endpoints.json

{
  "$comment": "Machine-readable manifest of every LocalAPI endpoint this package implements. Single source of truth: Scripts/generate-endpoint-docs.py renders the human tables in LOCALAPI-COVERAGE.md and INTEGRATING.md from this file, and CI fails if they drift. Two INDEPENDENT stability axes: upstream_maturity is Tailscale's own per-method 'API maturity' annotation for the daemon endpoint (stable | unstable | unspecified - upstream documents that unannotated methods must be assumed unstable), and swift_support is THIS package's promise for its Swift facade (supported | preview | experimental). A supported Swift facade over an upstream-unstable endpoint means we normalize upstream drift, not that Tailscale guarantees the wire contract. Other fields: endpoint (LocalAPI path suffix), methods, symbol (Swift API), access (read|write|destructive), gate (core = always registered, else the upstream build feature), since (package version), min_tailscaled ('old' = predates our tested floor), tested, transports, upstream (general|debug|gui-contract), upstream_symbol (Go client/local method), upstream_notes, notes.",
  "tested_matrix": "hermetic headscale lanes: tailscaled stable / previous-stable 1.96.4 / unstable; plus a real tailnet daemon on self-hosted macOS",
  "endpoints": [
    {
      "endpoint": "status",
      "methods": [
        "GET"
      ],
      "symbol": "status(query:)",
      "access": "read",
      "gate": "core",
      "upstream_maturity": "stable",
      "swift_support": "supported",
      "upstream_symbol": "Status / StatusWithoutPeers",
      "since": "0.1.0",
      "min_tailscaled": "old",
      "tested": "matrix+live",
      "transports": [
        "unix",
        "loopback"
      ],
      "upstream": "general",
      "notes": "?peers=false via StatusQuery; interfaceName/interfaceInfo derived client-side"
    },
    {
      "endpoint": "services",
      "methods": [
        "GET"
      ],
      "symbol": "services()",
      "access": "read",
      "gate": "core",
      "upstream_maturity": "unspecified",
      "swift_support": "supported",
      "upstream_symbol": "GetServices",
      "since": "0.12.0",
      "min_tailscaled": "recent (VIP services era; older daemons -> endpointUnavailable)",
      "tested": "matrix (503 without netmap and absent-endpoint 404 both tolerated)",
      "transports": [
        "unix",
        "loopback"
      ],
      "upstream": "general",
      "notes": "Tailscale Services (VIP services) keyed by svc: name; Ports are upstream ProtoPortRange text forms"
    },
    {
      "endpoint": "whois",
      "methods": [
        "GET"
      ],
      "symbol": "whois(address:), whois(address:protocol:), whois(nodeKey:), whois(address:scopedToDestination:), whois(address:forService:)",
      "access": "read",
      "gate": "core",
      "upstream_maturity": "stable",
      "swift_support": "supported",
      "upstream_symbol": "WhoIs / WhoIsProto / WhoIsNodeKey / WhoIsForIP / WhoIsForService",
      "since": "0.2.0",
      "min_tailscaled": "old",
      "tested": "matrix+live",
      "transports": [
        "unix",
        "loopback"
      ],
      "upstream": "general",
      "notes": "all stable variants wrapped; a peer miss (404) throws typed .peerNotFound"
    },
    {
      "endpoint": "prefs",
      "methods": [
        "GET",
        "PATCH"
      ],
      "symbol": "prefs(), editPrefs(_:)",
      "access": "write",
      "gate": "core",
      "upstream_maturity": "stable",
      "swift_support": "supported",
      "upstream_symbol": "GetPrefs / EditPrefs",
      "since": "0.2.0",
      "min_tailscaled": "old",
      "tested": "matrix+live (writes hermetic-only)",
      "transports": [
        "unix",
        "loopback"
      ],
      "upstream": "general",
      "notes": "PATCH takes typed MaskedPrefs value+Set flag pairs (v0.8.0)"
    },
    {
      "endpoint": "ping",
      "methods": [
        "POST"
      ],
