Tailscale API Key Create at tailscale.com → Settings → Keys.
Needs scopes: devices:read and auth_keys:write. Tailnet name Your tailnet domain (e.g. example.com) or - for a personal account.