X (Twitter)LinkedInGitHubDiscordYouTube

How to connect Tailscale to Claude

Connect Claude Web, Desktop and Cowork to Tailscale MCP. List all devices in your tailnet, create a new access policy rule, and more using natural language, with authentication handled for you.

Get started for freeGet a demo
Tailscale logoTailscale
Api Key

Tailscale is a secure networking platform to manage tailnets, devices, users, DNS, and access policies. It simplifies secure connectivity and centralized access control across distributed infrastructure.

10 Tools

Introduction

Claude is Anthropic's AI assistant, available on the web, in the desktop app, and on mobile. Cowork is its agent for knowledge work, and it runs on all of those surfaces too. Connected to your apps, Claude can work with your files and services to accomplish complex tasks on your behalf.

This guide walks you through the easiest and most secure way to connect your Tailscale account to Claude via Composio Connect, enabling it to list all devices in your tailnet, create a new access policy rule, add DNS entry for service on tailnet, and more such actions on your behalf without compromising your account security.

Setup is the same on Claude Web, Desktop, and Cowork, and you only need to do it once. The connector is tied to your account, so it's available in all three.

Also integrate Tailscale with

ChatGPT WorkHermes

Connecting Tailscale to Claude Web, Desktop, and Cowork

1. Open Customize

In Claude Desktop, click Customize in the left sidebar, then select Connectors and click the + icon at the top.

Claude Desktop connectors screen with Add custom connector selected

2. Add the Composio MCP server

Click Add custom connector and paste in the Composio MCP server URL:

bash
https://connect.composio.dev/mcp
Add custom connector dialog with Composio MCP server URL

3. Authorize in your browser

Click Connect. You'll be redirected to a browser window where you can authorize Composio to continue.

Composio authorization screen for Claude Web, Desktop, and Cowork

4. Connect your Tailscale account

Back in Claude, ask it to connect to Tailscale or give it any Tailscale-related task.

For example, ask Claude to:

  • "List all devices in your tailnet"
  • "Create a new access policy rule"
  • "Add DNS entry for service on tailnet"

It will prompt you to authenticate and authorize access.

That's it. Composio's tools are now available in Claude, and your Tailscale account is ready to use.

What is the Tailscale Claude Connector, and what's possible with it?

The Tailscale MCP server is an implementation of the Model Context Protocol that connects your AI agent and assistants like Claude, Cursor, etc directly to your Tailscale account. It provides structured and secure access so your agent can perform Tailscale operations on your behalf.

Troubleshooting

1. Why does Claude not use the Composio connector for Tailscale?

The connector can show as connected, but Claude must use it in each Tailscale conversation.

  • Click + at the lower left of the chat, or type /.
  • Hover Connectors.
  • Turn on Composio.
  • Ask Claude to connect to Tailscale again.

2. Why does Claude show an MCP server error before Tailscale connects?

Claude can show Couldn't reach the MCP server or Authorization with the MCP server failed when you add the connector for Tailscale.

  • Check that the connector URL is https://connect.composio.dev/mcp.
  • Connectors run from Anthropic's cloud, so your device network is usually not the problem.
  • Add the connector again from Customize > Connectors, then ask Claude to connect Tailscale.
  • If it fails again, send the error and the ofid_ reference id to support@composio.dev.

3. Why does the Tailscale authorization link not work?

The Composio connector is one server. Your Tailscale account connects separately when Claude asks for it.

  • If the browser does not open, or the link expires, ask Claude to retry the Tailscale connection.
  • Composio creates a fresh Tailscale authorization link.
  • Open that link in your browser and finish the Tailscale sign-in.

4. Why do Tailscale actions fail after they worked before?

The Tailscale connection can expire or lose permission.

  • Ask Claude to inspect the Tailscale connection.
  • If the connection is unhealthy, disconnect it when Claude prompts you.
  • Reconnect the Tailscale account and retry the action.
  • If Claude shows a permission prompt, approve it before Claude changes data in Tailscale.
  • If the action still fails with a permission error, check that the connected account has that permission in Tailscale itself.

5. How do I switch to a different Tailscale account?

Claude can manage the Tailscale connection for you.

  • Ask Claude to disconnect or delete the current Tailscale account.
  • Ask Claude to connect Tailscale again.
  • Open the new Composio authorization link for Tailscale.
  • Sign in with the other Tailscale account in the browser.
  • After the account connects, ask Claude to retry the Tailscale task.

6. Why is my Tailscale connection missing in Claude Desktop or on a Team plan?

The connector belongs to your Claude account, so your Tailscale connection works in Claude Web, Desktop, and Cowork.

  • In Claude Desktop, open Customize > Connectors.
  • Next to Composio, click ⋮ and click Clear cache.
  • If Tailscale tools still do not appear, click ⋮, disconnect, remove the connector, and add it again.
  • On Team or Enterprise, an Owner or Primary Owner must enable the connector before you can connect Tailscale.
TOOLS

Supported Tools

Every Tailscale action and event your agent gets out of the box.

Get Device

Get the full current record for one manageable Tailscale device by ID.

Get DNS Configuration

Return the selected tailnet's combined MagicDNS, nameserver, search-path, and split-DNS configuration.

Get Tailnet Settings

Return current tailnet-wide approval, update, key-duration, HTTPS, routing, logging, and posture settings.

List Configuration Audit Logs

Return configuration audit events for an explicit RFC3339 time window in the selected tailnet, optionally filtered by actor, target, or event name.

List Device Routes

Return the subnet routes advertised and currently enabled for a Tailscale device.

List Tailnet Devices

Return all devices in the selected tailnet, including identifiers, names, addresses, tags, authorization state, and connectivity metadata.

List Users

Return users in the selected tailnet, optionally filtered by membership type or role.

Set Device Authorization

Approve or revoke approval for one device when device approval is enabled on the tailnet.

Set Device Routes

Replace the enabled subnet routes for one device with an explicit list of routes.

Set Device Tags

Replace all ACL tags assigned to one Tailscale device.

FRAMEWORKS

How to build Tailscale MCP Agent with another framework

ChatGPT Work logo

ChatGPT Work

Use Tailscale MCP with ChatGPT Work

Hermes logo

Hermes

Use Tailscale MCP with Hermes

FAQ

Frequently asked questions

With a standalone Tailscale MCP server, the agents and LLMs can only access a fixed set of Tailscale tools tied to that server. However, with the Composio Tool Router, agents can dynamically load tools from Tailscale and many other apps based on the task at hand, all through a single MCP endpoint.

Yes, you can. Claude Cowork fully supports MCP integration. You get structured tool calling, message history handling, and model orchestration while Tool Router takes care of discovering and serving the right Tailscale tools.

Yes, absolutely. You can configure which Tailscale scopes and actions are allowed when connecting your account to Composio. You can also bring your own OAuth credentials or API configuration so you keep full control over what the agent can do.

All sensitive data such as tokens, keys, and configuration is fully encrypted at rest and in transit. Composio is SOC 2 Type 2 compliant and follows strict security practices so your Tailscale data and credentials are handled as safely as possible.

Start with Tailscale.It takes 30 seconds.

Managed auth, hosted MCP servers, and every Tailscale tool your agent needs.Free to start.

Start building