@yawlabs/tailscale-mcp 0.1.1

package/dist/tools/devices.d.ts

@@ -0,0 +1,144 @@
+import { z } from "zod";
+export declare const deviceTools: readonly [{
+    readonly name: "tailscale_list_devices";
+    readonly description: "List all devices in your tailnet with their status, IP addresses, OS, and last seen time.";
+    readonly inputSchema: z.ZodObject<{
+        fields: z.ZodOptional<z.ZodString>;
+    }, "strip", z.ZodTypeAny, {
+        fields?: string | undefined;
+    }, {
+        fields?: string | undefined;
+    }>;
+    readonly handler: (input: {
+        fields?: string;
+    }) => Promise<import("../api.js").ApiResponse<unknown>>;
+}, {
+    readonly name: "tailscale_get_device";
+    readonly description: "Get detailed information about a specific device by its ID.";
+    readonly inputSchema: z.ZodObject<{
+        deviceId: z.ZodString;
+    }, "strip", z.ZodTypeAny, {
+        deviceId: string;
+    }, {
+        deviceId: string;
+    }>;
+    readonly handler: (input: {
+        deviceId: string;
+    }) => Promise<import("../api.js").ApiResponse<unknown>>;
+}, {
+    readonly name: "tailscale_authorize_device";
+    readonly description: "Authorize a device that is pending authorization.";
+    readonly inputSchema: z.ZodObject<{
+        deviceId: z.ZodString;
+    }, "strip", z.ZodTypeAny, {
+        deviceId: string;
+    }, {
+        deviceId: string;
+    }>;
+    readonly handler: (input: {
+        deviceId: string;
+    }) => Promise<import("../api.js").ApiResponse<unknown>>;
+}, {
+    readonly name: "tailscale_deauthorize_device";
+    readonly description: "Deauthorize a device, removing its access to the tailnet.";
+    readonly inputSchema: z.ZodObject<{
+        deviceId: z.ZodString;
+    }, "strip", z.ZodTypeAny, {
+        deviceId: string;
+    }, {
+        deviceId: string;
+    }>;
+    readonly handler: (input: {
+        deviceId: string;
+    }) => Promise<import("../api.js").ApiResponse<unknown>>;
+}, {
+    readonly name: "tailscale_delete_device";
+    readonly description: "Delete a device from the tailnet. The device can re-authenticate to rejoin.";
+    readonly inputSchema: z.ZodObject<{
+        deviceId: z.ZodString;
+    }, "strip", z.ZodTypeAny, {
+        deviceId: string;
+    }, {
+        deviceId: string;
+    }>;
+    readonly handler: (input: {
+        deviceId: string;
+    }) => Promise<import("../api.js").ApiResponse<unknown>>;
+}, {
+    readonly name: "tailscale_rename_device";
+    readonly description: "Set the name of a device in the tailnet.";
+    readonly inputSchema: z.ZodObject<{
+        deviceId: z.ZodString;
+        name: z.ZodString;
+    }, "strip", z.ZodTypeAny, {
+        deviceId: string;
+        name: string;
+    }, {
+        deviceId: string;
+        name: string;
+    }>;
+    readonly handler: (input: {
+        deviceId: string;
+        name: string;
+    }) => Promise<import("../api.js").ApiResponse<unknown>>;
+}, {
+    readonly name: "tailscale_expire_device";
+    readonly description: "Expire a device's key, forcing it to re-authenticate.";
+    readonly inputSchema: z.ZodObject<{
+        deviceId: z.ZodString;
+    }, "strip", z.ZodTypeAny, {
+        deviceId: string;
+    }, {
+        deviceId: string;
+    }>;
+    readonly handler: (input: {
+        deviceId: string;
+    }) => Promise<import("../api.js").ApiResponse<unknown>>;
+}, {
+    readonly name: "tailscale_get_device_routes";
+    readonly description: "Get the subnet routes a device advertises and which are enabled.";
+    readonly inputSchema: z.ZodObject<{
+        deviceId: z.ZodString;
+    }, "strip", z.ZodTypeAny, {
+        deviceId: string;
+    }, {
+        deviceId: string;
+    }>;
+    readonly handler: (input: {
+        deviceId: string;
+    }) => Promise<import("../api.js").ApiResponse<unknown>>;
+}, {
+    readonly name: "tailscale_set_device_routes";
+    readonly description: "Enable or disable subnet routes for a device.";
+    readonly inputSchema: z.ZodObject<{
+        deviceId: z.ZodString;
+        routes: z.ZodArray<z.ZodString, "many">;
+    }, "strip", z.ZodTypeAny, {
+        deviceId: string;
+        routes: string[];
+    }, {
+        deviceId: string;
+        routes: string[];
+    }>;
+    readonly handler: (input: {
+        deviceId: string;
+        routes: string[];
+    }) => Promise<import("../api.js").ApiResponse<unknown>>;
+}, {
+    readonly name: "tailscale_set_device_tags";
+    readonly description: "Set ACL tags on a device. Replaces all existing tags.";
+    readonly inputSchema: z.ZodObject<{
+        deviceId: z.ZodString;
+        tags: z.ZodArray<z.ZodString, "many">;
+    }, "strip", z.ZodTypeAny, {
+        deviceId: string;
+        tags: string[];
+    }, {
+        deviceId: string;
+        tags: string[];
+    }>;
+    readonly handler: (input: {
+        deviceId: string;
+        tags: string[];
+    }) => Promise<import("../api.js").ApiResponse<unknown>>;
+}];

