KosmoKrator

productivity

Tailscale CLI for AI Agents

Use the Tailscale CLI from KosmoKrator to call Tailscale tools headlessly, return JSON, inspect schemas, and automate workflows from coding agents, scripts, and CI.

Tailscale CLI Setup

Tailscale can be configured headlessly with `kosmokrator integrations:configure tailscale`.

Install, configure, and verify 
# Install KosmoKrator first if it is not available on PATH.
curl -fsSL https://raw.githubusercontent.com/OpenCompanyApp/kosmokrator/main/install.sh | bash

# Configure and verify this integration.
kosmokrator integrations:configure tailscale --set api_token="$TAILSCALE_API_TOKEN" --enable --read allow --write ask --json
kosmokrator integrations:doctor tailscale --json
kosmokrator integrations:status --json

Credentials

Authentication type: API token api_token. Configure credentials once, then reuse the same stored profile from scripts, coding CLIs, Lua, and MCP.

KeyEnv varTypeRequiredLabel
api_token TAILSCALE_API_TOKEN Secret secret yes API Token
url TAILSCALE_URL URL url no API Base URL

Command Patterns

The generic command is stable across every integration. The provider shortcut is shorter for humans.

Generic CLI call 
kosmo integrations:call tailscale.tailscale_list_tailnet_devices '{}' --json
Provider shortcut 
kosmo integrations:tailscale tailscale_list_tailnet_devices '{}' --json

Discovery

These commands return structured output for coding agents that need to inspect capabilities before choosing a function.

Discovery commands 
kosmo integrations:docs tailscale --json
kosmo integrations:docs tailscale.tailscale_list_tailnet_devices --json
kosmo integrations:schema tailscale.tailscale_list_tailnet_devices --json
kosmo integrations:search "Tailscale" --json
kosmo integrations:list --json

Automation Contexts

The same configured command surface works in these environments. The command does not change unless the host wrapper, credentials, or permissions change.

CI Run integration calls from CI jobs with JSON output, explicit credentials, and predictable exit status. Cron Jobs Schedule repeatable integration workflows from cron while keeping credentials in KosmoKrator config. Shell Scripts Call integration functions from shell scripts with stable JSON input and output. Headless Automation Use KosmoKrator as a non-interactive integration runtime for local automations and wrappers. Coding Agents Let coding agents discover schemas and execute integration functions through CLI commands or MCP.

CLI Functions

Every function below can be called headlessly. Commands are highlighted, copyable, and scroll horizontally when payloads are long.

tailscale.tailscale_list_tailnet_devices

List tailnet devices Official Tailscale endpoint: GET /tailnet/{tailnet}/devices Lists the devices in a tailnet. OAuth Scope: `devices:core:read`.

Read read
Parameters
none
Generic call 
kosmo integrations:call tailscale.tailscale_list_tailnet_devices '{}' --json
Shortcut 
kosmo integrations:tailscale tailscale_list_tailnet_devices '{}' --json

tailscale.tailscale_batch_update_custom_device_posture_attributes

Batch update custom device posture attributes Official Tailscale endpoint: PATCH /tailnet/{tailnet}/device-attributes Batch updates posture attributes across devices in a tailnet. This endpoint uses [JSON Merge Patch](https://datatracker.ie

Write write
Parameters
none
Generic call 
kosmo integrations:call tailscale.tailscale_batch_update_custom_device_posture_attributes '{}' --json
Shortcut 
kosmo integrations:tailscale tailscale_batch_update_custom_device_posture_attributes '{}' --json

tailscale.tailscale_get_device

Get a device Official Tailscale endpoint: GET /device/{deviceId} Retrieve the details for the specified device. OAuth Scope: `devices:core:read`.

Read read
Parameters
none
Generic call 
kosmo integrations:call tailscale.tailscale_get_device '{}' --json
Shortcut 
kosmo integrations:tailscale tailscale_get_device '{}' --json

tailscale.tailscale_delete_device

Delete a device Official Tailscale endpoint: DELETE /device/{deviceId} Deletes the device from its tailnet. The device must belong to the requesting user's tailnet. Deleting devices shared with the tailnet is not supported. OAuth Scope: `de

Write write
Parameters
none
Generic call 
kosmo integrations:call tailscale.tailscale_delete_device '{}' --json
Shortcut 
kosmo integrations:tailscale tailscale_delete_device '{}' --json

tailscale.tailscale_expire_device_key

Expire a device's key Official Tailscale endpoint: POST /device/{deviceId}/expire Mark a device's node key as expired. This will require the device to re-authenticate in order to connect to the tailnet. The device must belong to the request

Write write
Parameters
none
Generic call 
kosmo integrations:call tailscale.tailscale_expire_device_key '{}' --json
Shortcut 
kosmo integrations:tailscale tailscale_expire_device_key '{}' --json

tailscale.tailscale_list_device_routes

List device routes Official Tailscale endpoint: GET /device/{deviceId}/routes Retrieve the list of subnet routes that a device is advertising, as well as those that are enabled for it. Routes must be both advertised and enabled for a device

Read read
Parameters
none
Generic call 
kosmo integrations:call tailscale.tailscale_list_device_routes '{}' --json
Shortcut 
kosmo integrations:tailscale tailscale_list_device_routes '{}' --json

tailscale.tailscale_set_device_routes

Set device routes Official Tailscale endpoint: POST /device/{deviceId}/routes Set a device's enabled subnet routes by replacing the existing list of subnet routes with the supplied parameters. [Advertised routes](/kb/1019/subnets#advertise-

Write write
Parameters
none
Generic call 
kosmo integrations:call tailscale.tailscale_set_device_routes '{}' --json
Shortcut 
kosmo integrations:tailscale tailscale_set_device_routes '{}' --json

tailscale.tailscale_authorize_device

Authorize device Official Tailscale endpoint: POST /device/{deviceId}/authorized This call marks a device as authorized or revokes its authorization for tailnets where device authorization is required, according to the authorized field in t

Write write
Parameters
none
Generic call 
kosmo integrations:call tailscale.tailscale_authorize_device '{}' --json
Shortcut 
kosmo integrations:tailscale tailscale_authorize_device '{}' --json

tailscale.tailscale_set_device_name

Set device name Official Tailscale endpoint: POST /device/{deviceId}/name When a device is added to a tailnet, its Tailscale [device name](https://tailscale.com/kb/1098/machine-names) (also sometimes referred to as machine name) is generate

Write write
Parameters
none
Generic call 
kosmo integrations:call tailscale.tailscale_set_device_name '{}' --json
Shortcut 
kosmo integrations:tailscale tailscale_set_device_name '{}' --json

tailscale.tailscale_set_device_tags

Set device tags Official Tailscale endpoint: POST /device/{deviceId}/tags Tags let you assign an identity to a device that is separate from human users, and use that identity as part of an ACL to restrict access. Tags are similar to role ac

Write write
Parameters
none
Generic call 
kosmo integrations:call tailscale.tailscale_set_device_tags '{}' --json
Shortcut 
kosmo integrations:tailscale tailscale_set_device_tags '{}' --json

tailscale.tailscale_update_device_key

Update device key Official Tailscale endpoint: POST /device/{deviceId}/key When a device is added to a tailnet, its key expiry is set according to the tailnet's key expiry setting. If the key is not refreshed and expires, the device can no

