Tailscale Webhook Key

Description

General

Documentation: https://tailscale.com/kb/1213/webhooks/
Summary: Tailscale is a zero-configuration virtual private network (VPN) solution, making it simple to create secure networks between computers, servers, and cloud instances. Webhooks allow to subscribe to certain events on the Tailscale network and process the event notifications through an integration or app. For example, Tailscale events can be sent to a Slack channel.
IPs allowlist: IP allowlists (or Block lists) are possible, see Tailscale IP Block lists.
Scopes: Webhooks are used to send fake events to the connected app.

Revoke the secret

Webhooks can be deleted in the webhooks page

Check for suspicious activity

Keys and secrets activity can be monitored in the Logs page of the Tailscale admin consoles.

Details for `Tailscale webhook key`

Family: Api
Category: Remote access
Company: Tailscale
High recall: True
Validity check available: True
On-premise instances exist: False
Only valid secrets raise an alert: False
Minimum number of matches: 1
Occurrences found for one million commits: very rare
Prefixed: True
PreValidators:

- type: ContentWhitelistPreValidator
  patterns:
    - tskey-webhook-

Examples

- text: "+TAILSCALE_WEBHOOK_KEY = 'tskey-webhook-PQcca2VZOjvh-17JXVvyEZyKIOvxsuYzmiNWqvk40SIvzD'"
  apikey: tskey-webhook-PQcca2VZOjvh-17JXVvyEZyKIOvxsuYzmiNWqvk40SIvzD

# Fat-fingered secret
- text: Xtskey-webhook-PQcca2VZOjvh-17JXVvyEZyKIOvxsuYzmiNWqvk40SIvzD
  apikey: tskey-webhook-PQcca2VZOjvh-17JXVvyEZyKIOvxsuYzmiNWqvk40SIvzD