      "symbol": "ping(ip:type:size:)",
      "access": "read",
      "gate": "core",
      "upstream_maturity": "unspecified",
      "swift_support": "supported",
      "upstream_symbol": "Ping / PingWithOpts",
      "since": "0.2.0",
      "min_tailscaled": "old",
      "tested": "matrix+live",
      "transports": [
        "unix",
        "loopback"
      ],
      "upstream": "general",
      "notes": "disco/TSMP/ICMP/peerAPI ping types"
    },
    {
      "endpoint": "metrics",
      "methods": [
        "GET"
      ],
      "symbol": "metrics()",
      "access": "read",
      "gate": "HasClientMetrics || HasDebug",
      "upstream_maturity": "unspecified",
      "swift_support": "supported",
      "upstream_symbol": "DaemonMetrics",
      "since": "0.2.0",
      "min_tailscaled": "old",
      "tested": "matrix+live",
      "transports": [
        "unix",
        "loopback"
      ],
      "upstream": "debug",
      "notes": "Prometheus text; internal counters, names may churn upstream"
    },
    {
      "endpoint": "usermetrics",
      "methods": [
        "GET"
      ],
      "symbol": "userMetrics()",
      "access": "read",
      "gate": "HasUserMetrics",
      "upstream_maturity": "unspecified",
      "swift_support": "supported",
      "upstream_symbol": "UserMetrics",
      "since": "0.6.0",
      "min_tailscaled": "1.78",
      "tested": "matrix+live",
      "transports": [
        "unix",
        "loopback"
      ],
      "upstream": "general",
      "notes": "stable user-facing metrics (tailscale metrics print)"
    },
    {
      "endpoint": "watch-ipn-bus",
      "methods": [
        "GET (stream)"
      ],
      "symbol": "watchIPNBus(options:reconnect:onUndecodableLine:)",
      "access": "read",
      "gate": "HasIPNBus",
      "upstream_maturity": "unstable",
      "swift_support": "supported",
      "upstream_symbol": "WatchIPNBus",
      "upstream_notes": "our Swift facade normalizes and tolerates shape drift",
      "since": "0.3.0",
      "min_tailscaled": "old",
      "tested": "matrix+live",
      "transports": [
        "unix",
        "loopback (Darwin only)"
      ],
      "upstream": "general",
      "notes": "NDJSON stream; skip-and-report on malformed lines, opt-in reconnect (v0.4.0)"
    },
    {
      "endpoint": "debug-optional-features",
      "methods": [
        "POST"
      ],
      "symbol": "daemonFeatures()",
      "access": "read",
      "gate": "HasDebug",
      "upstream_maturity": "unspecified",
      "swift_support": "supported",
      "upstream_symbol": "QueryOptionalFeatures",
      "since": "0.4.0",
      "min_tailscaled": "1.86",
      "tested": "matrix+live",
      "transports": [
        "unix",
        "loopback"
      ],
      "upstream": "debug",
      "notes": "capability probe: which optional features this daemon was built with"
    },
    {
      "endpoint": "derpmap",
      "methods": [
        "GET"
      ],
      "symbol": "derpMap()",
      "access": "read",
      "gate": "core",
      "upstream_maturity": "stable",
      "swift_support": "supported",
      "upstream_symbol": "CurrentDERPMap",
      "since": "0.6.0",
      "min_tailscaled": "old",
      "tested": "matrix+live",
      "transports": [
        "unix",
        "loopback"
      ],
      "upstream": "general",
      "notes": "relay regions/nodes; feeds the client-side netcheck"
    },
    {
      "endpoint": "suggest-exit-node",
      "methods": [
        "GET"
      ],
      "symbol": "suggestExitNode(forceProbe:)",
      "access": "read",
      "gate": "HasUseExitNode",
      "upstream_maturity": "unspecified",
      "swift_support": "supported",
      "upstream_symbol": "SuggestExitNode / SuggestExitNodeWithProbe",
      "since": "0.6.0",
      "min_tailscaled": "old (POST probe: 1.86)",
      "tested": "matrix+live",
      "transports": [
        "unix",
        "loopback"
      ],
      "upstream": "general",
      "notes": "empty 200 body = no candidates"
    },
    {
