{"slug":"key-prefixes","title":"Key prefixes","tags":["tailscale"],"agent_summary":"Last validated: Aug 1, 2025","trigger_phrases":[],"runnable":false,"markdown":"\r\n# Key prefixes\r\n\r\nLast validated: Aug 1, 2025\r\n\r\nTailscale uses prefixes as part of the ID for keys. The prefix starts with `tskey-` and is followed by the key type. For example, when you create a Tailscale API access token, the prefix is `tskey-api`, resulting in a key ID in the form of:\r\n\r\n`tskay-api-abcDEF1CNTRL-091234567890ABCDEF`\r\n\r\nThe type of key prefixes are:\r\n\r\n| Key prefix | Description |\r\n| --- | --- |\r\n| `tskey-api` | The key is a [Tailscale API](https://tailscale.com/docs/reference/tailscale-api) access token. |\r\n| `tskey-auth` | The key is a [pre-authentication key](https://tailscale.com/docs/features/access-control/auth-keys). |\r\n| `tskey-client` | The key is a Tailscale [OAuth client](https://tailscale.com/docs/features/oauth-clients) key. |\r\n| `tskey-scim` | The key is a [System for Cross-domain Identity Management](https://tailscale.com/learn/what-is-scim) (SCIM) key. |\r\n| `tskey-webhook` | The key is a [webhook](https://tailscale.com/docs/features/webhooks) key. |\r\n\r\nNote that all Tailscale-generated keys and secrets are case-sensitive. For more information about keys and secrets in general, refer to [Key and secret management](https://tailscale.com/docs/reference/key-secret-management).\r\n\r\n![Project Logo](https://cdn.brandfetch.io/tailscale.com/fallback/lettermark/theme/dark/h/256/w/256/icon?c=1bfwsmEH20zzEfSNTed)\r\n\r\nAsk AI\r\n\r\nreCAPTCHA\r\n\r\nRecaptcha requires verification.\r\n\r\nprotected by **reCAPTCHA**\r\n","html":"<h1>Key prefixes</h1>\n<p>Last validated: Aug 1, 2025</p>\n<p>Tailscale uses prefixes as part of the ID for keys. The prefix starts with <code>tskey-</code> and is followed by the key type. For example, when you create a Tailscale API access token, the prefix is <code>tskey-api</code>, resulting in a key ID in the form of:</p>\n<p><code>tskay-api-abcDEF1CNTRL-091234567890ABCDEF</code></p>\n<p>The type of key prefixes are:</p>\n<p>| Key prefix | Description |\r\n| --- | --- |\r\n| <code>tskey-api</code> | The key is a <a href=\"https://tailscale.com/docs/reference/tailscale-api\">Tailscale API</a> access token. |\r\n| <code>tskey-auth</code> | The key is a <a href=\"https://tailscale.com/docs/features/access-control/auth-keys\">pre-authentication key</a>. |\r\n| <code>tskey-client</code> | The key is a Tailscale <a href=\"https://tailscale.com/docs/features/oauth-clients\">OAuth client</a> key. |\r\n| <code>tskey-scim</code> | The key is a <a href=\"https://tailscale.com/learn/what-is-scim\">System for Cross-domain Identity Management</a> (SCIM) key. |\r\n| <code>tskey-webhook</code> | The key is a <a href=\"https://tailscale.com/docs/features/webhooks\">webhook</a> key. |</p>\n<p>Note that all Tailscale-generated keys and secrets are case-sensitive. For more information about keys and secrets in general, refer to <a href=\"https://tailscale.com/docs/reference/key-secret-management\">Key and secret management</a>.</p>\n<p><img src=\"https://cdn.brandfetch.io/tailscale.com/fallback/lettermark/theme/dark/h/256/w/256/icon?c=1bfwsmEH20zzEfSNTed\" alt=\"Project Logo\"></p>\n<p>Ask AI</p>\n<p>reCAPTCHA</p>\n<p>Recaptcha requires verification.</p>\n<p>protected by <strong>reCAPTCHA</strong></p>\n"}