Write write
Parameters
none
Generic call 
kosmo integrations:call tailscale.tailscale_update_device_key '{}' --json
Shortcut 
kosmo integrations:tailscale tailscale_update_device_key '{}' --json

tailscale.tailscale_set_device_ip

Set device IPv4 address Official Tailscale endpoint: POST /device/{deviceId}/ip When a device is added to a tailnet, its Tailscale IPv4 address is set at random either from the CGNAT range, or a subset of the CGNAT range specified by an [ip

Write write
Parameters
none
Generic call 
kosmo integrations:call tailscale.tailscale_set_device_ip '{}' --json
Shortcut 
kosmo integrations:tailscale tailscale_set_device_ip '{}' --json

tailscale.tailscale_get_device_posture_attributes

Get device posture attributes Official Tailscale endpoint: GET /device/{deviceId}/attributes Retrieve all posture attributes for the specified device. This returns a JSON object of all the key-value pairs of posture attributes for the devic

Read read
Parameters
none
Generic call 
kosmo integrations:call tailscale.tailscale_get_device_posture_attributes '{}' --json
Shortcut 
kosmo integrations:tailscale tailscale_get_device_posture_attributes '{}' --json

tailscale.tailscale_set_custom_device_posture_attributes

Set custom device posture attributes Official Tailscale endpoint: POST /device/{deviceId}/attributes/{attributeKey} Create or update a custom posture attribute on the specified device. User-managed attributes must be in the custom namespace

Write write
Parameters
none
Generic call 
kosmo integrations:call tailscale.tailscale_set_custom_device_posture_attributes '{}' --json
Shortcut 
kosmo integrations:tailscale tailscale_set_custom_device_posture_attributes '{}' --json

tailscale.tailscale_delete_custom_device_posture_attributes

Delete custom device posture attributes Official Tailscale endpoint: DELETE /device/{deviceId}/attributes/{attributeKey} Delete a posture attribute from the specified device. This is only applicable to user-managed posture attributes in the

Write write
Parameters
none
Generic call 
kosmo integrations:call tailscale.tailscale_delete_custom_device_posture_attributes '{}' --json
Shortcut 
kosmo integrations:tailscale tailscale_delete_custom_device_posture_attributes '{}' --json

tailscale.tailscale_list_device_invites

List device invites Official Tailscale endpoint: GET /device/{deviceId}/device-invites List all share invites for a device. OAuth Scope: `device_invites:read`.

Read read
Parameters
none
Generic call 
kosmo integrations:call tailscale.tailscale_list_device_invites '{}' --json
Shortcut 
kosmo integrations:tailscale tailscale_list_device_invites '{}' --json

tailscale.tailscale_create_device_invites

Create device invites Official Tailscale endpoint: POST /device/{deviceId}/device-invites Create new share invites for a device. Note that device invites cannot be created using an API access token generated from an OAuth client as the shar

Write write
Parameters
none
Generic call 
kosmo integrations:call tailscale.tailscale_create_device_invites '{}' --json
Shortcut 
kosmo integrations:tailscale tailscale_create_device_invites '{}' --json

tailscale.tailscale_list_user_invites

List user invites Official Tailscale endpoint: GET /tailnet/{tailnet}/user-invites List all open (not yet accepted) user invites to the tailnet.

Read read
Parameters
none
Generic call 
kosmo integrations:call tailscale.tailscale_list_user_invites '{}' --json
Shortcut 
kosmo integrations:tailscale tailscale_list_user_invites '{}' --json

tailscale.tailscale_create_user_invites

Create user invites Official Tailscale endpoint: POST /tailnet/{tailnet}/user-invites Create, and optionally email out, new user invites to join the tailnet. > ⓘ Only permitted for user-owned keys, because invites require an inviting user

Write write
Parameters
none
Generic call 
kosmo integrations:call tailscale.tailscale_create_user_invites '{}' --json
Shortcut 
kosmo integrations:tailscale tailscale_create_user_invites '{}' --json

tailscale.tailscale_get_user_invite

Get a user invite Official Tailscale endpoint: GET /user-invites/{userInviteId} Retrieve a specific user invite.

Read read
Parameters
none
Generic call 
kosmo integrations:call tailscale.tailscale_get_user_invite '{}' --json
Shortcut 
kosmo integrations:tailscale tailscale_get_user_invite '{}' --json

tailscale.tailscale_delete_user_invite

Delete a user invite Official Tailscale endpoint: DELETE /user-invites/{userInviteId} Deletes a specific user invite. > ⓘ Only permitted for user-owned keys, because invites require an inviting user.

Write write
Parameters
none
Generic call 
kosmo integrations:call tailscale.tailscale_delete_user_invite '{}' --json
Shortcut 
kosmo integrations:tailscale tailscale_delete_user_invite '{}' --json

tailscale.tailscale_resend_user_invite

Resend a user invite Official Tailscale endpoint: POST /user-invites/{userInviteId}/resend Resend a user invite by email. You can only use this if the specified invite was originally created with an email specified. Refer to [creating user

Write write
Parameters
none
Generic call 
kosmo integrations:call tailscale.tailscale_resend_user_invite '{}' --json
Shortcut 
kosmo integrations:tailscale tailscale_resend_user_invite '{}' --json

tailscale.tailscale_get_device_invite

Get a device invite Official Tailscale endpoint: GET /device-invites/{deviceInviteId} Retrieve a specific device invite. OAuth Scope: `device_invites:read`.

Read read
Parameters
none
Generic call 
kosmo integrations:call tailscale.tailscale_get_device_invite '{}' --json
Shortcut 
kosmo integrations:tailscale tailscale_get_device_invite '{}' --json

tailscale.tailscale_delete_device_invite

Delete a device invite Official Tailscale endpoint: DELETE /device-invites/{deviceInviteId} Delete a specific device invite. OAuth Scope: `device_invites`.

Write write
Parameters
none
Generic call 
kosmo integrations:call tailscale.tailscale_delete_device_invite '{}' --json
Shortcut 
kosmo integrations:tailscale tailscale_delete_device_invite '{}' --json

tailscale.tailscale_resend_device_invite

Resend a device invite Official Tailscale endpoint: POST /device-invites/{deviceInviteId}/resend Resend a device invite by email. You can only use this if the specified invite was originally created with an email specified. Refer to [creati

Write write
Parameters
none
Generic call 
kosmo integrations:call tailscale.tailscale_resend_device_invite '{}' --json
Shortcut 
kosmo integrations:tailscale tailscale_resend_device_invite '{}' --json

tailscale.tailscale_accept_device_invite

Accept a device invite Official Tailscale endpoint: POST /device-invites/-/accept Accepts the invitation to share a device into the requesting user's tailnet. Note that device invites cannot be accepted using an API access token generated f

Write write
Parameters
none
Generic call 
kosmo integrations:call tailscale.tailscale_accept_device_invite '{}' --json
Shortcut 
kosmo integrations:tailscale tailscale_accept_device_invite '{}' --json

tailscale.tailscale_list_configuration_audit_logs

List configuration audit logs Official Tailscale endpoint: GET /tailnet/{tailnet}/logging/configuration List all configuration audit logs for a tailnet. OAuth Scope: `logs:configuration:read`.

Read read
Parameters
none
Generic call 
kosmo integrations:call tailscale.tailscale_list_configuration_audit_logs '{}' --json
Shortcut 
kosmo integrations:tailscale tailscale_list_configuration_audit_logs '{}' --json

tailscale.tailscale_list_network_flow_logs

List network flow logs Official Tailscale endpoint: GET /tailnet/{tailnet}/logging/network List all network flow logs for a tailnet. OAuth Scope: `logs:network:read`.

