Tailnet Bookmarks

Your tailnet already names every device and service. This keeps a bookmarks folder pointed at them - real bookmarks, usable from the address bar, from search, and from the bookmarks menu. It reads your tailnet on a timer, and only ever reads it. Setup is a Tailscale OAuth client with two read-only scopes, General > Services and Devices > Core. The client secret is stored on the machine you enter it on and is never synced. Run it on as many machines as you like; they compute the same folder rather than fighting over it. The folder is fully managed, so bookmarks you add to it by hand are removed on a later sync. Nested folders inside it are left alone.