tailscale.com

Create a Tailscale webhook endpoint subscribed to tailnet events via the API, then send a test event to verify delivery.

Approve (enable) a Tailscale device's advertised subnet routes via the API so it can act as a subnet router.

Configure tailnet-wide DNS via the Tailscale API: set global nameservers, DNS search paths, and toggle MagicDNS.

Retrieve, validate, and safely update the Tailscale tailnet ACL policy file (HuJSON) via the API using ETag/If-Match to avoid clobbering concurrent edits.

Create a Tailscale OAuth client, exchange its credentials for a short-lived API access token, and call the Tailscale API with it.

Create a Tailscale auth key via the API with specific capabilities (reusable, ephemeral, preauthorized, tags) and custom expiry, for unattended device registration.

Enable or disable automatic node-key expiry on a specific Tailscale device via the API.

Force a Tailscale device to re-authenticate immediately by expiring its node key via the API.

Permanently delete (remove) a device from a Tailscale tailnet via the API.

Replace the set of tags on a Tailscale device via the API to give it a tag-based (non-user) identity for ACL targeting.

Authorize (approve) or deauthorize a Tailscale device via the API, for tailnets where device approval is required.

List all devices in a Tailscale tailnet via the API, optionally filtering by field and requesting the full field set.