Read read
Parameters
none
Generic call 
kosmo integrations:call tailscale.tailscale_list_network_flow_logs '{}' --json
Shortcut 
kosmo integrations:tailscale tailscale_list_network_flow_logs '{}' --json

tailscale.tailscale_get_log_streaming_status

Get log streaming status Official Tailscale endpoint: GET /tailnet/{tailnet}/logging/{logType}/stream/status Retrieve the log streaming status for the provided log type. OAuth Scope: `log_streaming:read`.

Read read
Parameters
none
Generic call 
kosmo integrations:call tailscale.tailscale_get_log_streaming_status '{}' --json
Shortcut 
kosmo integrations:tailscale tailscale_get_log_streaming_status '{}' --json

tailscale.tailscale_get_log_streaming_configuration

Get log streaming configuration Official Tailscale endpoint: GET /tailnet/{tailnet}/logging/{logType}/stream Retrieve the log streaming configuration for the provided log type. OAuth Scope: `log_streaming:read`.

Read read
Parameters
none
Generic call 
kosmo integrations:call tailscale.tailscale_get_log_streaming_configuration '{}' --json
Shortcut 
kosmo integrations:tailscale tailscale_get_log_streaming_configuration '{}' --json

tailscale.tailscale_set_log_streaming_configuration

Set log streaming configuration Official Tailscale endpoint: PUT /tailnet/{tailnet}/logging/{logType}/stream Set the log streaming configuration for the provided log type. OAuth Scope: `log_streaming`. `device_invites` and `policy_file` are

Write write
Parameters
none
Generic call 
kosmo integrations:call tailscale.tailscale_set_log_streaming_configuration '{}' --json
Shortcut 
kosmo integrations:tailscale tailscale_set_log_streaming_configuration '{}' --json

tailscale.tailscale_disable_log_streaming

Disable log streaming Official Tailscale endpoint: DELETE /tailnet/{tailnet}/logging/{logType}/stream Delete the log streaming configuration for the provided log type. OAuth Scope: `log_streaming`.

Write write
Parameters
none
Generic call 
kosmo integrations:call tailscale.tailscale_disable_log_streaming '{}' --json
Shortcut 
kosmo integrations:tailscale tailscale_disable_log_streaming '{}' --json

tailscale.tailscale_get_aws_external_id

Create or get AWS external id Official Tailscale endpoint: POST /tailnet/{tailnet}/aws-external-id Get an AWS external id to use for streaming tailnet logs to S3 using role-based authentication, creating a new one for this tailnet when nece

Write write
Parameters
none
Generic call 
kosmo integrations:call tailscale.tailscale_get_aws_external_id '{}' --json
Shortcut 
kosmo integrations:tailscale tailscale_get_aws_external_id '{}' --json

tailscale.tailscale_validate_aws_external_id

Validate external ID integration with IAM role trust policy Official Tailscale endpoint: POST /tailnet/{tailnet}/aws-external-id/{id}/validate-aws-trust-policy Validate that Tailscale can assume your IAM role with (and only with) this exter

Write write
Parameters
none
Generic call 
kosmo integrations:call tailscale.tailscale_validate_aws_external_id '{}' --json
Shortcut 
kosmo integrations:tailscale tailscale_validate_aws_external_id '{}' --json

tailscale.tailscale_list_dns_nameservers

List DNS nameservers Official Tailscale endpoint: GET /tailnet/{tailnet}/dns/nameservers Lists the global DNS nameservers for a tailnet.

Read read
Parameters
none
Generic call 
kosmo integrations:call tailscale.tailscale_list_dns_nameservers '{}' --json
Shortcut 
kosmo integrations:tailscale tailscale_list_dns_nameservers '{}' --json

tailscale.tailscale_set_dns_nameservers

Set DNS nameservers Official Tailscale endpoint: POST /tailnet/{tailnet}/dns/nameservers Replaces the list of global DNS nameservers for the given tailnet with the list supplied in the request. Note that changing the list of DNS nameservers

Write write
Parameters
none
Generic call 
kosmo integrations:call tailscale.tailscale_set_dns_nameservers '{}' --json
Shortcut 
kosmo integrations:tailscale tailscale_set_dns_nameservers '{}' --json

tailscale.tailscale_get_dns_preferences

Get DNS preferences Official Tailscale endpoint: GET /tailnet/{tailnet}/dns/preferences Retrieves the DNS preferences that are currently set for the given tailnet.

Read read
Parameters
none
Generic call 
kosmo integrations:call tailscale.tailscale_get_dns_preferences '{}' --json
Shortcut 
kosmo integrations:tailscale tailscale_get_dns_preferences '{}' --json

tailscale.tailscale_set_dns_preferences

Set DNS preferences Official Tailscale endpoint: POST /tailnet/{tailnet}/dns/preferences Set the DNS preferences for a tailnet; specifically, the MagicDNS setting. Note that MagicDNS is dependent on DNS servers. Learn about [MagicDNS](https

Write write
Parameters
none
Generic call 
kosmo integrations:call tailscale.tailscale_set_dns_preferences '{}' --json
Shortcut 
kosmo integrations:tailscale tailscale_set_dns_preferences '{}' --json

tailscale.tailscale_list_dns_search_paths

List DNS search paths Official Tailscale endpoint: GET /tailnet/{tailnet}/dns/searchpaths Retrieves the list of search paths, also referred to as *search domains*, that is currently set for the given tailnet.

Read read
Parameters
none
Generic call 
kosmo integrations:call tailscale.tailscale_list_dns_search_paths '{}' --json
Shortcut 
kosmo integrations:tailscale tailscale_list_dns_search_paths '{}' --json

tailscale.tailscale_set_dns_search_paths

Set DNS search paths Official Tailscale endpoint: POST /tailnet/{tailnet}/dns/searchpaths Replaces the list of search paths for the given tailnet.

Write write
Parameters
none
Generic call 
kosmo integrations:call tailscale.tailscale_set_dns_search_paths '{}' --json
Shortcut 
kosmo integrations:tailscale tailscale_set_dns_search_paths '{}' --json

tailscale.tailscale_get_split_dns

Get split DNS Official Tailscale endpoint: GET /tailnet/{tailnet}/dns/split-dns Retrieves the split DNS settings, which is a map from domains to lists of nameservers, that is currently set for the given tailnet.

Read read
Parameters
none
Generic call 
kosmo integrations:call tailscale.tailscale_get_split_dns '{}' --json
Shortcut 
kosmo integrations:tailscale tailscale_get_split_dns '{}' --json

tailscale.tailscale_set_split_dns

Set split DNS Official Tailscale endpoint: PUT /tailnet/{tailnet}/dns/split-dns Replaces the split DNS settings for a given tailnet. Setting the value of a mapping to `null` clears the nameservers for that domain. Sending an empty object cl

Write write
Parameters
none
Generic call 
kosmo integrations:call tailscale.tailscale_set_split_dns '{}' --json
Shortcut 
kosmo integrations:tailscale tailscale_set_split_dns '{}' --json

tailscale.tailscale_update_split_dns

Update split DNS Official Tailscale endpoint: PATCH /tailnet/{tailnet}/dns/split-dns Performs partial updates of the split DNS settings for a given tailnet. Only domains specified in the request map will be modified. Setting the value of a

Write write
Parameters
none
Generic call 
kosmo integrations:call tailscale.tailscale_update_split_dns '{}' --json
Shortcut 
kosmo integrations:tailscale tailscale_update_split_dns '{}' --json

tailscale.tailscale_get_dns_configuration

Get DNS configuration Official Tailscale endpoint: GET /tailnet/{tailnet}/dns/configuration Retrieves the full DNS configuration for a tailnet, including global nameservers, split DNS routes, search paths, and MagicDNS configuration.

