Source

API documentation — Tailscale

Checked for Tailscale on 5 Nov 2026

Technical details

type: page
http status: 200
content hash: sha256:d15fab12d97691bdbca559c38b9df553b45b88d0b7b7b7bcd875dcfbd1c31443
permission: robots_ok
screenshot: Screenshot on file (internal exhibit, not published)

Cited by

API plan availability Report an error

“The Tailscale API is available for all plans.”
API auth token case sensitive Report an error

“Tailscale-generated API access tokens are case-sensitive.”
API key expiry days Report an error

“You can choose the number of days, between 1 and 90 inclusive, for the key expiry.”
API token roles required Report an error

“You need to be an Owner, Admin, IT admin, or Network admin of a tailnet to generate an access token.”
API token source Report an error

“Requests to the API are authenticated by using an access token (sometimes called an API key), which can be generated from the Keys page of the admin console.”
API trust credentials Report an error

“As an alternative to an access token that has full permission to the Tailscale API, use trust credentials to provide delegated fine-grained control to the Tailscale API.”
Oauth device provisioning node attributes Report an error

“the request body accepts an optional allowedNodeAttributes field. It takes an array of custom node attributes to automatically assign to every device provisioned through that OAuth app.”
Oauth node attributes usable in posture Report an error

“you can reference them in device posture conditions (srcPosture) and in grants to gate access based on how a device was provisioned.”
API token revocable Report an error

“Access tokens can also be revoked before their expiration.”