      "endpoint": "dns-osconfig",
      "methods": [
        "GET"
      ],
      "symbol": "dnsOSConfig()",
      "access": "read",
      "gate": "HasDNS",
      "upstream_maturity": "unstable",
      "swift_support": "supported",
      "upstream_symbol": "GetDNSOSConfig",
      "since": "0.7.0",
      "min_tailscaled": "old",
      "tested": "matrix+live (userspace daemons 500 → skip)",
      "transports": [
        "unix",
        "loopback"
      ],
      "upstream": "general",
      "notes": "installed OS DNS state; 500 on userspace-networking daemons"
    },
    {
      "endpoint": "dns-query",
      "methods": [
        "GET"
      ],
      "symbol": "dnsQuery(name:type:)",
      "access": "read",
      "gate": "HasDNS",
      "upstream_maturity": "unspecified",
      "swift_support": "supported",
      "upstream_symbol": "QueryDNS",
      "since": "0.7.0",
      "min_tailscaled": "old",
      "tested": "matrix+live",
      "transports": [
        "unix",
        "loopback"
      ],
      "upstream": "general",
      "notes": "raw RFC 1035 answer bytes + chosen resolvers"
    },
    {
      "endpoint": "check-ip-forwarding",
      "methods": [
        "GET"
      ],
      "symbol": "checkIPForwarding()",
      "access": "read",
      "gate": "HasAdvertiseRoutes",
      "upstream_maturity": "unstable",
      "swift_support": "supported",
      "upstream_symbol": "CheckIPForwarding",
      "since": "0.7.0",
      "min_tailscaled": "old",
      "tested": "matrix+live",
      "transports": [
        "unix",
        "loopback"
      ],
      "upstream": "general",
      "notes": "subnet-router/exit-node preflight"
    },
    {
      "endpoint": "check-udp-gro-forwarding",
      "methods": [
        "GET"
      ],
      "symbol": "checkUDPGROForwarding()",
      "access": "read",
      "gate": "HasAdvertiseRoutes",
      "upstream_maturity": "unstable",
      "swift_support": "supported",
      "upstream_symbol": "CheckUDPGROForwarding",
      "since": "0.11.0",
      "min_tailscaled": "old",
      "tested": "matrix (non-Linux daemons -> endpointUnavailable skip)",
      "transports": [
        "unix",
        "loopback"
      ],
      "upstream": "general",
      "notes": "Linux subnet-router/exit-node performance preflight",
      "upstream_notes": "annotated unstable upstream despite its diagnostic role - not a stable-parity item"
    },
    {
      "endpoint": "dns-config",
      "methods": [
        "GET"
      ],
      "symbol": "dnsConfig()",
      "access": "read",
      "gate": "core",
      "upstream_maturity": "unspecified",
      "swift_support": "supported",
      "upstream_symbol": "DNSConfig",
      "since": "0.10.0",
      "min_tailscaled": "1.98",
      "tested": "matrix (previous-stable asserts endpointUnavailable)",
      "transports": [
        "unix",
        "loopback"
      ],
      "upstream": "general",
      "notes": "tailnet DNS intent from the netmap; older daemons → endpointUnavailable"
    },
    {
      "endpoint": "peer-by-id",
      "methods": [
        "GET"
      ],
      "symbol": "peer(byID:)",
      "access": "read",
      "gate": "core",
      "upstream_maturity": "unspecified",
      "swift_support": "supported",
      "upstream_symbol": "PeerByID",
      "since": "0.7.0",
      "min_tailscaled": "~1.98",
      "tested": "matrix+live",
      "transports": [
        "unix",
        "loopback"
      ],
      "upstream": "general",
      "notes": "404 = not in netmap OR daemon predates the endpoint — indistinguishable"
    },
    {
      "endpoint": "user-profile",
      "methods": [
        "GET"
      ],
      "symbol": "userProfile(byID:)",
      "access": "read",
      "gate": "core",
      "upstream_maturity": "stable",
      "swift_support": "supported",
      "upstream_symbol": "UserProfile",
      "since": "0.7.0",
      "min_tailscaled": "~1.98",
      "tested": "matrix+live",
      "transports": [
        "unix",
        "loopback"
      ],
