tailscale-mcp 2026.3.15

package/dist/tools/posture.js

@@ -0,0 +1,155 @@
+import { z } from "zod";
+// ---------------------------------------------------------------------------
+// Constants
+// ---------------------------------------------------------------------------
+const POSTURE_PROVIDERS = [
+    "crowdstrike", "falcon", "intune", "jamfPro",
+    "kandji", "kolide", "sentinelone",
+];
+// ---------------------------------------------------------------------------
+// Zod schemas for input validation
+// ---------------------------------------------------------------------------
+const PostureIntegrationListSchema = z.object({});
+const PostureIntegrationGetSchema = z.object({
+    integrationId: z.string().min(1, "Integration ID is required"),
+});
+const PostureIntegrationCreateSchema = z.object({
+    provider: z.enum(POSTURE_PROVIDERS),
+    cloudId: z.string().optional(),
+    clientId: z.string().optional(),
+    clientSecret: z.string().optional(),
+    tenantId: z.string().optional(),
+});
+const PostureIntegrationDeleteSchema = z.object({
+    integrationId: z.string().min(1, "Integration ID is required"),
+    confirm: z.literal(true, {
+        errorMap: () => ({ message: "confirm must be true to delete a posture integration" }),
+    }),
+});
+// ---------------------------------------------------------------------------
+// Tool definitions (for ListTools)
+// ---------------------------------------------------------------------------
+export const postureToolDefinitions = [
+    {
+        name: "tailscale_posture_integration_list",
+        description: "List all configured third-party posture provider integrations for the tailnet (e.g., CrowdStrike, Intune, Jamf).",
+        inputSchema: {
+            type: "object",
+            properties: {},
+        },
+    },
+    {
+        name: "tailscale_posture_integration_get",
+        description: "Get details for a specific posture provider integration by ID.",
+        inputSchema: {
+            type: "object",
+            properties: {
+                integrationId: {
+                    type: "string",
+                    description: "The posture integration ID",
+                },
+            },
+            required: ["integrationId"],
+        },
+    },
+    {
+        name: "tailscale_posture_integration_create",
+        description: "Create a new third-party posture provider integration. Supported providers: crowdstrike, falcon, intune, jamfPro, kandji, kolide, sentinelone. Required fields depend on the provider.",
+        inputSchema: {
+            type: "object",
+            properties: {
+                provider: {
+                    type: "string",
+                    enum: ["crowdstrike", "falcon", "intune", "jamfPro", "kandji", "kolide", "sentinelone"],
+                    description: "Posture provider type",
+                },
+                cloudId: {
+                    type: "string",
+                    description: "Cloud ID (provider-specific)",
+                },
+                clientId: {
+                    type: "string",
+                    description: "Client ID for the posture provider",
+                },
+                clientSecret: {
+                    type: "string",
+                    description: "Client secret for the posture provider",
+                },
+                tenantId: {
+                    type: "string",
+                    description: "Tenant ID (for Intune/Azure-based providers)",
+                },
+            },
+            required: ["provider"],
+        },
+    },
+    {
+        name: "tailscale_posture_integration_delete",
+        description: "Delete a posture provider integration. Requires confirm: true.",
+        inputSchema: {
+            type: "object",
+            properties: {
+                integrationId: {
+                    type: "string",
+                    description: "The posture integration ID to delete",
+                },
+                confirm: {
+                    type: "boolean",
+                    description: "Must be true to confirm deletion",
+                },
+            },
+            required: ["integrationId", "confirm"],
+        },
+    },
+];
+// ---------------------------------------------------------------------------
+// Tool handler
+// ---------------------------------------------------------------------------
+export async function handlePostureTool(name, args, client) {
