Tailscale vs a-Shell
Tailscale wins · 10–1 (6 drawn)
Agenticness — how well agents can access and operate the productAgenticness
How well agents can access and operate the product
Agent access
ai-native userPoint an agent at llms.txt or agent-oriented docs
weight 2 · round drawnTailscalenone0/10A direct probe found llms.txt returns 404, and there is no evidence of agent-oriented documentation or an llms.txt file anywhere in the evidence pack.
- [probe] “PROBE llms.txt: HTTP 404 at https://tailscale.com/llms.txt”
a-Shellnone0/10Probe of llms.txt returns 404 and no agent-oriented docs or API spec are found anywhere in the evidence pack; a-Shell provides only standard shell/vim/help docs.
- [probe] “PROBE llms.txt: HTTP 404 at https://holzschu.github.io/llms.txt”
- [probe] “PROBE openapi: all candidate paths 404 (https://holzschu.github.io/openapi.json, https://holzschu.github.io/swagger.json, https://holzschu.g…”
- [github] “For help, type `help` in the command line. `help -l` lists all the available commands. `help -l | grep command` will tell you if your favori…”
ai-native userUse an official CLI
weight 2 · round to TailscaleTailscale documents an official CLI reference (tailscale-probe-3), confirming the capability exists, but the evidence pack lacks detail on CLI features, scripting/automation support for AI-agent workflows, or independent corroboration of its use in agentic contexts. Missing for 10: detailed CLI command documentation, AI-agent-specific automation examples, and independent hands-on validation of CLI robustness.
- [probe] “official CLI documented at https://tailscale.com/docs/reference/tailscale-cli”
a-Shell is itself a full command-line environment on iOS with many built-in commands and Apple Shortcuts integration that lets users script and automate shell tasks, which could be leveraged by an AI-driven automation. However, there is no evidence of any AI-specific CLI features, agent APIs, or documented AI-native workflow support beyond generic shell scripting/Shortcuts. Missing for 10: explicit AI-agent integration, documented programmatic/automation API beyond Shortcuts, any mention of AI-native use cases.
- [github] “a-Shell is compatible with Apple Shortcuts, giving users full control of the Shell. You can write complex Shortcuts to download, process and…”
- [github] “For help, type `help` in the command line. `help -l` lists all the available commands. `help -l | grep command` will tell you if your favori…”
- [claimed-docs] “Use 'pip install' to add more Python packages (if they are pure Python).”
ai-native userDrive the product through a documented public API
weight 3 · round to TailscaleEvidence only vaguely references automating tailnets via 'infrastructure-as-code providers, webhooks, and other integrations' and a documented CLI, but probes explicitly failed to find an OpenAPI/swagger spec or llms.txt, giving no concrete confirmation of a documented public REST API surface in this pack. Missing for 10: explicit API reference docs, endpoint list, authentication scheme details, and independent corroboration of API usage by AI/automation tools.
- [claimed-docs] “Automate your tailnet using infrastructure-as-code providers, webhooks, and other integrations.”
- [probe] “PROBE openapi: all candidate paths 404 (https://tailscale.com/openapi.json, https://tailscale.com/swagger.json, https://tailscale.com/api/op…”
- [probe] “official CLI documented at https://tailscale.com/docs/reference/tailscale-cli”
a-Shellnone0/10a-Shell offers Apple Shortcuts integration and a CLI command set, but there is no documented public API (REST/OpenAPI/SDK) for programmatic control; explicit probes for llms.txt and OpenAPI specs both returned 404.