Read read
Parameters
none
Generic call 
kosmo integrations:call tailscale.tailscale_get_dns_configuration '{}' --json
Shortcut 
kosmo integrations:tailscale tailscale_get_dns_configuration '{}' --json

tailscale.tailscale_set_dns_configuration

Set DNS configuration Official Tailscale endpoint: POST /tailnet/{tailnet}/dns/configuration Replaces the DNS configuration for the given tailnet. - `nameservers` defines the global resolvers to use when `preferences.overrideLocalDNS` is tr

Write write
Parameters
none
Generic call 
kosmo integrations:call tailscale.tailscale_set_dns_configuration '{}' --json
Shortcut 
kosmo integrations:tailscale tailscale_set_dns_configuration '{}' --json

tailscale.tailscale_list_tailnet_keys

List tailnet keys Official Tailscale endpoint: GET /tailnet/{tailnet}/keys Returns a list of active auth keys, API access tokens and trust credentials. If the parameter {all} was not specified, the set of keys returned depends on the access

Read read
Parameters
none
Generic call 
kosmo integrations:call tailscale.tailscale_list_tailnet_keys '{}' --json
Shortcut 
kosmo integrations:tailscale tailscale_list_tailnet_keys '{}' --json

tailscale.tailscale_create_key

Create an auth key or trust credential Official Tailscale endpoint: POST /tailnet/{tailnet}/keys Creates a new [auth key](https://tailscale.com/kb/1085/), or [trust credential](https://tailscale.com/kb/1623/) in the specified tailnet. Trust

Write write
Parameters
none
Generic call 
kosmo integrations:call tailscale.tailscale_create_key '{}' --json
Shortcut 
kosmo integrations:tailscale tailscale_create_key '{}' --json

tailscale.tailscale_get_key

Get key Official Tailscale endpoint: GET /tailnet/{tailnet}/keys/{keyId} Returns a JSON object with information about a specific api access token, OAuth client, federated identity, or auth key, such as its creation and expiration dates and

Read read
Parameters
none
Generic call 
kosmo integrations:call tailscale.tailscale_get_key '{}' --json
Shortcut 
kosmo integrations:tailscale tailscale_get_key '{}' --json

tailscale.tailscale_set_key

Set key Official Tailscale endpoint: PUT /tailnet/{tailnet}/keys/{keyId} Set the configuration for an existing OAuth client or federated identity. OAuth Scope: `oauth_keys` grants access to OAuth clients. OAuth Scope: `federated_keys` grant

Write write
Parameters
none
Generic call 
kosmo integrations:call tailscale.tailscale_set_key '{}' --json
Shortcut 
kosmo integrations:tailscale tailscale_set_key '{}' --json

tailscale.tailscale_delete_key

Delete key Official Tailscale endpoint: DELETE /tailnet/{tailnet}/keys/{keyId} Deletes a specific api access token or auth key. OAuth Scope: `api_access_tokens` grants access to personal API access tokens. OAuth Scope: `auth_keys` grants ac

Write write
Parameters
none
Generic call 
kosmo integrations:call tailscale.tailscale_delete_key '{}' --json
Shortcut 
kosmo integrations:tailscale tailscale_delete_key '{}' --json

tailscale.tailscale_get_policy_file

Get policy file Official Tailscale endpoint: GET /tailnet/{tailnet}/acl Retrieves the current policy file for the given tailnet; this includes the ACL along with the rules and tests that have been defined. This method can return the policy

Read read
Parameters
none
Generic call 
kosmo integrations:call tailscale.tailscale_get_policy_file '{}' --json
Shortcut 
kosmo integrations:tailscale tailscale_get_policy_file '{}' --json

tailscale.tailscale_set_policy_file

Set policy file Official Tailscale endpoint: POST /tailnet/{tailnet}/acl Sets the ACL for the given tailnet. HuJSON and JSON are both accepted inputs. An `If-Match` header can be set to avoid missed updates. On success, returns the updated

Write write
Parameters
none
Generic call 
kosmo integrations:call tailscale.tailscale_set_policy_file '{}' --json
Shortcut 
kosmo integrations:tailscale tailscale_set_policy_file '{}' --json

tailscale.tailscale_preview_rule_matches

Preview rule matches Official Tailscale endpoint: POST /tailnet/{tailnet}/acl/preview When given a user or IP port to match against, returns the tailnet policy rules that apply to that resource, without saving the policy file to the server.

Write write
Parameters
none
Generic call 
kosmo integrations:call tailscale.tailscale_preview_rule_matches '{}' --json
Shortcut 
kosmo integrations:tailscale tailscale_preview_rule_matches '{}' --json

tailscale.tailscale_validate_and_test_policy_file

Validate and test policy file Official Tailscale endpoint: POST /tailnet/{tailnet}/acl/validate This endpoint works in one of two modes, neither of which modifies your current tailnet policy file: - Run ACL tests: When the request body cont

Write write
Parameters
none
Generic call 
kosmo integrations:call tailscale.tailscale_validate_and_test_policy_file '{}' --json
Shortcut 
kosmo integrations:tailscale tailscale_validate_and_test_policy_file '{}' --json

tailscale.tailscale_get_posture_integrations

List all posture integrations Official Tailscale endpoint: GET /tailnet/{tailnet}/posture/integrations List all of the posture integrations for a tailnet. OAuth Scope: `feature_settings:read`.

Read read
Parameters
none
Generic call 
kosmo integrations:call tailscale.tailscale_get_posture_integrations '{}' --json
Shortcut 
kosmo integrations:tailscale tailscale_get_posture_integrations '{}' --json

tailscale.tailscale_create_posture_integration

Create a posture integration Official Tailscale endpoint: POST /tailnet/{tailnet}/posture/integrations Create a posture integration, returning the resulting [PostureIntegration](#model/postureintegration). Must include `provider` and `clien

Write write
Parameters
none
Generic call 
kosmo integrations:call tailscale.tailscale_create_posture_integration '{}' --json
Shortcut 
kosmo integrations:tailscale tailscale_create_posture_integration '{}' --json

tailscale.tailscale_get_posture_integration

Get a posture integration Official Tailscale endpoint: GET /posture/integrations/{id} Gets the posture integration identified by `{id}`. OAuth Scope: `feature_settings:read`.

Read read
Parameters
none
Generic call 
kosmo integrations:call tailscale.tailscale_get_posture_integration '{}' --json
Shortcut 
kosmo integrations:tailscale tailscale_get_posture_integration '{}' --json

tailscale.tailscale_update_posture_integration

Update a posture integration Official Tailscale endpoint: PATCH /posture/integrations/{id} Updates the posture integration identified by `{id}`. You may omit the `clientSecret` from your request to retain the previously configured `clientSe

Write write
Parameters
none
Generic call 
kosmo integrations:call tailscale.tailscale_update_posture_integration '{}' --json
Shortcut 
kosmo integrations:tailscale tailscale_update_posture_integration '{}' --json

tailscale.tailscale_delete_posture_integration

Delete a posture integration Official Tailscale endpoint: DELETE /posture/integrations/{id} Delete a specific posture integration. OAuth Scope: `feature_settings`.

