protogrid
Sign inAdd to your agent

Search / io.github.zedong-peng/tailnet-mcp

Tailnet MCP bridge

L0· runs locally

Reach an MCP server inside your Tailscale tailnet from an agent's sandbox, over stdio.

v0.3.0 · active · repository · descriptor JSON · versions

Runs on your machine: something must execute the package.Only local packages are published (npm, PyPI, OCI, …). The registry never executes them, so tools are unknown until you run it.
Quality–new
Trust90of 100
Packages1
Tools seen0

Connect

8 clients · secrets stay placeholders
{
  "mcpServers": {
    "tailnet-mcp": {
      "command": "docker",
      "args": [
        "-v",
        "tailnet-mcp:/home/nonroot/.local/state/tailnet-mcp",
        "-e",
        "TS_AUTHKEY",
        "ghcr.io/zedong-peng/tailnet-mcp:v0.3.0",
        "-url",
        "-hostname",
        "tailnet-mcp"
      ],
      "env": {
        "TS_AUTHKEY": "${TS_AUTHKEY}"
      }
    }
  }
}
claude mcp add tailnet-mcp -e "TS_AUTHKEY=${TS_AUTHKEY}" -- docker -v tailnet-mcp:/home/nonroot/.local/state/tailnet-mcp -e TS_AUTHKEY ghcr.io/zedong-peng/tailnet-mcp:v0.3.0 -url -hostname tailnet-mcp
[mcp_servers.tailnet-mcp]
command = "docker"
args = ["-v", "tailnet-mcp:/home/nonroot/.local/state/tailnet-mcp", "-e", "TS_AUTHKEY", "ghcr.io/zedong-peng/tailnet-mcp:v0.3.0", "-url", "-hostname", "tailnet-mcp"]
env = { "TS_AUTHKEY" = "${TS_AUTHKEY}" }

{
  "$schema": "https://opencode.ai/config.json",
  "mcp": {
    "tailnet-mcp": {
      "type": "local",
      "command": [
        "docker",
        "-v",
        "tailnet-mcp:/home/nonroot/.local/state/tailnet-mcp",
        "-e",
        "TS_AUTHKEY",
        "ghcr.io/zedong-peng/tailnet-mcp:v0.3.0",
        "-url",
        "-hostname",
        "tailnet-mcp"
      ],
      "enabled": true,
      "environment": {
        "TS_AUTHKEY": "{env:TS_AUTHKEY}"
      }
    }
  }
}
{
  "mcpServers": {
    "tailnet-mcp": {
      "command": "docker",
      "args": [
        "-v",
        "tailnet-mcp:/home/nonroot/.local/state/tailnet-mcp",
        "-e",
        "TS_AUTHKEY",
        "ghcr.io/zedong-peng/tailnet-mcp:v0.3.0",
        "-url",
        "-hostname",
        "tailnet-mcp"
      ],
      "env": {
        "TS_AUTHKEY": "${TS_AUTHKEY}"
      }
    }
  },
  "deeplink": "cursor://anysphere.cursor-deeplink/mcp/install?name=tailnet-mcp&config=eyJjb21tYW5kIjoiZG9ja2VyIiwiYXJncyI6WyItdiIsInRhaWxuZXQtbWNwOi9ob21lL25vbnJvb3QvLmxvY2FsL3N0YXRlL3RhaWxuZXQtbWNwIiwiLWUiLCJUU19BVVRIS0VZIiwiZ2hjci5pby96ZWRvbmctcGVuZy90YWlsbmV0LW1jcDp2MC4zLjAiLCItdXJsIiwiLWhvc3RuYW1lIiwidGFpbG5ldC1tY3AiXSwiZW52Ijp7IlRTX0FVVEhLRVkiOiIke1RTX0FVVEhLRVl9In19"
}
{
  "servers": {
    "tailnet-mcp": {
      "type": "stdio",
      "command": "docker",
      "args": [
        "-v",
        "tailnet-mcp:/home/nonroot/.local/state/tailnet-mcp",
        "-e",
        "TS_AUTHKEY",
        "ghcr.io/zedong-peng/tailnet-mcp:v0.3.0",
        "-url",
        "-hostname",
        "tailnet-mcp"
      ],
      "env": {
        "TS_AUTHKEY": "${TS_AUTHKEY}"
      }
    }
  }
}
{
  "mcpServers": {
    "tailnet-mcp": {
      "command": "docker",
      "args": [
        "-v",
        "tailnet-mcp:/home/nonroot/.local/state/tailnet-mcp",
        "-e",
        "TS_AUTHKEY",
        "ghcr.io/zedong-peng/tailnet-mcp:v0.3.0",
        "-url",
        "-hostname",
        "tailnet-mcp"
      ],
      "env": {
        "TS_AUTHKEY": "${TS_AUTHKEY}"
      }
    }
  }
}
extensions:
  "tailnet-mcp":
    enabled: true
    name: "tailnet-mcp"
    type: stdio
    cmd: "docker"
    args:
      - "-v"
      - "tailnet-mcp:/home/nonroot/.local/state/tailnet-mcp"
      - "-e"
      - "TS_AUTHKEY"
      - "ghcr.io/zedong-peng/tailnet-mcp:v0.3.0"
      - "-url"
      - "-hostname"
      - "tailnet-mcp"
    envs:
      "TS_AUTHKEY": "${TS_AUTHKEY}"
    timeout: 300

Placeholders to fill from your own secret store: ${TS_AUTHKEY}. The registry never accepts secret values.

