How to integrate Tailscale MCP with Atomic Agent

Connect Atomic Agent to Tailscale MCP. List all devices in your tailnet, create a new access policy rule, and more using natural language, with authentication handled for you.

Tailscale logoTailscale
Api Key

Tailscale is a secure networking platform to manage tailnets, devices, users, DNS, and access policies. It simplifies secure connectivity and centralized access control across distributed infrastructure.

10 Tools

Introduction

Atomic Agent is an open-source AI agent that runs on your machine and supports local models through llama.cpp. Connect it to 1,500+ apps through Composio, including Tailscale.

This guide uses Atomic Agent's built-in Composio integration. You need Atomic Agent v0.5.6 or later, your own Composio API key, and a Tailscale account. See the Atomic Agent documentation for installation instructions.

Also integrate Tailscale with

How Atomic Agent connects to Tailscale

Atomic Agent connects to Composio's Tool Router over Streamable HTTP MCP. It discovers the tools needed for your request, and Composio handles account authentication.

Execution and account-connection tools follow Atomic Agent's configured approval policy. Review any approval prompt before allowing an action on your connected account.

Connect Tailscale to Atomic Agent

  1. Sign up or sign in to the Composio dashboard. Copy your API key.
  2. In Atomic Agent, open the Integrations tab and select Composio. Select API key, press e, paste the key, and press Enter. The tools become available immediately, without a restart.
  3. Ask Atomic Agent to do something in Tailscale. It searches Composio for the right tool.
  4. On first use, open the sign-in link returned in the chat. Connect your Tailscale account, then return to Atomic Agent to continue.

Headless setup

Add the following line to ~/.atomic-agent/.env, replacing YOUR_COMPOSIO_API_KEY with your key. Start Atomic Agent after saving the file.

bash
COMPOSIO_API_KEY=YOUR_COMPOSIO_API_KEY

What is the Tailscale MCP server, and what's possible with it?

The Tailscale MCP server is an implementation of the Model Context Protocol that connects your AI agent and assistants like Claude, Cursor, etc directly to your Tailscale account. It provides structured and secure access so your agent can perform Tailscale operations on your behalf.

Use Tailscale from Atomic Agent

With your account connected, ask Atomic Agent to work with Tailscale in natural language. You can connect more apps through the same Composio integration as you need them.

Visit the Atomic Agent website or inspect the Atomic Agent source code.

Troubleshooting

Why is my API key rejected?

Copy the key directly from the Composio dashboard. Atomic Agent requires ASCII characters because it sends the key in an HTTP header. Remove any extra characters introduced when copying.

Why are Composio tools unavailable after saving a key?

Check that you use Atomic Agent v0.5.6 or later and that Composio is enabled in your configuration. A "composio": { "enabled": false } setting disables the integration while keeping the saved key on disk.

Does Composio have a free plan?

The Hobby plan includes 100,000 tool calls per month. Composio-managed OAuth apps have a lower included allowance. See Composio pricing for the current limits that apply to your connection.

TOOLS

Supported Tools

Every Tailscale action and event your agent gets out of the box.

Get Device

Get the full current record for one manageable Tailscale device by ID.

Get DNS Configuration

Return the selected tailnet's combined MagicDNS, nameserver, search-path, and split-DNS configuration.

Get Tailnet Settings

Return current tailnet-wide approval, update, key-duration, HTTPS, routing, logging, and posture settings.

List Configuration Audit Logs

Return configuration audit events for an explicit RFC3339 time window in the selected tailnet, optionally filtered by actor, target, or event name.

List Device Routes

Return the subnet routes advertised and currently enabled for a Tailscale device.

List Tailnet Devices

Return all devices in the selected tailnet, including identifiers, names, addresses, tags, authorization state, and connectivity metadata.

List Users

Return users in the selected tailnet, optionally filtered by membership type or role.

Set Device Authorization

Approve or revoke approval for one device when device approval is enabled on the tailnet.

Set Device Routes

Replace the enabled subnet routes for one device with an explicit list of routes.

Set Device Tags

Replace all ACL tags assigned to one Tailscale device.

FAQ

Frequently asked questions

With a standalone Tailscale MCP server, the agents and LLMs can only access a fixed set of Tailscale tools tied to that server. However, with the Composio Tool Router, agents can dynamically load tools from Tailscale and many other apps based on the task at hand, all through a single MCP endpoint.

Yes, you can. Atomic Agent fully supports MCP integration. You get structured tool calling, message history handling, and model orchestration while Tool Router takes care of discovering and serving the right Tailscale tools.

Yes, absolutely. You can configure which Tailscale scopes and actions are allowed when connecting your account to Composio. You can also bring your own OAuth credentials or API configuration so you keep full control over what the agent can do.

All sensitive data such as tokens, keys, and configuration is fully encrypted at rest and in transit. Composio is SOC 2 Type 2 compliant and follows strict security practices so your Tailscale data and credentials are handled as safely as possible.

Start with Tailscale.It takes 30 seconds.

Managed auth, hosted MCP servers, and every Tailscale tool your agent needs.Free to start.

Start building