Key prefixes

Tailscale uses prefixes as part of the ID for keys. The prefix starts with tskey- and is followed by the key type. For example, when you create a Tailscale API access token, the prefix is tskey-api, resulting in a key ID in the form of:


The type of key prefixes are:

Key prefix Description
tskey-api The key is a Tailscale API access token.
tskey-auth The key is a pre-authentication key.
tskey-client The key is a Tailscale OAuth client key.
tskey-scim The key is a System for Cross-domain Identity Management (SCIM) key.
tskey-webhook The key is a webhook key.

Note that all Tailscale-generated keys and secrets are case-sensitive. For more information about keys and secrets in general, see Key and secret management.