# How to connect Tailscale to Claude

```json
{
  "title": "How to connect Tailscale to Claude",
  "toolkit": "Tailscale",
  "toolkit_slug": "tailscale",
  "framework": "Claude Cowork",
  "framework_slug": "claude-cowork",
  "url": "https://composio.dev/toolkits/tailscale/framework/claude-cowork",
  "markdown_url": "https://composio.dev/toolkits/tailscale/framework/claude-cowork.md",
  "updated_at": "2026-09-10T05:34:34.798Z"
}
```

## Introduction

Claude is Anthropic's AI assistant, available on the web, in the desktop app, and on mobile. Cowork is its agent for knowledge work, and it runs on all of those surfaces too. Connected to your apps, Claude can work with your files and services to accomplish complex tasks on your behalf.
This guide walks you through the easiest and most secure way to connect your Tailscale account to Claude via Composio Connect, enabling it to list all devices in your tailnet, create a new access policy rule, add DNS entry for service on tailnet, and more such actions on your behalf without compromising your account security.
Setup is the same on Claude Web, Desktop, and Cowork, and you only need to do it once. The connector is tied to your account, so it's available in all three.

## Also integrate Tailscale with

- [ChatGPT Work](https://composio.dev/toolkits/tailscale/framework/chatgpt)
- [Hermes](https://composio.dev/toolkits/tailscale/framework/hermes-agent)

## Connect Tailscale to Claude Cowork

### Connecting Tailscale to Claude Web, Desktop, and Cowork
1. Open Customize
In Claude Desktop, click Customize in the left sidebar, then select Connectors and click the + icon at the top.
2. Add the Composio MCP server
Click Add custom connector and paste in the Composio MCP server URL:

```bash
https://connect.composio.dev/mcp
```

## What is the Tailscale MCP server, and what's possible with it?

The Tailscale MCP server is an implementation of the Model Context Protocol that connects your AI agent and assistants like Claude, Cursor, etc directly to your Tailscale account. It provides structured and secure access so your agent can perform Tailscale operations on your behalf.

## Supported Tools

| Tool slug | Name | Description |
|---|---|---|
| `TAILSCALE_GET_DEVICE` | Get Device | Get the full current record for one manageable Tailscale device by ID. |
| `TAILSCALE_GET_DNS_CONFIGURATION` | Get DNS Configuration | Return the selected tailnet's combined MagicDNS, nameserver, search-path, and split-DNS configuration. |
| `TAILSCALE_GET_TAILNET_SETTINGS` | Get Tailnet Settings | Return current tailnet-wide approval, update, key-duration, HTTPS, routing, logging, and posture settings. |
| `TAILSCALE_LIST_CONFIGURATION_AUDIT_LOGS` | List Configuration Audit Logs | Return configuration audit events for an explicit RFC3339 time window in the selected tailnet, optionally filtered by actor, target, or event name. |
| `TAILSCALE_LIST_DEVICE_ROUTES` | List Device Routes | Return the subnet routes advertised and currently enabled for a Tailscale device. |
| `TAILSCALE_LIST_TAILNET_DEVICES` | List Tailnet Devices | Return all devices in the selected tailnet, including identifiers, names, addresses, tags, authorization state, and connectivity metadata. Supports exact server-side filtering by hostname, tags, and ephemeral state. |
| `TAILSCALE_LIST_USERS` | List Users | Return users in the selected tailnet, optionally filtered by membership type or role. |
| `TAILSCALE_SET_DEVICE_AUTHORIZATION` | Set Device Authorization | Approve or revoke approval for one device when device approval is enabled on the tailnet. |
| `TAILSCALE_SET_DEVICE_ROUTES` | Set Device Routes | Replace the enabled subnet routes for one device with an explicit list of routes. Routes may be enabled before the device advertises them. |
| `TAILSCALE_SET_DEVICE_TAGS` | Set Device Tags | Replace all ACL tags assigned to one Tailscale device. |

## Supported Triggers

None listed.

## Troubleshooting

### 1. Why does Claude not use the Composio connector for Tailscale?

The connector can show as connected, but Claude must use it in each Tailscale conversation.
- Click + at the lower left of the chat, or type /.
- Hover Connectors.
- Turn on Composio.
- Ask Claude to connect to Tailscale again.