This is a local package: the command runs on your machine.

Quality – / 100new

Not scored: fewer than three checks apply, usually because no remote answered a credential-free probe or the server is a local package.

protocoln/a · weight 25
  • n/a
    protocol.modern, protocol.stateless, protocol.transport, protocol.list_ttlno remote answered a protocol handshake (not probed yet, unreachable, or local-only)
authorizationn/a · weight 15
  • n/a
    auth.prm, auth.as_metadata, auth.cimdno remote uses OAuth
  • n/a
    auth.secret_in_urlno templated URL
tool hygienen/a · weight 30
  • n/a
    tools.descriptions, tools.description_length, tools.schemas, tools.annotations, tools.directory_hints, tools.token_cost, tools.api_dumptool list unknown (behind auth, not probed, or empty)
stabilityn/a · weight 15
  • n/a
    stability.changes, stability.rug_pulltool list unknown
dependenciesn/a · weight 15
  • n/a
    deps.known_vulns, deps.mcp_sdk_version, deps.resolvableno npm or PyPI package

Tool list unknown · checked 2026-11-07 18:01 UTC

Tool changes

No tool definition changes recorded. A server's first observation is its baseline; later probes record what changes.

Checks run on what our credential-free, read-only probes observe; tools are never called and no code audit is performed. How it is computed.

Trust 90 / 100

provenance80
livenessn/a
freshness100
hygiene95

+repository +namespace-matches-repo ~liveness-unmeasured +updated-4d-ago -unpinned-packages(1)

Derived from observable signals (official registry feed and our own credential-free probes); no code audit performed. How it is computed.

Endpoints

packageregistryversionruntimesecrets
ghcr.io/zedong-peng/tailnet-mcp:v0.3.0ociunpinned–TS_AUTHKEY

Tools (0)

No tools observed. Local packages are never executed by the registry.

Schemas: list_tools.

Similar MCP servers

  • Tailscale MCPL0
    io.github.TMHSDigital/tailscale-mcp

    Let AI agents see and use your tailnet: status, SSH config, Serve/Funnel sharing, ping matrix

  • Tailscale MCP ServerL0
    io.github.YawLabs/tailscale-mcp

    Tailscale MCP server for managing your tailnet from AI assistants

  • TailscaleL0
    io.github.tailscale-mcp/tailscale-mcp

    Drive a Tailscale node and its tailnet through the CLI and the control-plane API

  • Tailscale RMCPL0
    ai.dinglebear/tailscale-rmcp

    Rust MCP server and CLI for Tailscale devices, users, keys, policies, and auth.

  • Funplay Godot MCPL0
    io.github.FunplayAI/funplay-godot-mcp

    stdio bridge for the local Godot Editor MCP server from FunplayAI/funplay-godot-mcp.

  • MCP StdioL0
    io.github.shigechika/mcp-stdio

    Stdio-to-HTTP gateway — connects MCP clients to remote HTTP MCP servers

More from io.github.zedong-peng

  • IMAP DraftL0
    io.github.zedong-peng/imap-draft-mcp

    IMAP mail for agents: search, read and write drafts. It can't send, move or delete.

Official server.json
{
  "name": "io.github.zedong-peng/tailnet-mcp",
  "title": "Tailnet MCP bridge",
  "$schema": "https://static.modelcontextprotocol.io/schemas/2025-12-11/server.schema.json",
  "version": "0.3.0",
  "packages": [
    {
      "transport": {
        "type": "stdio"
      },
      "identifier": "ghcr.io/zedong-peng/tailnet-mcp:v0.3.0",
      "registryType": "oci",
      "packageArguments": [
        {
          "name": "-url",
          "type": "named",
          "isRequired": true,
          "description": "MCP endpoint inside the tailnet, e.g. https://server.tailnet.ts.net:8443/mcp"
        },
        {
          "name": "-hostname",
          "type": "named",
          "default": "tailnet-mcp",
          "description": "Node name in the tailnet; a different one per server"
        }
      ],
      "runtimeArguments": [
        {
          "name": "-v",
          "type": "named",
          "value": "tailnet-mcp:/home/nonroot/.local/state/tailnet-mcp",
          "description": "Keeps the node key, so the auth key is needed only once"
        }
      ],
      "environmentVariables": [
        {
          "name": "TS_AUTHKEY",
          "isSecret": true,
          "description": "Tagged, pre-authorized auth key; only needed the first time"
        }
      ]
    }
  ],
  "repository": {
    "url": "https://github.com/zedong-peng/tailnet-mcp",
    "source": "github"
  },
  "description": "Reach an MCP server inside your Tailscale tailnet from an agent's sandbox, over stdio."
}