Tailscale OAuth apps go GA, letting AI agents reach private MCP servers securely
rudrank · x · 2026-11-10
- Tailscale's OAuth apps are now generally available, letting AI agents access resources on a tailnet via a standard OAuth 2.0 flow acting on behalf of the authorizing user — already in production with Grok Bot connecting to private MCP servers without exposing them to the public internet.
- Unlike existing OAuth clients (tag-owned devices under a shared service identity), OAuth apps carry the user's identity, so tailnet policies, audit logs, and device quotas still apply. Premium/Enterprise plans add custom posture attributes for fine-grained access control.
- Key pitch: give your agent access without giving it access to everything — no keys or secrets pasted anywhere.
More from coding & agent
- NODES session: Test-time strategies like confidence decoding and schema filtering for reliable Text2Cypher — JeremyCMorgan · 2026-11-10
- Stacking More MCP Servers Made My Agent Worse, Reddit User Says — Glittering-Bus-8500 · 2026-11-10
- Anthropic engineer's AI-built browser FPS nears COD quality, sparking 'one year to Sea of Thieves' claim — ChrisGPT · 2026-11-10
- Tech debt in the AI era: paid in full whenever the next frontier model ships — doodlestein · 2026-11-10
- Claude-coded Valheim mod rebuilds Ocarina of Time's Kokiri Forest from your own ROM — Any-Explanation3814 · 2026-11-10
- App Store Connect CLI 6.5 adds subscription retention messages and offers — rudrank · 2026-11-10