@yawlabs/tailscale-mcp 0.6.3 → 0.6.4

package/dist/index.js

@@ -21021,8 +21021,9 @@ function getConfig() {
   const oauthClientSecret = process.env.TAILSCALE_OAUTH_CLIENT_SECRET;
   const tailnet = process.env.TAILSCALE_TAILNET || "-";
   if (!apiKey && !(oauthClientId && oauthClientSecret)) {
+    const hint = process.platform === "win32" ? ' On Windows, env vars set in bash/WSL profiles are not visible to MCP servers launched via cmd. Either add "env": {"TAILSCALE_API_KEY": "tskey-api-..."} to your .mcp.json, or set it as a Windows user environment variable.' : "";
     throw new Error(
-      "No Tailscale credentials configured. Set TAILSCALE_API_KEY, or set both TAILSCALE_OAUTH_CLIENT_ID and TAILSCALE_OAUTH_CLIENT_SECRET."
+      `No Tailscale credentials configured. Set TAILSCALE_API_KEY, or set both TAILSCALE_OAUTH_CLIENT_ID and TAILSCALE_OAUTH_CLIENT_SECRET.${hint}`
     );
   }
   if (apiKey && apiKey.trim() === "") {
@@ -21082,6 +21083,29 @@ function encPath(segment) {
 function sanitizeDescription(value) {
   return value.replace(/[/_]/g, "-").replace(/[^a-zA-Z0-9 -]/g, "").replace(/ {2,}/g, " ").trim().slice(0, 50);
 }
+function formatAuthError(apiBody) {
+  const usingOAuth = !process.env.TAILSCALE_API_KEY && process.env.TAILSCALE_OAUTH_CLIENT_ID;
+  const lines = [
+    "Authentication failed (HTTP 401).",
+    "",
+    "Possible causes:",
+    usingOAuth ? "  - OAuth client credentials are invalid or lack required scopes" : "  - API key has expired or been revoked"
+  ];
+  if (process.platform === "win32" && !usingOAuth) {
+    lines.push(
+      "  - On Windows, env vars set in bash/WSL profiles are not visible to MCP servers launched via cmd",
+      "",
+      "Fix options:",
+      '  1. Add "env": {"TAILSCALE_API_KEY": "tskey-api-..."} to your .mcp.json',
+      "  2. Set TAILSCALE_API_KEY as a Windows user environment variable (System Properties > Environment Variables)"
+    );
+  }
+  lines.push("", "Generate a new key at: https://login.tailscale.com/admin/settings/keys");
+  if (apiBody) {
+    lines.push("", `API response: ${apiBody}`);
+  }
+  return lines.join("\n");
+}
 async function apiRequest(method, path, body, options) {
   const auth = await getAuthHeader();
   const headers = {
@@ -21112,13 +21136,15 @@ async function apiRequest(method, path, body, options) {
   if (options?.acceptRaw) {
     const rawBody = await res.text();
     if (!res.ok) {
-      return { ok: false, status: res.status, error: rawBody, rawBody, etag };
+      const error2 = res.status === 401 ? formatAuthError(rawBody) : rawBody;
+      return { ok: false, status: res.status, error: error2, rawBody, etag };
     }
     return { ok: true, status: res.status, rawBody, etag };
   }
   if (!res.ok) {
     const errorBody = await res.text();
-    return { ok: false, status: res.status, error: errorBody, etag };
+    const error2 = res.status === 401 ? formatAuthError(errorBody) : errorBody;
+    return { ok: false, status: res.status, error: error2, etag };
   }
   if (res.status === 204 || res.headers.get("content-length") === "0") {
     return { ok: true, status: res.status, etag };
@@ -23325,7 +23351,7 @@ var workloadIdentityTools = [
 ];
 
 // src/index.ts
-var version2 = true ? "0.6.3" : (await null).createRequire(import.meta.url)("../package.json").version;
+var version2 = true ? "0.6.4" : (await null).createRequire(import.meta.url)("../package.json").version;
 var subcommand = process.argv[2];
 if (subcommand === "deploy-acl") {
   const filePath = process.argv[3];

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@yawlabs/tailscale-mcp",
-  "version": "0.6.3",
+  "version": "0.6.4",
   "description": "Tailscale MCP server for managing your tailnet from AI assistants",
   "license": "MIT",
   "author": "YawLabs <contact@yaw.sh>",