Audit a Device’s Network Context
Inspect Tailscale device [device ID], its subnet routes, and security posture. Explain anything that may affect access.
tailscale
Tailscale AI Employee
Leina connects to Tailscale to help you inspect devices and test network policies. Ask in your team chat. Leina does the work and brings back the result.
Connect Tailscale, choose what to share, and hand off your first task.
Leina + Tailscale Example Result
You
Review the build server’s device record, subnet routes, and posture. What needs attention?
Leina
The server is authorized, but its advertised subnet route is not enabled.
Tailscale · Example
Build server · Network review
Device access and subnet routing, reviewed together.
- Device
- Build server is authorized on the network.
- Route
- The advertised subnet is not yet enabled.
- Follow-up
- Check whether this server should provide subnet access.
What Is a Tailscale AI Agent?
A Tailscale AI agent can inspect device access, review network changes, and test a proposed policy before it is saved.
You specify the source and the destination. Leina uses the content available to your connection and returns the result for you to review.
Tailscale
Tailscale connects devices through a private network.
-
Select the device
Provide the device you want to inspect.
-
Read network settings
Check authorization, routes, and reported posture.
-
Summarize gaps
Explain settings that may affect access.
What to Ask Leina to Do with Tailscale
Copy a prompt, add your details, and send it to Leina in your connected team chat.
Validate a Proposed Policy
Read the current Tailscale policy and test this proposed policy: [policy]. Explain validation results without saving changes.
tailscale
Review Configuration Changes
Review Tailscale configuration changes during [time range and time zone]. Summarize who changed what.
tailscale
Your next Tailscale task can start with a message.
Connect. Ask. Get the Result.
Tell Leina what you need in your team chat. Include the source, destination, and expected result.
-
Connect Your Account
Connect the tools involved and give Leina access to the content it needs.
-
Try a Task
Share the source material, say where the result belongs, and describe what you need.
-
Check the Result
Review the result and any changes in the connected app.
Put Leina to Work in Tailscale
Hand off these everyday tasks to your AI employee.
List Devices
List all devices in the configured Tailscale tailnet.
Get Device
Get one Tailscale device by its preferred node ID or legacy device ID.
List Device Routes
List the subnet routes advertised and enabled for a Tailscale device.
Get Device Posture Attributes
Get the posture attributes currently reported for a Tailscale device.
List Configuration Audit Logs
List configuration audit logs for an RFC 3339 time window, with optional filters.
Get Log Streaming Status
Get the current publishing status for configuration or network log streaming.
List Dns Nameservers
List the global DNS nameservers configured for the tailnet.
Get Dns Preferences
Get the tailnet DNS preferences, including MagicDNS state.
List Dns Search Paths
List the DNS search paths configured for the tailnet.
Get Split Dns
Get the split DNS nameserver mapping for the tailnet.
Get Dns Configuration
Get the complete DNS configuration for the tailnet.
List Users
List tailnet users with optional user-type and role filters.
Get User
Get a Tailscale user by user ID.
Get Contacts
Get the account, support, and security contacts for the tailnet.
Get Tailnet Settings
Get the tailnet feature, logging, networking, and policy settings visible to the OAuth client.
List Services
List the Services configured in the tailnet.
Get Service
Get a Tailscale Service by name.
Set Device Routes
Replace the enabled subnet routes for a Tailscale device.
Set Device Authorized
Authorize or deauthorize a Tailscale device.
Set Device Name
Set a Tailscale device name, or reset it from the OS hostname with an empty name.
Set Device Tags
Replace all ACL tags assigned to a Tailscale device.
Set Device Ip
Set the Tailscale IPv4 address for a device.
Set Device Posture Attribute
Set one custom posture attribute on a Tailscale device.
Set Dns Nameservers
Replace the global DNS nameservers configured for the tailnet.
Set Dns Preferences
Enable or disable MagicDNS for the tailnet.
Set Dns Search Paths
Replace the DNS search paths configured for the tailnet.
Update Split Dns
Merge domain-to-resolver entries into the tailnet split DNS configuration.
Set Split Dns
Replace the entire tailnet split DNS configuration.
Set Dns Configuration
Replace the entire tailnet DNS configuration, including nameservers, split DNS, search paths, and preferences.
Update Tailnet Settings
Update reversible feature, logging, networking, or policy-link settings for the tailnet.
Update Service
Create or replace a named Tailscale Service definition.
List Service Hosts
List devices currently hosting a named Tailscale Service.
