YawLabs/tailscale-mcp v0.11.1

on GitHub

What's new

Internal hardening from the post-v0.11.0 review. No user-facing behavior change except one nice-to-have:

• tailscale_ping now rejects malformed hostnames (leading/trailing hyphen, consecutive dots, empty labels, labels > 63 chars) at the schema layer with a clear Invalid ping target error, instead of letting tailscale ping exit non-zero with a less helpful message. Valid hostnames and IPs (including IPv6) are unaffected.

Refactor + test coverage

• The TAILSCALE_LOCAL_CLI=1|true gate was previously inlined in two places in index.ts (registering the tool group + driving the local-cli=on banner suffix). Extracted to a single isLocalCliEnabled(env) predicate in server-wiring.ts.
• 8 new contract tests pin the gate's exact-string handling: matches '1' and 'true' only; rejects 'TRUE' / 'True' / 'yes' / 'on' / 'enabled' / '0' / 'false' / empty / unset. A typo'd refactor of the gate would now fail tests instead of silently shipping.

Install

npx -y @yawlabs/tailscale-mcp@0.11.1

927 unit tests pass; lint clean.