### 2. Why does Claude show an MCP server error before Tailscale connects?

Claude can show Couldn't reach the MCP server or Authorization with the MCP server failed when you add the connector for Tailscale.
- Check that the connector URL is https://connect.composio.dev/mcp.
- Connectors run from Anthropic's cloud, so your device network is usually not the problem.
- Add the connector again from Customize > Connectors, then ask Claude to connect Tailscale.
- If it fails again, send the error and the ofid_ reference id to support@composio.dev.

### 3. Why does the Tailscale authorization link not work?

The Composio connector is one server. Your Tailscale account connects separately when Claude asks for it.
- If the browser does not open, or the link expires, ask Claude to retry the Tailscale connection.
- Composio creates a fresh Tailscale authorization link.
- Open that link in your browser and finish the Tailscale sign-in.

### 4. Why do Tailscale actions fail after they worked before?

The Tailscale connection can expire or lose permission.
- Ask Claude to inspect the Tailscale connection.
- If the connection is unhealthy, disconnect it when Claude prompts you.
- Reconnect the Tailscale account and retry the action.
- If Claude shows a permission prompt, approve it before Claude changes data in Tailscale.
- If the action still fails with a permission error, check that the connected account has that permission in Tailscale itself.

### 5. How do I switch to a different Tailscale account?

Claude can manage the Tailscale connection for you.
- Ask Claude to disconnect or delete the current Tailscale account.
- Ask Claude to connect Tailscale again.
- Open the new Composio authorization link for Tailscale.
- Sign in with the other Tailscale account in the browser.
- After the account connects, ask Claude to retry the Tailscale task.

### 6. Why is my Tailscale connection missing in Claude Desktop or on a Team plan?

The connector belongs to your Claude account, so your Tailscale connection works in Claude Web, Desktop, and Cowork.
- In Claude Desktop, open Customize > Connectors.
- Next to Composio, click ⋮ and click Clear cache.
- If Tailscale tools still do not appear, click ⋮, disconnect, remove the connector, and add it again.
- On Team or Enterprise, an Owner or Primary Owner must enable the connector before you can connect Tailscale.

## Creating MCP Server - Stand-alone vs Composio SDK

The Tailscale MCP server connects Claude Web, Desktop, and Cowork to your Tailscale account through Composio. Once connected, Claude can use the available Tailscale tools and triggers to complete tasks on your behalf.

## Complete Code

None listed.

## How to build Tailscale MCP Agent with another framework

- [ChatGPT Work](https://composio.dev/toolkits/tailscale/framework/chatgpt)
- [Hermes](https://composio.dev/toolkits/tailscale/framework/hermes-agent)

