWS External ID - Get or create the AWS external ID for S3 log streaming.

Validate AWS Trust Policy - Check that an AWS IAM role trusts Tailscale with the external ID.

Set Log Streaming Configuration - Set the destination for a log stream.

Disable Log Streaming - Turn off a log stream.

List OAuth Apps - List the OAuth apps of the tailnet.

Get OAuth App - Get an OAuth app by ID.

Create OAuth App - Create an OAuth app.

Update OAuth App - Replace the settings of an OAuth app.

Delete OAuth App - Delete an OAuth app.

Get Policy File - Get the tailnet policy file (ACLs).

Preview Rule Matches - Preview which rules in a policy file match a user or IP and port.

Validate And Test Policy File - Validate a policy file or run ACL tests without saving.

Set Policy File - Replace the tailnet policy file (ACLs).

List Posture Integrations - List the device posture integrations of the tailnet.

Get A Posture Integration - Get a device posture integration by ID.

Create A Posture Integration - Link a third-party device posture provider.

Update A Posture Integration - Update a device posture integration.

Delete A Posture Integration - Remove a device posture integration.

List All Services - List the Tailscale Services in the tailnet.

List Devices Hosting A Service - List the devices that host a Tailscale Service.

Get A Service - Get a Tailscale Service by name.

Get Approval Status Of Service On A Device - Get whether a device is approved to host a Service.

Create Or Update Service - Create or replace a Tailscale Service.

Update Approval Status Of Service On A Device - Approve or unapprove a device to host a Service.

Delete A Service - Delete a Tailscale Service.

Get Tailnet Settings - Get the settings of the tailnet.

Update Tailnet Settings - Update the settings of the tailnet.

List User Invites - List the open user invites of a Tailscale tailnet.

Get User Invite - Get an open Tailscale user invite by ID.

Create User Invites - Invite users to join the Tailscale tailnet.

Resend A User Invite - Resend the email for a pending user invite.

Delete A User Invite - Delete a pending user invite.

List Users - List the users of a Tailscale tailnet.

Get User - Get a Tailscale user by ID.

Suspend User - Suspend a user from the Tailscale tailnet.

Restore User - Restore a suspended Tailscale user.

Approve User - Approve a Tailscale user who is waiting to join the tailnet.

Delete User - Delete a user from the Tailscale tailnet.

Update User Role - Change the role of a Tailscale user.

Tailscale Webhook Events

21 real-time Tailscale events your AI agent can subscribe to.

Webhooks for AI agents Read the Tailscale docs

21 Events

Device Created Fires when a device (node) is added to the tailnet.
Device Needs Approval Fires when a new device is waiting for an admin to approve it (pre-approved devices skip this).
Device Approved Fires when an admin approves a device.
Device Key Expiring Fires when a device key will expire in less than one day.
Device Key Expired Fires when a device key has expired.
Device Deleted Fires when a device is removed from the tailnet, including automatic removal of ephemeral devices.
Device Signed Fires when a trusted device signs a device (tailnets with Tailnet Lock only).
Device Needs Signature Fires when a device needs a signature from a trusted device (tailnets with Tailnet Lock only; not sent for shared devices).
Subnet Router IP Forwarding Disabled Fires when a subnet router advertises routes but has IP forwarding turned off.
Exit Node IP Forwarding Disabled Fires when an exit node has IP forwarding turned off.
Active Check Answers the Tailscale test event and emits it as an event.
Policy File Updated Fires when the tailnet policy file (ACLs) is changed.
Webhook Updated Fires when the tailnet webhook endpoint is changed.
Webhook Deleted Fires when the tailnet webhook endpoint is deleted.
User Created Fires when a user joins the tailnet.
User Needs Approval Fires when a new user is waiting for an admin to approve them.
User Approved Fires when an admin approves a user.
User Suspended Fires when a user is suspended.
User Restored Fires when a suspended user is restored.
User Deleted Fires when a user is removed from the tailnet.
User Role Updated Fires when a user's role changes.

Do More, Build Less

Integration Infrastructure for Tailscale AI Agents

Multiple Interfaces

Access integrations via API, AI SDKs, MCP & A2A.

Tailscale MCP server

Managed Authentication

Pre-built authentication UI.

Agent auth

Falcon Engine

Every Tailscale action runs on Falcon.

Agent Execution Engine

StackOne Defender

88.7% prompt injection detection.

Prompt injection defense

Start Free Book a Demo

"What impressed us most about StackOne is its ambition and clarity. They're creating infrastructure that modern software and the entire AI agent ecosystem can rely on. The depth of secure integrations, the pace of delivery, and the team's foresight into AI's future uniquely position StackOne to redefine this category."

Luna Schmid, Partner at GV

"We've been impressed by how quickly and deeply StackOne integrates with complex enterprise systems -- and now, with their focus on agent-to-agent interoperability, they're unlocking even more powerful use cases for customers. StackOne delivers all of the above in a universal layer -- without compromise."