Write write
Parameters
none
Generic call 
kosmo integrations:call tailscale.tailscale_delete_posture_integration '{}' --json
Shortcut 
kosmo integrations:tailscale tailscale_delete_posture_integration '{}' --json

tailscale.tailscale_list_users

List users Official Tailscale endpoint: GET /tailnet/{tailnet}/users List all users of a tailnet. OAuth Scope: `users:read`.

Read read
Parameters
none
Generic call 
kosmo integrations:call tailscale.tailscale_list_users '{}' --json
Shortcut 
kosmo integrations:tailscale tailscale_list_users '{}' --json

tailscale.tailscale_get_user

Get a user Official Tailscale endpoint: GET /users/{userId} Retrieve details about the specified user. OAuth Scope: `users:read`.

Read read
Parameters
none
Generic call 
kosmo integrations:call tailscale.tailscale_get_user '{}' --json
Shortcut 
kosmo integrations:tailscale tailscale_get_user '{}' --json

tailscale.tailscale_update_user_role

Update user role Official Tailscale endpoint: POST /users/{userId}/role Update the role for the specified user. Learn more about [user roles](kb/1138/user-roles). OAuth Scope: `users`. > ⓘ User-based access tokens cannot update their own

Write write
Parameters
none
Generic call 
kosmo integrations:call tailscale.tailscale_update_user_role '{}' --json
Shortcut 
kosmo integrations:tailscale tailscale_update_user_role '{}' --json

tailscale.tailscale_approve_user

Approve a user Official Tailscale endpoint: POST /users/{userId}/approve Approve a pending user's access to the tailnet. This is a no-op if user approval has not been enabled for the tailnet, or if the user is already approved. User approva

Write write
Parameters
none
Generic call 
kosmo integrations:call tailscale.tailscale_approve_user '{}' --json
Shortcut 
kosmo integrations:tailscale tailscale_approve_user '{}' --json

tailscale.tailscale_suspend_user

Suspend a user Official Tailscale endpoint: POST /users/{userId}/suspend Suspends a user from their tailnet. Learn more about [suspending users](/kb/1145/remove-team-members#suspending-users). OAuth Scope: `users`. > ⓘ User-based access t

Write write
Parameters
none
Generic call 
kosmo integrations:call tailscale.tailscale_suspend_user '{}' --json
Shortcut 
kosmo integrations:tailscale tailscale_suspend_user '{}' --json

tailscale.tailscale_restore_user

Restore a user Official Tailscale endpoint: POST /users/{userId}/restore Restores a suspended user's access to their tailnet. Learn more about [restoring users](/kb/1145/remove-team-members#restoring-users). OAuth Scope: `users`. > ⓘ User

Write write
Parameters
none
Generic call 
kosmo integrations:call tailscale.tailscale_restore_user '{}' --json
Shortcut 
kosmo integrations:tailscale tailscale_restore_user '{}' --json

tailscale.tailscale_delete_user

Delete a user Official Tailscale endpoint: POST /users/{userId}/delete Delete a user from their tailnet. Learn more about [deleting users](/kb/1145/remove-team-members#deleting-users). OAuth Scope: `users`. > ⓘ User-based access tokens ca

Write write
Parameters
none
Generic call 
kosmo integrations:call tailscale.tailscale_delete_user '{}' --json
Shortcut 
kosmo integrations:tailscale tailscale_delete_user '{}' --json

tailscale.tailscale_get_contacts

Get contacts Official Tailscale endpoint: GET /tailnet/{tailnet}/contacts Retrieve the tailnet's current contacts. OAuth Scope: `account_settings:read`.

Read read
Parameters
none
Generic call 
kosmo integrations:call tailscale.tailscale_get_contacts '{}' --json
Shortcut 
kosmo integrations:tailscale tailscale_get_contacts '{}' --json

tailscale.tailscale_update_contact

Update contact Official Tailscale endpoint: PATCH /tailnet/{tailnet}/contacts/{contactType} Update the preferences for this type of contact. If the email address has changed, the system will send a verification email to confirm the change.

Write write
Parameters
none
Generic call 
kosmo integrations:call tailscale.tailscale_update_contact '{}' --json
Shortcut 
kosmo integrations:tailscale tailscale_update_contact '{}' --json

tailscale.tailscale_resend_contact_verification_email

Resend verification email Official Tailscale endpoint: POST /tailnet/{tailnet}/contacts/{contactType}/resend-verification-email Resends the verification email for this contact, if and only if verification is still pending. OAuth Scope: `acc

Write write
Parameters
none
Generic call 
kosmo integrations:call tailscale.tailscale_resend_contact_verification_email '{}' --json
Shortcut 
kosmo integrations:tailscale tailscale_resend_contact_verification_email '{}' --json

tailscale.tailscale_list_webhooks

List webhooks Official Tailscale endpoint: GET /tailnet/{tailnet}/webhooks List all webhooks for a tailnet. OAuth Scope: `webhooks:read`.

Read read
Parameters
none
Generic call 
kosmo integrations:call tailscale.tailscale_list_webhooks '{}' --json
Shortcut 
kosmo integrations:tailscale tailscale_list_webhooks '{}' --json

tailscale.tailscale_create_webhook

Create a webhook Official Tailscale endpoint: POST /tailnet/{tailnet}/webhooks Create a webhook within a tailnet. OAuth Scope: `webhooks`.

Write write
Parameters
none
Generic call 
kosmo integrations:call tailscale.tailscale_create_webhook '{}' --json
Shortcut 
kosmo integrations:tailscale tailscale_create_webhook '{}' --json

tailscale.tailscale_get_webhook

Get webhook Official Tailscale endpoint: GET /webhooks/{endpointId} Retrieve a specific webhook. OAuth Scope: `webhooks:read`.

Read read
Parameters
none
Generic call 
kosmo integrations:call tailscale.tailscale_get_webhook '{}' --json
Shortcut 
kosmo integrations:tailscale tailscale_get_webhook '{}' --json

tailscale.tailscale_update_webhook

Update webhook Official Tailscale endpoint: PATCH /webhooks/{endpointId} Update a specific webhook. OAuth Scope: `webhooks`.

Write write
Parameters
none
Generic call 
kosmo integrations:call tailscale.tailscale_update_webhook '{}' --json
Shortcut 
kosmo integrations:tailscale tailscale_update_webhook '{}' --json

tailscale.tailscale_delete_webhook

Delete webhook Official Tailscale endpoint: DELETE /webhooks/{endpointId} Delete a specific webhook. OAuth Scope: `webhooks`.

