mcp-tailscale
Production-ready MCP server for Tailscale management with 48 tools across 9 domains: Devices, DNS/Split DNS, ACL policies, Auth Keys, Users, Webhooks, Posture Integrations, Tailnet Settings, and Diagnostics. Supports stdio and SSE transport with Bearer token authentication. Built with TypeScript strict mode, Zod validation, and zero shell execution. AGPL-3.0 + Commercial dual-licensed.
Claim it to get a verified publisher badge, a free copy of our full audit findings, and direct contact for any high-priority issues we find.
Install from
M8ven verifies MCPs across every public registry — install directly from whichever one you prefer.
Disclosed vulnerabilities in this server's declared npm dependencies (via OSV). Whether each is reachable depends on the installed versions.
When Vitest UI server is listening, arbitrary file can be read and executed
Vitest allows Remote Code Execution when accessing a malicious website while Vitest API server is listening
Anthropic's MCP TypeScript SDK has a ReDoS vulnerability
Model Context Protocol (MCP) TypeScript SDK does not enable DNS rebinding protection by default
axios Vulnerable to Full Man-in-the-Middle via Prototype Pollution Gadget in `config.proxy`
process.env. You'll be asked to provide them before it can run.TAILSCALE_API_KEY— If is already set in the environment, Vault is still contacted (if configured) but the explicit value wins. This lets you override Vault values per-session without touching the Vault secret.TAILSCALE_API_URL— No https://api.tailscale.com API base URL (override for testing)TAILSCALE_OAUTH_CLIENT_ID— OAuth note: the Vault loader only handles the API-key path. If you use OAuth ( / TAILSCALE_OAUTH_CLIENT_SECRET), set those through the normal environment — they are not currently read from Vault.TAILSCALE_OAUTH_CLIENT_SECRET— OAuth note: the Vault loader only handles the API-key path. If you use OAuth (TAILSCALE_OAUTH_CLIENT_ID / ), set those through the normal environment — they are not currently read from Vault.TAILSCALE_TAILNET— "": "your-tailnet-name"TAILSCALE_TIMEOUT— No 30000 Request timeout in milliseconds[](https://m8ven.ai/mcp/itunified-io-mcp-tailscale-15td1f)