Connect OpenClaw to Tailscale
Set up in minutes
Choose where it runs
On your computer through your own OpenClaw, or hosted in the cloud. The rest of setup adapts to your choice:
Pick what it can do in Tailscale
A preset of real Tailscale operations. Each one becomes a tool the agent can call, and it can't touch anything outside the list.
Connect Tailscale
One sign-in. The agent acts through your account, scoped to the operations you picked.
Add your personal MCP link
The last step mints a private MCP URL for this agent and walks you through exactly this, with your real link filled in. The page flips to Connected the moment your OpenClaw first calls in. OpenClaw probes the server while adding it, so this lights up during openclaw mcp add.
Run this in your terminal
<your-link> is your personal server URL — setup mints it for you.
Tools OpenClaw gets
Tailscale
21 toolsList all devices in the tailnet, without pagination.
Get a device's details.
Remove a device from its tailnet.
Expire the device's node key, requiring reauthentication.
Read advertised and enabled subnet routes.
Replace enabled routes; an empty list disables all routes.
Authorize or deauthorize a device.
Set a device's MagicDNS name, or reset it from its OS hostname.
Replace the complete list of identity tags on a device.
Enable or disable device key expiry.
Read the global DNS nameservers.
Replace global DNS nameservers; [] removes them.
Read whether MagicDNS is enabled.
Enable or disable MagicDNS.
Read DNS search domains.
Replace DNS search domains; [] removes them.
List key metadata; secret key material is omitted.
Read metadata for an auth key or trust credential.
Revoke an auth key or trust credential.
List tailnet users with optional relation and role filters.
Get a tailnet user's details.
About OpenClaw
Frequently asked questions
More ways to connect
More tools for OpenClaw
Use Tailscale with other agents
Open your OpenClaw agent in one click.
NoClick runs OpenClaw for you with Tailscale wired in as tools. Connect your account and run.