Headscale
Headscale is an open-source, self‑hosted implementation of the Tailscale control server, enabling organizations to run their own coordination server for secure, zero‑trust networking. The project provides a web UI, API, and CLI to manage users, devices, and ACLs, supporting OAuth, pre‑shared keys, and integration with existing identity providers. It is actively maintained, with documentation, tutorials, and community support.
Headscale is profiled on the APIs.io network. Tagged areas include Company, OpenSource, Networking, VPN, and ZeroTrust.
3.1/100
minimal
Agent
3/100
human only
0 APIs
Kin Score
Kin Score
How this is scored →scored 2026-10-31 · rubric v0.25.0
Composite quality — 3.1/100 · minimal
Agent readiness — 3/100 · human only
Regulatory Posture applies to this provider. Its tags matched the
Horizontal (data, software, accessibility, platform) regime, so
Regulatory Posture carries 15 points of the composite.
If this regime is wrong for your business, say so on your
provider repo — the
applicability map is public and we will correct it.
Create-or-Update Ergonomics could not be measured. We hold no machine-readable contract for
this provider to read, so there is nothing to measure a write surface against. Excluded rather than scored zero:
never-measured and measured-empty are different facts. Publishing an OpenAPI is what makes this facet — and
several others — scorable at all.
The six quality facets above are damped to 85 points between them,
because the conditional facet above carries the other
15. That is why each facet's contribution is shown against a damped
maximum: raising a quality facet moves the composite by 85% of its nominal
weight, not 100%. The full arithmetic is at apis.io/rating/.
Show this score on your site.
It updates itself when the score changes. Paste this where you link to your API docs:
It updates itself when the score changes. Paste this where you link to your API docs:
<a href="https://apis.io/providers/headscale/"><img src="https://apis.io/badge/headscale/card.svg" alt="Headscale on APIs.io — Kin Score by API Evangelist"></a>Other styles, a README pill and a shields.io endpoint are on the badge page.
Raise your score.
Agent readiness — checks not met, largest first (exact, from this profile):
- Machine-Readable Contract +18 pts — api_specs includes an OpenAPI document
- Agentic Access Contract +10 pts — agentic_access artifact present (x-agentic-access), graded by author
- Machine-Readable Auth +10 pts — a served openid-configuration/oauth-authorization-server carrying `issuer` (served), else the securitySchemes class in the provider OpenAPIs — bound (mutualTLS, DPoP, Signature) > negotiable (oauth2 authorizationCode/clientCredentials, openIdConnect) > bearer (http bearer, apiKey)
- Idempotency +9 pts — OpenAPI mutating operations declare an idempotency key — a header, a request-body property, or a named de-duplication token whose own description says so (verified); else common[].type matches /idempoten/i (documented)
- A2A Agent Card +8 pts — a2a/
-a2a.yml manifest, graded on conformance.grade against A2A 1.0.0 - Stable Error Semantics +8 pts — OpenAPI $refs a shared error schema across 4xx/5xx responses (verified), else common[].type includes ErrorCatalog / ErrorCodes / DeclineCodes
12 more unmet checks in the Agent Readiness table above.
Kin Score — facets with the most composite points still available (weight × headroom):
- Contract Quality scores 0.0 — up to +25.0 composite points
- Developer Ergonomics scores 0.0 — up to +20.0 composite points
- Access Clarity scores 0.0 — up to +20.0 composite points
Each check links to what satisfies it. Publish the artifact, or tell us where it already lives, and the score moves on the next scoring run.
Improve this rating by publishing the missing artifacts — every area above can be raised, and the full rubric is at apis.io/rating/. Every facet and dimension name above is a link: it opens that measurement's own page — what it means, the exact checks that feed it, how the whole catalog distributes on it, and the providers at the top of it. This rating is computed from the provider profile at artifacts.apis.io/headscale/apis.yml: open an issue on github.com/api-evangelist/headscale to ask a question or point us at an artifact you publish.
Submit an artifact on GitHub — free →
Manage your own listing — the Influence plan, $499/mo →
Security Posture 1
Authentication, domain security, vulnerability disclosure, and trust-center signals.
Resources
Access & Security 1
Authentication, authorization, and security posture
Company 1
The organization behind the API
Other 2
Properties that don't map to a standard resource type
Source (apis.yml)
Work with this as data
Every provider here is available over the APIs.io API and to AI agents over MCP.