package/dist/tools/devices.js

@@ -0,0 +1,112 @@
+import { z } from "zod";
+import { apiGet, apiPost, apiDelete, getTailnet } from "../api.js";
+export const deviceTools = [
+    {
+        name: "tailscale_list_devices",
+        description: "List all devices in your tailnet with their status, IP addresses, OS, and last seen time.",
+        inputSchema: z.object({
+            fields: z
+                .string()
+                .optional()
+                .describe("Comma-separated list of fields to include. Omit for all fields. Valid fields: addresses, advertisedRoutes, authorized, blocksIncomingConnections, clientConnectivity, clientVersion, connectedToControl, created, distro, enabledRoutes, expires, hostname, id, isExternal, keyExpiryDisabled, lastSeen, machineKey, name, nodeId, nodeKey, os, sshEnabled, tags, tailnetLockError, tailnetLockKey, updateAvailable, user. Use 'all' for every field."),
+        }),
+        handler: async (input) => {
+            const params = input.fields ? `?fields=${encodeURIComponent(input.fields)}` : "";
+            return apiGet(`/tailnet/${getTailnet()}/devices${params}`);
+        },
+    },
+    {
+        name: "tailscale_get_device",
+        description: "Get detailed information about a specific device by its ID.",
+        inputSchema: z.object({
+            deviceId: z.string().describe("The device ID (numeric or nodekey format)"),
+        }),
+        handler: async (input) => {
+            return apiGet(`/device/${input.deviceId}`);
+        },
+    },
+    {
+        name: "tailscale_authorize_device",
+        description: "Authorize a device that is pending authorization.",
+        inputSchema: z.object({
+            deviceId: z.string().describe("The device ID to authorize"),
+        }),
+        handler: async (input) => {
+            return apiPost(`/device/${input.deviceId}/authorized`, { authorized: true });
+        },
+    },
+    {
+        name: "tailscale_deauthorize_device",
+        description: "Deauthorize a device, removing its access to the tailnet.",
+        inputSchema: z.object({
+            deviceId: z.string().describe("The device ID to deauthorize"),
+        }),
+        handler: async (input) => {
+            return apiPost(`/device/${input.deviceId}/authorized`, { authorized: false });
+        },
+    },
+    {
+        name: "tailscale_delete_device",
+        description: "Delete a device from the tailnet. The device can re-authenticate to rejoin.",
+        inputSchema: z.object({
+            deviceId: z.string().describe("The device ID to delete"),
+        }),
+        handler: async (input) => {
+            return apiDelete(`/device/${input.deviceId}`);
+        },
+    },
+    {
+        name: "tailscale_rename_device",
+        description: "Set the name of a device in the tailnet.",
+        inputSchema: z.object({
+            deviceId: z.string().describe("The device ID to rename"),
+            name: z.string().describe("The new name for the device (FQDN within your tailnet)"),
+        }),
+        handler: async (input) => {
+            return apiPost(`/device/${input.deviceId}/name`, { name: input.name });
+        },
+    },
+    {
+        name: "tailscale_expire_device",
+        description: "Expire a device's key, forcing it to re-authenticate.",
+        inputSchema: z.object({
+            deviceId: z.string().describe("The device ID to expire"),
+        }),
+        handler: async (input) => {
+            return apiPost(`/device/${input.deviceId}/expire`);
+        },
+    },
+    {
+        name: "tailscale_get_device_routes",
+        description: "Get the subnet routes a device advertises and which are enabled.",
+        inputSchema: z.object({
+            deviceId: z.string().describe("The device ID"),
+        }),
+        handler: async (input) => {
+            return apiGet(`/device/${input.deviceId}/routes`);
+        },
+    },
+    {
+        name: "tailscale_set_device_routes",
+        description: "Enable or disable subnet routes for a device.",
+        inputSchema: z.object({
+            deviceId: z.string().describe("The device ID"),
+            routes: z.array(z.string()).describe("List of CIDR routes to enable (e.g. ['10.0.0.0/24', '192.168.1.0/24'])"),
+        }),
+        handler: async (input) => {
+            return apiPost(`/device/${input.deviceId}/routes`, { routes: input.routes });
+        },
+    },
+    {
+        name: "tailscale_set_device_tags",
+        description: "Set ACL tags on a device. Replaces all existing tags.",
+        inputSchema: z.object({
+            deviceId: z.string().describe("The device ID"),
+            tags: z.array(z.string()).describe("List of ACL tags (e.g. ['tag:server', 'tag:production'])"),
+        }),
+        handler: async (input) => {
+            return apiPost(`/device/${input.deviceId}/tags`, { tags: input.tags });
+        },
+    },
+];
+//# sourceMappingURL=devices.js.map