- [probe] “PROBE llms.txt: HTTP 404 at https://holzschu.github.io/llms.txt”
- [probe] “PROBE openapi: all candidate paths 404 (https://holzschu.github.io/openapi.json, https://holzschu.github.io/swagger.json, https://holzschu.g…”
- [github] “a-Shell is compatible with Apple Shortcuts, giving users full control of the Shell. You can write complex Shortcuts to download, process and…”
Agentic features
ai-native userSet up automations that run autonomously in the background
weight 2 · round to TailscaleTailscale documents API/webhook and infrastructure-as-code automation for managing a tailnet (tailscale-docs-12), which could be used to script background automations, but there is no evidence of AI-agent-specific, autonomous background automation capabilities or examples of such use. Missing for 10: dedicated agent/automation framework, evidence of autonomous (not just scriptable) background operation, and any AI-native tooling or examples beyond a single generic automation mention.
- [claimed-docs] “Automate your tailnet using infrastructure-as-code providers, webhooks, and other integrations.”
a-Shellnone0/10a-Shell is an iOS terminal app with no evidence of background execution, scheduling, or autonomous automation capability—Shortcuts integration allows manual triggering but not persistent background automation, and iOS sandboxing generally prevents apps like this from running unattended tasks.
ai-native userOperate the product with natural-language commands
weight 2 · round drawnTailscalenone0/10No evidence Tailscale offers any natural-language command interface, chatbot, or AI assistant control layer; it exposes a traditional CLI and admin console. Probes even show absence of llms.txt/OpenAPI discovery aids. Missing for 10: any NL command parsing, AI assistant integration, or documented conversational interface.
- [probe] “PROBE llms.txt: HTTP 404 at https://tailscale.com/llms.txt”
- [probe] “PROBE openapi: all candidate paths 404 (https://tailscale.com/openapi.json, https://tailscale.com/swagger.json, https://tailscale.com/api/op…”
- [probe] “official CLI documented at https://tailscale.com/docs/reference/tailscale-cli”
a-Shellnone0/10a-Shell is a traditional command-line shell requiring exact command syntax (e.g. clang, vim, pip install, config, bookmark); there is no evidence of natural-language command parsing or AI-native interaction, and llms.txt/openapi probes returned 404.
- [github] “For help, type `help` in the command line. `help -l` lists all the available commands. `help -l | grep command` will tell you if your favori…”
- [probe] “PROBE llms.txt: HTTP 404 at https://holzschu.github.io/llms.txt”
- [probe] “PROBE openapi: all candidate paths 404 (https://holzschu.github.io/openapi.json, https://holzschu.github.io/swagger.json, https://holzschu.g…”
Api quality
ai-native userExplore an interactive API reference with runnable examples
weight 2 · round drawnTailscalenone0/10No evidence of an interactive API reference or runnable examples; probes for OpenAPI/swagger specs returned 404s, and there's no mention of an interactive API explorer in the docs pack.
- [probe] “PROBE openapi: all candidate paths 404 (https://tailscale.com/openapi.json, https://tailscale.com/swagger.json, https://tailscale.com/api/op…”
a-Shellnone0/10a-Shell is a mobile terminal app with a `help` command listing built-ins, but there's no evidence of an interactive API reference with runnable examples; probes for llms.txt and OpenAPI specs both returned 404.
- [probe] “PROBE llms.txt: HTTP 404 at https://holzschu.github.io/llms.txt”
- [probe] “PROBE openapi: all candidate paths 404 (https://holzschu.github.io/openapi.json, https://holzschu.github.io/swagger.json, https://holzschu.g…”
- [github] “For help, type `help` in the command line. `help -l` lists all the available commands. `help -l | grep command` will tell you if your favori…”
ai-native userDownload a machine-readable API spec (OpenAPI or equivalent)
weight 2 · round drawnTailscalenone0/10Tailscale does have a documented REST API, but the evidence pack shows explicit probe failures for OpenAPI/Swagger spec endpoints at all candidate URLs, with no machine-readable spec found. missing for 10: a downloadable OpenAPI/Swagger JSON or YAML spec, any documentation page linking to such a spec.
a-Shellnone0/10a-Shell is a terminal app with no API surface, and probes for OpenAPI/Swagger specs and llms.txt all returned 404, confirming no machine-readable API spec is published.
