Tailscale is a secure networking platform for managing tailnets, devices, users, DNS, access policies, services, and other network administration resources.

Use it from your agent

One ClawLink account serves every agent you run. Pick the guide for yours, or connect Tailscale once and call the same tools from all of them.

Tailscale for OpenClawInstall, pair, connect, first prompt

Tailscale for Hermes AgentInstall, pair, connect, first prompt MCPClaude Code, Cursor, any MCP clientCLI login or the remote MCP server

Setup

Connect Tailscale through ClawLink's hosted setup.

Auth: Paste one API key. The credential stays on the ClawLink server; your agent holds only a ClawLink key you can revoke.
Where: the ClawLink dashboard, or ask your agent to connect it.

What your agent can do

Tailscale exposes 14 tools through ClawLink.

Tool	What it does	Kind
`tailscale_get_device`	Get the current record for one manageable Tailscale device by ID, with a choice of full or	Read
`tailscale_get_dns_configuration`	Return the selected tailnet's combined MagicDNS, nameserver, search-path, and split-DNS	Read
`tailscale_get_policy_file`	Return the active Tailscale policy file for a tailnet as complete provider-native JSON	Read
`tailscale_get_tailnet_settings`	Return current tailnet-wide approval, update, key-duration, HTTPS, routing, logging, and	Read
`tailscale_list_configuration_audit_logs`	Return configuration audit events for an explicit RFC3339 time window in the selected tailnet	Read
`tailscale_list_device_routes`	Return the subnet routes advertised and currently enabled for a Tailscale device	Read
`tailscale_list_tailnet_devices`	Return all devices in the selected tailnet, including identifiers, names, addresses, tags	Read
`tailscale_list_tailnet_keys`	Return active auth keys, API access tokens, OAuth clients, and federated identities visible in	Read
`tailscale_list_users`	Return users in the selected tailnet, optionally filtered by membership type or role	Read
`tailscale_validate_policy_file`	Validate a hypothetical JSON policy file and run its tests without changing the active	Read
`tailscale_replace_policy_file`	Replace the complete active Tailscale access policy for a tailnet, optionally guarded by an ETag	Read
`tailscale_set_device_authorization`	Approve or revoke approval for one device when device approval is enabled on the tailnet	Write
`tailscale_set_device_routes`	Replace the enabled subnet routes for one device with an explicit list of routes	Write
`tailscale_set_device_tags`	Replace all ACL tags assigned to one Tailscale device	Write