+    try {
+        switch (name) {
+            case "tailscale_posture_integration_list": {
+                PostureIntegrationListSchema.parse(args);
+                const result = await client.get(`/tailnet/${client.tailnet}/posture/integrations`);
+                return { content: [{ type: "text", text: JSON.stringify(result, null, 2) }] };
+            }
+            case "tailscale_posture_integration_get": {
+                const parsed = PostureIntegrationGetSchema.parse(args);
+                const result = await client.get(`/tailnet/${client.tailnet}/posture/integrations/${parsed.integrationId}`);
+                return { content: [{ type: "text", text: JSON.stringify(result, null, 2) }] };
+            }
+            case "tailscale_posture_integration_create": {
+                const parsed = PostureIntegrationCreateSchema.parse(args);
+                const body = { provider: parsed.provider };
+                if (parsed.cloudId !== undefined)
+                    body["cloudId"] = parsed.cloudId;
+                if (parsed.clientId !== undefined)
+                    body["clientId"] = parsed.clientId;
+                if (parsed.clientSecret !== undefined)
+                    body["clientSecret"] = parsed.clientSecret;
+                if (parsed.tenantId !== undefined)
+                    body["tenantId"] = parsed.tenantId;
+                const result = await client.post(`/tailnet/${client.tailnet}/posture/integrations`, body);
+                return { content: [{ type: "text", text: JSON.stringify(result, null, 2) }] };
+            }
+            case "tailscale_posture_integration_delete": {
+                const parsed = PostureIntegrationDeleteSchema.parse(args);
+                await client.deleteVoid(`/tailnet/${client.tailnet}/posture/integrations/${parsed.integrationId}`);
+                return {
+                    content: [{ type: "text", text: JSON.stringify({ deleted: true, integrationId: parsed.integrationId }, null, 2) }],
+                };
+            }
+            default:
+                return {
+                    content: [{ type: "text", text: `Unknown posture tool: ${name}` }],
+                };
+        }
+    }
+    catch (error) {
+        const message = error instanceof Error ? error.message : "Unknown error";
+        return {
+            content: [{ type: "text", text: `Error executing ${name}: ${message}` }],
+        };
+    }
+}
+//# sourceMappingURL=posture.js.map

package/dist/tools/posture.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"posture.js","sourceRoot":"","sources":["../../src/tools/posture.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,CAAC,EAAE,MAAM,KAAK,CAAC;AAIxB,8EAA8E;AAC9E,YAAY;AACZ,8EAA8E;AAE9E,MAAM,iBAAiB,GAAG;IACxB,aAAa,EAAE,QAAQ,EAAE,QAAQ,EAAE,SAAS;IAC5C,QAAQ,EAAE,QAAQ,EAAE,aAAa;CACzB,CAAC;AAEX,8EAA8E;AAC9E,mCAAmC;AACnC,8EAA8E;AAE9E,MAAM,4BAA4B,GAAG,CAAC,CAAC,MAAM,CAAC,EAAE,CAAC,CAAC;AAElD,MAAM,2BAA2B,GAAG,CAAC,CAAC,MAAM,CAAC;IAC3C,aAAa,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,CAAC,CAAC,EAAE,4BAA4B,CAAC;CAC/D,CAAC,CAAC;AAEH,MAAM,8BAA8B,GAAG,CAAC,CAAC,MAAM,CAAC;IAC9C,QAAQ,EAAE,CAAC,CAAC,IAAI,CAAC,iBAAiB,CAAC;IACnC,OAAO,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,QAAQ,EAAE;IAC9B,QAAQ,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,QAAQ,EAAE;IAC/B,YAAY,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,QAAQ,EAAE;IACnC,QAAQ,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,QAAQ,EAAE;CAChC,CAAC,CAAC;AAEH,MAAM,8BAA8B,GAAG,CAAC,CAAC,MAAM,CAAC;IAC9C,aAAa,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,CAAC,CAAC,EAAE,4BAA4B,CAAC;IAC9D,OAAO,EAAE,CAAC,CAAC,OAAO,CAAC,IAAI,EAAE;QACvB,QAAQ,EAAE,GAAG,EAAE,CAAC,CAAC,EAAE,OAAO,EAAE,sDAAsD,EAAE,CAAC;KACtF,CAAC;CACH,CAAC,CAAC;AAEH,8EAA8E;AAC9E,mCAAmC;AACnC,8EAA8E;AAE9E,MAAM,CAAC,MAAM,sBAAsB,GAAG;IACpC;QACE,IAAI,EAAE,oCAAoC;QAC1C,WAAW,EACT,kHAAkH;QACpH,WAAW,EAAE;YACX,IAAI,EAAE,QAAiB;YACvB,UAAU,EAAE,EAAE;SACf;KACF;IACD;QACE,IAAI,EAAE,mCAAmC;QACzC,WAAW,EACT,gEAAgE;QAClE,WAAW,EAAE;YACX,IAAI,EAAE,QAAiB;YACvB,UAAU,EAAE;gBACV,aAAa,EAAE;oBACb,IAAI,EAAE,QAAQ;oBACd,WAAW,EAAE,4BAA4B;iBAC1C;aACF;YACD,QAAQ,EAAE,CAAC,eAAe,CAAC;SAC5B;KACF;IACD;QACE,IAAI,EAAE,sCAAsC;QAC5C,WAAW,EACT,wLAAwL;QAC1L,WAAW,EAAE;YACX,IAAI,EAAE,QAAiB;YACvB,UAAU,EAAE;gBACV,QAAQ,EAAE;oBACR,IAAI,EAAE,QAAQ;oBACd,IAAI,EAAE,CAAC,aAAa,EAAE,QAAQ,EAAE,QAAQ,EAAE,SAAS,EAAE,QAAQ,EAAE,QAAQ,EAAE,aAAa,CAAC;oBACvF,WAAW,EAAE,uBAAuB;iBACrC;gBACD,OAAO,EAAE;oBACP,IAAI,EAAE,QAAQ;oBACd,WAAW,EAAE,8BAA8B;iBAC5C;gBACD,QAAQ,EAAE;oBACR,IAAI,EAAE,QAAQ;oBACd,WAAW,EAAE,oCAAoC;iBAClD;gBACD,YAAY,EAAE;oBACZ,IAAI,EAAE,QAAQ;oBACd,WAAW,EAAE,wCAAwC;iBACtD;gBACD,QAAQ,EAAE;oBACR,IAAI,EAAE,QAAQ;oBACd,WAAW,EAAE,8CAA8C;iBAC5D;aACF;YACD,QAAQ,EAAE,CAAC,UAAU,CAAC;SACvB;KACF;IACD;QACE,IAAI,EAAE,sCAAsC;QAC5C,WAAW,EACT,gEAAgE;QAClE,WAAW,EAAE;YACX,IAAI,EAAE,QAAiB;YACvB,UAAU,EAAE;gBACV,aAAa,EAAE;oBACb,IAAI,EAAE,QAAQ;oBACd,WAAW,EAAE,sCAAsC;iBACpD;gBACD,OAAO,EAAE;oBACP,IAAI,EAAE,SAAS;oBACf,WAAW,EAAE,kCAAkC;iBAChD;aACF;YACD,QAAQ,EAAE,CAAC,eAAe,EAAE,SAAS,CAAC;SACvC;KACF;CACF,CAAC;AAEF,8EAA8E;AAC9E,eAAe;AACf,8EAA8E;AAE9E,MAAM,CAAC,KAAK,UAAU,iBAAiB,CACrC,IAAY,EACZ,IAA6B,EAC7B,MAAwB;IAExB,IAAI,CAAC;QACH,QAAQ,IAAI,EAAE,CAAC;YACb,KAAK,oCAAoC,CAAC,CAAC,CAAC;gBAC1C,4BAA4B,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC;gBACzC,MAAM,MAAM,GAAG,MAAM,MAAM,CAAC,GAAG,CAC7B,YAAY,MAAM,CAAC,OAAO,uBAAuB,CAClD,CAAC;gBACF,OAAO,EAAE,OAAO,EAAE,CAAC,EAAE,IAAI,EAAE,MAAM,EAAE,IAAI,EAAE,IAAI,CAAC,SAAS,CAAC,MAAM,EAAE,IAAI,EAAE,CAAC,CAAC,EAAE,CAAC,EAAE,CAAC;YAChF,CAAC;YAED,KAAK,mCAAmC,CAAC,CAAC,CAAC;gBACzC,MAAM,MAAM,GAAG,2BAA2B,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC;gBACvD,MAAM,MAAM,GAAG,MAAM,MAAM,CAAC,GAAG,CAC7B,YAAY,MAAM,CAAC,OAAO,yBAAyB,MAAM,CAAC,aAAa,EAAE,CAC1E,CAAC;gBACF,OAAO,EAAE,OAAO,EAAE,CAAC,EAAE,IAAI,EAAE,MAAM,EAAE,IAAI,EAAE,IAAI,CAAC,SAAS,CAAC,MAAM,EAAE,IAAI,EAAE,CAAC,CAAC,EAAE,CAAC,EAAE,CAAC;YAChF,CAAC;YAED,KAAK,sCAAsC,CAAC,CAAC,CAAC;gBAC5C,MAAM,MAAM,GAAG,8BAA8B,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC;gBAC1D,MAAM,IAAI,GAA4B,EAAE,QAAQ,EAAE,MAAM,CAAC,QAAQ,EAAE,CAAC;gBACpE,IAAI,MAAM,CAAC,OAAO,KAAK,SAAS;oBAAE,IAAI,CAAC,SAAS,CAAC,GAAG,MAAM,CAAC,OAAO,CAAC;gBACnE,IAAI,MAAM,CAAC,QAAQ,KAAK,SAAS;oBAAE,IAAI,CAAC,UAAU,CAAC,GAAG,MAAM,CAAC,QAAQ,CAAC;gBACtE,IAAI,MAAM,CAAC,YAAY,KAAK,SAAS;oBAAE,IAAI,CAAC,cAAc,CAAC,GAAG,MAAM,CAAC,YAAY,CAAC;gBAClF,IAAI,MAAM,CAAC,QAAQ,KAAK,SAAS;oBAAE,IAAI,CAAC,UAAU,CAAC,GAAG,MAAM,CAAC,QAAQ,CAAC;gBACtE,MAAM,MAAM,GAAG,MAAM,MAAM,CAAC,IAAI,CAC9B,YAAY,MAAM,CAAC,OAAO,uBAAuB,EACjD,IAAI,CACL,CAAC;gBACF,OAAO,EAAE,OAAO,EAAE,CAAC,EAAE,IAAI,EAAE,MAAM,EAAE,IAAI,EAAE,IAAI,CAAC,SAAS,CAAC,MAAM,EAAE,IAAI,EAAE,CAAC,CAAC,EAAE,CAAC,EAAE,CAAC;YAChF,CAAC;YAED,KAAK,sCAAsC,CAAC,CAAC,CAAC;gBAC5C,MAAM,MAAM,GAAG,8BAA8B,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC;gBAC1D,MAAM,MAAM,CAAC,UAAU,CACrB,YAAY,MAAM,CAAC,OAAO,yBAAyB,MAAM,CAAC,aAAa,EAAE,CAC1E,CAAC;gBACF,OAAO;oBACL,OAAO,EAAE,CAAC,EAAE,IAAI,EAAE,MAAM,EAAE,IAAI,EAAE,IAAI,CAAC,SAAS,CAAC,EAAE,OAAO,EAAE,IAAI,EAAE,aAAa,EAAE,MAAM,CAAC,aAAa,EAAE,EAAE,IAAI,EAAE,CAAC,CAAC,EAAE,CAAC;iBACnH,CAAC;YACJ,CAAC;YAED;gBACE,OAAO;oBACL,OAAO,EAAE,CAAC,EAAE,IAAI,EAAE,MAAM,EAAE,IAAI,EAAE,yBAAyB,IAAI,EAAE,EAAE,CAAC;iBACnE,CAAC;QACN,CAAC;IACH,CAAC;IAAC,OAAO,KAAc,EAAE,CAAC;QACxB,MAAM,OAAO,GAAG,KAAK,YAAY,KAAK,CAAC,CAAC,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC,CAAC,eAAe,CAAC;QACzE,OAAO;YACL,OAAO,EAAE,CAAC,EAAE,IAAI,EAAE,MAAM,EAAE,IAAI,EAAE,mBAAmB,IAAI,KAAK,OAAO,EAAE,EAAE,CAAC;SACzE,CAAC;IACJ,CAAC;AACH,CAAC"}

package/dist/tools/tailnet.d.ts

@@ -0,0 +1,132 @@
+import type { ITailscaleClient } from "../client/types.js";
+export declare const tailnetToolDefinitions: ({
+    name: string;
+    description: string;
+    inputSchema: {
+        type: "object";
+        properties: {
+            account?: undefined;
+            support?: undefined;
+            security?: undefined;
+            confirm?: undefined;
+            devicesApprovalOn?: undefined;
+            devicesAutoUpdatesOn?: undefined;
+            devicesKeyDurationDays?: undefined;
+            usersApprovalOn?: undefined;
+            usersRoleAllowedToJoinExternalTailnets?: undefined;
+            networkFlowLoggingOn?: undefined;
+            regionalRoutingOn?: undefined;
+            postureIdentityCollectionOn?: undefined;
+        };
+        required?: undefined;
+    };
+} | {
+    name: string;
+    description: string;
+    inputSchema: {
+        type: "object";
+        properties: {
+            account: {
+                type: string;
+                properties: {
+                    email: {
+                        type: string;
+                        description: string;
+                    };
+                };
+                required: string[];
+                description: string;
+            };
+            support: {
+                type: string;
+                properties: {
+                    email: {