package/dist/tools/devices.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"devices.js","sourceRoot":"","sources":["../../src/tools/devices.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,CAAC,EAAE,MAAM,KAAK,CAAC;AACxB,OAAO,EAAE,MAAM,EAAE,OAAO,EAAE,SAAS,EAAE,UAAU,EAAE,MAAM,WAAW,CAAC;AAEnE,MAAM,CAAC,MAAM,WAAW,GAAG;IACzB;QACE,IAAI,EAAE,wBAAwB;QAC9B,WAAW,EAAE,2FAA2F;QACxG,WAAW,EAAE,CAAC,CAAC,MAAM,CAAC;YACpB,MAAM,EAAE,CAAC;iBACN,MAAM,EAAE;iBACR,QAAQ,EAAE;iBACV,QAAQ,CACP,ubAAub,CACxb;SACJ,CAAC;QACF,OAAO,EAAE,KAAK,EAAE,KAA0B,EAAE,EAAE;YAC5C,MAAM,MAAM,GAAG,KAAK,CAAC,MAAM,CAAC,CAAC,CAAC,WAAW,kBAAkB,CAAC,KAAK,CAAC,MAAM,CAAC,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;YACjF,OAAO,MAAM,CAAC,YAAY,UAAU,EAAE,WAAW,MAAM,EAAE,CAAC,CAAC;QAC7D,CAAC;KACF;IACD;QACE,IAAI,EAAE,sBAAsB;QAC5B,WAAW,EAAE,6DAA6D;QAC1E,WAAW,EAAE,CAAC,CAAC,MAAM,CAAC;YACpB,QAAQ,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,QAAQ,CAAC,2CAA2C,CAAC;SAC3E,CAAC;QACF,OAAO,EAAE,KAAK,EAAE,KAA2B,EAAE,EAAE;YAC7C,OAAO,MAAM,CAAC,WAAW,KAAK,CAAC,QAAQ,EAAE,CAAC,CAAC;QAC7C,CAAC;KACF;IACD;QACE,IAAI,EAAE,4BAA4B;QAClC,WAAW,EAAE,mDAAmD;QAChE,WAAW,EAAE,CAAC,CAAC,MAAM,CAAC;YACpB,QAAQ,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,QAAQ,CAAC,4BAA4B,CAAC;SAC5D,CAAC;QACF,OAAO,EAAE,KAAK,EAAE,KAA2B,EAAE,EAAE;YAC7C,OAAO,OAAO,CAAC,WAAW,KAAK,CAAC,QAAQ,aAAa,EAAE,EAAE,UAAU,EAAE,IAAI,EAAE,CAAC,CAAC;QAC/E,CAAC;KACF;IACD;QACE,IAAI,EAAE,8BAA8B;QACpC,WAAW,EAAE,2DAA2D;QACxE,WAAW,EAAE,CAAC,CAAC,MAAM,CAAC;YACpB,QAAQ,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,QAAQ,CAAC,8BAA8B,CAAC;SAC9D,CAAC;QACF,OAAO,EAAE,KAAK,EAAE,KAA2B,EAAE,EAAE;YAC7C,OAAO,OAAO,CAAC,WAAW,KAAK,CAAC,QAAQ,aAAa,EAAE,EAAE,UAAU,EAAE,KAAK,EAAE,CAAC,CAAC;QAChF,CAAC;KACF;IACD;QACE,IAAI,EAAE,yBAAyB;QAC/B,WAAW,EAAE,6EAA6E;QAC1F,WAAW,EAAE,CAAC,CAAC,MAAM,CAAC;YACpB,QAAQ,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,QAAQ,CAAC,yBAAyB,CAAC;SACzD,CAAC;QACF,OAAO,EAAE,KAAK,EAAE,KAA2B,EAAE,EAAE;YAC7C,OAAO,SAAS,CAAC,WAAW,KAAK,CAAC,QAAQ,EAAE,CAAC,CAAC;QAChD,CAAC;KACF;IACD;QACE,IAAI,EAAE,yBAAyB;QAC/B,WAAW,EAAE,0CAA0C;QACvD,WAAW,EAAE,CAAC,CAAC,MAAM,CAAC;YACpB,QAAQ,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,QAAQ,CAAC,yBAAyB,CAAC;YACxD,IAAI,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,QAAQ,CAAC,wDAAwD,CAAC;SACpF,CAAC;QACF,OAAO,EAAE,KAAK,EAAE,KAAyC,EAAE,EAAE;YAC3D,OAAO,OAAO,CAAC,WAAW,KAAK,CAAC,QAAQ,OAAO,EAAE,EAAE,IAAI,EAAE,KAAK,CAAC,IAAI,EAAE,CAAC,CAAC;QACzE,CAAC;KACF;IACD;QACE,IAAI,EAAE,yBAAyB;QAC/B,WAAW,EAAE,uDAAuD;QACpE,WAAW,EAAE,CAAC,CAAC,MAAM,CAAC;YACpB,QAAQ,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,QAAQ,CAAC,yBAAyB,CAAC;SACzD,CAAC;QACF,OAAO,EAAE,KAAK,EAAE,KAA2B,EAAE,EAAE;YAC7C,OAAO,OAAO,CAAC,WAAW,KAAK,CAAC,QAAQ,SAAS,CAAC,CAAC;QACrD,CAAC;KACF;IACD;QACE,IAAI,EAAE,6BAA6B;QACnC,WAAW,EAAE,kEAAkE;QAC/E,WAAW,EAAE,CAAC,CAAC,MAAM,CAAC;YACpB,QAAQ,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,QAAQ,CAAC,eAAe,CAAC;SAC/C,CAAC;QACF,OAAO,EAAE,KAAK,EAAE,KAA2B,EAAE,EAAE;YAC7C,OAAO,MAAM,CAAC,WAAW,KAAK,CAAC,QAAQ,SAAS,CAAC,CAAC;QACpD,CAAC;KACF;IACD;QACE,IAAI,EAAE,6BAA6B;QACnC,WAAW,EAAE,+CAA+C;QAC5D,WAAW,EAAE,CAAC,CAAC,MAAM,CAAC;YACpB,QAAQ,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,QAAQ,CAAC,eAAe,CAAC;YAC9C,MAAM,EAAE,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,MAAM,EAAE,CAAC,CAAC,QAAQ,CAAC,wEAAwE,CAAC;SAC/G,CAAC;QACF,OAAO,EAAE,KAAK,EAAE,KAA6C,EAAE,EAAE;YAC/D,OAAO,OAAO,CAAC,WAAW,KAAK,CAAC,QAAQ,SAAS,EAAE,EAAE,MAAM,EAAE,KAAK,CAAC,MAAM,EAAE,CAAC,CAAC;QAC/E,CAAC;KACF;IACD;QACE,IAAI,EAAE,2BAA2B;QACjC,WAAW,EAAE,uDAAuD;QACpE,WAAW,EAAE,CAAC,CAAC,MAAM,CAAC;YACpB,QAAQ,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,QAAQ,CAAC,eAAe,CAAC;YAC9C,IAAI,EAAE,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,MAAM,EAAE,CAAC,CAAC,QAAQ,CAAC,0DAA0D,CAAC;SAC/F,CAAC;QACF,OAAO,EAAE,KAAK,EAAE,KAA2C,EAAE,EAAE;YAC7D,OAAO,OAAO,CAAC,WAAW,KAAK,CAAC,QAAQ,OAAO,EAAE,EAAE,IAAI,EAAE,KAAK,CAAC,IAAI,EAAE,CAAC,CAAC;QACzE,CAAC;KACF;CACO,CAAC"}

