Control AI access

Last validated:

Aperture by Tailscale is currently in beta.

Aperture uses Tailscale's identity layer to automatically authenticate users. Control which users can reach the Aperture instance through tailnet access control rules, then use Aperture grants to define which models each user or group can access. Aperture is deny-by-default: without grants, users can connect but cannot access any models.

For background on how identity and grants work, refer to how Aperture works.


Configure Aperture grants to control which models each user or group can access.

Configure Aperture grants to control which MCP tools, resources, and templates users can access.

Configure administrator roles for managing Aperture settings and accessing all user data.

Use guardrails to enforce policies on individual requests, such as scrubbing PII or blocking requests that violate compliance rules.

Inspect, modify, or block LLM requests before they reach the provider.

Configure a pre-request hook to inspect, modify, or block LLM requests before they reach the provider.