Automation depth — how much of the product can run unattendedAutomation depth
How much of the product can run unattended
ai-native userPerform bulk operations across many items at once
weight 2 · round drawnTailscale exposes a CLI and supports infrastructure-as-code/webhook automation of a tailnet, which implies a user could script bulk changes across many devices, but there is no concrete documentation or example of a native bulk-operations feature (e.g., batch tagging, mass key rotation, multi-device ACL updates) or API endpoint for bulk actions. missing for 10: explicit bulk-operation API/CLI examples, evidence of batch device/user management, independent confirmation of scripted bulk workflows.
- [claimed-docs] “Automate your tailnet using infrastructure-as-code providers, webhooks, and other integrations.”
- [probe] “official CLI documented at https://tailscale.com/docs/reference/tailscale-cli”
a-Shell is a full Unix-like shell environment and its Shortcuts integration is described as enabling users to 'download, process and release files using a-Shell commands,' implying scripting-based batch workflows, but no evidence explicitly documents loop constructs, xargs, or batch file processing across many items. Missing for 10: explicit documentation of scripting/looping over multiple files, examples of bulk file processing, independent corroboration of batch workflows.
- [github] “a-Shell is compatible with Apple Shortcuts, giving users full control of the Shell. You can write complex Shortcuts to download, process and…”
- [github] “For help, type `help` in the command line. `help -l` lists all the available commands. `help -l | grep command` will tell you if your favori…”
ai-native userDefine rules that trigger actions automatically on events
weight 3 · round to TailscaleTailscale documents webhooks and infrastructure-as-code integrations for automating tailnet events, which could be used to trigger external actions on network changes, but there is no evidence of a built-in rules engine for defining conditional automation logic tied to arbitrary events. Missing for 10: documented rule/condition syntax, examples of event-triggered automations, and independent confirmation of this capability being used for automation workflows.
- [claimed-docs] “Automate your tailnet using infrastructure-as-code providers, webhooks, and other integrations.”
Networking access — stories about networking access in this arenaNetworking access
Stories about networking access in this arena
Mesh network
power-userConnect directly to my servers without relying on a cloud relay, proxy, or VPN
weight 2 · round to TailscaleTailscaledisputedcontradicted6/10Tailscale's mesh overlay and WireGuard-based architecture is documented to establish direct peer-to-peer connections for SSH, Kubernetes, NAS, and subnet access (tailscale-docs-1,5,6,9; tailscale-comm-1,7,8), and users report direct SSH/file access 'like I'm home' (tailscale-docs-7,8). However, hands-on community reports concretely contradict the 'no relay' claim: NAT traversal 'doesn't always work, sometimes I get connected to a DERP server, so that limits network speeds' (tailscale-comm-10), meaning cloud relay fallback is a real, documented occurrence rather than a hypothetical. Missing for 10: first-party acknowledgment/quantification of DERP relay fallback frequency, and independent benchmarking of direct-vs-relayed connection rates.
- [claimed-docs] “Infrastructure access to wherever your resources live, including Kubernetes clusters”
- [claimed-docs] “Across clouds or on-prem, Tailscale’s mesh overlay network connects it all.”
- [claimed-docs] “Auditable access to SSH, K8s, databases, and more.”
- [claimed-docs] “just SSH'ed into my boxes, building code and pushing configs around like I'm home”
- [claimed-docs] “I now can manage my home NAS and my home k8s cluster…from my phone!”
- [community] “Tailscale is my favorite (product) discovery of 2022... SSH'ing into a raspberry pi, accessing dev servers from other devices, giving access…”
- [community] “If you have more complex cases, the IPTables/Netfilter rules make it vastly more difficult to manage... They've also broken features I relie…”
a-Shellnone0/10The evidence pack contains no mention of SSH, SFTP, or any direct server-connection capability for a-Shell; it only covers compilation, Python packages, Vim, window management, Shortcuts integration, and accessibility. Since a terminal app plausibly could offer direct server connectivity, the axis applies, but no evidence documents it here.