package/dist/tools/dns.d.ts

@@ -0,0 +1,74 @@
+import { z } from "zod";
+export declare const dnsTools: readonly [{
+    readonly name: "tailscale_get_nameservers";
+    readonly description: "Get the DNS nameservers configured for your tailnet.";
+    readonly inputSchema: z.ZodObject<{}, "strip", z.ZodTypeAny, {}, {}>;
+    readonly handler: () => Promise<import("../api.js").ApiResponse<unknown>>;
+}, {
+    readonly name: "tailscale_set_nameservers";
+    readonly description: "Set the DNS nameservers for your tailnet.";
+    readonly inputSchema: z.ZodObject<{
+        dns: z.ZodArray<z.ZodString, "many">;
+    }, "strip", z.ZodTypeAny, {
+        dns: string[];
+    }, {
+        dns: string[];
+    }>;
+    readonly handler: (input: {
+        dns: string[];
+    }) => Promise<import("../api.js").ApiResponse<unknown>>;
+}, {
+    readonly name: "tailscale_get_search_paths";
+    readonly description: "Get the DNS search paths configured for your tailnet.";
+    readonly inputSchema: z.ZodObject<{}, "strip", z.ZodTypeAny, {}, {}>;
+    readonly handler: () => Promise<import("../api.js").ApiResponse<unknown>>;
+}, {
+    readonly name: "tailscale_set_search_paths";
+    readonly description: "Set the DNS search paths for your tailnet.";
+    readonly inputSchema: z.ZodObject<{
+        searchPaths: z.ZodArray<z.ZodString, "many">;
+    }, "strip", z.ZodTypeAny, {
+        searchPaths: string[];
+    }, {
+        searchPaths: string[];
+    }>;
+    readonly handler: (input: {
+        searchPaths: string[];
+    }) => Promise<import("../api.js").ApiResponse<unknown>>;
+}, {
+    readonly name: "tailscale_get_split_dns";
+    readonly description: "Get the split DNS configuration for your tailnet.";
+    readonly inputSchema: z.ZodObject<{}, "strip", z.ZodTypeAny, {}, {}>;
+    readonly handler: () => Promise<import("../api.js").ApiResponse<unknown>>;
+}, {
+    readonly name: "tailscale_set_split_dns";
+    readonly description: "Set split DNS configuration. Maps domains to specific nameservers.";
+    readonly inputSchema: z.ZodObject<{
+        splitDns: z.ZodRecord<z.ZodString, z.ZodArray<z.ZodString, "many">>;
+    }, "strip", z.ZodTypeAny, {
+        splitDns: Record<string, string[]>;
+    }, {
+        splitDns: Record<string, string[]>;
+    }>;
+    readonly handler: (input: {
+        splitDns: Record<string, string[]>;
+    }) => Promise<import("../api.js").ApiResponse<unknown>>;
+}, {
+    readonly name: "tailscale_get_dns_preferences";
+    readonly description: "Get DNS preferences for your tailnet, including whether MagicDNS is enabled.";
+    readonly inputSchema: z.ZodObject<{}, "strip", z.ZodTypeAny, {}, {}>;
+    readonly handler: () => Promise<import("../api.js").ApiResponse<unknown>>;
+}, {
+    readonly name: "tailscale_set_dns_preferences";
+    readonly description: "Set DNS preferences for your tailnet, such as enabling or disabling MagicDNS.";
+    readonly inputSchema: z.ZodObject<{
+        magicDNS: z.ZodBoolean;
+    }, "strip", z.ZodTypeAny, {
+        magicDNS: boolean;
+    }, {
+        magicDNS: boolean;
+    }>;
+    readonly handler: (input: {
+        magicDNS: boolean;
+    }) => Promise<import("../api.js").ApiResponse<unknown>>;
+}];