      "upstream": "general",
      "notes": "404 = unknown user OR older daemon — indistinguishable"
    },
    {
      "endpoint": "check-prefs",
      "methods": [
        "POST"
      ],
      "symbol": "checkPrefs(_:)",
      "access": "read",
      "gate": "core",
      "upstream_maturity": "unspecified",
      "swift_support": "supported",
      "upstream_symbol": "CheckPrefs",
      "since": "0.8.0",
      "min_tailscaled": "old",
      "tested": "matrix",
      "transports": [
        "unix",
        "loopback"
      ],
      "upstream": "general",
      "notes": "fails closed: daemon-reported Error throws; malformed 200 throws .decoding"
    },
    {
      "endpoint": "set-use-exit-node-enabled",
      "methods": [
        "POST"
      ],
      "symbol": "setUseExitNode(enabled:)",
      "access": "write",
      "gate": "HasUseExitNode",
      "upstream_maturity": "stable",
      "swift_support": "supported",
      "upstream_symbol": "SetUseExitNode",
      "since": "0.8.0",
      "min_tailscaled": "old",
      "tested": "matrix (hermetic-only writes)",
      "transports": [
        "unix",
        "loopback"
      ],
      "upstream": "general",
      "notes": "toggles without forgetting the selected exit node"
    },
    {
      "endpoint": "set-expiry-sooner",
      "methods": [
        "POST"
      ],
      "symbol": "setExpirySooner(_:)",
      "access": "write",
      "gate": "core",
      "upstream_maturity": "unstable",
      "swift_support": "supported",
      "upstream_symbol": "DebugSetExpireIn",
      "upstream_notes": "upstream files this under debug",
      "since": "0.8.0",
      "min_tailscaled": "old",
      "tested": "unit (wire shape)",
      "transports": [
        "unix",
        "loopback"
      ],
      "upstream": "general",
      "notes": "key hygiene; shortens node-key expiry"
    },
    {
      "endpoint": "reload-config",
      "methods": [
        "POST"
      ],
      "symbol": "reloadConfig()",
      "access": "write",
      "gate": "core",
      "upstream_maturity": "unspecified",
      "swift_support": "supported",
      "upstream_symbol": "ReloadConfig",
      "since": "0.8.0",
      "min_tailscaled": "old",
      "tested": "matrix (no-config daemons return ok=false)",
      "transports": [
        "unix",
        "loopback"
      ],
      "upstream": "general",
      "notes": "only meaningful for config-file daemons"
    },
    {
      "endpoint": "start",
      "methods": [
        "POST"
      ],
      "symbol": "start(options:) / startFreshProfile(controlURL:authKey:)",
      "access": "write",
      "gate": "core",
      "upstream_maturity": "unspecified",
      "swift_support": "supported",
      "upstream_symbol": "Start",
      "since": "0.8.0",
      "min_tailscaled": "old",
      "tested": "matrix",
      "transports": [
        "unix",
        "loopback"
      ],
      "upstream": "general",
      "notes": "backend start / headless auth-key bring-up; 204 on success"
    },
    {
      "endpoint": "login-interactive",
      "methods": [
        "POST"
      ],
      "symbol": "loginInteractive()",
      "access": "write",
      "gate": "core",
      "upstream_maturity": "stable",
      "swift_support": "supported",
      "upstream_symbol": "StartLoginInteractive",
      "since": "0.9.0",
      "min_tailscaled": "old",
      "tested": "matrix + CLI black-box",
      "transports": [
        "unix",
        "loopback"
      ],
      "upstream": "general",
      "notes": "BrowseToURL arrives on the IPN bus — subscribe before calling"
    },
    {
      "endpoint": "logout",
      "methods": [
        "POST"
      ],
      "symbol": "logout()",
      "access": "destructive",
      "gate": "core",
      "upstream_maturity": "unspecified",
      "swift_support": "supported",
      "upstream_symbol": "Logout",
      "since": "0.9.0",
      "min_tailscaled": "old",
      "tested": "unit only (never integration-tested)",
      "transports": [
        "unix",
