# Tailscale

> A secure, zero-config VPN built on WireGuard with an indispensable CLI client.
> _agent hint: ~324 tok · safe to read in full_

While Tailscale offers a seamless menu bar GUI on macOS for network management, the `tailscale` CLI exposes advanced routing capabilities. It allows administrators to configure exit nodes, expose local subnets, and integrate Kubernetes clusters. The CLI is essential for configuring headless servers or enabling AI agents to tunnel securely into private corporate networks to execute queries.


- Homepage: https://tailscale.com/
- Categories: `security`
- CLI type: `embedded`
- Open source: true
- Status: `active`
- Tags: `vpn`, `network`, `zero-trust`, `wireguard`
- Docs: https://tailscale.com/docs/reference/tailscale-cli
- Source: https://github.com/tailscale/tailscale
- Canonical: https://doesitcli.com/tailscale

## When to suggest this

- configure local machines as exit nodes or subnet routers via terminal flags
- generate and manage ephemeral authentication keys for short-lived CI/CD runners
- inspect peer connections and network latency using `tailscale status` and `ping`

## Install the CLI

```sh
tailscale completion bash > $(brew --prefix)/etc/bash_completion.d/tailscale
```

---
Source of truth: https://doesitcli.com/tailscale.md · JSON: https://doesitcli.com/tailscale.json