package/dist/tools/dns.js

@@ -0,0 +1,83 @@
+import { z } from "zod";
+import { apiGet, apiPost, getTailnet } from "../api.js";
+export const dnsTools = [
+    {
+        name: "tailscale_get_nameservers",
+        description: "Get the DNS nameservers configured for your tailnet.",
+        inputSchema: z.object({}),
+        handler: async () => {
+            return apiGet(`/tailnet/${getTailnet()}/dns/nameservers`);
+        },
+    },
+    {
+        name: "tailscale_set_nameservers",
+        description: "Set the DNS nameservers for your tailnet.",
+        inputSchema: z.object({
+            dns: z.array(z.string()).describe("List of DNS server IP addresses (e.g. ['8.8.8.8', '1.1.1.1'])"),
+        }),
+        handler: async (input) => {
+            return apiPost(`/tailnet/${getTailnet()}/dns/nameservers`, { dns: input.dns });
+        },
+    },
+    {
+        name: "tailscale_get_search_paths",
+        description: "Get the DNS search paths configured for your tailnet.",
+        inputSchema: z.object({}),
+        handler: async () => {
+            return apiGet(`/tailnet/${getTailnet()}/dns/searchpaths`);
+        },
+    },
+    {
+        name: "tailscale_set_search_paths",
+        description: "Set the DNS search paths for your tailnet.",
+        inputSchema: z.object({
+            searchPaths: z.array(z.string()).describe("List of DNS search domains (e.g. ['example.com', 'internal.corp'])"),
+        }),
+        handler: async (input) => {
+            return apiPost(`/tailnet/${getTailnet()}/dns/searchpaths`, {
+                searchPaths: input.searchPaths,
+            });
+        },
+    },
+    {
+        name: "tailscale_get_split_dns",
+        description: "Get the split DNS configuration for your tailnet.",
+        inputSchema: z.object({}),
+        handler: async () => {
+            return apiGet(`/tailnet/${getTailnet()}/dns/split-dns`);
+        },
+    },
+    {
+        name: "tailscale_set_split_dns",
+        description: "Set split DNS configuration. Maps domains to specific nameservers.",
+        inputSchema: z.object({
+            splitDns: z
+                .record(z.string(), z.array(z.string()))
+                .describe("Map of domain to nameserver list (e.g. { \"corp.example.com\": [\"10.0.0.1\"], \"internal.dev\": [\"10.0.0.2\"] })"),
+        }),
+        handler: async (input) => {
+            return apiPost(`/tailnet/${getTailnet()}/dns/split-dns`, input.splitDns);
+        },
+    },
+    {
+        name: "tailscale_get_dns_preferences",
+        description: "Get DNS preferences for your tailnet, including whether MagicDNS is enabled.",
+        inputSchema: z.object({}),
+        handler: async () => {
+            return apiGet(`/tailnet/${getTailnet()}/dns/preferences`);
+        },
+    },
+    {
+        name: "tailscale_set_dns_preferences",
+        description: "Set DNS preferences for your tailnet, such as enabling or disabling MagicDNS.",
+        inputSchema: z.object({
+            magicDNS: z.boolean().describe("Whether to enable MagicDNS"),
+        }),
+        handler: async (input) => {
+            return apiPost(`/tailnet/${getTailnet()}/dns/preferences`, {
+                magicDNS: input.magicDNS,
+            });
+        },
+    },
+];
+//# sourceMappingURL=dns.js.map

package/dist/tools/dns.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"dns.js","sourceRoot":"","sources":["../../src/tools/dns.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,CAAC,EAAE,MAAM,KAAK,CAAC;AACxB,OAAO,EAAE,MAAM,EAAE,OAAO,EAAE,UAAU,EAAE,MAAM,WAAW,CAAC;AAExD,MAAM,CAAC,MAAM,QAAQ,GAAG;IACtB;QACE,IAAI,EAAE,2BAA2B;QACjC,WAAW,EAAE,sDAAsD;QACnE,WAAW,EAAE,CAAC,CAAC,MAAM,CAAC,EAAE,CAAC;QACzB,OAAO,EAAE,KAAK,IAAI,EAAE;YAClB,OAAO,MAAM,CAAC,YAAY,UAAU,EAAE,kBAAkB,CAAC,CAAC;QAC5D,CAAC;KACF;IACD;QACE,IAAI,EAAE,2BAA2B;QACjC,WAAW,EAAE,2CAA2C;QACxD,WAAW,EAAE,CAAC,CAAC,MAAM,CAAC;YACpB,GAAG,EAAE,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,MAAM,EAAE,CAAC,CAAC,QAAQ,CAAC,+DAA+D,CAAC;SACnG,CAAC;QACF,OAAO,EAAE,KAAK,EAAE,KAAwB,EAAE,EAAE;YAC1C,OAAO,OAAO,CAAC,YAAY,UAAU,EAAE,kBAAkB,EAAE,EAAE,GAAG,EAAE,KAAK,CAAC,GAAG,EAAE,CAAC,CAAC;QACjF,CAAC;KACF;IACD;QACE,IAAI,EAAE,4BAA4B;QAClC,WAAW,EAAE,uDAAuD;QACpE,WAAW,EAAE,CAAC,CAAC,MAAM,CAAC,EAAE,CAAC;QACzB,OAAO,EAAE,KAAK,IAAI,EAAE;YAClB,OAAO,MAAM,CAAC,YAAY,UAAU,EAAE,kBAAkB,CAAC,CAAC;QAC5D,CAAC;KACF;IACD;QACE,IAAI,EAAE,4BAA4B;QAClC,WAAW,EAAE,4CAA4C;QACzD,WAAW,EAAE,CAAC,CAAC,MAAM,CAAC;YACpB,WAAW,EAAE,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,MAAM,EAAE,CAAC,CAAC,QAAQ,CAAC,oEAAoE,CAAC;SAChH,CAAC;QACF,OAAO,EAAE,KAAK,EAAE,KAAgC,EAAE,EAAE;YAClD,OAAO,OAAO,CAAC,YAAY,UAAU,EAAE,kBAAkB,EAAE;gBACzD,WAAW,EAAE,KAAK,CAAC,WAAW;aAC/B,CAAC,CAAC;QACL,CAAC;KACF;IACD;QACE,IAAI,EAAE,yBAAyB;QAC/B,WAAW,EAAE,mDAAmD;QAChE,WAAW,EAAE,CAAC,CAAC,MAAM,CAAC,EAAE,CAAC;QACzB,OAAO,EAAE,KAAK,IAAI,EAAE;YAClB,OAAO,MAAM,CAAC,YAAY,UAAU,EAAE,gBAAgB,CAAC,CAAC;QAC1D,CAAC;KACF;IACD;QACE,IAAI,EAAE,yBAAyB;QAC/B,WAAW,EAAE,oEAAoE;QACjF,WAAW,EAAE,CAAC,CAAC,MAAM,CAAC;YACpB,QAAQ,EAAE,CAAC;iBACR,MAAM,CAAC,CAAC,CAAC,MAAM,EAAE,EAAE,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,MAAM,EAAE,CAAC,CAAC;iBACvC,QAAQ,CACP,oHAAoH,CACrH;SACJ,CAAC;QACF,OAAO,EAAE,KAAK,EAAE,KAA6C,EAAE,EAAE;YAC/D,OAAO,OAAO,CAAC,YAAY,UAAU,EAAE,gBAAgB,EAAE,KAAK,CAAC,QAAQ,CAAC,CAAC;QAC3E,CAAC;KACF;IACD;QACE,IAAI,EAAE,+BAA+B;QACrC,WAAW,EAAE,8EAA8E;QAC3F,WAAW,EAAE,CAAC,CAAC,MAAM,CAAC,EAAE,CAAC;QACzB,OAAO,EAAE,KAAK,IAAI,EAAE;YAClB,OAAO,MAAM,CAAC,YAAY,UAAU,EAAE,kBAAkB,CAAC,CAAC;QAC5D,CAAC;KACF;IACD;QACE,IAAI,EAAE,+BAA+B;QACrC,WAAW,EAAE,+EAA+E;QAC5F,WAAW,EAAE,CAAC,CAAC,MAAM,CAAC;YACpB,QAAQ,EAAE,CAAC,CAAC,OAAO,EAAE,CAAC,QAAQ,CAAC,4BAA4B,CAAC;SAC7D,CAAC;QACF,OAAO,EAAE,KAAK,EAAE,KAA4B,EAAE,EAAE;YAC9C,OAAO,OAAO,CAAC,YAAY,UAAU,EAAE,kBAAkB,EAAE;gBACzD,QAAQ,EAAE,KAAK,CAAC,QAAQ;aACzB,CAAC,CAAC;QACL,CAAC;KACF;CACO,CAAC"}