+                        type: string;
+                        description: string;
+                    };
+                };
+                required: string[];
+                description: string;
+            };
+            security: {
+                type: string;
+                properties: {
+                    email: {
+                        type: string;
+                        description: string;
+                    };
+                };
+                required: string[];
+                description: string;
+            };
+            confirm: {
+                type: string;
+                description: string;
+            };
+            devicesApprovalOn?: undefined;
+            devicesAutoUpdatesOn?: undefined;
+            devicesKeyDurationDays?: undefined;
+            usersApprovalOn?: undefined;
+            usersRoleAllowedToJoinExternalTailnets?: undefined;
+            networkFlowLoggingOn?: undefined;
+            regionalRoutingOn?: undefined;
+            postureIdentityCollectionOn?: undefined;
+        };
+        required: string[];
+    };
+} | {
+    name: string;
+    description: string;
+    inputSchema: {
+        type: "object";
+        properties: {
+            devicesApprovalOn: {
+                type: string;
+                description: string;
+            };
+            devicesAutoUpdatesOn: {
+                type: string;
+                description: string;
+            };
+            devicesKeyDurationDays: {
+                type: string;
+                description: string;
+            };
+            usersApprovalOn: {
+                type: string;
+                description: string;
+            };
+            usersRoleAllowedToJoinExternalTailnets: {
+                type: string;
+                description: string;
+            };
+            networkFlowLoggingOn: {
+                type: string;
+                description: string;
+            };
+            regionalRoutingOn: {
+                type: string;
+                description: string;
+            };
+            postureIdentityCollectionOn: {
+                type: string;
+                description: string;
+            };
+            confirm: {
+                type: string;
+                description: string;
+            };
+            account?: undefined;
+            support?: undefined;
+            security?: undefined;
+        };
+        required: string[];
+    };
+})[];
+export declare function handleTailnetTool(name: string, args: Record<string, unknown>, client: ITailscaleClient): Promise<{
+    content: Array<{
+        type: "text";
+        text: string;
+    }>;
+}>;
+//# sourceMappingURL=tailnet.d.ts.map

package/dist/tools/tailnet.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"tailnet.d.ts","sourceRoot":"","sources":["../../src/tools/tailnet.ts"],"names":[],"mappings":"AACA,OAAO,KAAK,EAAE,gBAAgB,EAAE,MAAM,oBAAoB,CAAC;AAwD3D,eAAO,MAAM,sBAAsB;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;IAkHlC,CAAC;AAMF,wBAAsB,iBAAiB,CACrC,IAAI,EAAE,MAAM,EACZ,IAAI,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,EAC7B,MAAM,EAAE,gBAAgB,GACvB,OAAO,CAAC;IAAE,OAAO,EAAE,KAAK,CAAC;QAAE,IAAI,EAAE,MAAM,CAAC;QAAC,IAAI,EAAE,MAAM,CAAA;KAAE,CAAC,CAAA;CAAE,CAAC,CAqE7D"}

package/dist/tools/tailnet.js

@@ -0,0 +1,222 @@
+import { z } from "zod";
+// ---------------------------------------------------------------------------
+// Zod schemas for input validation
+// ---------------------------------------------------------------------------
+const TailnetSettingsGetSchema = z.object({});
+const TailnetContactsGetSchema = z.object({});
+const TailnetContactsSetSchema = z.object({
+    account: z
+        .object({
+        email: z.string().email("Invalid account email"),
+    })
+        .optional(),
+    support: z
+        .object({
+        email: z.string().email("Invalid support email"),
+    })
+        .optional(),
+    security: z
+        .object({
+        email: z.string().email("Invalid security email"),
+    })
+        .optional(),
+    confirm: z.literal(true, {
+        errorMap: () => ({ message: "confirm must be true to update tailnet contacts" }),
+    }),
+});
+const TailnetLockStatusSchema = z.object({});
+const TailnetSettingsUpdateSchema = z.object({
+    devicesApprovalOn: z.boolean().optional(),
+    devicesAutoUpdatesOn: z.boolean().optional(),
+    devicesKeyDurationDays: z.number().int().positive().optional(),