Get Service Device Approval
Get whether a Service is approved on a specific device.
Update Service Device Approval
Approve or revoke approval for a Service on a device.
Batch Update Device Posture Attributes
Set or remove custom posture attributes across multiple Tailscale devices.
Delete Device
Permanently delete a device from its Tailscale tailnet.
Expire Device Key
Immediately expire a device key and require the device to authenticate again.
Set Device Key Expiry
Enable or disable key expiry for a Tailscale device.
Delete Device Posture Attribute
Permanently remove one custom posture attribute from a Tailscale device.
Get Log Streaming Configuration
Get the potentially sensitive destination configuration for a Tailscale log stream.
Set Log Streaming Configuration
Create or replace a Tailscale log streaming destination configuration.
Disable Log Streaming
Disable and remove the destination configuration for a Tailscale log stream.
Get Aws External Id
Create or retrieve the AWS external ID used by Tailscale log streaming.
Validate Aws External Id
Validate an AWS IAM role trust policy against a Tailscale external ID.
List Keys
List trust credentials and keys visible to the OAuth client.
Create Key
Create an auth key, OAuth client credential, or federated trust credential and return its secret.
Get Key
Get metadata for a Tailscale trust credential or key.
Delete Key
Permanently revoke and delete a Tailscale trust credential or key.
Update Key
Replace the mutable configuration of an OAuth or federated Tailscale trust credential.
Get Policy File
Get the current Tailscale policy file as JSON, optionally with validation details.
Set Policy File
Replace the Tailscale policy file after its embedded tests pass.
Update User Role
Change a Tailscale user's administrative role.
Approve User
Approve a pending Tailscale user for the tailnet.
Suspend User
Suspend a Tailscale user and their access to the tailnet.
Restore User
Restore a suspended Tailscale user.
Delete User
Permanently delete a Tailscale user from the tailnet.
Update Contact
Change the account, support, or security contact email for the tailnet.
Resend Contact Verification Email
Resend the verification email for a tailnet contact.
List Webhooks
List webhook endpoints configured for the tailnet.
Create Webhook
Create a webhook endpoint and return its signing secret.
Get Webhook
Get a Tailscale webhook endpoint by ID.
Update Webhook
Replace the subscribed events for a Tailscale webhook endpoint.
Delete Webhook
Permanently delete a Tailscale webhook endpoint.
Test Webhook
Send a test event to a Tailscale webhook endpoint.
Rotate Webhook Secret
Rotate a webhook signing secret and return the new secret once.
Delete Service
Permanently delete a named Tailscale Service.
List Oauth Apps
List OAuth applications configured for the tailnet.
Create Oauth App
Create a Tailscale OAuth application and return its client secret.
Get Oauth App
Get a Tailscale OAuth application by app ID.
Update Oauth App
Replace the configuration of a Tailscale OAuth application.
Delete Oauth App
Permanently delete a Tailscale OAuth application and revoke its access.
List Device Invites
List all share invites for a Tailscale device.
Get Device Invite
Get one Tailscale device share invite.
Delete Device Invite
Delete a Tailscale device share invite.
List Network Flow Logs
List network flow logs for an RFC 3339 time window.
Preview Policy Rule Matches
Preview which rules in a proposed policy match a user or IP address and port without saving it.
Validate Policy File
Validate a proposed policy file or run ACL tests without changing the tailnet policy.
List Posture Integrations
List the device posture integrations configured for the tailnet.
Create Posture Integration
Create a device posture integration using its external provider credentials.
Get Posture Integration
Get one device posture integration by ID.
Update Posture Integration
Update a device posture integration and optionally replace its client secret.
Delete Posture Integration
Delete a device posture integration.
More Tools for Your AI Employee
Connect the Apps your work depends on, and give Leina the context to carry the task forward.
Keep the Conversation Moving. Let Leina Pick Up the Work.
Hand off a task while your team is discussing it. Leina uses your connected tools and brings the result back to the conversation.
See How Leina Works in SlackLeinaExample Result The server is authorized, but its advertised subnet route is not enabled.
Build server · Network review
Tailscale + Leina: Your Questions, Answered
Can I test a policy before applying it?
Yes. Ask for validation only; the saved network policy remains unchanged.
What access does the connection need?
Use a Tailscale OAuth client with permission for the devices and settings you want to manage.
Make Leina Your Tailscale AI Employee
Start with one task you already need to do. Tell Leina what a finished result should look like.
Connect Tailscale, choose what to share, and hand off your first task.