From 956aee2348229e9d0909253cf5417f14b707c1d3 Mon Sep 17 00:00:00 2001 From: "Eric G.Y Liu" Date: Fri, 16 Oct 2026 18:49:43 -0700 Subject: [PATCH 1/2] tailscale: cover the company tailnet in the description and setup skill --- third_party/tailscale/.cursor-plugin/plugin.json | 4 ++-- third_party/tailscale/CHANGELOG.md | 5 +++++ third_party/tailscale/skills/tailscale-setup/SKILL.md | 3 +++ 3 files changed, 10 insertions(+), 2 deletions(-) diff --git a/third_party/tailscale/.cursor-plugin/plugin.json b/third_party/tailscale/.cursor-plugin/plugin.json index 781b51306..1ed207b9b 100644 --- a/third_party/tailscale/.cursor-plugin/plugin.json +++ b/third_party/tailscale/.cursor-plugin/plugin.json @@ -1,13 +1,13 @@ { "name": "tailscale", "displayName": "Tailscale", - "version": "1.0.0", + "version": "1.0.1", "minClientVersions": { "cursor": "never", "grokbot": "0.49.0", "sand": "0.49.0" }, - "description": "Let Grok Bot reach MCP servers on your private Tailscale network. Sign in to Tailscale to connect your tailnet; Grok Bot joins it as one tagged device and only reaches the hosts you grant to tag:grokbot.", + "description": "Let Grok Bot reach MCP servers on your private Tailscale network. On your own tailnet it joins as one tag:grokbot device; on your team's company tailnet, turned on by a team admin, it uses each member's own device.", "author": { "name": "Cursor", "email": "plugins@cursor.com" diff --git a/third_party/tailscale/CHANGELOG.md b/third_party/tailscale/CHANGELOG.md index 3a298f6e2..2bf626dc8 100644 --- a/third_party/tailscale/CHANGELOG.md +++ b/third_party/tailscale/CHANGELOG.md @@ -2,6 +2,11 @@ All notable changes to this plugin will be documented here. +## 1.0.1 + +- Description and setup skill cover the team's company tailnet as well as the personal tailnet. +- The setup skill points reachability checks to Check host and explains the `tag:grokbot` refusal on company tailnets. + ## 1.0.0 — initial release - Added the `tailscale` plugin, the opt-in for Grok Bot's built-in Tailscale connection. Installing it and signing in to Tailscale joins Grok Bot to your tailnet as one device tagged `tag:grokbot`. diff --git a/third_party/tailscale/skills/tailscale-setup/SKILL.md b/third_party/tailscale/skills/tailscale-setup/SKILL.md index 7930011ea..de58bfbd6 100644 --- a/third_party/tailscale/skills/tailscale-setup/SKILL.md +++ b/third_party/tailscale/skills/tailscale-setup/SKILL.md @@ -7,6 +7,8 @@ description: Walk a user through connecting Grok Bot to their Tailscale tailnet Grok Bot joins the user's tailnet as one device tagged `tag:grokbot`. It can reach only the hosts and ports the tailnet policy file grants to that tag, so set up the policy before signing in. +On a team's company tailnet, which a Grok Bot team admin turns on in the Tailscale plugin, each member connects their own Grok Bot device from the team row instead, and no `tag:grokbot` policy is needed. If signing in on the personal row fails with a `tag:grokbot` error on a company tailnet, use the company tailnet. + ## 1. Define the tag and grant access In the Tailscale admin console, open **Access controls** and edit the policy file: @@ -52,5 +54,6 @@ Click **Remove** on the Tailscale plugin page in Grok Bot. ## Troubleshooting +- **Checking whether a host is reachable:** use the Tailscale plugin's Check host tool, not curl from the bot computer, which only uses the personal connection. To use a server, add it as an MCP server. - **Cannot reach a host:** check that a grant from `tag:grokbot` covers that host and port, and that the device is approved (and signed, with Tailnet Lock). - **Sign-in cannot apply the tag:** the signing-in user is not an owner of `tag:grokbot` in `tagOwners`. From 572fe39aa68d8ad6c86a10356c5cf8553282dc07 Mon Sep 17 00:00:00 2001 From: "Eric G.Y Liu" Date: Fri, 16 Oct 2026 21:24:45 -0700 Subject: [PATCH 2/2] tailscale: sync the listing description in marketplace.json and the READMEs --- .cursor-plugin/marketplace.json | 2 +- README.md | 2 +- third_party/tailscale/README.md | 2 +- 3 files changed, 3 insertions(+), 3 deletions(-) diff --git a/.cursor-plugin/marketplace.json b/.cursor-plugin/marketplace.json index b478177bc..f0c3bd371 100644 --- a/.cursor-plugin/marketplace.json +++ b/.cursor-plugin/marketplace.json @@ -546,7 +546,7 @@ { "name": "tailscale", "source": "third_party/tailscale", - "description": "Let Grok Bot reach MCP servers on your private Tailscale network. Sign in to Tailscale to connect your tailnet; Grok Bot joins it as one tagged device and only reaches the hosts you grant to tag:grokbot.", + "description": "Let Grok Bot reach MCP servers on your private Tailscale network. On your own tailnet it joins as one tag:grokbot device; on your team's company tailnet, turned on by a team admin, it uses each member's own device.", "minClientVersions": { "cursor": "never", "grokbot": "0.49.0", diff --git a/README.md b/README.md index 234f5c366..886849908 100644 --- a/README.md +++ b/README.md @@ -100,7 +100,7 @@ Official Cursor plugins for popular developer tools, frameworks, and SaaS produc | `zoho-desk` | [Zoho Desk](third_party/zoho-desk/) | Cursor | Integrations | Work with tickets, contacts, tasks, and knowledge base articles in Zoho Desk. | | `zoho-books` | [Zoho Books](third_party/zoho-books/) | Cursor | Integrations | Work with contacts, invoices, estimates, and items in Zoho Books. | | `square` | [Square](third_party/square/) | Cursor | Integrations | Work with payments, orders, catalog, customers, and invoices. | -| `tailscale` | [Tailscale](third_party/tailscale/) | Cursor | Integrations | Let Grok Bot reach MCP servers on your private Tailscale network. Sign in to Tailscale to connect your tailnet; Grok Bot joins it as one tagged device and only reaches the hosts you grant to tag:grokbot. | +| `tailscale` | [Tailscale](third_party/tailscale/) | Cursor | Integrations | Let Grok Bot reach MCP servers on your private Tailscale network. On your own tailnet it joins as one tag:grokbot device; on your team's company tailnet, turned on by a team admin, it uses each member's own device. | | `highlevel` | [HighLevel](third_party/highlevel/) | Cursor | Integrations | Work with contacts, conversations, opportunities, calendars, and payments. | | `finary` | [Finary](third_party/finary/) | Cursor | Integrations | Read your net worth, accounts, holdings, spending, and budgets. | | `tiktok-for-business` | [TikTok for Business](third_party/tiktok-for-business/) | Cursor | Integrations | Manage TikTok ad campaigns, ad groups, ads, audiences, creatives, and reports. | diff --git a/third_party/tailscale/README.md b/third_party/tailscale/README.md index 25ec51f24..41ea422f2 100644 --- a/third_party/tailscale/README.md +++ b/third_party/tailscale/README.md @@ -2,7 +2,7 @@ Grok Bot plugin that lets agents reach [Model Context Protocol](https://modelcontextprotocol.io/) servers on your private [Tailscale](https://tailscale.com) network (tailnet). -Let Grok Bot reach MCP servers on your private Tailscale network. Sign in to Tailscale to connect your tailnet; Grok Bot joins it as one tagged device and only reaches the hosts you grant to tag:grokbot. +Let Grok Bot reach MCP servers on your private Tailscale network. On your own tailnet it joins as one tag:grokbot device; on your team's company tailnet, turned on by a team admin, it uses each member's own device. ## Who can use it