Leina 
Wanta 
Audit a Device’s Network Context
Read device authorization, subnet routes, and reported security posture.
/oo Tailscale: Inspect Tailscale device [device ID], its subnet routes, and security posture. Explain anything that may affect access.
Connect Tailscale to Your AI Agent
Check a device’s access or test a network policy before making a change.
82 tools Custom credential
Try a Tailscale Task
Copy a prompt into your agent with the oo Skill installed. Add your page links and source notes before running it.
oo Skill Tailscale
Validate a Proposed Policy
Test a proposed policy before changing the network.
/oo Tailscale: Read the current Tailscale policy and test this proposed policy: [policy]. Explain validation results without saving changes.
Review Configuration Changes
Review who changed network settings during a selected period.
/oo Tailscale: Review Tailscale configuration changes during [time range and time zone]. Summarize who changed what.
Start Working with Tailscale
-
Install OOMOL
Set up oo CLI and the oo Skill in your agent.
Install OOMOL → -
Connect Tailscale
Provide a Tailscale OAuth client ID and client secret from Trust credentials.
Connect Tailscale → -
Give Your Agent a Task
Use /oo with the pages to read, the changes to make, and where to save the result.
Connection Guide →
Choose Your Agent
- A Tailscale OAuth client ID and secret with appropriate scopes.
- Client scopes determine available operations. Leave tailnet blank for the client’s default tailnet, and validate policies before replacements.
Tailscale Tools
Review devices, subnet routes, and recent configuration changes across your Tailscale network. Proposed policy tests help you check intended access before saving a change, while explicit instructions can update network settings.
Tailnet Research
Read devices, DNS, users, services, and audit data.
Policy and Configuration
Validate proposed policies or apply selected network settings.
Trust and Webhooks
Manage trust keys, OAuth apps, and webhook configuration.
82 tools
List Devices
List all devices in the configured Tailscale tailnet.
tailscale.list_devices Get Device
Get one Tailscale device by its preferred node ID or legacy device ID.
tailscale.get_device List Device Routes
List the subnet routes advertised and enabled for a Tailscale device.
tailscale.list_device_routes Get Device Posture Attributes
Get the posture attributes currently reported for a Tailscale device.
tailscale.get_device_posture_attributes List Configuration Audit Logs
List configuration audit logs for an RFC 3339 time window, with optional filters.
tailscale.list_configuration_audit_logs Get Log Streaming Status
Get the current publishing status for configuration or network log streaming.
tailscale.get_log_streaming_status List Dns Nameservers
List the global DNS nameservers configured for the tailnet.
tailscale.list_dns_nameservers Get Dns Preferences
Get the tailnet DNS preferences, including MagicDNS state.
tailscale.get_dns_preferences List Dns Search Paths
List the DNS search paths configured for the tailnet.
tailscale.list_dns_search_paths Get Split Dns
Get the split DNS nameserver mapping for the tailnet.
tailscale.get_split_dns Get Dns Configuration
Get the complete DNS configuration for the tailnet.
tailscale.get_dns_configuration List Users
List tailnet users with optional user-type and role filters.
tailscale.list_users Get User
Get a Tailscale user by user ID.
tailscale.get_user Get Contacts
Get the account, support, and security contacts for the tailnet.
tailscale.get_contacts Get Tailnet Settings
Get the tailnet feature, logging, networking, and policy settings visible to the OAuth client.
tailscale.get_tailnet_settings List Services
List the Services configured in the tailnet.
tailscale.list_services Get Service
Get a Tailscale Service by name.
tailscale.get_service Set Device Routes
Replace the enabled subnet routes for a Tailscale device.
tailscale.set_device_routes Set Device Authorized
Authorize or deauthorize a Tailscale device.
tailscale.set_device_authorized Set Device Name
Set a Tailscale device name, or reset it from the OS hostname with an empty name.
tailscale.set_device_name Set Device Tags
Replace all ACL tags assigned to a Tailscale device.
tailscale.set_device_tags Set Device Ip
Set the Tailscale IPv4 address for a device.
tailscale.set_device_ip Set Device Posture Attribute
Set one custom posture attribute on a Tailscale device.
tailscale.set_device_posture_attribute Set Dns Nameservers
Replace the global DNS nameservers configured for the tailnet.
tailscale.set_dns_nameservers Set Dns Preferences
Enable or disable MagicDNS for the tailnet.
tailscale.set_dns_preferences Set Dns Search Paths
Replace the DNS search paths configured for the tailnet.
tailscale.set_dns_search_paths Update Split Dns
Merge domain-to-resolver entries into the tailnet split DNS configuration.
tailscale.update_split_dns Set Split Dns
Replace the entire tailnet split DNS configuration.
tailscale.set_split_dns Set Dns Configuration
Replace the entire tailnet DNS configuration, including nameservers, split DNS, search paths, and preferences.
tailscale.set_dns_configuration Update Tailnet Settings
Update reversible feature, logging, networking, or policy-link settings for the tailnet.
tailscale.update_tailnet_settings Update Service
Create or replace a named Tailscale Service definition.
tailscale.update_service List Service Hosts
List devices currently hosting a named Tailscale Service.
tailscale.list_service_hosts Get Service Device Approval
Get whether a Service is approved on a specific device.