        "loopback"
      ],
      "upstream": "general",
      "notes": "disconnects and expires the node key"
    },
    {
      "endpoint": "shutdown",
      "methods": [
        "POST"
      ],
      "symbol": "shutdownTailscaled()",
      "access": "destructive",
      "gate": "core",
      "upstream_maturity": "unstable",
      "swift_support": "supported",
      "upstream_symbol": "ShutdownTailscaled",
      "since": "0.12.0",
      "min_tailscaled": "recent (older daemons -> endpointUnavailable)",
      "tested": "unit only (destructive: terminates the daemon; never run live)",
      "transports": [
        "unix",
        "loopback"
      ],
      "upstream": "general",
      "notes": "graceful daemon exit; requires write access AND the AllowTailscaledRestart policy (403 -> .permissionDenied)"
    },
    {
      "endpoint": "update/check",
      "methods": [
        "GET"
      ],
      "symbol": "checkUpdate()",
      "access": "read",
      "gate": "HasClientUpdate",
      "upstream_maturity": "stable",
      "swift_support": "supported",
      "upstream_symbol": "CheckUpdate",
      "since": "0.11.0",
      "min_tailscaled": "old",
      "tested": "matrix (skips where the build omits clientupdate)",
      "transports": [
        "unix",
        "loopback"
      ],
      "upstream": "general",
      "notes": "reports update availability only; installs nothing"
    },
    {
      "endpoint": "disconnect-control",
      "methods": [
        "POST"
      ],
      "symbol": "disconnectControl()",
      "access": "write",
      "gate": "HasDebug || HasAdvertiseRoutes",
      "upstream_maturity": "stable",
      "swift_support": "supported",
      "upstream_symbol": "DisconnectControl",
      "since": "0.11.0",
      "min_tailscaled": "old",
      "tested": "unit only (administrative: never exercised against live daemons)",
      "transports": [
        "unix",
        "loopback"
      ],
      "upstream": "general",
      "notes": "administrative: drains HA subnet-router/app-connector replicas before shutdown"
    },
    {
      "endpoint": "reset-auth",
      "methods": [
        "POST"
      ],
      "symbol": "resetAuth()",
      "access": "destructive",
      "gate": "core",
      "upstream_maturity": "unspecified",
      "swift_support": "supported",
      "upstream_symbol": "",
      "upstream_notes": "no public Go client method",
      "since": "0.9.0",
      "min_tailscaled": "old",
      "tested": "unit only (never integration-tested)",
      "transports": [
        "unix",
        "loopback"
      ],
      "upstream": "general",
      "notes": "wipes auth state for re-login"
    },
    {
      "endpoint": "profiles/",
      "methods": [
        "GET",
        "PUT",
        "POST",
        "DELETE"
      ],
      "symbol": "profiles(), currentProfile(), switchToEmptyProfile(), switchProfile(_:), deleteProfile(_:)",
      "access": "write",
      "gate": "core",
      "upstream_maturity": "unspecified",
      "swift_support": "supported",
      "upstream_symbol": "ProfileStatus / SwitchProfile / SwitchToEmptyProfile / DeleteProfile",
      "upstream_notes": "mixed per-symbol maturity; switchToEmptyProfile() mirrors the upstream name (stable), with addProfile() kept as a deprecated alias",
      "since": "0.9.0",
      "min_tailscaled": "old",
      "tested": "matrix (reads; mutations hermetic-only)",
      "transports": [
        "unix",
        "loopback"
      ],
      "upstream": "general",
      "notes": "multi-account profile management (LoginProfile/NetworkProfile models)",
      "upstream_symbol_maturity": {
        "SwitchProfile": "stable",
        "SwitchToEmptyProfile": "stable"
      }
    },
    {
      "endpoint": "id-token",
      "methods": [
        "POST"
      ],
      "symbol": "idToken(audience:)",
      "access": "read",
      "gate": "HasDebug",
      "upstream_maturity": "unspecified",
      "swift_support": "supported",
      "upstream_symbol": "IDToken",
