Hi all,

Just sharing my idea, not a product. I built this over a couple of evenings with Claude Code for my own home lab. I don't have the time to turn it into a service or a maintained project for anyone else, but it's been genuinely useful to me, so maybe it inspires someone here to build their own take on it.

*Everything in the GIF is fake data: fake devices, users, sites and networks.* 

# What it does

It reads two things from the Tailscale API — the device list and the policy file — and draws one picture that answers the question I kept re-deriving by hand: **who can actually reach what?**

* **Devices are grouped by where they physically are**, not by role. The region a node lands in comes from the address it was last given by the network it joined.
* **Lines are grants**, straight from the policy file, and they're directional: the source initiates, the target never answers back.
* **Hover a node** → site, Tailscale IP, local address, OS, owner, advertised routes, tags, and how many nodes it reaches / is reached by.
* **Click to pin** → everything unrelated dims. This is the view I actually use when I'm about to touch a grant.
* **The legend doubles as a role filter.**

# The rest of the page

Below the map: tables for devices, grants, sites, owners — plus one that documents the placement rules themselves. That table is generated from the same constants the placement code uses, so it can't drift away from the actual behaviour.

Actually I would love to see some visualization like this on the tailscale admin access control site ;)

# Running it

A small container behind `tailscale serve`. Tailnet-only, read-only, no funnel. No repo, sorry, it's welded to my own tags and networks, and I'd rather post an honest "here's the idea" than an unmaintained repo.

Happy to hear ideas or criticism.

This is my 'Tailnet Atlas' it's a live map of my personal tailnet that visually answers "who can actually reach what?"