> ## Documentation Index
> Fetch the complete documentation index at: https://docs.stackone.com/llms.txt
> Use this file to discover all available pages before exploring further.

# Tailscale

> How to set up the Tailscale connector, plus the actions and events that are available.

![Tailscale](https://stackone-logos.com/api/tailscale/filled/svg)

Previewv0.2.0[See changelog](https://docs.stackone.com/connectors/tailscale/changelog.md)

[89 actions](#actions) · [21 events](#events) · 2 auth methods

Infrastructure
Security
IAM

## Getting Started

**1. Create or Select a Project**

Set up a new project or select an existing one. See [Organizations & Projects](https://docs.stackone.com/gateway/concepts/organizations-and-projects.md).

**2. Configure the Connector**

Enable the connector and create a Connector Profile in your project. See [Setup Connector Profile](https://docs.stackone.com/gateway/quickstart.md#setup-connector-profile).

> [card] [OAuth 2.0 (Client Credentials) · Connector Profile](https://docs.stackone.com/connectors/tailscale/guides/connector-profile/oauth-2-0-client-credentials.md)
>
> Requires an OAuth client with the all:read scope, created under Trust credentials. The client belongs to the tailnet rat...

> [card] [API Key · Connector Profile](https://docs.stackone.com/connectors/tailscale/guides/connector-profile/api-key.md)
>
> Uses an API access token from the Keys page. It acts as the user who created it and expires after at most 90 days, after...

Optionally, configure receiving Events for Tailscale into StackOne.

> [card] [Webhooks setup](https://docs.stackone.com/connectors/tailscale/guides/webhook-setup.md)

**3. Link an Account**

Link an account [from the dashboard](https://docs.stackone.com/connect/managing-connectors/linking-accounts.md#link-from-the-dashboard) (or via [StackOne Hub](https://docs.stackone.com/embed/account-linking/overview)).

See the guide for the authentication type chosen in the Connector Profile:

> [card] [OAuth 2.0 (Client Credentials) · Link Account](https://docs.stackone.com/connectors/tailscale/guides/link-account/oauth-2-0-client-credentials.md)

> [card] [API Key · Link Account](https://docs.stackone.com/connectors/tailscale/guides/link-account/api-key.md)

**4. Use Actions**

Connect an AI platform to the linked account's actions. See [AI Platforms](https://docs.stackone.com/connect/ai-platforms/overview.md).

Other ways to call actions are listed in [Protocols & SDKs](https://docs.stackone.com/connect/protocols-and-sdks.md).

## Actions

Authentication type

Select all
|
Clear

API Key

OAuth 2.0 (Client Credentials)

No auth methods found

89 actions

ActionDescription

Get Contacts`tailscale_get_contacts`

Get the account, support and security contacts of the tailnet.

Update Contact`tailscale_update_contact`

Change a tailnet contact email.

Resend Verification Email`tailscale_resend_contact_verification_email`

Resend the verification email for a contact.

List Device Invites`tailscale_list_device_invites`

List the share invites for a device.

Get A Device Invite`tailscale_get_device_invite`

Get a device share invite by ID.

Create Device Invites`tailscale_create_device_invites`

Create invites to share a device with other users.

Resend A Device Invite`tailscale_resend_device_invite`

Resend the email for a device share invite.

Accept A Device Invite`tailscale_accept_device_invite`

Accept a device share invite as the calling user.

Delete A Device Invite`tailscale_delete_device_invite`

Delete a device share invite.

List Tailnet Devices`tailscale_list_tailnet_devices`

List the devices in the Tailscale tailnet.

List Device Routes`tailscale_list_device_routes`

List the subnet routes a device advertises and which are enabled.

Get A Device`tailscale_get_device`

Get a Tailscale device by ID.

Get Device Posture Attributes`tailscale_get_device_posture_attributes`

Get the posture attributes of a device.

Batch Update Device Posture Attributes`tailscale_batch_update_custom_device_posture_attributes`

Set or delete custom posture attributes on several devices at once.

Expire A Device'S Key`tailscale_expire_device_key`

Expire a device's node key.

Set Device Routes`tailscale_set_device_routes`

Set the enabled subnet routes for a device.

Authorize Device`tailscale_authorize_device`

Authorize or deauthorize a device in the tailnet.

Set Device Name`tailscale_set_device_name`

Set the MagicDNS name of a device.

Set Device Tags`tailscale_set_device_tags`

Set the ACL tags on a device.

Update Device Key Expiry`tailscale_update_device_key`

Turn key expiry on or off for a device.

Set Device IPv4 Address`tailscale_set_device_ip`

Set the Tailscale IPv4 address of a device.

Set Device Posture Attribute`tailscale_set_custom_device_posture_attributes`

Create or update one custom posture attribute on a device.

