Tailscale launches OAuth apps to provide secure agent access to private networks

Tailscale has announced the general availability of OAuth apps, a new feature designed to bridge the gap between AI agents and private networks. This release enables third-party agents, such as Grok Bot, to connect to a user's tailnet via a standard OAuth 2.0 authorization flow without exposing internal infrastructure to the public internet.

Unlike previous OAuth clients that functioned as shared service identities, these new OAuth apps operate on behalf of the authorizing user. This ensures that all network access remains tied to the specific user's identity, allowing existing tailnet access policies, audit logs, and device quotas to be applied to the agent's connection.

Identity-based access and posture controls

• Identity Model: OAuth apps act on behalf of the authorizing user rather than creating a separate, tag-owned service identity, ensuring the agent inherits the user's specific identity context.
• Granular Policy Enforcement: Users can utilize Tailscale's device posture checks to restrict agent access; Premium and Enterprise users can apply custom posture attributes to differentiate agent traffic from human traffic.
• Access Control Logic: The implementation allows for highly specific grants where an agent can be permitted to reach specific resources, such as Model Context Protocol (MCP) servers, while being denied the broader network access typically held by the user's primary devices.
• Integration Example: The system supports complex policy definitions where a 'defaultSrcPosture' can prevent agents from inheriting standard user permissions, requiring explicit grants for specific destination tags and ports.

Why it matters

This development provides a secure framework for developers building AI-driven tools that require access to private data or local services. By integrating OAuth 2.0 with identity-based networking, it reduces the security risks associated with exposing internal Model Context Protocol servers or databases to the open web.