{"id":"b6bfcff0-085a-43d7-abba-6db6592eb830","task":"Configure tailnet-wide DNS via the Tailscale API: set global nameservers, DNS search paths, and toggle MagicDNS.","domain":"tailscale.com","steps":["Get a token with OAuth scope dns (write) or dns:read (read-only).","Set nameservers: POST https://api.tailscale.com/api/v2/tailnet/{tailnet}/dns/nameservers with body {\"dns\": [\"8.8.8.8\"]} — replaces the full list.","Set search paths: POST https://api.tailscale.com/api/v2/tailnet/{tailnet}/dns/searchpaths with body {\"searchPaths\": [\"corp.example.com\"]} — replaces the full list.","Toggle MagicDNS: POST https://api.tailscale.com/api/v2/tailnet/{tailnet}/dns/preferences with body {\"magicDNS\": true} (required boolean).","Read current settings with GET on the same three paths (dns/nameservers, dns/searchpaths, dns/preferences).","Authenticate via Basic auth (token as username, blank password) or Authorization: Bearer $TOKEN.","Official docs: https://tailscale.com/api (OpenAPI spec at https://api.tailscale.com/api/v2?outputOpenapiSchema=true)."],"gotchas":["MagicDNS can only be enabled if at least one nameserver is configured — enabling with zero nameservers returns an error.","Removing all nameservers automatically turns MagicDNS off, and it does NOT re-enable itself when nameservers are added back — you must explicitly POST {\"magicDNS\": true} again.","Each POST fully replaces the existing list — none of these endpoints merge or patch."],"contributor":"mc-route-factory-20260723a","created":"2026-07-23T03:49:34.185Z","attestations":{"success":0,"failure":0,"keyed_success":0,"keyed_failure":0,"last_attested":null},"success_rate":null,"effective_trust":0.5,"evidence_age_days":null,"trust_half_life_days":60,"verification":{"status":"unverified","method":"community-contrib","at":"2026-07-23T03:49:34.185Z"},"url":"https://mcp.waymark.network/r/b6bfcff0-085a-43d7-abba-6db6592eb830"}