Delete A Device`tailscale_delete_device`

Remove a device from the Tailscale tailnet.

Delete Device Posture Attribute`tailscale_delete_custom_device_posture_attributes`

Delete one custom posture attribute from a device.

List DNS Nameservers`tailscale_list_dns_nameservers`

List the global DNS nameservers of the tailnet.

List DNS Search Paths`tailscale_list_dns_search_paths`

List the DNS search domains of the tailnet.

Get DNS Preferences`tailscale_get_dns_preferences`

Get the MagicDNS preference of the tailnet.

Get Split DNS`tailscale_get_split_dns`

Get the split DNS settings of the tailnet.

Get DNS Configuration`tailscale_get_dns_configuration`

Get the full DNS configuration of the tailnet.

Set DNS Nameservers`tailscale_set_dns_nameservers`

Replace the global DNS nameservers of the tailnet.

Set DNS Preferences`tailscale_set_dns_preferences`

Turn MagicDNS on or off for the tailnet.

Set DNS Search Paths`tailscale_set_dns_search_paths`

Replace the DNS search domains of the tailnet.

Update Split DNS`tailscale_update_split_dns`

Add, change or remove split DNS domains.

Set Split DNS`tailscale_set_split_dns`

Replace all split DNS settings of the tailnet.

Set DNS Configuration`tailscale_set_dns_configuration`

Replace the full DNS configuration of the tailnet.

List Unified Groups`tailscale_unified_list_groups`

List the policy file groups of a Tailscale tailnet.

Get Unified Group`tailscale_unified_get_group`

Get a Tailscale policy file group by its key.

List Unified Roles`tailscale_unified_list_roles`

List the built-in user roles of Tailscale.

Get Unified Role`tailscale_unified_get_role`

Get a built-in Tailscale user role by ID.

List Unified Users`tailscale_unified_list_users`

List unified users in a Tailscale tailnet.

Get Unified User`tailscale_unified_get_user`

Get a unified Tailscale user by ID.

List Keys`tailscale_list_tailnet_keys`

List the auth keys, API access tokens and trust credentials of the tailnet.

Get Key`tailscale_get_key`

Get a key by ID.

Create An Auth Key Or Trust Credential`tailscale_create_key`

Create an auth key, OAuth client or federated identity.

Update Key`tailscale_set_key`

Update an OAuth client or federated identity.

Delete Key`tailscale_delete_key`

Revoke a key.

List Configuration Audit Logs`tailscale_list_configuration_audit_logs`

List configuration audit log events for the tailnet.

List Network Flow Logs`tailscale_list_network_flow_logs`

List network flow logs for the tailnet.

Get Log Streaming Status`tailscale_get_log_streaming_status`

Get the delivery status of a log stream.

Get Log Streaming Configuration`tailscale_get_log_streaming_configuration`

Get the destination settings of a log stream.

Get AWS External ID`tailscale_get_aws_external_id`

Get or create the AWS external ID for S3 log streaming.

Validate AWS Trust Policy`tailscale_validate_aws_external_id`

Check that an AWS IAM role trusts Tailscale with the external ID.

Set Log Streaming Configuration`tailscale_set_log_streaming_configuration`

Set the destination for a log stream.

Disable Log Streaming`tailscale_disable_log_streaming`

Turn off a log stream.

List OAuth Apps`tailscale_list_oauth_apps`

List the OAuth apps of the tailnet.

Get OAuth App`tailscale_get_oauth_app`

Get an OAuth app by ID.

Create OAuth App`tailscale_create_oauth_app`

Create an OAuth app.

Update OAuth App`tailscale_update_oauth_app`

Replace the settings of an OAuth app.

Delete OAuth App`tailscale_delete_oauth_app`

Delete an OAuth app.

Get Policy File`tailscale_get_policy_file`

Get the tailnet policy file (ACLs).

Preview Rule Matches`tailscale_preview_rule_matches`

Preview which rules in a policy file match a user or IP and port.

Validate And Test Policy File`tailscale_validate_and_test_policy_file`

Validate a policy file or run ACL tests without saving.

Set Policy File`tailscale_set_policy_file`

Replace the tailnet policy file (ACLs).

List Posture Integrations`tailscale_get_posture_integrations`

List the device posture integrations of the tailnet.

Get A Posture Integration`tailscale_get_posture_integration`

Get a device posture integration by ID.

Create A Posture Integration`tailscale_create_posture_integration`

Link a third-party device posture provider.

Update A Posture Integration`tailscale_update_posture_integration`

Update a device posture integration.

Delete A Posture Integration`tailscale_delete_posture_integration`

Remove a device posture integration.

List All Services`tailscale_list_services`

List the Tailscale Services in the tailnet.