Offline sync — stories about offline sync in this arenaOffline sync
Stories about offline sync in this arena
Cross device sync
power-userSync my saved hosts and connection settings across all my devices
weight 2 · round to TailscaleTailscale's mesh network model means every device on a tailnet automatically sees the same peer/device list (hosts) via the coordination server, and docs describe it as cross-platform and infrastructure agnostic, which implies your network of devices is consistent everywhere. However, there is no explicit evidence of syncing individual 'connection settings' (e.g., exit-node choice, per-device preferences, saved shortcuts) across devices beyond the shared tailnet device list. Missing for 10: documentation of settings/preference sync (not just device visibility), independent confirmation that user-level configs carry across devices, and any UI showing 'saved hosts' as a discrete synced feature.
- [claimed-docs] “Cross-platform and infrastructure agnostic to give the flexibility you need.”
- [claimed-docs] “Across clouds or on-prem, Tailscale’s mesh overlay network connects it all.”
- [claimed-docs] “Use subnet routers to give devices outside your local network access to services within specific subnets.”
Openness — open source, data portability, and self-hosting storiesOpenness
Open source, data portability, and self-hosting stories
ai-native userRead the product's source under an open license
weight 2 · round to a-ShellTailscalenone0/10No evidence in the pack shows Tailscale publishing its source under an open license; on the contrary, a community comment explicitly describes Tailscale's control/coordination server as 'closed source' (tailscale-comm-19), and no docs or repos are cited to counter this.
- [community] “we're all meant to be happy giving full control of our entire network to a commercial company running a closed source command and control se…”
The evidence confirms a-Shell's source lives in a public GitHub repository (holzschu/a-shell) with visible commands, structure, and documentation, implying the code is readable/inspectable. However, no evidence pack item cites an explicit open-source license (e.g., MIT, BSD, GPL) or license file. missing for 10: explicit license text/name, license badge or LICENSE file citation, confirmation of redistribution/modification rights.
- [github] “Each window has its own context, appearance, command history and current directory. `newWindow` opens a new window, `exit` closes the curren…”
- [github] “For help, type `help` in the command line. `help -l` lists all the available commands. `help -l | grep command` will tell you if your favori…”
Security — security posture and hardening storiesSecurity
Security posture and hardening stories
Credential protection
developerProtect my remote connections with biometric authentication like Face ID or fingerprint
weight 2 · round drawnTailscalenone0/10No evidence in the pack mentions Face ID, fingerprint, or any biometric authentication mechanism for Tailscale connections; only SSO/identity-provider login is discussed. missing for 10: any documentation or claim of biometric/Face ID/fingerprint authentication support.
Terminal ssh — terminal and SSH workflows — shells, sessions, remote accessTerminal ssh
Terminal and SSH workflows — shells, sessions, remote access
Ssh connections
developerTransfer files to and from remote hosts via scp and sftp using my configured keys
weight 2 · round to TailscaleTailscale provides standard IP connectivity between devices so any TCP-based tool including scp/sftp over SSH should work using normal SSH keys, and evidence confirms SSH access to boxes (tailscale-docs-6, tailscale-docs-7, tailscale-comm-1). However, there is no explicit mention of scp/sftp usage, and community reports specifically flag file-transfer performance overhead as a real drawback (tailscale-comm-7), which is directly relevant to this story's file-transfer use case. Missing for 10: explicit scp/sftp documentation or examples, confirmation that key-based auth flows unchanged, and resolution of the noted file-transfer performance complaints.
- [claimed-docs] “Auditable access to SSH, K8s, databases, and more.”