Write write
Parameters
none
Generic call 
kosmo integrations:call tailscale.tailscale_delete_webhook '{}' --json
Shortcut 
kosmo integrations:tailscale tailscale_delete_webhook '{}' --json

tailscale.tailscale_test_webhook

Test a webhook Official Tailscale endpoint: POST /webhooks/{endpointId}/test Test a specific webhook by sending out a test event to the endpoint URL. This endpoint queues the event which is sent out asynchronously. If your webhook is config

Write write
Parameters
none
Generic call 
kosmo integrations:call tailscale.tailscale_test_webhook '{}' --json
Shortcut 
kosmo integrations:tailscale tailscale_test_webhook '{}' --json

tailscale.tailscale_rotate_webhook_secret

Rotate webhook secret Official Tailscale endpoint: POST /webhooks/{endpointId}/rotate Rotate and generate a new secret for a specific webhook. This secret is used for generating the `Tailscale-Webhook-Signature` header in requests sent to t

Write write
Parameters
none
Generic call 
kosmo integrations:call tailscale.tailscale_rotate_webhook_secret '{}' --json
Shortcut 
kosmo integrations:tailscale tailscale_rotate_webhook_secret '{}' --json

tailscale.tailscale_get_tailnet_settings

Get tailnet settings Official Tailscale endpoint: GET /tailnet/{tailnet}/settings Retrieve the settings for a specific tailnet. OAuth Scope: `feature_settings:read` - required to view all settings except those governed by the below scopes.

Read read
Parameters
none
Generic call 
kosmo integrations:call tailscale.tailscale_get_tailnet_settings '{}' --json
Shortcut 
kosmo integrations:tailscale tailscale_get_tailnet_settings '{}' --json

tailscale.tailscale_update_tailnet_settings

Update tailnet settings Official Tailscale endpoint: PATCH /tailnet/{tailnet}/settings Update the settings for a specific tailnet. OAuth Scope: `feature_settings` - required to update all settings except those governed by the below scopes.

Write write
Parameters
none
Generic call 
kosmo integrations:call tailscale.tailscale_update_tailnet_settings '{}' --json
Shortcut 
kosmo integrations:tailscale tailscale_update_tailnet_settings '{}' --json

tailscale.tailscale_list_services

List all Services Official Tailscale endpoint: GET /tailnet/{tailnet}/services List all Services configured for the tailnet. This includes all Services in the \"advertised\" tab of the Services page in the Tailscale admin console. OAuth Scope

Read read
Parameters
none
Generic call 
kosmo integrations:call tailscale.tailscale_list_services '{}' --json
Shortcut 
kosmo integrations:tailscale tailscale_list_services '{}' --json

tailscale.tailscale_get_service

Get a Service Official Tailscale endpoint: GET /tailnet/{tailnet}/services/{serviceName} Retrieve the details for the specified Service. OAuth Scope: `services:read`.

Read read
Parameters
none
Generic call 
kosmo integrations:call tailscale.tailscale_get_service '{}' --json
Shortcut 
kosmo integrations:tailscale tailscale_get_service '{}' --json

tailscale.tailscale_update_service

Update a Service Official Tailscale endpoint: PUT /tailnet/{tailnet}/services/{serviceName} Update or create the specified Service. If the Service does not exist, it will create a Service with the provided details. When creating a new Servi

Write write
Parameters
none
Generic call 
kosmo integrations:call tailscale.tailscale_update_service '{}' --json
Shortcut 
kosmo integrations:tailscale tailscale_update_service '{}' --json

tailscale.tailscale_delete_service

Delete a Service Official Tailscale endpoint: DELETE /tailnet/{tailnet}/services/{serviceName} Delete the specified Service from the tailnet. OAuth Scope: `services`.

Write write
Parameters
none
Generic call 
kosmo integrations:call tailscale.tailscale_delete_service '{}' --json
Shortcut 
kosmo integrations:tailscale tailscale_delete_service '{}' --json

tailscale.tailscale_list_service_hosts

List devices hosting a Service Official Tailscale endpoint: GET /tailnet/{tailnet}/services/{serviceName}/devices List all devices that are hosting the specified Service. OAuth Scope: `services`, `devices:core`.

Read read
Parameters
none
Generic call 
kosmo integrations:call tailscale.tailscale_list_service_hosts '{}' --json
Shortcut 
kosmo integrations:tailscale tailscale_list_service_hosts '{}' --json

tailscale.tailscale_get_service_device_approval

Get approval status of Service on a device Official Tailscale endpoint: GET /tailnet/{tailnet}/services/{serviceName}/device/{deviceId}/approved Retrieve the approval status of the specified Service on a specific device. OAuth Scope: `servi

Read read
Parameters
none
Generic call 
kosmo integrations:call tailscale.tailscale_get_service_device_approval '{}' --json
Shortcut 
kosmo integrations:tailscale tailscale_get_service_device_approval '{}' --json

tailscale.tailscale_update_service_device_approval

Update approval status of Service on a device Official Tailscale endpoint: POST /tailnet/{tailnet}/services/{serviceName}/device/{deviceId}/approved Update the approval status of the specified Service on a specific device. OAuth Scope: `ser

Write write
Parameters
none
Generic call 
kosmo integrations:call tailscale.tailscale_update_service_device_approval '{}' --json
Shortcut 
kosmo integrations:tailscale tailscale_update_service_device_approval '{}' --json

Function Schemas

Use these parameter tables when building CLI payloads without calling integrations:schema first.

