DumbMonit
IntegrationsNetwork and firewalls
Monitor Tailscale with DumbMonit
The devices of a tailnet through the Tailscale API: servers offline, node keys about to expire, devices awaiting approval, clients to update, and each device's last connection.
DocumentationOfficial website: Tailscale
Product descriptions are in English, as in the product. The page labels follow your language.
What DumbMonit watches
The devices of a tailnet through the Tailscale API: servers that went offline, node keys about to expire, devices waiting for approval, and clients with an update available. DumbMonit reads GET /api/v2/tailnet/{tailnet}/devices on api.tailscale.com, once a minute. The recommended credential is an OAuth client limited to the devices:core:read scope: DumbMonit exchanges its ID and secret for a one-hour token (/api/v2/oauth/token) and keeps it until it expires. It can list the devices and change nothing. An API access token (tskey-api-…) works too, but it carries every right of the user who created it and expires after 90 days at most.
Typical use. Tailnet: servers offline, node keys expiring, devices awaiting approval
Examples
- Tailscale tailnet
- Subnet routers
- Exit nodes
How it connects
What you need
- OAuth clientRecommended: a client limited to the devices:core:read scope, which can change nothing.
- API access tokenWorks too, but carries every right of the user who created it and expires after 90 days at most.
Network ports to open
443/TCPTailscale API (HTTPS, api.tailscale.com)
Setup steps: Create a read-only OAuth client for DumbMonit
In the Tailscale console (login.tailscale.com), open Settings → Trust credentials → Credential → OAuth.
Tick only the read scope listed below, then click Generate credential.
Copy the client ID and the client secret (tskey-client-...): the secret is shown once.
In DumbMonit, enter api.tailscale.com as address and paste them as Client ID and Client secret; leave the Tailnet option empty.
Heads-up. Only tagged devices (servers, subnet routers, exit nodes) are expected to stay online: name the ones to watch in the Devices to keep online option, or enter all.