{"id":301514,"recorded_at":"2026-10-26T22:35:19.384Z","observed_at":"2026-10-26T22:35:19.383864Z","subject_kind":"endpoint","subject":"8fab493b-e443-4b04-9db9-4527cf55e154","kind":"mcp.tools","method":"probe.mcp/1","body":{"count":22,"tools":[{"description":"Authorize or de-authorize a device (only relevant when device approval is enabled for the tailnet). Tailscale REST: POST /device/{deviceId}/authorized.","inputSchema":{"$schema":"https://json-schema.org/draft/2020-12/schema","properties":{"authorized":{"description":"True to authorize the device into the tailnet, false to de-authorize it.","type":"boolean"},"deviceId":{"description":"The device id.","type":"string"}},"required":["deviceId","authorized"],"type":"object"},"name":"tailscale_authorize_device"},{"description":"Create a new auth key for the tailnet (used to register new devices). Tailscale REST: POST /tailnet/{tailnet}/keys.","inputSchema":{"$schema":"https://json-schema.org/draft/2020-12/schema","properties":{"description":{"description":"A short description for the key.","type":"string"},"ephemeral":{"description":"If true, devices registered with this key are ephemeral (removed shortly after going offline).","type":"boolean"},"expirySeconds":{"description":"Key lifetime in seconds; 0 means no expiry (if allowed by tailnet policy).","type":"number"},"preauthorized":{"description":"If true, devices registered with this key are pre-authorized (skip device approval).","type":"boolean"},"reusable":{"description":"If true, the key can register multiple devices.","type":"boolean"},"tags":{"description":"ACL tags to apply to devices created with this key, e.g. [\"tag:ci\"].","items":{"type":"string"},"type":"array"}},"type":"object"},"name":"tailscale_create_auth_key"},{"description":"Delete a device, removing it from the tailnet. Tailscale REST: DELETE /device/{deviceId}.","inputSchema":{"$schema":"https://json-schema.org/draft/2020-12/schema","properties":{"deviceId":{"description":"The device id to delete.","type":"string"}},"required":["deviceId"],"type":"object"},"name":"tailscale_delete_device"},{"description":"Delete (revoke) an auth key or API access token by id — a security response. Tailscale REST: DELETE /tailnet/{tailnet}/keys/{keyId}.","inputSchema":{"$schema":"https://json-schema.org/draft/2020-12/schema","properties":{"keyId":{"description":"The key id to delete.","type":"string"}},"required":["keyId"],"type":"object"},"name":"tailscale_delete_key"},{"description":"Expire a device's node key, forcing it to re-authenticate — a security response to a compromised or lost device. Tailscale REST: POST /device/{deviceId}/expire.","inputSchema":{"$schema":"https://json-schema.org/draft/2020-12/schema","properties":{"deviceId":{"description":"The device id.","type":"string"}},"required":["deviceId"],"type":"object"},"name":"tailscale_expire_device_key"},{"description":"Get a single device by id. Tailscale REST: GET /device/{deviceId}.","inputSchema":{"$schema":"https://json-schema.org/draft/2020-12/schema","properties":{"deviceId":{"description":"The device id.","type":"string"},"fields":{"description":"Field set — 'all' returns all fields incl. posture attributes and routes; 'default' is the standard subset.","enum":["default","all"],"type":"string"}},"required":["deviceId"],"type":"object"},"name":"tailscale_get_device"},{"description":"Get the tailnet's DNS preferences (e.g. whether MagicDNS is enabled). Tailscale REST: GET /tailnet/{tailnet}/dns/preferences.","inputSchema":{"$schema":"https://json-schema.org/draft/2020-12/schema","properties":{},"type":"object"},"name":"tailscale_get_dns_preferences"},{"description":"Get details of a single auth key / API access token by id (capabilities, expiry, usage). Tailscale REST: GET /tailnet/{tailnet}/keys/{keyId}.","inputSchema":{"$schema":"https://json-schema.org/draft/2020-12/schema","properties":{"keyId":{"description":"The