Speakeasy and Tailscale bring private networking to enterprise MCP

Private network access in the Speakeasy AI Control Plane runs an organization's MCP gateway on its own Tailscale tailnet, adding MCP-specific governance and policy to private, identity-aware connectivity, with every request carrying Tailscale user and device identity.

SAN FRANCISCO, Oct. 13, 2026 /PRNewswire/ -- Speakeasy, the AI control plane for enterprise, today announced a partnership with Tailscale, the identity-first networking company, to bring private networking to enterprise Model Context Protocol (MCP). Companies can now run the Speakeasy MCP gateway as a node on their own Tailscale tailnet.

Many MCP deployments still rely on publicly reachable endpoints. With this integration, customers can run Speakeasy's MCP gateway directly on their tailnet and add Speakeasy's MCP-specific governance and controls to that existing private connectivity. Every MCP server is served on the tailnet, the public route can be closed entirely, and every request carries the Tailscale user and device it came from. The gateway that governs how AI agents reach a company's tools is reachable only from devices and identities that the company's network already trusts.

"Agents are now acting both on behalf of employees and independently across the whole business. From the beginning of our work on the AI Control Plane, our thesis has been that every agent action requires the same controls as a human employee. Many businesses require employees to use a VPN like Tailscale to access sensitive internal systems. Why should agents be any different? The MCP servers agents call should sit behind the same controls. With Speakeasy, they do," said Sagar Batchu, Co-founder and CEO of Speakeasy.

Two networks of trust, joined

The two platforms work in harmony. Tailscale provides private, identity-aware connectivity through its tailnets, which connect a company's people, devices, and services without putting any of them on the public internet. Speakeasy adds MCP-specific governance and policy on top of that connectivity, codifying and enforcing what actions agents are allowed to take.

Tailscale has increasingly focused its product work on the growing use of AI agents and AI infrastructure across private networks, and its customers have been adding agents to tailnets built for employees. The partnership lets those customers add Speakeasy's MCP-specific governance and controls to agent traffic already moving over their tailnet. A Tailscale customer turns on Speakeasy and its agents' tool calls travel over the tailnet it already runs, with nothing new to deploy and no separate network to manage.

"Customers are increasingly connecting AI agents to the same systems their employees already access over Tailscale. Speakeasy gives teams another way to apply MCP-specific controls while keeping that traffic private and identity-aware on the tailnet," said Travis Perkins, VP of Global Customer Advocacy at Tailscale.

Polar keeps its internal MCP servers off the internet

"At Polar, we require Tailscale to access critical services like our backoffice and data analytics. Our engineering and support teams rely on MCP servers every day to power their agent workflows, but we didn't have the same level of MCP-specific governance and auditing for those workflows. Speakeasy's MCP Gateway and its Tailscale integration closed that gap in one go, giving us a single entry point we can control, audit, and keep off the public internet," said François Voron, CTO of Polar.

Polar provides payment infrastructure for software developers, handling billing, subscriptions, and payouts for the businesses that sell through it. Its engineering team has run MCP servers on Speakeasy since 2025, starting with an onboarding flow that configures a merchant's products and pricing from a plain-language description.

The tools behind that flow can also issue refunds, change subscriptions, and read revenue data. Polar's customer-facing MCP server stays public so merchants' agents can reach it. The servers its own staff use for support and operations are set to private-only and answer on Polar's tailnet alone, the network the team already relied on to reach its backoffice and data analytics.

How the integration works

The AI Control Plane runs on Kubernetes, and the Tailscale Kubernetes operator is what places each organization's MCP gateway on that organization's tailnet. An administrator authorizes Speakeasy with a scoped Tailscale OAuth client, the operator provisions a highly available proxy and ingress for the organization, and a per-organization attestor verifies each request and attaches the Tailscale identity before it reaches an MCP server. Every organization's credentials, node, and workloads are isolated from every other's.

The integration composes with Speakeasy's MCP tunnels, which connect MCP servers running inside a private network to the gateway over an outbound-only connection. Together they mean an agent can reach a private MCP server without ever touching the public internet.

Availability

Private network access with Tailscale is available now for Enterprise organizations on the Speakeasy AI Control Plane and is rolling out per organization. Tailscale is the first supported private network provider. Setup instructions are in the Tailscale private network access documentation, and the private MCP gateway release post covers the design in more depth.

About Speakeasy

Speakeasy is the AI Control Plane for enterprise. It governs every agent action inside an organization with on-device policy enforcement, a secure MCP gateway, shadow AI detection, and compliance-ready audit logs, so companies can adopt AI agents across the business without losing control of what those agents can reach or do. Learn more at speakeasy.com.

About Tailscale

Tailscale provides secure, identity-first networking, simplifying complex network setups with fast, reliable connections that seamlessly scale across cloud and on-premises environments. Trusted globally by more than 40,000 business customers, including Microsoft, NVIDIA, Telus, and Instacart, and millions of individuals, Tailscale's award winning technology enables effortless adoption of Zero Trust principles with secure connectivity that just works.

Media contact

Nolan Di Mare Sullivan
Speakeasy
[email protected]
speakeasy.com

SOURCE Speakeasy