MCPVault

tailscale_preview_acl

MCP tool from Tailscale MCP by YawLabs

Preview rules that would apply to a user or IP

How to use it

tailscale_preview_acl is exposed by the Tailscale MCP MCP server. Add the server to your MCP client (Claude Desktop, Cursor, Windsurf and others), and the tailscale_preview_acl tool becomes available to the model automatically. See the full listing for setup details and every tool this server provides.

Install Tailscale MCP

$npx -y @yawlabs/tailscale-mcp@latest validate-acl tailscale/acl.json
FULL TAILSCALE MCP LISTING

Other tools in Tailscale MCP (39)

tailscale_authorize_device

Authorize a pending device

tailscale_batch_update_posture_attributes

Batch update custom posture attributes across devices

tailscale_create_key

Create an auth key, OAuth client (keyType=client), or federated identity (keyType=federated)

tailscale_deauthorize_device

Deauthorize a device

tailscale_delete_device

Remove a device from the tailnet

tailscale_delete_device_posture_attribute

Delete a custom posture attribute

tailscale_delete_key

Delete a key

tailscale_expire_device

Expire a device's key, forcing re-authentication

tailscale_get_acl

Get ACL policy with formatting preserved (HuJSON) + ETag

tailscale_get_device

Get detailed info for a specific device

tailscale_get_device_posture_attributes

Get all posture attributes for a device

tailscale_get_device_routes

Get advertised and enabled subnet routes

tailscale_get_dns_configuration

Get unified DNS configuration (all settings in one call)

tailscale_get_dns_preferences

Get DNS preferences (MagicDNS)

tailscale_get_key

Get details for a key

tailscale_get_nameservers

Get DNS nameservers

tailscale_get_search_paths

Get DNS search paths

tailscale_get_split_dns

Get split DNS configuration

tailscale_get_user

Get details for a specific user

tailscale_list_devices

List all devices with status, IPs, OS, and last seen

tailscale_list_keys

List keys (auth keys; pass all=true to include OAuth clients and federated identities)

tailscale_list_users

List all users in the tailnet

tailscale_rename_device

Rename a device

tailscale_set_device_ip

Set a device's Tailscale IPv4 address

tailscale_set_device_posture_attribute

Set a custom posture attribute (with optional expiry)

tailscale_set_device_routes

Enable or disable subnet routes

tailscale_set_device_tags

Set ACL tags on a device

tailscale_set_devices_authorized

Authorize/deauthorize many devices in one call (parallel, per-id error reporting)

tailscale_set_dns_configuration

Set unified DNS configuration (all settings in one call)

tailscale_set_dns_preferences

Set DNS preferences (MagicDNS)

tailscale_set_nameservers

Set DNS nameservers

tailscale_set_search_paths

Set DNS search paths

tailscale_set_split_dns

Set split DNS configuration (full replace)

tailscale_status

Verify API connection, see tailnet info and device count

tailscale_update_acl

Update ACL policy (requires ETag for safe concurrent edits)

tailscale_update_device_key

Update device key settings (e.g. disable key expiry)

tailscale_update_key

Update a key's description, scopes, tags, or federated claim settings

tailscale_update_split_dns

Update split DNS configuration (partial merge)

tailscale_validate_acl

Validate a policy without applying it