Tailscale Standard (CCF)

Comprehensive Tailscale telemetry for **Personal (Free) and Standard** tier tailnets. Polls nine endpoints in one Connect: - `/logging/configuration` - configuration audit events (includes ACL, DNS, tag/group, settings changes) - `/devices` - device inventory (hostname, OS, IPs, tags, lastSeen, expiry) - `/users` - user inventory (role, status, deviceCount, connection state) - `/keys?all=true` - auth keys, API tokens, and OAuth client metadata - `/webhooks` - webhook configuration - `/dns/nameservers`, `/dns/preferences`, `/dns/searchpaths` - DNS state (merged into single `Tailscale_Dns_CL` table with `ConfigType` discriminator) - `/settings` - tailnet settings flags (device approval, key duration, etc.) Split-DNS state (per-domain DNS overrides) is captured via the audit log rather than a separate snapshot table - every change is recorded with the full before/after document and actor attribution, which is richer than a periodic snapshot. **OAuth scopes required on the Tailscale client:** `logs:configuration:read`, `devices:core:read`, `users:read`, `auth_keys:read`, `webhooks:read`, `dns:read`, `feature_settings:read` (or the bundled `all:read`). For Premium and Enterprise tailnets that also need network flow logs and posture integrations, install **Tailscale Premium (CCF)** instead.