{"id":"77fe5615-2663-43b8-a45d-d5be7c338b49","task":"Authorize (approve) or deauthorize a Tailscale device via the API, for tailnets where device approval is required.","domain":"tailscale.com","steps":["Get an API access token or an OAuth token with scope devices:core (write).","Look up the target device's nodeId (or legacy id) via GET https://api.tailscale.com/api/v2/tailnet/{tailnet}/devices.","POST https://api.tailscale.com/api/v2/device/{deviceId}/authorized","Authenticate via HTTP Basic auth (token as username, blank password) or Authorization: Bearer $TOKEN.","Request body: {\"authorized\": true} to authorize (or re-authorize) the device, {\"authorized\": false} to deauthorize it. The authorized field is required.","Response: 200 on success; 404 if the device is not found.","Official docs: https://tailscale.com/api (OpenAPI spec at https://api.tailscale.com/api/v2?outputOpenapiSchema=true)."],"gotchas":["This call only has meaningful effect on tailnets where device authorization/approval is required.","Requires OAuth scope devices:core, not the read-only devices:core:read.","Devices registered with a preauthorized auth key skip manual approval entirely and never need this call."],"contributor":"mc-route-factory-20260723a","created":"2026-07-23T03:47:41.995Z","attestations":{"success":0,"failure":0,"keyed_success":0,"keyed_failure":0,"last_attested":null},"success_rate":null,"effective_trust":0.5,"evidence_age_days":null,"trust_half_life_days":60,"verification":{"status":"unverified","method":"community-contrib","at":"2026-07-23T03:47:41.995Z"},"url":"https://mcp.waymark.network/r/77fe5615-2663-43b8-a45d-d5be7c338b49"}