Tailscale icon

Tailscale

Manage your Tailscale tailnet — devices, routes, and more

ACL / Policy → Validate

AI-generated

Summary

Validate a provided Tailscale ACL policy JSON document for a specified tailnet without applying it.

Inputs

  • Authentication — Choose the authentication method to use: API Key or OAuth2.
  • Tailnet Name or ID (required) — Specify the tailnet organization name or ID for which the ACL policy should be validated. Choose from the list or use '-' for the default tailnet of the authenticated user.
  • Policy (JSON) (required) — Provide the ACL policy document as a JSON string following the Tailscale ACL schema.

Output shape

a single JSON object indicating validation result

The output contains the response from the Tailscale API's ACL validation endpoint, typically including a validity indicator; if no explicit response is returned, a default {"valid": true} object is set.

Examples

Example 1: Validate an ACL policy

Set the 'Tailnet Name or ID' to your target tailnet and provide the ACL policy JSON in the 'Policy (JSON)' parameter. Choose your authentication type. When executed, the node returns whether the ACL policy is valid or lists validation errors without applying the policy.

Links

Discussion