List Devices Hosting A Service`tailscale_list_service_hosts`

List the devices that host a Tailscale Service.

Get A Service`tailscale_get_service`

Get a Tailscale Service by name.

Get Approval Status Of Service On A Device`tailscale_get_service_device_approval`

Get whether a device is approved to host a Service.

Create Or Update Service`tailscale_update_service`

Create or replace a Tailscale Service.

Update Approval Status Of Service On A Device`tailscale_update_service_device_approval`

Approve or unapprove a device to host a Service.

Delete A Service`tailscale_delete_service`

Delete a Tailscale Service.

Get Tailnet Settings`tailscale_get_tailnet_settings`

Get the settings of the tailnet.

Update Tailnet Settings`tailscale_update_tailnet_settings`

Update the settings of the tailnet.

List User Invites`tailscale_list_user_invites`

List the open user invites of a Tailscale tailnet.

Get User Invite`tailscale_get_user_invite`

Get an open Tailscale user invite by ID.

Create User Invites`tailscale_create_user_invites`

Invite users to join the Tailscale tailnet.

Resend A User Invite`tailscale_resend_user_invite`

Resend the email for a pending user invite.

Delete A User Invite`tailscale_delete_user_invite`

Delete a pending user invite.

List Users`tailscale_list_users`

List the users of a Tailscale tailnet.

Get User`tailscale_get_user`

Get a Tailscale user by ID.

Suspend User`tailscale_suspend_user`

Suspend a user from the Tailscale tailnet.

Restore User`tailscale_restore_user`

Restore a suspended Tailscale user.

Approve User`tailscale_approve_user`

Approve a Tailscale user who is waiting to join the tailnet.

Delete User`tailscale_delete_user`

Delete a user from the Tailscale tailnet.

Update User Role`tailscale_update_user_role`

Change the role of a Tailscale user.

## Events

Tags

Select all
|
Clear

Devices

Health Checks

Policy File

Users

Webhooks

No tags found

21 events

EventDescriptionTags

Device Created`tailscale_webhook_device_created`

Fires when a device (node) is added to the tailnet.

Devices

Device Needs Approval`tailscale_webhook_device_needs_approval`

Fires when a new device is waiting for an admin to approve it (pre-approved devices skip this).

Devices

Device Approved`tailscale_webhook_device_approved`

Fires when an admin approves a device.

Devices

Device Key Expiring`tailscale_webhook_device_key_expiring`

Fires when a device key will expire in less than one day.

Devices

Device Key Expired`tailscale_webhook_device_key_expired`

Fires when a device key has expired.

Devices

Device Deleted`tailscale_webhook_device_deleted`

Fires when a device is removed from the tailnet, including automatic removal of ephemeral devices.

Devices

Device Signed`tailscale_webhook_device_signed`

Fires when a trusted device signs a device (tailnets with Tailnet Lock only).

Devices

Device Needs Signature`tailscale_webhook_device_needs_signature`

Fires when a device needs a signature from a trusted device (tailnets with Tailnet Lock only; not sent for shared device...

Devices

Subnet Router IP Forwarding Disabled`tailscale_webhook_device_subnet_ip_forwarding_disabled`

Fires when a subnet router advertises routes but has IP forwarding turned off.

Devices

Exit Node IP Forwarding Disabled`tailscale_webhook_device_exit_node_ip_forwarding_disabled`

Fires when an exit node has IP forwarding turned off.

Devices

Active Check`tailscale_webhook_active_check`

Answers the Tailscale test event and emits it as an event.

Health Checks

Policy File Updated`tailscale_webhook_policy_file_updated`

Fires when the tailnet policy file (ACLs) is changed.

Policy File

Webhook Updated`tailscale_webhook_webhook_updated`

Fires when the tailnet webhook endpoint is changed.

Webhooks

Webhook Deleted`tailscale_webhook_webhook_deleted`

Fires when the tailnet webhook endpoint is deleted.

Webhooks

User Created`tailscale_webhook_user_created`

Fires when a user joins the tailnet.

Users

User Needs Approval`tailscale_webhook_user_needs_approval`

Fires when a new user is waiting for an admin to approve them.

Users

User Approved`tailscale_webhook_user_approved`

Fires when an admin approves a user.

Users

User Suspended`tailscale_webhook_user_suspended`

Fires when a user is suspended.

Users

User Restored`tailscale_webhook_user_restored`

Fires when a suspended user is restored.

Users

User Deleted`tailscale_webhook_user_deleted`

Fires when a user is removed from the tailnet.

Users

User Role Updated`tailscale_webhook_user_role_updated`

Fires when a user's role changes.

Users


This documentation is built and hosted on [Mintlify](https://mintlify.com), a developer documentation platform.