A Tailscale device (sometimes referred to as node or machine)
tailscale.device MQL resource for querying Tailscale infrastructure with cnquery and cnspec.
Tailscale
A Tailscale device (sometimes referred to as node or machine)
Use MQL in cnspec shell or policy:
tailscale.deviceMin version: 9.0.0Defaults:
id hostname osRelationships
2 resources · 2 relationships·Click to select, expand fields to see properties.
Fields (20)
| Field | Type | Description |
|---|---|---|
addressesrequired | []string | List of Tailscale IP addresses for the device, including both IPv4 and IPv6 addresses |
authorizedrequired | int | Whether the device is authorized to join the tailnet |
blocksIncomingConnectionsrequired | int | Whether the device is blocked from accepting connections over Tailscale, including pings |
clientVersionrequired | string | Version of the Tailscale client software (empty for external devices) |
createdAtrequired | time | Date when the device was added to the tailnet (empty for external devices) |
expiresAtrequired | time | Expiration date of the device's auth key |
hostnamerequired | string | Preferred identifier for a device (not supported yet) |
idrequired | string | Legacy identifier for a device |
isExternalrequired | int | Whether a device is shared into the tailnet (rather than a member of the tailnet) |
keyExpiryDisabledrequired | int | Whether key expiration is disabled for the device |
lastSeenAtrequired | time | When device was last active on the tailnet |
machineKeyrequired | string | Machine key used by Tailscale (empty for external devices) |
namerequired | string | MagicDNS name of the device |
nodeKeyrequired | string | Node key primarily used by Tailscale and required for select operations, such as adding a node to a locked tailnet |
osrequired | string | Operating system that the device is running |
tagsrequired | []string | An identity for the device that is separate from human users (used as part of an ACL to restrict access) |
tailnetLockErrorrequired | string | Issue with the tailnet lock node-key signature on this device (only populated when tailnet lock is enabled) |
tailnetLockKeyrequired | string | Node's tailnet lock key |
updateAvailablerequired | int | Whether a Tailscale client version upgrade is available (empty for external devices) |
userrequired | string | User who registered the node (For untagged nodes, this user is the device owner.) |
Field Details
hostnamestring
nodeId string Machine name in the admin console