From tailscale-admin
Use when managing a Tailscale tailnet through the Tailscale v2 API, including devices, auth keys, users, DNS, routes, tags, ACL policy, services, logs, webhooks, or inspecting current Tailscale state from a repository.
How this skill is triggered — by the user, by Claude, or both
Slash command
/tailscale-admin:tailscale-adminThe summary Claude sees in its skill listing — used to decide when to auto-load this skill
Use this skill for Tailscale v2 API work where the API key and any operational
Use this skill for Tailscale v2 API work where the API key and any operational notes stay local to your environment or target repo — never in global skill state or tracked Markdown.
Secrets:
TAILSCALE_API_KEY via an environment variable, or a local, git-ignored
env file (the runner defaults to secrets/local/providers/tailscale.env;
override the path with TAILSCALE_ENV_FILE).Do not paste API keys, generated auth keys, tailnet-private hostnames, or personal user data into tracked Markdown.
Before answering or changing Tailscale resources:
Use the bundled helper from the installed skill directory:
bash skills/tailscale-admin/scripts/ts_api.sh <command> [args]
The helper loads:
TAILSCALE_API_KEY from secrets/local/providers/tailscale.env by default;TAILSCALE_TAILNET, defaulting to - for the API key's default tailnet;TAILSCALE_API_BASE, defaulting to https://api.tailscale.com/api/v2.If the target repo keeps the secret file elsewhere, set TAILSCALE_ENV_FILE:
TAILSCALE_ENV_FILE=/path/to/tailscale.env bash skills/tailscale-admin/scripts/ts_api.sh devices
Read-only examples:
bash skills/tailscale-admin/scripts/ts_api.sh status
bash skills/tailscale-admin/scripts/ts_api.sh devices
bash skills/tailscale-admin/scripts/ts_api.sh keys
bash skills/tailscale-admin/scripts/ts_api.sh users
bash skills/tailscale-admin/scripts/ts_api.sh dns
bash skills/tailscale-admin/scripts/ts_api.sh policy > /tmp/tailscale-policy.hujson
Mutation examples. Always preview first:
bash skills/tailscale-admin/scripts/ts_api.sh rename-device <device-id> <new-name> --dry-run
bash skills/tailscale-admin/scripts/ts_api.sh rename-device <device-id> <new-name> --yes
bash skills/tailscale-admin/scripts/ts_api.sh set-device-tags <device-id> '["tag:server"]' --dry-run
bash skills/tailscale-admin/scripts/ts_api.sh set-device-tags <device-id> '["tag:server"]' --yes
bash skills/tailscale-admin/scripts/ts_api.sh create-auth-key \
'{"capabilities":{"devices":{"create":{"reusable":false,"ephemeral":false,"preauthorized":true,"tags":["tag:server"]}}},"expirySeconds":3600}' \
--dry-run
GET commands can run directly.POST, PUT, PATCH, and DELETE require --yes.--dry-run before --yes.secrets/local/ or a password manager, not into tracked Markdown.bash skills/tailscale-admin/scripts/ts_api.sh policy > /tmp/tailscale-policy-before.hujson
bash skills/tailscale-admin/scripts/ts_api.sh validate-policy ./policy.hujson --dry-run
bash skills/tailscale-admin/scripts/ts_api.sh validate-policy ./policy.hujson --yes
bash skills/tailscale-admin/scripts/ts_api.sh set-policy ./policy.hujson --dry-run
bash skills/tailscale-admin/scripts/ts_api.sh set-policy ./policy.hujson --yes
For less common endpoints, search the compact operation catalog:
bash skills/tailscale-admin/scripts/ts_catalog.sh --search webhook
bash skills/tailscale-admin/scripts/ts_catalog.sh --tag DNS --method GET
Then call by operationId:
bash skills/tailscale-admin/scripts/ts_call.sh listTailnetDevices \
--params-json '{"tailnet":"-"}' \
--jq '.devices[] | {id,name,hostname,lastSeen,tags}'
references/operations.tsv: compact Tailscale API operation list.https://tailscale.com/docs/reference/tailscale-api.Provides behavioral guidelines to reduce common LLM coding mistakes, focusing on simplicity, surgical changes, assumption surfacing, and verifiable success criteria.
Searches, retrieves, and installs Agent Skills from prompts.chat registry using MCP tools like search_skills and get_skill. Activates for finding skills, browsing catalogs, or extending Claude.
Creates, edits, and optimizes skills for Claude Code, including drafting, evaluating with test prompts, iterating on performance, and improving skill descriptions for better triggering accuracy.
npx claudepluginhub skyswordw/skyswordw-skills --plugin tailscale-admin