+    usersApprovalOn: z.boolean().optional(),
+    usersRoleAllowedToJoinExternalTailnets: z.string().optional(),
+    networkFlowLoggingOn: z.boolean().optional(),
+    regionalRoutingOn: z.boolean().optional(),
+    postureIdentityCollectionOn: z.boolean().optional(),
+    confirm: z.literal(true, {
+        errorMap: () => ({ message: "confirm must be true to update tailnet settings" }),
+    }),
+});
+// ---------------------------------------------------------------------------
+// Tool definitions (for ListTools)
+// ---------------------------------------------------------------------------
+export const tailnetToolDefinitions = [
+    {
+        name: "tailscale_tailnet_settings_get",
+        description: "Get the tailnet settings including device approval, auto-updates, key expiry, and posture identity collection.",
+        inputSchema: {
+            type: "object",
+            properties: {},
+        },
+    },
+    {
+        name: "tailscale_tailnet_contacts_get",
+        description: "Get the contact email addresses configured for the tailnet (account, support, and security contacts).",
+        inputSchema: {
+            type: "object",
+            properties: {},
+        },
+    },
+    {
+        name: "tailscale_tailnet_contacts_set",
+        description: "Update contact email addresses for the tailnet. Requires confirm: true. Provide any combination of account, support, or security contacts.",
+        inputSchema: {
+            type: "object",
+            properties: {
+                account: {
+                    type: "object",
+                    properties: {
+                        email: { type: "string", description: "Account contact email address" },
+                    },
+                    required: ["email"],
+                    description: "Account contact (billing, account management)",
+                },
+                support: {
+                    type: "object",
+                    properties: {
+                        email: { type: "string", description: "Support contact email address" },
+                    },
+                    required: ["email"],
+                    description: "Support contact",
+                },
+                security: {
+                    type: "object",
+                    properties: {
+                        email: { type: "string", description: "Security contact email address" },
+                    },
+                    required: ["email"],
+                    description: "Security contact for vulnerability reports",
+                },
+                confirm: {
+                    type: "boolean",
+                    description: "Must be true to confirm updating tailnet contacts",
+                },
+            },
+            required: ["confirm"],
+        },
+    },
+    {
+        name: "tailscale_tailnet_lock_status",
+        description: "Get the Tailnet Lock status. Tailnet Lock allows requiring cryptographic signatures on all node key registrations.",
+        inputSchema: {
+            type: "object",
+            properties: {},
+        },
+    },
+    {
+        name: "tailscale_tailnet_settings_update",
+        description: "Update tailnet settings. Requires confirm: true. All settings fields are optional — only provided fields will be updated.",
+        inputSchema: {
+            type: "object",
+            properties: {
+                devicesApprovalOn: {
+                    type: "boolean",
+                    description: "Whether devices require admin approval before they can join the tailnet",
+                },
+                devicesAutoUpdatesOn: {
+                    type: "boolean",
+                    description: "Whether devices are automatically updated",
+                },
+                devicesKeyDurationDays: {
+                    type: "number",
+                    description: "Number of days before device keys expire",
+                },
+                usersApprovalOn: {
+                    type: "boolean",
+                    description: "Whether users require admin approval to join the tailnet",
+                },
+                usersRoleAllowedToJoinExternalTailnets: {
+                    type: "string",
+                    description: "Role allowed to join external tailnets",
+                },
+                networkFlowLoggingOn: {
+                    type: "boolean",