key id.","type":"string"}},"required":["keyId"],"type":"object"},"name":"tailscale_get_key"},{"description":"Get the tailnet's ACL / policy file (returned as JSON via the Accept header, not HuJSON). Tailscale REST: GET /tailnet/{tailnet}/acl.","inputSchema":{"$schema":"https://json-schema.org/draft/2020-12/schema","properties":{"details":{"description":"If true, include metadata about the policy file (e.g. when and by whom it was last updated).","type":"boolean"}},"type":"object"},"name":"tailscale_get_policy_file"},{"description":"Get the tailnet's split-DNS configuration — a map of domain → nameservers. Tailscale REST: GET /tailnet/{tailnet}/dns/split-dns.","inputSchema":{"$schema":"https://json-schema.org/draft/2020-12/schema","properties":{},"type":"object"},"name":"tailscale_get_split_dns"},{"description":"Get the tailnet's settings (device approval, key expiry, posture, etc.). Tailscale REST: GET /tailnet/{tailnet}/settings.","inputSchema":{"$schema":"https://json-schema.org/draft/2020-12/schema","properties":{},"type":"object"},"name":"tailscale_get_tailnet_settings"},{"description":"Get a single user by id. Tailscale REST: GET /users/{userId}.","inputSchema":{"$schema":"https://json-schema.org/draft/2020-12/schema","properties":{"userId":{"description":"The user id.","type":"string"}},"required":["userId"],"type":"object"},"name":"tailscale_get_user"},{"description":"List the subnet routes a device advertises and which are enabled. Tailscale REST: GET /device/{deviceId}/routes.","inputSchema":{"$schema":"https://json-schema.org/draft/2020-12/schema","properties":{"deviceId":{"description":"The device id.","type":"string"}},"required":["deviceId"],"type":"object"},"name":"tailscale_list_device_routes"},{"description":"List all devices in the tailnet (name, addresses, OS, last seen, tags, etc.). Tailscale REST: GET /tailnet/{tailnet}/devices.","inputSchema":{"$schema":"https://json-schema.org/draft/2020-12/schema","properties":{"fields":{"description":"Field set — 'all' returns all fields incl. posture attributes and routes; 'default' is the standard subset.","enum":["default","all"],"type":"string"}},"type":"object"},"name":"tailscale_list_devices"},{"description":"List the global DNS nameservers configured for the tailnet. Tailscale REST: GET /tailnet/{tailnet}/dns/nameservers.","inputSchema":{"$schema":"https://json-schema.org/draft/2020-12/schema","properties":{},"type":"object"},"name":"tailscale_list_dns_nameservers"},{"description":"List the DNS search paths (search domains) configured for the tailnet. Tailscale REST: GET /tailnet/{tailnet}/dns/searchpaths.","inputSchema":{"$schema":"https://json-schema.org/draft/2020-12/schema","properties":{},"type":"object"},"name":"tailscale_list_dns_searchpaths"},{"description":"List auth keys and API access tokens for the tailnet. Tailscale REST: GET /tailnet/{tailnet}/keys.","inputSchema":{"$schema":"https://json-schema.org/draft/2020-12/schema","properties":{"all":{"description":"If true, returns all keys, tokens and OAuth clients in the tailnet, not just the caller's own (requires appropriate scope). Default false.","type":"boolean"}},"type":"object"},"name":"tailscale_list_keys"},{"description":"List users of the tailnet, optionally filtered by type, role or status. Tailscale REST: GET /tailnet/{tailnet}/users.","inputSchema":{"$schema":"https://json-schema.org/draft/2020-12/schema","properties":{"role":{"description":"Filter by role, e.g. owner, admin, member, it-admin, network-admin, billing-admin, auditor.","type":"string"},"status":{"description":"Filter by user status.","enum":["all","active","idle","suspended","needs-approval","over-billing-limit"],"type":"string"},"type":{"description":"Filter by user type.","enum":["all","member","shared","invited"],"type":"string"}},"type":"object"},"name":"tailscale_list_users"},{"description":"List