      "since": "0.9.0",
      "min_tailscaled": "old",
      "tested": "unit (control-plane dependent)",
      "transports": [
        "unix",
        "loopback"
      ],
      "upstream": "general",
      "notes": "OIDC token passed through as raw control-plane JSON"
    },
    {
      "endpoint": "serve-config",
      "methods": [
        "GET",
        "POST"
      ],
      "symbol": "serveConfig(), setServeConfig(_:)",
      "access": "write",
      "gate": "HasServe",
      "upstream_maturity": "unstable",
      "swift_support": "supported",
      "upstream_symbol": "GetServeConfig / SetServeConfig",
      "upstream_notes": "GetServeConfig is explicitly unstable upstream; GetServeConfig is annotated unstable; SetServeConfig carries no annotation (assume unstable)",
      "since": "0.10.0",
      "min_tailscaled": "old (ETag: 1.40+)",
      "tested": "matrix incl. live stale-ETag 412 proof (hermetic-only writes)",
      "transports": [
        "unix",
        "loopback"
      ],
      "upstream": "general",
      "notes": "ETag optimistic concurrency; stale writes throw .preconditionFailed",
      "upstream_symbol_maturity": {
        "SetServeConfig": "unspecified"
      }
    },
    {
      "endpoint": "cert-domains",
      "methods": [
        "GET"
      ],
      "symbol": "certDomains()",
      "access": "read",
      "gate": "core",
      "upstream_maturity": "stable",
      "swift_support": "supported",
      "upstream_symbol": "CertDomains",
      "since": "0.10.0",
      "min_tailscaled": "old",
      "tested": "matrix (ACME-less builds → endpointUnavailable, seen on 1.96.4 tarball)",
      "transports": [
        "unix",
        "loopback"
      ],
      "upstream": "general",
      "notes": "null body (no HTTPS) decodes as empty list"
    },
    {
      "endpoint": "cert/",
      "methods": [
        "GET"
      ],
      "symbol": "certPEM(domain:kind:minValidity:), certPair(domain:minValidity:)",
      "access": "read",
      "gate": "HasACME",
      "upstream_maturity": "stable",
      "swift_support": "supported",
      "upstream_symbol": "CertPair / CertPairWithValidity / GetCertificate",
      "since": "0.10.0",
      "min_tailscaled": "old",
      "tested": "unit (needs HTTPS-enabled tailnet live)",
      "transports": [
        "unix",
        "loopback"
      ],
      "upstream": "general",
      "notes": "first fetch may block on ACME issuance; pair split fails closed"
    },
    {
      "endpoint": "set-dns",
      "methods": [
        "POST"
      ],
      "symbol": "setDNS(name:value:)",
      "access": "write",
      "gate": "HasACME",
      "upstream_maturity": "unspecified",
      "swift_support": "supported",
      "upstream_symbol": "SetDNS",
      "since": "0.10.0",
      "min_tailscaled": "old",
      "tested": "unit (control-plane rate-limited)",
      "transports": [
        "unix",
        "loopback"
      ],
      "upstream": "general",
      "notes": "ACME dns-01 TXT records only; control plane restricts names"
    },
    {
      "endpoint": "query-feature",
      "methods": [
        "POST"
      ],
      "symbol": "queryFeature(_:)",
      "access": "read",
      "gate": "HasServe",
      "upstream_maturity": "unspecified",
      "swift_support": "supported",
      "upstream_symbol": "QueryFeature",
      "since": "0.10.0",
      "min_tailscaled": "old",
      "tested": "matrix (headscale control plane → skip)",
      "transports": [
        "unix",
        "loopback"
      ],
      "upstream": "general",
      "notes": "control-plane probe for serve/funnel enablement; 503 without a netmap"
    },
    {
      "endpoint": "bugreport",
      "methods": [
        "POST"
      ],
      "symbol": "bugReport(note:) (supported), experimental.bugreport(note:diagnose:record:)",
      "access": "write",
      "gate": "HasDebug",
      "upstream_maturity": "stable",
      "swift_support": "supported",
      "upstream_symbol": "BugReport",
