tailscalelisted
Install: claude install-skill dinglebear-ai/rtailscale
# Tailscale Skill
Bridge to the Tailscale REST API (`https://api.tailscale.com/api/v2`) via the
**tailscale-rmcp** MCP server. Exposes a single `tailscale` MCP tool with action
dispatch. Use the three tiers below in order: MCP first, CLI second, raw REST
only as a last resort.
---
## Tier 1 — MCP Tool (always try this first)
**Tool:** `tailscale`
**Required parameter:** `action` (string)
### Read actions
These require only `action`; no `id` needed.
| Action | What it returns |
|--------|-----------------|
| `devices` | All devices in the tailnet — `nodeId`, `hostname`, `addresses` (IPs), `os`, `user`, `lastSeen`, `authorized`, `online` |
| `keys` | API keys — `id`, `expires`, `capabilities`, `description` |
| `acl` | ACL policy as parsed JSON — `acls`, `groups`, `tagOwners`, `hosts`, etc. |
| `dns` | Aggregated DNS info — `nameservers`, `searchpaths`, `preferences` (MagicDNS status) |
| `users` | Tailnet members — `loginName`, `displayName`, `role`, `status` |
| `help` | Full built-in documentation |
### Read actions requiring `id`
Pass the device's stable node ID (starts with `n`) or legacy numeric ID.
| Action | `id` | What it returns |
|--------|------|-----------------|
| `device` | required | Single device — same fields as `devices` plus `clientVersion`, `updateAvailable`, `blocksIncomingConnections`, `enabledRoutes`, `advertisedRoutes` |
| `device_routes` | required | Subnet routes — `advertisedRoutes` and `enabledRoutes` arrays |
### Write action (non-dest