the webhook endpoints configured for the tailnet. Tailscale REST: GET /tailnet/{tailnet}/webhooks.","inputSchema":{"$schema":"https://json-schema.org/draft/2020-12/schema","properties":{},"type":"object"},"name":"tailscale_list_webhooks"},{"description":"Set (rename) a device's name. Tailscale REST: POST /device/{deviceId}/name.","inputSchema":{"$schema":"https://json-schema.org/draft/2020-12/schema","properties":{"deviceId":{"description":"The device id.","type":"string"},"name":{"description":"The new device name.","type":"string"}},"required":["deviceId","name"],"type":"object"},"name":"tailscale_set_device_name"},{"description":"Set the subnet routes ENABLED for a device (from the routes it advertises). REPLACES the enabled set. Tailscale REST: POST /device/{deviceId}/routes.","inputSchema":{"$schema":"https://json-schema.org/draft/2020-12/schema","properties":{"deviceId":{"description":"The device id.","type":"string"},"routes":{"description":"The set of subnet routes (CIDRs) to ENABLE for this device, e.g. [\"10.0.0.0/24\"]. REPLACES the enabled set.","items":{"type":"string"},"type":"array"}},"required":["deviceId","routes"],"type":"object"},"name":"tailscale_set_device_routes"},{"description":"Set a device's ACL tags. REPLACES the device's existing tags. Tailscale REST: POST /device/{deviceId}/tags.","inputSchema":{"$schema":"https://json-schema.org/draft/2020-12/schema","properties":{"deviceId":{"description":"The device id.","type":"string"},"tags":{"description":"ACL tags to apply, e.g. [\"tag:server\"]. REPLACES the device's existing tags.","items":{"type":"string"},"type":"array"}},"required":["deviceId","tags"],"type":"object"},"name":"tailscale_set_device_tags"}]},"body_sha256":"22918a62802d2386ccd52e4a2f6220d82692b6838fc9b8a7e879786e95ce9640","prev_id":null,"leaf":"0x30cf13a618e084249e17d7f38032387329a70fba859723378fc13b0655c3e937","leaf_text":"{\"body\":\"22918a62802d2386ccd52e4a2f6220d82692b6838fc9b8a7e879786e95ce9640\",\"id\":301514,\"kind\":\"mcp.tools\",\"method\":\"probe.mcp/1\",\"observed_us\":1793054119383864,\"prev\":null,\"subject\":\"8fab493b-e443-4b04-9db9-4527cf55e154\",\"subject_kind\":\"endpoint\"}","day":{"day":"2026-10-26","leaves":296695,"root":"0xf43e8dcc3d451a4788b26be904c55e8c4c0fa75c9666796c51db38d37e2c0df8","chained":"0x702d5ac508f08b0d1accf36af25822d8e5660367494edd17a642fb61e158a57a","anchor_chain":"eip155:5042002","anchor_tx":"0x495162f8936e19f0039918feebe6c307f327cd6bf8c37219620b1970041fa9ae","anchor_block":69251483},"proof":["0x30cf48d2edabf2eeac7dc13be529966cbc03698ac4f3b901f8e8bd5ec17224e0","0x799f13cc8e1afc6ecfdf15c61dbd8327ba9ee7e7d2c280bb6c5b59562b86d95a","0x1260160ae1919ae8837b45bbc42ac6e8dddd5171e3ab4d4ccd363bfdc0ec8fcd","0x65105af759605825f20619e5384baa21e7d740128eea34e4bb48dda48ee93a38","0x8de90ab4e706fb1f1f0f29751d49e3335cb4fc75428a96c54a9a00c8f2a83794","0x5a2a00bd19a07bb7a56b85ed54eaffdcb2aaf9cf141ea953a400d53eb5bfc678","0x3dd7ab5faf3af8c849340fec7cd1f8308f6285bdeb06ba62e583c6022bf3ab59","0x6bedc6a901d3ff1db44562ca2e708efaf965ca0f1ca38c9335892096cb0b58db","0x25ba1b9145475ea9ef33090e367d91a0fd38d074fef51cf5ad78e396de8c39ee","0x0886695ce8b00ff9cb3b286883a23d258a3fbdfe296f9e24a8b5f848bccd41cb","0x66b4d790d6ae725a0af009d5a6edacaec5a6147d597bc8410a97be11d56a00d1","0xd85c7204d76d26255c94ef4caa12c05addd08238caa5cdc3888ea60b74e6b940","0x36a44931b230976c04691d90bf3a25ed4111d74c78b672850d8025a911ca88dd","0x683955a5b2250ad50568d022a6580d8739b6aff1356779d72a773b088e7c289c","0x610738e0c43687aded83c613c73de8b5226c73c375858a167436461c522ea213","0x06d71bfa7d8b41d62c8836efc2c601e1cc3772d9453596b2ae4950887f3310ca","0x8c756542e482157df0c36464d75c937b845e4423dbbcfad08f0cf8d5a16b9a13","0x20704208aa6923d6b2450ef74ede87a6e0265d46447926038fe9506e9e154b2d","0x9b9ce5b74b9bab5121612ef6b64920a8d453cbf311096a423eef9702747e868a"]}