package/dist/tools/keys.d.ts

@@ -0,0 +1,66 @@
+import { z } from "zod";
+export declare const keyTools: readonly [{
+    readonly name: "tailscale_list_keys";
+    readonly description: "List all auth keys in your tailnet.";
+    readonly inputSchema: z.ZodObject<{}, "strip", z.ZodTypeAny, {}, {}>;
+    readonly handler: () => Promise<import("../api.js").ApiResponse<unknown>>;
+}, {
+    readonly name: "tailscale_get_key";
+    readonly description: "Get details for a specific auth key.";
+    readonly inputSchema: z.ZodObject<{
+        keyId: z.ZodString;
+    }, "strip", z.ZodTypeAny, {
+        keyId: string;
+    }, {
+        keyId: string;
+    }>;
+    readonly handler: (input: {
+        keyId: string;
+    }) => Promise<import("../api.js").ApiResponse<unknown>>;
+}, {
+    readonly name: "tailscale_create_key";
+    readonly description: "Create a new auth key for adding devices to your tailnet.";
+    readonly inputSchema: z.ZodObject<{
+        reusable: z.ZodOptional<z.ZodBoolean>;
+        ephemeral: z.ZodOptional<z.ZodBoolean>;
+        preauthorized: z.ZodOptional<z.ZodBoolean>;
+        tags: z.ZodOptional<z.ZodArray<z.ZodString, "many">>;
+        expirySeconds: z.ZodOptional<z.ZodNumber>;
+        description: z.ZodOptional<z.ZodString>;
+    }, "strip", z.ZodTypeAny, {
+        tags?: string[] | undefined;
+        reusable?: boolean | undefined;
+        ephemeral?: boolean | undefined;
+        preauthorized?: boolean | undefined;
+        expirySeconds?: number | undefined;
+        description?: string | undefined;
+    }, {
+        tags?: string[] | undefined;
+        reusable?: boolean | undefined;
+        ephemeral?: boolean | undefined;
+        preauthorized?: boolean | undefined;
+        expirySeconds?: number | undefined;
+        description?: string | undefined;
+    }>;
+    readonly handler: (input: {
+        reusable?: boolean;
+        ephemeral?: boolean;
+        preauthorized?: boolean;
+        tags?: string[];
+        expirySeconds?: number;
+        description?: string;
+    }) => Promise<import("../api.js").ApiResponse<unknown>>;
+}, {
+    readonly name: "tailscale_delete_key";
+    readonly description: "Delete an auth key.";
+    readonly inputSchema: z.ZodObject<{
+        keyId: z.ZodString;
+    }, "strip", z.ZodTypeAny, {
+        keyId: string;
+    }, {
+        keyId: string;
+    }>;
+    readonly handler: (input: {
+        keyId: string;
+    }) => Promise<import("../api.js").ApiResponse<unknown>>;
+}];