## Related Toolkits

- [Supabase](https://composio.dev/toolkits/supabase) - Supabase is an open-source backend platform offering scalable Postgres databases, authentication, storage, and real-time APIs. It lets developers build modern apps without managing infrastructure.
- [Codeinterpreter](https://composio.dev/toolkits/codeinterpreter) - Codeinterpreter is a Python-based coding environment with built-in data analysis and visualization. It lets you instantly run scripts, plot results, and prototype solutions inside supported platforms.
- [GitHub](https://composio.dev/toolkits/github) - GitHub is a code hosting platform for version control and collaborative software development. It streamlines project management, code review, and team workflows in one place.
- [1password](https://composio.dev/toolkits/_1password) - 1Password is a password manager and digital vault for storing logins, secrets, notes, and secure documents. It helps individuals and teams protect credentials, share access safely, and reduce password risk.
- [Ably](https://composio.dev/toolkits/ably) - Ably is a real-time messaging platform for live chat and data sync in modern apps. It offers global scale and rock-solid reliability for seamless, instant experiences.
- [Abuselpdb](https://composio.dev/toolkits/abuselpdb) - Abuselpdb is a central database for reporting and checking IPs linked to malicious online activity. Use it to quickly identify and report suspicious or abusive IP addresses.
- [Alchemy](https://composio.dev/toolkits/alchemy) - Alchemy is a blockchain development platform offering APIs and tools for Ethereum apps. It simplifies building and scaling Web3 projects with robust infrastructure.
- [Algolia](https://composio.dev/toolkits/algolia) - Algolia is a hosted search API that powers lightning-fast, relevant search experiences for web and mobile apps. It helps developers deliver instant, typo-tolerant, and scalable search without complex infrastructure.
- [Anchor browser](https://composio.dev/toolkits/anchor_browser) - Anchor browser is a developer platform for AI-powered web automation. It transforms complex browser actions into easy API endpoints for streamlined web interaction.
- [Apiflash](https://composio.dev/toolkits/apiflash) - Apiflash is a website screenshot API for programmatically capturing web pages. It delivers high-quality screenshots on demand for automation, monitoring, or reporting.
- [Apiverve](https://composio.dev/toolkits/apiverve) - Apiverve delivers a suite of powerful APIs that simplify integration for developers. It's designed for reliability and scalability so you can build faster, smarter applications without the integration headache.
- [Appcircle](https://composio.dev/toolkits/appcircle) - Appcircle is an enterprise-grade mobile CI/CD platform for building, testing, and publishing mobile apps. It streamlines mobile DevOps so teams ship faster and with more confidence.
- [Appdrag](https://composio.dev/toolkits/appdrag) - Appdrag is a cloud platform for building websites, APIs, and databases with drag-and-drop tools and code editing. It accelerates development and iteration by combining hosting, database management, and low-code features in one place.
- [Appveyor](https://composio.dev/toolkits/appveyor) - AppVeyor is a cloud-based continuous integration service for building, testing, and deploying applications. It helps developers automate and streamline their software delivery pipelines.
- [Authyo](https://composio.dev/toolkits/authyo) - Authyo is a REST API service for passwordless authentication, OTP verification, session management, and transactional notifications. Use it to add secure login flows and user verification without building auth infrastructure from scratch.
- [AWS Marketplace MCP](https://composio.dev/toolkits/aws_marketplace_mcp) - AWS Marketplace MCP provides MCP access to AWS Marketplace's cloud software, data, and services catalog. Use it to discover, compare, and evaluate 30K+ AWS Marketplace listings faster.
- [Backendless](https://composio.dev/toolkits/backendless) - Backendless is a backend-as-a-service platform for mobile and web apps, offering database, file storage, user authentication, and APIs. It helps developers ship scalable applications faster without managing server infrastructure.
- [Baserow](https://composio.dev/toolkits/baserow) - Baserow is an open-source no-code database platform for building collaborative data apps. It makes it easy for teams to organize data and automate workflows without writing code.
- [Bench](https://composio.dev/toolkits/bench) - Bench is a benchmarking tool for automated performance measurement and analysis. It helps you quickly evaluate, compare, and track your systems or workflows.
- [Better stack](https://composio.dev/toolkits/better_stack) - Better Stack is a monitoring, logging, and incident management solution for apps and services. It helps teams ensure application reliability and performance with real-time insights.

## Frequently Asked Questions

### What are the differences in Tool Router MCP and Tailscale MCP?

With a standalone Tailscale MCP server, the agents and LLMs can only access a fixed set of Tailscale tools tied to that server. However, with the Composio Tool Router, agents can dynamically load tools from Tailscale and many other apps based on the task at hand, all through a single MCP endpoint.

### Can I use Tool Router MCP with Claude Cowork?

Yes, you can. Claude Cowork fully supports MCP integration. You get structured tool calling, message history handling, and model orchestration while Tool Router takes care of discovering and serving the right Tailscale tools.

### Can I manage the permissions and scopes for Tailscale while using Tool Router?

Yes, absolutely. You can configure which Tailscale scopes and actions are allowed when connecting your account to Composio. You can also bring your own OAuth credentials or API configuration so you keep full control over what the agent can do.

### How safe is my data with Composio Tool Router?

All sensitive data such as tokens, keys, and configuration is fully encrypted at rest and in transit. Composio is SOC 2 Type 2 compliant and follows strict security practices so your Tailscale data and credentials are handled as safely as possible.

---
[See all toolkits](https://composio.dev/toolkits) · [Composio docs](https://docs.composio.dev/llms.txt)