tailscale.get_service_device_approval Update Service Device Approval
Approve or revoke approval for a Service on a device.
tailscale.update_service_device_approval Batch Update Device Posture Attributes
Set or remove custom posture attributes across multiple Tailscale devices.
tailscale.batch_update_device_posture_attributes Delete Device
Permanently delete a device from its Tailscale tailnet.
tailscale.delete_device Expire Device Key
Immediately expire a device key and require the device to authenticate again.
tailscale.expire_device_key Set Device Key Expiry
Enable or disable key expiry for a Tailscale device.
tailscale.set_device_key_expiry Delete Device Posture Attribute
Permanently remove one custom posture attribute from a Tailscale device.
tailscale.delete_device_posture_attribute Get Log Streaming Configuration
Get the potentially sensitive destination configuration for a Tailscale log stream.
tailscale.get_log_streaming_configuration Set Log Streaming Configuration
Create or replace a Tailscale log streaming destination configuration.
tailscale.set_log_streaming_configuration Disable Log Streaming
Disable and remove the destination configuration for a Tailscale log stream.
tailscale.disable_log_streaming Get Aws External Id
Create or retrieve the AWS external ID used by Tailscale log streaming.
tailscale.get_aws_external_id Validate Aws External Id
Validate an AWS IAM role trust policy against a Tailscale external ID.
tailscale.validate_aws_external_id List Keys
List trust credentials and keys visible to the OAuth client.
tailscale.list_keys Create Key
Create an auth key, OAuth client credential, or federated trust credential and return its secret.
tailscale.create_key Get Key
Get metadata for a Tailscale trust credential or key.
tailscale.get_key Delete Key
Permanently revoke and delete a Tailscale trust credential or key.
tailscale.delete_key Update Key
Replace the mutable configuration of an OAuth or federated Tailscale trust credential.
tailscale.update_key Get Policy File
Get the current Tailscale policy file as JSON, optionally with validation details.
tailscale.get_policy_file Set Policy File
Replace the Tailscale policy file after its embedded tests pass.
tailscale.set_policy_file Update User Role
Change a Tailscale user's administrative role.
tailscale.update_user_role Approve User
Approve a pending Tailscale user for the tailnet.
tailscale.approve_user Suspend User
Suspend a Tailscale user and their access to the tailnet.
tailscale.suspend_user Restore User
Restore a suspended Tailscale user.
tailscale.restore_user Delete User
Permanently delete a Tailscale user from the tailnet.
tailscale.delete_user Update Contact
Change the account, support, or security contact email for the tailnet.
tailscale.update_contact Resend Contact Verification Email
Resend the verification email for a tailnet contact.
tailscale.resend_contact_verification_email List Webhooks
List webhook endpoints configured for the tailnet.
tailscale.list_webhooks Create Webhook
Create a webhook endpoint and return its signing secret.
tailscale.create_webhook Get Webhook
Get a Tailscale webhook endpoint by ID.
tailscale.get_webhook Update Webhook
Replace the subscribed events for a Tailscale webhook endpoint.
tailscale.update_webhook Delete Webhook
Permanently delete a Tailscale webhook endpoint.
tailscale.delete_webhook Test Webhook
Send a test event to a Tailscale webhook endpoint.
tailscale.test_webhook Rotate Webhook Secret
Rotate a webhook signing secret and return the new secret once.
tailscale.rotate_webhook_secret Delete Service
Permanently delete a named Tailscale Service.
tailscale.delete_service List Oauth Apps
List OAuth applications configured for the tailnet.
tailscale.list_oauth_apps Create Oauth App
Create a Tailscale OAuth application and return its client secret.
tailscale.create_oauth_app Get Oauth App
Get a Tailscale OAuth application by app ID.
tailscale.get_oauth_app Update Oauth App
Replace the configuration of a Tailscale OAuth application.
tailscale.update_oauth_app Delete Oauth App
Permanently delete a Tailscale OAuth application and revoke its access.
tailscale.delete_oauth_app List Device Invites
List all share invites for a Tailscale device.
tailscale.list_device_invites Get Device Invite
Get one Tailscale device share invite.
tailscale.get_device_invite Delete Device Invite
Delete a Tailscale device share invite.
tailscale.delete_device_invite List Network Flow Logs
List network flow logs for an RFC 3339 time window.
tailscale.list_network_flow_logs Preview Policy Rule Matches
Preview which rules in a proposed policy match a user or IP address and port without saving it.
tailscale.preview_policy_rule_matches Validate Policy File
Validate a proposed policy file or run ACL tests without changing the tailnet policy.
tailscale.validate_policy_file List Posture Integrations
List the device posture integrations configured for the tailnet.
tailscale.list_posture_integrations Create Posture Integration
Create a device posture integration using its external provider credentials.
tailscale.create_posture_integration Get Posture Integration
Get one device posture integration by ID.
tailscale.get_posture_integration Update Posture Integration
Update a device posture integration and optionally replace its client secret.
tailscale.update_posture_integration Delete Posture Integration
Delete a device posture integration.
tailscale.delete_posture_integration No matching tools.
Frequently Asked Questions
Can I test a policy before applying it?
Yes. Ask for validation only; the saved network policy remains unchanged.
What access does the connection need?
Use a Tailscale OAuth client with permission for the devices and settings you want to manage.