package/dist/tools/keys.js

@@ -0,0 +1,64 @@
+import { z } from "zod";
+import { apiGet, apiPost, apiDelete, getTailnet } from "../api.js";
+export const keyTools = [
+    {
+        name: "tailscale_list_keys",
+        description: "List all auth keys in your tailnet.",
+        inputSchema: z.object({}),
+        handler: async () => {
+            return apiGet(`/tailnet/${getTailnet()}/keys`);
+        },
+    },
+    {
+        name: "tailscale_get_key",
+        description: "Get details for a specific auth key.",
+        inputSchema: z.object({
+            keyId: z.string().describe("The auth key ID"),
+        }),
+        handler: async (input) => {
+            return apiGet(`/tailnet/${getTailnet()}/keys/${input.keyId}`);
+        },
+    },
+    {
+        name: "tailscale_create_key",
+        description: "Create a new auth key for adding devices to your tailnet.",
+        inputSchema: z.object({
+            reusable: z.boolean().optional().describe("Whether the key can be used more than once (default: false)"),
+            ephemeral: z.boolean().optional().describe("Whether devices using this key are ephemeral (default: false)"),
+            preauthorized: z.boolean().optional().describe("Whether devices are pre-authorized (default: false)"),
+            tags: z.array(z.string()).optional().describe("ACL tags to apply to devices using this key"),
+            expirySeconds: z.number().optional().describe("Key expiry in seconds (default: 90 days)"),
+            description: z.string().optional().describe("Description for this key"),
+        }),
+        handler: async (input) => {
+            const body = {
+                capabilities: {
+                    devices: {
+                        create: {
+                            reusable: input.reusable ?? false,
+                            ephemeral: input.ephemeral ?? false,
+                            preauthorized: input.preauthorized ?? false,
+                            tags: input.tags ?? [],
+                        },
+                    },
+                },
+            };
+            if (input.expirySeconds)
+                body.expirySeconds = input.expirySeconds;
+            if (input.description)
+                body.description = input.description;
+            return apiPost(`/tailnet/${getTailnet()}/keys`, body);
+        },
+    },
+    {
+        name: "tailscale_delete_key",
+        description: "Delete an auth key.",
+        inputSchema: z.object({
+            keyId: z.string().describe("The auth key ID to delete"),
+        }),
+        handler: async (input) => {
+            return apiDelete(`/tailnet/${getTailnet()}/keys/${input.keyId}`);
+        },
+    },
+];
+//# sourceMappingURL=keys.js.map

package/dist/tools/keys.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"keys.js","sourceRoot":"","sources":["../../src/tools/keys.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,CAAC,EAAE,MAAM,KAAK,CAAC;AACxB,OAAO,EAAE,MAAM,EAAE,OAAO,EAAE,SAAS,EAAE,UAAU,EAAE,MAAM,WAAW,CAAC;AAEnE,MAAM,CAAC,MAAM,QAAQ,GAAG;IACtB;QACE,IAAI,EAAE,qBAAqB;QAC3B,WAAW,EAAE,qCAAqC;QAClD,WAAW,EAAE,CAAC,CAAC,MAAM,CAAC,EAAE,CAAC;QACzB,OAAO,EAAE,KAAK,IAAI,EAAE;YAClB,OAAO,MAAM,CAAC,YAAY,UAAU,EAAE,OAAO,CAAC,CAAC;QACjD,CAAC;KACF;IACD;QACE,IAAI,EAAE,mBAAmB;QACzB,WAAW,EAAE,sCAAsC;QACnD,WAAW,EAAE,CAAC,CAAC,MAAM,CAAC;YACpB,KAAK,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,QAAQ,CAAC,iBAAiB,CAAC;SAC9C,CAAC;QACF,OAAO,EAAE,KAAK,EAAE,KAAwB,EAAE,EAAE;YAC1C,OAAO,MAAM,CAAC,YAAY,UAAU,EAAE,SAAS,KAAK,CAAC,KAAK,EAAE,CAAC,CAAC;QAChE,CAAC;KACF;IACD;QACE,IAAI,EAAE,sBAAsB;QAC5B,WAAW,EAAE,2DAA2D;QACxE,WAAW,EAAE,CAAC,CAAC,MAAM,CAAC;YACpB,QAAQ,EAAE,CAAC,CAAC,OAAO,EAAE,CAAC,QAAQ,EAAE,CAAC,QAAQ,CAAC,6DAA6D,CAAC;YACxG,SAAS,EAAE,CAAC,CAAC,OAAO,EAAE,CAAC,QAAQ,EAAE,CAAC,QAAQ,CAAC,+DAA+D,CAAC;YAC3G,aAAa,EAAE,CAAC,CAAC,OAAO,EAAE,CAAC,QAAQ,EAAE,CAAC,QAAQ,CAAC,qDAAqD,CAAC;YACrG,IAAI,EAAE,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,MAAM,EAAE,CAAC,CAAC,QAAQ,EAAE,CAAC,QAAQ,CAAC,6CAA6C,CAAC;YAC5F,aAAa,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,QAAQ,EAAE,CAAC,QAAQ,CAAC,0CAA0C,CAAC;YACzF,WAAW,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,QAAQ,EAAE,CAAC,QAAQ,CAAC,0BAA0B,CAAC;SACxE,CAAC;QACF,OAAO,EAAE,KAAK,EAAE,KAOf,EAAE,EAAE;YACH,MAAM,IAAI,GAA4B;gBACpC,YAAY,EAAE;oBACZ,OAAO,EAAE;wBACP,MAAM,EAAE;4BACN,QAAQ,EAAE,KAAK,CAAC,QAAQ,IAAI,KAAK;4BACjC,SAAS,EAAE,KAAK,CAAC,SAAS,IAAI,KAAK;4BACnC,aAAa,EAAE,KAAK,CAAC,aAAa,IAAI,KAAK;4BAC3C,IAAI,EAAE,KAAK,CAAC,IAAI,IAAI,EAAE;yBACvB;qBACF;iBACF;aACF,CAAC;YACF,IAAI,KAAK,CAAC,aAAa;gBAAE,IAAI,CAAC,aAAa,GAAG,KAAK,CAAC,aAAa,CAAC;YAClE,IAAI,KAAK,CAAC,WAAW;gBAAE,IAAI,CAAC,WAAW,GAAG,KAAK,CAAC,WAAW,CAAC;YAC5D,OAAO,OAAO,CAAC,YAAY,UAAU,EAAE,OAAO,EAAE,IAAI,CAAC,CAAC;QACxD,CAAC;KACF;IACD;QACE,IAAI,EAAE,sBAAsB;QAC5B,WAAW,EAAE,qBAAqB;QAClC,WAAW,EAAE,CAAC,CAAC,MAAM,CAAC;YACpB,KAAK,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,QAAQ,CAAC,2BAA2B,CAAC;SACxD,CAAC;QACF,OAAO,EAAE,KAAK,EAAE,KAAwB,EAAE,EAAE;YAC1C,OAAO,SAAS,CAAC,YAAY,UAAU,EAAE,SAAS,KAAK,CAAC,KAAK,EAAE,CAAC,CAAC;QACnE,CAAC;KACF;CACO,CAAC"}