      "upstream_notes": "upstream-stable; the supported facade wraps BugReport only - BugReportWithOpts (recording lifecycle) stays in the stable-parity ledger because a faithful recording handle must hold the request body open, which this client cannot do yet",
      "since": "0.7.0",
      "min_tailscaled": "old",
      "tested": "matrix+live",
      "transports": [
        "unix",
        "loopback"
      ],
      "upstream": "debug",
      "notes": "drops a marker in the daemon log; returns the marker ID"
    },
    {
      "endpoint": "goroutines",
      "methods": [
        "GET"
      ],
      "symbol": "experimental.goroutines()",
      "access": "read",
      "gate": "core",
      "upstream_maturity": "unspecified",
      "swift_support": "experimental",
      "upstream_symbol": "Goroutines",
      "since": "0.7.0",
      "min_tailscaled": "old",
      "tested": "matrix+live",
      "transports": [
        "unix",
        "loopback"
      ],
      "upstream": "debug",
      "notes": "Go stack dump for diagnostics"
    },
    {
      "endpoint": "logtap",
      "methods": [
        "GET (stream)"
      ],
      "symbol": "experimental.logtap()",
      "access": "read",
      "gate": "HasLogTail",
      "upstream_maturity": "unstable",
      "swift_support": "experimental",
      "upstream_symbol": "TailDaemonLogs",
      "since": "0.7.0",
      "min_tailscaled": "old",
      "tested": "matrix",
      "transports": [
        "unix",
        "loopback (Darwin only)"
      ],
      "upstream": "debug",
      "notes": "live daemon log stream"
    },
    {
      "endpoint": "set-gui-visible",
      "methods": [
        "POST"
      ],
      "symbol": "experimental.setGUIVisible(_:sessionID:)",
      "access": "write",
      "gate": "HasDebug || windows || darwin",
      "upstream_maturity": "unspecified",
      "swift_support": "experimental",
      "upstream_symbol": "",
      "upstream_notes": "GUI-client contract; no public Go client method",
      "since": "0.9.0",
      "min_tailscaled": "old",
      "tested": "unit (wire shape)",
      "transports": [
        "unix",
        "loopback"
      ],
      "upstream": "gui-contract",
      "notes": "GUI-client contract; shapes follow Tailscale's own clients"
    },
    {
      "endpoint": "set-push-device-token",
      "methods": [
        "POST"
      ],
      "symbol": "experimental.setPushDeviceToken(_:)",
      "access": "write",
      "gate": "HasDebug",
      "upstream_maturity": "unspecified",
      "swift_support": "experimental",
      "upstream_symbol": "",
      "upstream_notes": "GUI-client contract; no public Go client method",
      "since": "0.9.0",
      "min_tailscaled": "old",
      "tested": "unit (wire shape)",
      "transports": [
        "unix",
        "loopback"
      ],
      "upstream": "gui-contract",
      "notes": "APNs token registration (GUI contract)"
    },
    {
      "endpoint": "handle-push-message",
      "methods": [
        "POST"
      ],
      "symbol": "experimental.handlePushMessage(_:)",
      "access": "write",
      "gate": "HasDebug",
      "upstream_maturity": "unspecified",
      "swift_support": "experimental",
      "upstream_symbol": "",
      "upstream_notes": "GUI-client contract; no public Go client method",
      "since": "0.9.0",
      "min_tailscaled": "old",
      "tested": "unit (wire shape)",
      "transports": [
        "unix",
        "loopback"
      ],
      "upstream": "gui-contract",
      "notes": "delivers a push payload to the daemon (GUI contract)"
    }
  ],
  "upstream_provenance": {
    "repository": "tailscale/tailscale",
    "revision": "4c4d1c35f83a21c6069ae09de69b246ed1993f3e",
    "capability_version": 144,
    "verified": "2026-08-03",
    "source": "client/local/{local,cert,serve}.go 'API maturity' doc comments; unannotated methods are upstream-unstable per package documentation. Validated by Scripts/verify-upstream-maturity.py against this exact revision."