tailscale.tailscale_list_tailnet_devices 0 parameters
Schema command 
kosmo integrations:schema tailscale.tailscale_list_tailnet_devices --json
ParameterTypeRequiredDescription
No parameters.
tailscale.tailscale_batch_update_custom_device_posture_attributes 0 parameters
Schema command 
kosmo integrations:schema tailscale.tailscale_batch_update_custom_device_posture_attributes --json
ParameterTypeRequiredDescription
No parameters.
tailscale.tailscale_get_device 0 parameters
Schema command 
kosmo integrations:schema tailscale.tailscale_get_device --json
ParameterTypeRequiredDescription
No parameters.
tailscale.tailscale_delete_device 0 parameters
Schema command 
kosmo integrations:schema tailscale.tailscale_delete_device --json
ParameterTypeRequiredDescription
No parameters.
tailscale.tailscale_expire_device_key 0 parameters
Schema command 
kosmo integrations:schema tailscale.tailscale_expire_device_key --json
ParameterTypeRequiredDescription
No parameters.
tailscale.tailscale_list_device_routes 0 parameters
Schema command 
kosmo integrations:schema tailscale.tailscale_list_device_routes --json
ParameterTypeRequiredDescription
No parameters.
tailscale.tailscale_set_device_routes 0 parameters
Schema command 
kosmo integrations:schema tailscale.tailscale_set_device_routes --json
ParameterTypeRequiredDescription
No parameters.
tailscale.tailscale_authorize_device 0 parameters
Schema command 
kosmo integrations:schema tailscale.tailscale_authorize_device --json
ParameterTypeRequiredDescription
No parameters.
tailscale.tailscale_set_device_name 0 parameters
Schema command 
kosmo integrations:schema tailscale.tailscale_set_device_name --json
ParameterTypeRequiredDescription
No parameters.
tailscale.tailscale_set_device_tags 0 parameters
Schema command 
kosmo integrations:schema tailscale.tailscale_set_device_tags --json
ParameterTypeRequiredDescription
No parameters.
tailscale.tailscale_update_device_key 0 parameters
Schema command 
kosmo integrations:schema tailscale.tailscale_update_device_key --json
ParameterTypeRequiredDescription
No parameters.
tailscale.tailscale_set_device_ip 0 parameters
Schema command 
kosmo integrations:schema tailscale.tailscale_set_device_ip --json
ParameterTypeRequiredDescription
No parameters.
tailscale.tailscale_get_device_posture_attributes 0 parameters
Schema command 
kosmo integrations:schema tailscale.tailscale_get_device_posture_attributes --json
ParameterTypeRequiredDescription
No parameters.
tailscale.tailscale_set_custom_device_posture_attributes 0 parameters
Schema command 
kosmo integrations:schema tailscale.tailscale_set_custom_device_posture_attributes --json
ParameterTypeRequiredDescription
No parameters.
tailscale.tailscale_delete_custom_device_posture_attributes 0 parameters
Schema command 
kosmo integrations:schema tailscale.tailscale_delete_custom_device_posture_attributes --json
ParameterTypeRequiredDescription
No parameters.
tailscale.tailscale_list_device_invites 0 parameters
Schema command 
kosmo integrations:schema tailscale.tailscale_list_device_invites --json
ParameterTypeRequiredDescription
No parameters.
tailscale.tailscale_create_device_invites 0 parameters
Schema command 
kosmo integrations:schema tailscale.tailscale_create_device_invites --json
ParameterTypeRequiredDescription
No parameters.
tailscale.tailscale_list_user_invites 0 parameters
Schema command 
kosmo integrations:schema tailscale.tailscale_list_user_invites --json
ParameterTypeRequiredDescription
No parameters.
tailscale.tailscale_create_user_invites 0 parameters
Schema command 
kosmo integrations:schema tailscale.tailscale_create_user_invites --json
ParameterTypeRequiredDescription
No parameters.
tailscale.tailscale_get_user_invite 0 parameters
Schema command 
kosmo integrations:schema tailscale.tailscale_get_user_invite --json
ParameterTypeRequiredDescription
No parameters.
tailscale.tailscale_delete_user_invite 0 parameters
Schema command 
kosmo integrations:schema tailscale.tailscale_delete_user_invite --json
ParameterTypeRequiredDescription
No parameters.
tailscale.tailscale_resend_user_invite 0 parameters
Schema command 
kosmo integrations:schema tailscale.tailscale_resend_user_invite --json
ParameterTypeRequiredDescription
No parameters.
tailscale.tailscale_get_device_invite 0 parameters
Schema command 
kosmo integrations:schema tailscale.tailscale_get_device_invite --json
ParameterTypeRequiredDescription
No parameters.
tailscale.tailscale_delete_device_invite 0 parameters
Schema command 
kosmo integrations:schema tailscale.tailscale_delete_device_invite --json
ParameterTypeRequiredDescription
No parameters.
tailscale.tailscale_resend_device_invite 0 parameters
Schema command 
kosmo integrations:schema tailscale.tailscale_resend_device_invite --json
ParameterTypeRequiredDescription
No parameters.
tailscale.tailscale_accept_device_invite 0 parameters
Schema command 
kosmo integrations:schema tailscale.tailscale_accept_device_invite --json
ParameterTypeRequiredDescription
No parameters.
tailscale.tailscale_list_configuration_audit_logs 0 parameters
Schema command 
kosmo integrations:schema tailscale.tailscale_list_configuration_audit_logs --json
ParameterTypeRequiredDescription
No parameters.
tailscale.tailscale_list_network_flow_logs 0 parameters
Schema command 
kosmo integrations:schema tailscale.tailscale_list_network_flow_logs --json
ParameterTypeRequiredDescription
No parameters.
tailscale.tailscale_get_log_streaming_status 0 parameters
Schema command 
kosmo integrations:schema tailscale.tailscale_get_log_streaming_status --json
ParameterTypeRequiredDescription
No parameters.
tailscale.tailscale_get_log_streaming_configuration 0 parameters
Schema command 
kosmo integrations:schema tailscale.tailscale_get_log_streaming_configuration --json
ParameterTypeRequiredDescription
No parameters.
tailscale.tailscale_set_log_streaming_configuration 0 parameters
Schema command 
kosmo integrations:schema tailscale.tailscale_set_log_streaming_configuration --json
ParameterTypeRequiredDescription
No parameters.
tailscale.tailscale_disable_log_streaming 0 parameters
Schema command 
kosmo integrations:schema tailscale.tailscale_disable_log_streaming --json
ParameterTypeRequiredDescription
No parameters.
tailscale.tailscale_get_aws_external_id 0 parameters
Schema command 
kosmo integrations:schema tailscale.tailscale_get_aws_external_id --json
ParameterTypeRequiredDescription
No parameters.
tailscale.tailscale_validate_aws_external_id 0 parameters
Schema command 
kosmo integrations:schema tailscale.tailscale_validate_aws_external_id --json
ParameterTypeRequiredDescription
No parameters.
tailscale.tailscale_list_dns_nameservers 0 parameters
Schema command 
kosmo integrations:schema tailscale.tailscale_list_dns_nameservers --json
ParameterTypeRequiredDescription
No parameters.
tailscale.tailscale_set_dns_nameservers 0 parameters
Schema command 
kosmo integrations:schema tailscale.tailscale_set_dns_nameservers --json
ParameterTypeRequiredDescription
No parameters.
tailscale.tailscale_get_dns_preferences 0 parameters
Schema command 
kosmo integrations:schema tailscale.tailscale_get_dns_preferences --json
ParameterTypeRequiredDescription
No parameters.
tailscale.tailscale_set_dns_preferences 0 parameters
Schema command 
kosmo integrations:schema tailscale.tailscale_set_dns_preferences --json
ParameterTypeRequiredDescription
No parameters.
tailscale.tailscale_list_dns_search_paths 0 parameters
Schema command 
kosmo integrations:schema tailscale.tailscale_list_dns_search_paths --json
ParameterTypeRequiredDescription
No parameters.
tailscale.tailscale_set_dns_search_paths 0 parameters
Schema command 
kosmo integrations:schema tailscale.tailscale_set_dns_search_paths --json
ParameterTypeRequiredDescription
No parameters.
tailscale.tailscale_get_split_dns 0 parameters
Schema command 
kosmo integrations:schema tailscale.tailscale_get_split_dns --json
ParameterTypeRequiredDescription
No parameters.
tailscale.tailscale_set_split_dns 0 parameters
Schema command 
kosmo integrations:schema tailscale.tailscale_set_split_dns --json
ParameterTypeRequiredDescription
No parameters.
tailscale.tailscale_update_split_dns 0 parameters
