# Tailscale

---
title: Connecting Tailscale to WatchDog Security
category: Integrations
integration_type: api_token
products_supported:
  - Posture Management
  - Inventory
  - Compliance Center
---
This guide explains how to connect **Tailscale** to WatchDog Security using an **API token**.

Once connected, WatchDog will begin monitoring your Tailscale environment for security posture risks, configuration issues, and device inventory information across your tailnet.

---

## What WatchDog Monitors

:::tip[]
WatchDog operates in **read-only mode** and does **not modify configuration settings** within your Tailscale environment.
:::

After the integration is connected, WatchDog may monitor the following configuration areas:

<Accordion title="Scopes" defaultOpen>

**Tailnet Security Settings**

- Tailnet security configuration
- Access policies and security posture settings
- Tailnet configuration details

**Tailnet Devices**

- Devices connected to the tailnet
- Device metadata and device status
- Device ownership and device connectivity details

</Accordion>

The exact information collected depends on the permissions granted to the API token.

---

## Requirements

Before connecting the integration, ensure the following:

- You have **administrator access** to the Tailscale admin console
- You're an **Account Owner** or **Security Admin** in the WatchDog Security portal

---

## Step 1 — Generate a Tailscale API Token

You can generate a trusted credential directly from the **Tailscale Admin Console**.

1. Log into the **Tailscale Admin Console**
2. Navigate to: Settings → Trusted Credentials
3. Click **+ Credential**
4. Under **New Credential**, select:
5. Enter a description for the credential (for example: **WatchDog Security**)
6. Click **Continue**
7. Under **Scopes**, select: All — Read
8. Click **Generate Credentials**
9. Copy the generated **Client Secret / API Token**

:::note[]
Tailscale credentials are shown **only once** after creation. Store the credential securely before continuing.
:::

---

## Step 2 — Connect the Integration in WatchDog

1. Log into the **WatchDog Security Portal**
2. Navigate to **Management → Integrations**
3. Locate **Tailscale**
4. Click **Connect**
5. Paste the generated **API Token**
6. Click **Connect Integration**

Once the connection is successful, WatchDog will begin synchronizing data from your Tailscale environment.

---

## Initial Sync

<Accordion title="After the integration is connected" defaultOpen>

- WatchDog will begin collecting data from Tailscale
- The first synchronization typically completes within **5–10 minutes**

</Accordion>

<Accordion title="Data will appear within the following modules" defaultOpen>

- **Posture Management**
- **Inventory**
- **Compliance Center**

</Accordion>

---

## Troubleshooting

<AccordionGroup>

<Accordion title="Integration Fails to Connect" defaultOpen>

Verify the following:

- The API token was copied correctly
- The token was generated with **All — Read** permissions
- The token has not been revoked or expired

</Accordion>

<Accordion title="No Data Appears">

If data does not appear after connecting:

- Wait for the initial synchronization to complete
- Verify the credential permissions
- Reconnect the integration if necessary

</Accordion>

</AccordionGroup>

---

## Related Documentation

- [Tailscale Trusted Credentials](https://tailscale.com/docs/reference/trust-credentials)