+                    description: "Whether network flow logging is enabled",
+                },
+                regionalRoutingOn: {
+                    type: "boolean",
+                    description: "Whether regional routing is enabled",
+                },
+                postureIdentityCollectionOn: {
+                    type: "boolean",
+                    description: "Whether posture identity collection is enabled",
+                },
+                confirm: {
+                    type: "boolean",
+                    description: "Must be true to confirm updating tailnet settings",
+                },
+            },
+            required: ["confirm"],
+        },
+    },
+];
+// ---------------------------------------------------------------------------
+// Tool handler
+// ---------------------------------------------------------------------------
+export async function handleTailnetTool(name, args, client) {
+    try {
+        switch (name) {
+            case "tailscale_tailnet_settings_get": {
+                TailnetSettingsGetSchema.parse(args);
+                const result = await client.get(`/tailnet/${client.tailnet}/settings`);
+                return { content: [{ type: "text", text: JSON.stringify(result, null, 2) }] };
+            }
+            case "tailscale_tailnet_contacts_get": {
+                TailnetContactsGetSchema.parse(args);
+                const result = await client.get(`/tailnet/${client.tailnet}/contacts`);
+                return { content: [{ type: "text", text: JSON.stringify(result, null, 2) }] };
+            }
+            case "tailscale_tailnet_contacts_set": {
+                const parsed = TailnetContactsSetSchema.parse(args);
+                const body = {};
+                if (parsed.account !== undefined)
+                    body["account"] = parsed.account;
+                if (parsed.support !== undefined)
+                    body["support"] = parsed.support;
+                if (parsed.security !== undefined)
+                    body["security"] = parsed.security;
+                const result = await client.patch(`/tailnet/${client.tailnet}/contacts`, body);
+                return { content: [{ type: "text", text: JSON.stringify(result, null, 2) }] };
+            }
+            case "tailscale_tailnet_lock_status": {
+                TailnetLockStatusSchema.parse(args);
+                const result = await client.get(`/tailnet/${client.tailnet}/lock/status`);
+                return { content: [{ type: "text", text: JSON.stringify(result, null, 2) }] };
+            }
+            case "tailscale_tailnet_settings_update": {
+                const parsed = TailnetSettingsUpdateSchema.parse(args);
+                const body = {};
+                if (parsed.devicesApprovalOn !== undefined)
+                    body["devicesApprovalOn"] = parsed.devicesApprovalOn;
+                if (parsed.devicesAutoUpdatesOn !== undefined)
+                    body["devicesAutoUpdatesOn"] = parsed.devicesAutoUpdatesOn;
+                if (parsed.devicesKeyDurationDays !== undefined)
+                    body["devicesKeyDurationDays"] = parsed.devicesKeyDurationDays;
+                if (parsed.usersApprovalOn !== undefined)
+                    body["usersApprovalOn"] = parsed.usersApprovalOn;
+                if (parsed.usersRoleAllowedToJoinExternalTailnets !== undefined)
+                    body["usersRoleAllowedToJoinExternalTailnets"] = parsed.usersRoleAllowedToJoinExternalTailnets;
+                if (parsed.networkFlowLoggingOn !== undefined)
+                    body["networkFlowLoggingOn"] = parsed.networkFlowLoggingOn;
+                if (parsed.regionalRoutingOn !== undefined)
+                    body["regionalRoutingOn"] = parsed.regionalRoutingOn;
+                if (parsed.postureIdentityCollectionOn !== undefined)
+                    body["postureIdentityCollectionOn"] = parsed.postureIdentityCollectionOn;
+                const result = await client.patch(`/tailnet/${client.tailnet}/settings`, body);
+                return { content: [{ type: "text", text: JSON.stringify(result, null, 2) }] };
+            }
+            default:
+                return {
+                    content: [{ type: "text", text: `Unknown tailnet tool: ${name}` }],
+                };
+        }
+    }
+    catch (error) {
+        const message = error instanceof Error ? error.message : "Unknown error";
+        return {