  },
  "upstream_stable_unimplemented": [
    {
      "go_symbol": "BugReportWithOpts",
      "endpoint": "bugreport",
      "note": "recording lifecycle: upstream holds the POST body open until the caller ends the recording; needs a Swift recording handle whose cancellation closes the body (the experimental record: knob ends the window immediately and says so)"
    },
    {
      "go_symbol": "DialTCP / UserDial",
      "endpoint": "dial",
      "note": "raw duplex streams over HTTP upgrade; needs a Swift connection abstraction first (issue draft 04)"
    }
  ],
  "unwrapped_upstream_handlers": [
    {
      "endpoint": "alpha-set-device-attrs",
      "gate": "HasDebug",
      "note": "Alpha device-attribute push; unsupported until upstream stabilizes it."
    },
    {
      "endpoint": "appc-route-info",
      "gate": "HasAppConnectors",
      "note": "App-connector route diagnostics; experimental candidate on demand (ROADMAP Ongoing)."
    },
    {
      "endpoint": "check-so-mark-in-use",
      "gate": "core",
      "note": "Linux SO_MARK availability probe for tailscaled's own tooling; no client use case."
    },
    {
      "endpoint": "component-debug-logging",
      "gate": "HasDebug",
      "note": "Debug surface; added to client.experimental on demand (ROADMAP Ongoing)."
    },
    {
      "endpoint": "debug",
      "gate": "HasDebug",
      "note": "Debug action multiplexer; individual actions wrapped on demand (ROADMAP Ongoing)."
    },
    {
      "endpoint": "debug-bus-events",
      "gate": "HasDebug",
      "note": "Event-bus debug stream; on demand (ROADMAP Ongoing)."
    },
    {
      "endpoint": "debug-bus-graph",
      "gate": "HasDebug",
      "note": "Event-bus debug graph; on demand (ROADMAP Ongoing)."
    },
    {
      "endpoint": "debug-bus-queues",
      "gate": "HasDebug",
      "note": "Event-bus debug queues; on demand (ROADMAP Ongoing)."
    },
    {
      "endpoint": "debug-derp-region",
      "gate": "HasDebug",
      "note": "DERP region debug probe; netcheck covers the monitoring use case."
    },
    {
      "endpoint": "debug-dial-types",
      "gate": "HasDebug",
      "note": "Dial-path debug probe; on demand (ROADMAP Ongoing)."
    },
    {
      "endpoint": "debug-log",
      "gate": "HasDebug",
      "note": "Debug log injection; logtap (experimental) covers log observation."
    },
    {
      "endpoint": "debug-packet-filter-matches",
      "gate": "HasDebug",
      "note": "Packet-filter debug dump; on demand (ROADMAP Ongoing)."
    },
    {
      "endpoint": "debug-packet-filter-rules",
      "gate": "HasDebug",
      "note": "Packet-filter debug dump; on demand (ROADMAP Ongoing)."
    },
    {
      "endpoint": "debug-peer-endpoint-changes",
      "gate": "HasDebug",
      "note": "Peer endpoint-change history; on demand (ROADMAP Ongoing)."
    },
    {
      "endpoint": "debug-rotate-disco-key",
      "gate": "HasDebug",
      "note": "Disco-key rotation trigger; test-harness tool, no client use case."
    },
    {
      "endpoint": "dev-set-state-store",
      "gate": "HasDebug",
      "note": "Developer state-store override; unsupported (can corrupt daemon state)."
    },
    {
      "endpoint": "dial",
      "gate": "HasOutboundProxy || HasSSH",
      "note": "Connection-hijacking duplex endpoint; needs the DialTCP/UserDial abstraction (post-1.0 ledger)."
    },
    {
      "endpoint": "pprof",
      "gate": "HasDebug",
      "note": "Go pprof profiles; goroutines (experimental) covers the diagnostic use case."
    },
    {
      "endpoint": "set-udp-gro-forwarding",
      "gate": "HasAdvertiseRoutes",
      "note": "Mutating sibling of check-udp-gro-forwarding; upstream-unstable, no monitoring use case."
    },
    {
      "endpoint": "upload-client-metrics",
      "gate": "HasClientMetrics",
      "note": "GUI-client metrics upload; a monitoring library reads metrics, it does not submit them."
    }
  ]
}