Schema command 
kosmo integrations:schema tailscale.tailscale_update_split_dns --json
ParameterTypeRequiredDescription
No parameters.
tailscale.tailscale_get_dns_configuration 0 parameters
Schema command 
kosmo integrations:schema tailscale.tailscale_get_dns_configuration --json
ParameterTypeRequiredDescription
No parameters.
tailscale.tailscale_set_dns_configuration 0 parameters
Schema command 
kosmo integrations:schema tailscale.tailscale_set_dns_configuration --json
ParameterTypeRequiredDescription
No parameters.
tailscale.tailscale_list_tailnet_keys 0 parameters
Schema command 
kosmo integrations:schema tailscale.tailscale_list_tailnet_keys --json
ParameterTypeRequiredDescription
No parameters.
tailscale.tailscale_create_key 0 parameters
Schema command 
kosmo integrations:schema tailscale.tailscale_create_key --json
ParameterTypeRequiredDescription
No parameters.
tailscale.tailscale_get_key 0 parameters
Schema command 
kosmo integrations:schema tailscale.tailscale_get_key --json
ParameterTypeRequiredDescription
No parameters.
tailscale.tailscale_set_key 0 parameters
Schema command 
kosmo integrations:schema tailscale.tailscale_set_key --json
ParameterTypeRequiredDescription
No parameters.
tailscale.tailscale_delete_key 0 parameters
Schema command 
kosmo integrations:schema tailscale.tailscale_delete_key --json
ParameterTypeRequiredDescription
No parameters.
tailscale.tailscale_get_policy_file 0 parameters
Schema command 
kosmo integrations:schema tailscale.tailscale_get_policy_file --json
ParameterTypeRequiredDescription
No parameters.
tailscale.tailscale_set_policy_file 0 parameters
Schema command 
kosmo integrations:schema tailscale.tailscale_set_policy_file --json
ParameterTypeRequiredDescription
No parameters.
tailscale.tailscale_preview_rule_matches 0 parameters
Schema command 
kosmo integrations:schema tailscale.tailscale_preview_rule_matches --json
ParameterTypeRequiredDescription
No parameters.
tailscale.tailscale_validate_and_test_policy_file 0 parameters
Schema command 
kosmo integrations:schema tailscale.tailscale_validate_and_test_policy_file --json
ParameterTypeRequiredDescription
No parameters.
tailscale.tailscale_get_posture_integrations 0 parameters
Schema command 
kosmo integrations:schema tailscale.tailscale_get_posture_integrations --json
ParameterTypeRequiredDescription
No parameters.
tailscale.tailscale_create_posture_integration 0 parameters
Schema command 
kosmo integrations:schema tailscale.tailscale_create_posture_integration --json
ParameterTypeRequiredDescription
No parameters.
tailscale.tailscale_get_posture_integration 0 parameters
Schema command 
kosmo integrations:schema tailscale.tailscale_get_posture_integration --json
ParameterTypeRequiredDescription
No parameters.
tailscale.tailscale_update_posture_integration 0 parameters
Schema command 
kosmo integrations:schema tailscale.tailscale_update_posture_integration --json
ParameterTypeRequiredDescription
No parameters.
tailscale.tailscale_delete_posture_integration 0 parameters
Schema command 
kosmo integrations:schema tailscale.tailscale_delete_posture_integration --json
ParameterTypeRequiredDescription
No parameters.
tailscale.tailscale_list_users 0 parameters
Schema command 
kosmo integrations:schema tailscale.tailscale_list_users --json
ParameterTypeRequiredDescription
No parameters.
tailscale.tailscale_get_user 0 parameters
Schema command 
kosmo integrations:schema tailscale.tailscale_get_user --json
ParameterTypeRequiredDescription
No parameters.
tailscale.tailscale_update_user_role 0 parameters
Schema command 
kosmo integrations:schema tailscale.tailscale_update_user_role --json
ParameterTypeRequiredDescription
No parameters.
tailscale.tailscale_approve_user 0 parameters
Schema command 
kosmo integrations:schema tailscale.tailscale_approve_user --json
ParameterTypeRequiredDescription
No parameters.
tailscale.tailscale_suspend_user 0 parameters
Schema command 
kosmo integrations:schema tailscale.tailscale_suspend_user --json
ParameterTypeRequiredDescription
No parameters.
tailscale.tailscale_restore_user 0 parameters
Schema command 
kosmo integrations:schema tailscale.tailscale_restore_user --json
ParameterTypeRequiredDescription
No parameters.
tailscale.tailscale_delete_user 0 parameters
Schema command 
kosmo integrations:schema tailscale.tailscale_delete_user --json
ParameterTypeRequiredDescription
No parameters.
tailscale.tailscale_get_contacts 0 parameters
Schema command 
kosmo integrations:schema tailscale.tailscale_get_contacts --json
ParameterTypeRequiredDescription
No parameters.
tailscale.tailscale_update_contact 0 parameters
Schema command 
kosmo integrations:schema tailscale.tailscale_update_contact --json
ParameterTypeRequiredDescription
No parameters.
tailscale.tailscale_resend_contact_verification_email 0 parameters
Schema command 
kosmo integrations:schema tailscale.tailscale_resend_contact_verification_email --json
ParameterTypeRequiredDescription
No parameters.
tailscale.tailscale_list_webhooks 0 parameters
Schema command 
kosmo integrations:schema tailscale.tailscale_list_webhooks --json
ParameterTypeRequiredDescription
No parameters.
tailscale.tailscale_create_webhook 0 parameters
Schema command 
kosmo integrations:schema tailscale.tailscale_create_webhook --json
ParameterTypeRequiredDescription
No parameters.
tailscale.tailscale_get_webhook 0 parameters
Schema command 
kosmo integrations:schema tailscale.tailscale_get_webhook --json
ParameterTypeRequiredDescription
No parameters.
tailscale.tailscale_update_webhook 0 parameters
Schema command 
kosmo integrations:schema tailscale.tailscale_update_webhook --json
ParameterTypeRequiredDescription
No parameters.
tailscale.tailscale_delete_webhook 0 parameters
Schema command 
kosmo integrations:schema tailscale.tailscale_delete_webhook --json
ParameterTypeRequiredDescription
No parameters.
tailscale.tailscale_test_webhook 0 parameters
Schema command 
kosmo integrations:schema tailscale.tailscale_test_webhook --json
ParameterTypeRequiredDescription
No parameters.
tailscale.tailscale_rotate_webhook_secret 0 parameters
Schema command 
kosmo integrations:schema tailscale.tailscale_rotate_webhook_secret --json
ParameterTypeRequiredDescription
No parameters.
tailscale.tailscale_get_tailnet_settings 0 parameters
Schema command 
kosmo integrations:schema tailscale.tailscale_get_tailnet_settings --json
ParameterTypeRequiredDescription
No parameters.
tailscale.tailscale_update_tailnet_settings 0 parameters
Schema command 
kosmo integrations:schema tailscale.tailscale_update_tailnet_settings --json
ParameterTypeRequiredDescription
No parameters.
tailscale.tailscale_list_services 0 parameters
Schema command 
kosmo integrations:schema tailscale.tailscale_list_services --json
ParameterTypeRequiredDescription
No parameters.
tailscale.tailscale_get_service 0 parameters
Schema command 
kosmo integrations:schema tailscale.tailscale_get_service --json
ParameterTypeRequiredDescription
No parameters.
tailscale.tailscale_update_service 0 parameters
Schema command 
kosmo integrations:schema tailscale.tailscale_update_service --json
ParameterTypeRequiredDescription
No parameters.
tailscale.tailscale_delete_service 0 parameters
Schema command 
kosmo integrations:schema tailscale.tailscale_delete_service --json
ParameterTypeRequiredDescription
No parameters.
tailscale.tailscale_list_service_hosts 0 parameters
Schema command 
kosmo integrations:schema tailscale.tailscale_list_service_hosts --json
ParameterTypeRequiredDescription
No parameters.
tailscale.tailscale_get_service_device_approval 0 parameters
Schema command 
kosmo integrations:schema tailscale.tailscale_get_service_device_approval --json
ParameterTypeRequiredDescription
No parameters.
tailscale.tailscale_update_service_device_approval 0 parameters
Schema command 
kosmo integrations:schema tailscale.tailscale_update_service_device_approval --json
ParameterTypeRequiredDescription
No parameters.

Permissions

Headless calls still follow the integration read/write permission policy. Configure read/write defaults with integrations:configure. Add --force only for trusted automation that should bypass that policy.