package/dist/tools/network-lock.d.ts

@@ -0,0 +1,7 @@
+import { z } from "zod";
+export declare const networkLockTools: readonly [{
+    readonly name: "tailscale_get_tailnet_keys";
+    readonly description: "Get the tailnet's auth keys and their capabilities, including tailnet lock signing key information if tailnet lock is enabled.";
+    readonly inputSchema: z.ZodObject<{}, "strip", z.ZodTypeAny, {}, {}>;
+    readonly handler: () => Promise<import("../api.js").ApiResponse<unknown>>;
+}];

package/dist/tools/network-lock.js

@@ -0,0 +1,13 @@
+import { z } from "zod";
+import { apiGet, getTailnet } from "../api.js";
+export const networkLockTools = [
+    {
+        name: "tailscale_get_tailnet_keys",
+        description: "Get the tailnet's auth keys and their capabilities, including tailnet lock signing key information if tailnet lock is enabled.",
+        inputSchema: z.object({}),
+        handler: async () => {
+            return apiGet(`/tailnet/${getTailnet()}/keys`);
+        },
+    },
+];
+//# sourceMappingURL=network-lock.js.map

package/dist/tools/network-lock.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"network-lock.js","sourceRoot":"","sources":["../../src/tools/network-lock.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,CAAC,EAAE,MAAM,KAAK,CAAC;AACxB,OAAO,EAAE,MAAM,EAAE,UAAU,EAAE,MAAM,WAAW,CAAC;AAE/C,MAAM,CAAC,MAAM,gBAAgB,GAAG;IAC9B;QACE,IAAI,EAAE,4BAA4B;QAClC,WAAW,EACT,gIAAgI;QAClI,WAAW,EAAE,CAAC,CAAC,MAAM,CAAC,EAAE,CAAC;QACzB,OAAO,EAAE,KAAK,IAAI,EAAE;YAClB,OAAO,MAAM,CAAC,YAAY,UAAU,EAAE,OAAO,CAAC,CAAC;QACjD,CAAC;KACF;CACO,CAAC"}

package/dist/tools/posture.d.ts

@@ -0,0 +1,62 @@
+import { z } from "zod";
+export declare const postureTools: readonly [{
+    readonly name: "tailscale_list_posture_integrations";
+    readonly description: "List all device posture integrations configured for your tailnet.";
+    readonly inputSchema: z.ZodObject<{}, "strip", z.ZodTypeAny, {}, {}>;
+    readonly handler: () => Promise<import("../api.js").ApiResponse<unknown>>;
+}, {
+    readonly name: "tailscale_get_posture_integration";
+    readonly description: "Get details for a specific posture integration.";
+    readonly inputSchema: z.ZodObject<{
+        integrationId: z.ZodString;
+    }, "strip", z.ZodTypeAny, {
+        integrationId: string;
+    }, {
+        integrationId: string;
+    }>;
+    readonly handler: (input: {
+        integrationId: string;
+    }) => Promise<import("../api.js").ApiResponse<unknown>>;
+}, {
+    readonly name: "tailscale_create_posture_integration";
+    readonly description: "Create a new device posture integration.";
+    readonly inputSchema: z.ZodObject<{
+        provider: z.ZodString;
+        clientId: z.ZodString;
+        clientSecret: z.ZodString;
+        tenantId: z.ZodOptional<z.ZodString>;
+        cloudEnvironment: z.ZodOptional<z.ZodString>;
+    }, "strip", z.ZodTypeAny, {
+        provider: string;
+        clientId: string;
+        clientSecret: string;
+        tenantId?: string | undefined;
+        cloudEnvironment?: string | undefined;
+    }, {
+        provider: string;
+        clientId: string;
+        clientSecret: string;
+        tenantId?: string | undefined;
+        cloudEnvironment?: string | undefined;
+    }>;
+    readonly handler: (input: {
+        provider: string;
+        clientId: string;
+        clientSecret: string;
+        tenantId?: string;
+        cloudEnvironment?: string;
+    }) => Promise<import("../api.js").ApiResponse<unknown>>;
+}, {
+    readonly name: "tailscale_delete_posture_integration";
+    readonly description: "Delete a posture integration.";
+    readonly inputSchema: z.ZodObject<{
+        integrationId: z.ZodString;
+    }, "strip", z.ZodTypeAny, {
+        integrationId: string;
+    }, {
+        integrationId: string;
+    }>;
+    readonly handler: (input: {
+        integrationId: string;
+    }) => Promise<import("../api.js").ApiResponse<unknown>>;
+}];