+            content: [{ type: "text", text: `Error executing ${name}: ${message}` }],
+        };
+    }
+}
+//# sourceMappingURL=tailnet.js.map

package/dist/tools/tailnet.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"tailnet.js","sourceRoot":"","sources":["../../src/tools/tailnet.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,CAAC,EAAE,MAAM,KAAK,CAAC;AAQxB,8EAA8E;AAC9E,mCAAmC;AACnC,8EAA8E;AAE9E,MAAM,wBAAwB,GAAG,CAAC,CAAC,MAAM,CAAC,EAAE,CAAC,CAAC;AAE9C,MAAM,wBAAwB,GAAG,CAAC,CAAC,MAAM,CAAC,EAAE,CAAC,CAAC;AAE9C,MAAM,wBAAwB,GAAG,CAAC,CAAC,MAAM,CAAC;IACxC,OAAO,EAAE,CAAC;SACP,MAAM,CAAC;QACN,KAAK,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,KAAK,CAAC,uBAAuB,CAAC;KACjD,CAAC;SACD,QAAQ,EAAE;IACb,OAAO,EAAE,CAAC;SACP,MAAM,CAAC;QACN,KAAK,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,KAAK,CAAC,uBAAuB,CAAC;KACjD,CAAC;SACD,QAAQ,EAAE;IACb,QAAQ,EAAE,CAAC;SACR,MAAM,CAAC;QACN,KAAK,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,KAAK,CAAC,wBAAwB,CAAC;KAClD,CAAC;SACD,QAAQ,EAAE;IACb,OAAO,EAAE,CAAC,CAAC,OAAO,CAAC,IAAI,EAAE;QACvB,QAAQ,EAAE,GAAG,EAAE,CAAC,CAAC,EAAE,OAAO,EAAE,iDAAiD,EAAE,CAAC;KACjF,CAAC;CACH,CAAC,CAAC;AAEH,MAAM,uBAAuB,GAAG,CAAC,CAAC,MAAM,CAAC,EAAE,CAAC,CAAC;AAE7C,MAAM,2BAA2B,GAAG,CAAC,CAAC,MAAM,CAAC;IAC3C,iBAAiB,EAAE,CAAC,CAAC,OAAO,EAAE,CAAC,QAAQ,EAAE;IACzC,oBAAoB,EAAE,CAAC,CAAC,OAAO,EAAE,CAAC,QAAQ,EAAE;IAC5C,sBAAsB,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,EAAE,CAAC,QAAQ,EAAE,CAAC,QAAQ,EAAE;IAC9D,eAAe,EAAE,CAAC,CAAC,OAAO,EAAE,CAAC,QAAQ,EAAE;IACvC,sCAAsC,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,QAAQ,EAAE;IAC7D,oBAAoB,EAAE,CAAC,CAAC,OAAO,EAAE,CAAC,QAAQ,EAAE;IAC5C,iBAAiB,EAAE,CAAC,CAAC,OAAO,EAAE,CAAC,QAAQ,EAAE;IACzC,2BAA2B,EAAE,CAAC,CAAC,OAAO,EAAE,CAAC,QAAQ,EAAE;IACnD,OAAO,EAAE,CAAC,CAAC,OAAO,CAAC,IAAI,EAAE;QACvB,QAAQ,EAAE,GAAG,EAAE,CAAC,CAAC,EAAE,OAAO,EAAE,iDAAiD,EAAE,CAAC;KACjF,CAAC;CACH,CAAC,CAAC;AAEH,8EAA8E;AAC9E,mCAAmC;AACnC,8EAA8E;AAE9E,MAAM,CAAC,MAAM,sBAAsB,GAAG;IACpC;QACE,IAAI,EAAE,gCAAgC;QACtC,WAAW,EACT,gHAAgH;QAClH,WAAW,EAAE;YACX,IAAI,EAAE,QAAiB;YACvB,UAAU,EAAE,EAAE;SACf;KACF;IACD;QACE,IAAI,EAAE,gCAAgC;QACtC,WAAW,EACT,uGAAuG;QACzG,WAAW,EAAE;YACX,IAAI,EAAE,QAAiB;YACvB,UAAU,EAAE,EAAE;SACf;KACF;IACD;QACE,IAAI,EAAE,gCAAgC;QACtC,WAAW,EACT,4IAA4I;QAC9I,WAAW,EAAE;YACX,IAAI,EAAE,QAAiB;YACvB,UAAU,EAAE;gBACV,OAAO,EAAE;oBACP,IAAI,EAAE,QAAQ;oBACd,UAAU,EAAE;wBACV,KAAK,EAAE,EAAE,IAAI,EAAE,QAAQ,EAAE,WAAW,EAAE,+BAA+B,EAAE;qBACxE;oBACD,QAAQ,EAAE,CAAC,OAAO,CAAC;oBACnB,WAAW,EAAE,+CAA+C;iBAC7D;gBACD,OAAO,EAAE;oBACP,IAAI,EAAE,QAAQ;oBACd,UAAU,EAAE;wBACV,KAAK,EAAE,EAAE,IAAI,EAAE,QAAQ,EAAE,WAAW,EAAE,+BAA+B,EAAE;qBACxE;oBACD,QAAQ,EAAE,CAAC,OAAO,CAAC;oBACnB,WAAW,EAAE,iBAAiB;iBAC/B;gBACD,QAAQ,EAAE;oBACR,IAAI,EAAE,QAAQ;oBACd,UAAU,EAAE;wBACV,KAAK,EAAE,EAAE,IAAI,EAAE,QAAQ,EAAE,WAAW,EAAE,gCAAgC,EAAE;qBACzE;oBACD,QAAQ,EAAE,CAAC,OAAO,CAAC;oBACnB,WAAW,EAAE,4CAA4C;iBAC1D;gBACD,OAAO,EAAE;oBACP,IAAI,EAAE,SAAS;oBACf,WAAW,EAAE,mDAAmD;iBACjE;aACF;YACD,QAAQ,EAAE,CAAC,SAAS,CAAC;SACtB;KACF;IACD;QACE,IAAI,EAAE,+BAA+B;QACrC,WAAW,EACT,oHAAoH;QACtH,WAAW,EAAE;YACX,IAAI,EAAE,QAAiB;YACvB,UAAU,EAAE,EAAE;SACf;KACF;IACD;QACE,IAAI,EAAE,mCAAmC;QACzC,WAAW,EACT,2HAA2H;QAC7H,WAAW,EAAE;YACX,IAAI,EAAE,QAAiB;YACvB,UAAU,EAAE;gBACV,iBAAiB,EAAE;oBACjB,IAAI,EAAE,SAAS;oBACf,WAAW,EAAE,yEAAyE;iBACvF;gBACD,oBAAoB,EAAE;oBACpB,IAAI,EAAE,SAAS;oBACf,WAAW,EAAE,2CAA2C;iBACzD;gBACD,sBAAsB,EAAE;oBACtB,IAAI,EAAE,QAAQ;oBACd,WAAW,EAAE,0CAA0C;iBACxD;gBACD,eAAe,EAAE;oBACf,IAAI,EAAE,SAAS;oBACf,WAAW,EAAE,0DAA0D;iBACxE;gBACD,sCAAsC,EAAE;oBACtC,IAAI,EAAE,QAAQ;oBACd,WAAW,EAAE,wCAAwC;iBACtD;gBACD,oBAAoB,EAAE;oBACpB,IAAI,EAAE,SAAS;oBACf,WAAW,EAAE,yCAAyC;iBACvD;gBACD,iBAAiB,EAAE;oBACjB,IAAI,EAAE,SAAS;oBACf,WAAW,EAAE,qCAAqC;iBACnD;gBACD,2BAA2B,EAAE;oBAC3B,IAAI,EAAE,SAAS;oBACf,WAAW,EAAE,gDAAgD;iBAC9D;gBACD,OAAO,EAAE;oBACP,IAAI,EAAE,SAAS;oBACf,WAAW,EAAE,mDAAmD;iBACjE;aACF;YACD,QAAQ,EAAE,CAAC,SAAS,CAAC;SACtB;KACF;CACF,CAAC;AAEF,8EAA8E;AAC9E,eAAe;AACf,8EAA8E;AAE9E,MAAM,CAAC,KAAK,UAAU,iBAAiB,CACrC,IAAY,EACZ,IAA6B,EAC7B,MAAwB;IAExB,IAAI,CAAC;QACH,QAAQ,IAAI,EAAE,CAAC;YACb,KAAK,gCAAgC,CAAC,CAAC,CAAC;gBACtC,wBAAwB,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC;gBACrC,MAAM,MAAM,GAAG,MAAM,MAAM,CAAC,GAAG,CAC7B,YAAY,MAAM,CAAC,OAAO,WAAW,CACtC,CAAC;gBACF,OAAO,EAAE,OAAO,EAAE,CAAC,EAAE,IAAI,EAAE,MAAM,EAAE,IAAI,EAAE,IAAI,CAAC,SAAS,CAAC,MAAM,EAAE,IAAI,EAAE,CAAC,CAAC,EAAE,CAAC,EAAE,CAAC;YAChF,CAAC;YAED,KAAK,gCAAgC,CAAC,CAAC,CAAC;gBACtC,wBAAwB,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC;gBACrC,MAAM,MAAM,GAAG,MAAM,MAAM,CAAC,GAAG,CAC7B,YAAY,MAAM,CAAC,OAAO,WAAW,CACtC,CAAC;gBACF,OAAO,EAAE,OAAO,EAAE,CAAC,EAAE,IAAI,EAAE,MAAM,EAAE,IAAI,EAAE,IAAI,CAAC,SAAS,CAAC,MAAM,EAAE,IAAI,EAAE,CAAC,CAAC,EAAE,CAAC,EAAE,CAAC;YAChF,CAAC;YAED,KAAK,gCAAgC,CAAC,CAAC,CAAC;gBACtC,MAAM,MAAM,GAAG,wBAAwB,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC;gBACpD,MAAM,IAAI,GAA4B,EAAE,CAAC;gBACzC,IAAI,MAAM,CAAC,OAAO,KAAK,SAAS;oBAAE,IAAI,CAAC,SAAS,CAAC,GAAG,MAAM,CAAC,OAAO,CAAC;gBACnE,IAAI,MAAM,CAAC,OAAO,KAAK,SAAS;oBAAE,IAAI,CAAC,SAAS,CAAC,GAAG,MAAM,CAAC,OAAO,CAAC;gBACnE,IAAI,MAAM,CAAC,QAAQ,KAAK,SAAS;oBAAE,IAAI,CAAC,UAAU,CAAC,GAAG,MAAM,CAAC,QAAQ,CAAC;gBACtE,MAAM,MAAM,GAAG,MAAM,MAAM,CAAC,KAAK,CAC/B,YAAY,MAAM,CAAC,OAAO,WAAW,EACrC,IAAI,CACL,CAAC;gBACF,OAAO,EAAE,OAAO,EAAE,CAAC,EAAE,IAAI,EAAE,MAAM,EAAE,IAAI,EAAE,IAAI,CAAC,SAAS,CAAC,MAAM,EAAE,IAAI,EAAE,CAAC,CAAC,EAAE,CAAC,EAAE,CAAC;YAChF,CAAC;YAED,KAAK,+BAA+B,CAAC,CAAC,CAAC;gBACrC,uBAAuB,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC;gBACpC,MAAM,MAAM,GAAG,MAAM,MAAM,CAAC,GAAG,CAC7B,YAAY,MAAM,CAAC,OAAO,cAAc,CACzC,CAAC;gBACF,OAAO,EAAE,OAAO,EAAE,CAAC,EAAE,IAAI,EAAE,MAAM,EAAE,IAAI,EAAE,IAAI,CAAC,SAAS,CAAC,MAAM,EAAE,IAAI,EAAE,CAAC,CAAC,EAAE,CAAC,EAAE,CAAC;YAChF,CAAC;YAED,KAAK,mCAAmC,CAAC,CAAC,CAAC;gBACzC,MAAM,MAAM,GAAG,2BAA2B,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC;gBACvD,MAAM,IAAI,GAA4B,EAAE,CAAC;gBACzC,IAAI,MAAM,CAAC,iBAAiB,KAAK,SAAS;oBAAE,IAAI,CAAC,mBAAmB,CAAC,GAAG,MAAM,CAAC,iBAAiB,CAAC;gBACjG,IAAI,MAAM,CAAC,oBAAoB,KAAK,SAAS;oBAAE,IAAI,CAAC,sBAAsB,CAAC,GAAG,MAAM,CAAC,oBAAoB,CAAC;gBAC1G,IAAI,MAAM,CAAC,sBAAsB,KAAK,SAAS;oBAAE,IAAI,CAAC,wBAAwB,CAAC,GAAG,MAAM,CAAC,sBAAsB,CAAC;gBAChH,IAAI,MAAM,CAAC,eAAe,KAAK,SAAS;oBAAE,IAAI,CAAC,iBAAiB,CAAC,GAAG,MAAM,CAAC,eAAe,CAAC;gBAC3F,IAAI,MAAM,CAAC,sCAAsC,KAAK,SAAS;oBAAE,IAAI,CAAC,wCAAwC,CAAC,GAAG,MAAM,CAAC,sCAAsC,CAAC;gBAChK,IAAI,MAAM,CAAC,oBAAoB,KAAK,SAAS;oBAAE,IAAI,CAAC,sBAAsB,CAAC,GAAG,MAAM,CAAC,oBAAoB,CAAC;gBAC1G,IAAI,MAAM,CAAC,iBAAiB,KAAK,SAAS;oBAAE,IAAI,CAAC,mBAAmB,CAAC,GAAG,MAAM,CAAC,iBAAiB,CAAC;gBACjG,IAAI,MAAM,CAAC,2BAA2B,KAAK,SAAS;oBAAE,IAAI,CAAC,6BAA6B,CAAC,GAAG,MAAM,CAAC,2BAA2B,CAAC;gBAC/H,MAAM,MAAM,GAAG,MAAM,MAAM,CAAC,KAAK,CAC/B,YAAY,MAAM,CAAC,OAAO,WAAW,EACrC,IAAI,CACL,CAAC;gBACF,OAAO,EAAE,OAAO,EAAE,CAAC,EAAE,IAAI,EAAE,MAAM,EAAE,IAAI,EAAE,IAAI,CAAC,SAAS,CAAC,MAAM,EAAE,IAAI,EAAE,CAAC,CAAC,EAAE,CAAC,EAAE,CAAC;YAChF,CAAC;YAED;gBACE,OAAO;oBACL,OAAO,EAAE,CAAC,EAAE,IAAI,EAAE,MAAM,EAAE,IAAI,EAAE,yBAAyB,IAAI,EAAE,EAAE,CAAC;iBACnE,CAAC;QACN,CAAC;IACH,CAAC;IAAC,OAAO,KAAc,EAAE,CAAC;QACxB,MAAM,OAAO,GAAG,KAAK,YAAY,KAAK,CAAC,CAAC,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC,CAAC,eAAe,CAAC;QACzE,OAAO;YACL,OAAO,EAAE,CAAC,EAAE,IAAI,EAAE,MAAM,EAAE,IAAI,EAAE,mBAAmB,IAAI,KAAK,OAAO,EAAE,EAAE,CAAC;SACzE,CAAC;IACJ,CAAC;AACH,CAAC"}

package/dist/tools/users.d.ts

@@ -0,0 +1,44 @@
+import type { ITailscaleClient } from "../client/types.js";
+export declare const userToolDefinitions: ({
+    name: string;
+    description: string;
+    inputSchema: {
+        type: "object";
+        properties: {
+            type: {
+                type: string;
+                enum: string[];
+                description: string;
+            };
+            role: {
+                type: string;
+                enum: string[];
+                description: string;
+            };
+            userId?: undefined;
+        };
+        required?: undefined;
+    };
+} | {
+    name: string;
+    description: string;
+    inputSchema: {
+        type: "object";
+        properties: {
+            userId: {
+                type: string;
+                description: string;
+            };
+            type?: undefined;
+            role?: undefined;
+        };
+        required: string[];
+    };
+})[];
+export declare function handleUserTool(name: string, args: Record<string, unknown>, client: ITailscaleClient): Promise<{
+    content: Array<{
+        type: "text";
+        text: string;
+    }>;
+}>;
+//# sourceMappingURL=users.d.ts.map

package/dist/tools/users.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"users.d.ts","sourceRoot":"","sources":["../../src/tools/users.ts"],"names":[],"mappings":"AACA,OAAO,KAAK,EAAE,gBAAgB,EAAE,MAAM,oBAAoB,CAAC;AA0B3D,eAAO,MAAM,mBAAmB;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;IAoC/B,CAAC;AAMF,wBAAsB,cAAc,CAClC,IAAI,EAAE,MAAM,EACZ,IAAI,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,EAC7B,MAAM,EAAE,gBAAgB,GACvB,OAAO,CAAC;IAAE,OAAO,EAAE,KAAK,CAAC;QAAE,IAAI,EAAE,MAAM,CAAC;QAAC,IAAI,EAAE,MAAM,CAAA;KAAE,CAAC,CAAA;CAAE,CAAC,CAkC7D"}