Connect Codex to Tailscale
Set up in minutes
Choose where it runs
On your computer through your own Codex, or hosted in the cloud. The rest of setup adapts to your choice:
Pick what it can do in Tailscale
A preset of real Tailscale operations. Each one becomes a tool the agent can call, and it can't touch anything outside the list.
Connect Tailscale
One sign-in. The agent acts through your account, scoped to the operations you picked.
Add your personal MCP link
The last step mints a private MCP URL for this agent and walks you through exactly this, with your real link filled in. The page flips to Connected the moment your Codex first calls in. Codex connects when a session starts — run codex, or restart a running one (in the Codex app, Restart).
Run this in your terminal. The Codex app shares its config, so it gets the server too
<your-link> is your personal server URL — setup mints it for you.
Tools Codex gets
Tailscale
21 toolsList all devices in the tailnet, without pagination.
Get a device's details.
Remove a device from its tailnet.
Expire the device's node key, requiring reauthentication.
Read advertised and enabled subnet routes.
Replace enabled routes; an empty list disables all routes.
Authorize or deauthorize a device.
Set a device's MagicDNS name, or reset it from its OS hostname.
Replace the complete list of identity tags on a device.
Enable or disable device key expiry.
Read the global DNS nameservers.
Replace global DNS nameservers; [] removes them.
Read whether MagicDNS is enabled.
Enable or disable MagicDNS.
Read DNS search domains.
Replace DNS search domains; [] removes them.
List key metadata; secret key material is omitted.
Read metadata for an auth key or trust credential.
Revoke an auth key or trust credential.
List tailnet users with optional relation and role filters.
Get a tailnet user's details.
About Codex
Frequently asked questions
More ways to connect
More tools for Codex
Use Tailscale with other agents
Open your Codex agent in one click.
NoClick runs Codex for you with Tailscale wired in as tools. Connect your account and run.