tailgate

bendrucker/tailgate
★ 0 stars Go Security Updated today
Securely serve local MCP servers to the public internet using Tailscale Funnel and OAuth
View on GitHub → 🔍 Audit Wallet Slippage →

Quick Install

Copy the config for your editor. Some servers may need additional setup — check the README.

Add to claude_desktop_config.json:

{
  "mcpServers": {
    "tailgate": {
      "command": "go",
      "args": [
        "run",
        "github.com/bendrucker/tailgate@latest"
      ]
    }
  }
}

README Excerpt

tailgate fronts [Model Context Protocol](https://modelcontextprotocol.io) servers behind Tailscale. It embeds a Tailscale node with [tsnet](https://tailscale.com/kb/1244/tsnet), exposes itself over [Funnel](https://tailscale.com/kb/1223/funnel), issues the OAuth tokens its clients present, and forwards only authorized calls to the MCP servers behind it. It stops identities tailgating their way into servers you exposed to the internet on purpose.