Tailscale API Key

Description

General

• Documentation: https://tailscale.com/kb/1101/api/
• Summary: Tailscale is a zero-configuration virtual private network (VPN) solution, making it simple to create secure networks between computers, servers, and cloud instances. Tailscale supports an API to let customers automate various aspects of their network. This key allows the customer to authenticate to use the API.
• IPs allowlist: IP allowlists (or Block lists) are possible, see Tailscale IP Block lists.
• Scopes: This key grants access to applications in the tailnet using the Tailscale API.

Revoke the secret

The API keys expire quickly. They can also be revoked in the Tailscale Keys page.

Check for suspicious activity

Keys and secrets activity can be monitored in the Logs page of the Tailscale admin consoles.

Details for Tailscale API Key

• Family: token

• Category: remote_access

• Company: Tailscale

• High recall: True

• Validity check available: True

• Analyzer available: False

• On-premise instances exist: False

• Only valid secrets raise an alert: False

• Minimum number of matches: 1

• Occurrences found for one million commits: 0.05

• Prefixed: True

• PreValidators:

- type: ContentWhitelistPreValidator
  patterns:
    - tskey-api-

Examples

- text: "+TAILSCALE_API_KEY = 'tskey-api-bcSWBhEIi3B0-6zePybp9BncO6mwnVtWpj6qoIeLFgrYc'"
  apikey: tskey-api-bcSWBhEIi3B0-6zePybp9BncO6mwnVtWpj6qoIeLFgrYc

# Fat-fingered secret
- text: Xtskey-api-bcSWBhEIi3B0-6zePybp9BncO6mwnVtWpj6qoIeLFgrYc
  apikey: tskey-api-bcSWBhEIi3B0-6zePybp9BncO6mwnVtWpj6qoIeLFgrYc