- [claimed-docs] “just SSH'ed into my boxes, building code and pushing configs around like I'm home”
- [community] “Tailscale is my favorite (product) discovery of 2022... SSH'ing into a raspberry pi, accessing dev servers from other devices, giving access…”
- [community] “I love tailscale, but the performance overhead on file transfer (my primary use case for it) is very real. Samba transfers take a 15 megabyt…”
developerConnect to remote servers using SSH with Ed25519, ECDSA, or RSA keys
weight 3 · round to TailscaleEvidence confirms Tailscale is commonly used to SSH into remote machines (docs-6, docs-7, comm-1), since it provides an encrypted network layer that carries ordinary SSH traffic, but there is no evidence addressing support for specific SSH key types (Ed25519, ECDSA, RSA) — this is typically handled by the standard OS SSH client, not Tailscale itself. Missing for 10: explicit documentation of key-type support, Tailscale SSH feature's key handling specifics, and independent confirmation of standard-key SSH working over Tailscale.
- [claimed-docs] “Auditable access to SSH, K8s, databases, and more.”
- [claimed-docs] “just SSH'ed into my boxes, building code and pushing configs around like I'm home”
- [community] “Tailscale is my favorite (product) discovery of 2022... SSH'ing into a raspberry pi, accessing dev servers from other devices, giving access…”
power-userGenerate SSH key pairs for password-less access to my servers
weight 2 · round to TailscaleTailscale enables password-less SSH access to servers (its Tailscale SSH feature and mesh network let users SSH into boxes without manual key exchange), evidenced by docs-6/docs-7 and community testimonials of SSHing into machines effortlessly (tailscale-comm-1). However, this works by replacing traditional SSH key-pair generation with Tailscale's own node identity and ACLs rather than an actual 'generate an SSH key pair' workflow, so the story as literally stated (generating SSH key pairs) is not directly evidenced. Missing for 10: explicit key-pair generation tooling/docs, first-party walkthrough of the Tailscale SSH feature, and independent verification of key-based passwordless access specifically.
- [claimed-docs] “Auditable access to SSH, K8s, databases, and more.”
- [claimed-docs] “just SSH'ed into my boxes, building code and pushing configs around like I'm home”
- [community] “Tailscale is my favorite (product) discovery of 2022... SSH'ing into a raspberry pi, accessing dev servers from other devices, giving access…”
power-userConnect to a saved host with one tap without re-entering credentials
weight 2 · round to TailscaleTailscale's mesh network keeps authenticated devices persistently reachable, and testimonials describe SSH'ing into boxes 'like I'm home' and managing home servers 'from my phone,' implying no per-session credential re-entry once connected. However, no evidence specifically documents a 'saved host' UI with one-tap connect (e.g., a bookmarked host list in the app), and some community reports describe friction (mobile client issues, NAT traversal problems) that complicate a seamless one-tap experience. Missing for 10: explicit one-tap saved-host UI documentation, first-party screenshots/demo of the connect flow, and independent confirmation of zero re-authentication across sessions.
- [claimed-docs] “just SSH'ed into my boxes, building code and pushing configs around like I'm home”
- [claimed-docs] “I now can manage my home NAS and my home k8s cluster…from my phone!”
- [community] “Tailscale is my favorite (product) discovery of 2022... SSH'ing into a raspberry pi, accessing dev servers from other devices, giving access…”
- [community] “This is the lowest friction personal VPN to ever exist, and once you see how easy it is for your own devices, you'll wish you had it at work…”
- [community] “If you have more complex cases, the IPTables/Netfilter rules make it vastly more difficult to manage... They've also broken features I relie…”
a-Shellnone0/10No evidence of saved-host SSH profiles, credential storage, or one-tap connect features; only bookmarks for directories and general shell features are documented.
- [github] “You can also bookmark the current directory with `bookmark`. `showmarks` will list all the existing bookmarks, `jump mark` and `cd ~mark` wi…”
- [github] “For help, type `help` in the command line. `help -l` lists all the available commands. `help -l | grep command` will tell you if your favori…”
Not comparable on these axes
ai-native userRun the product headlessly / in CI for automation
weight 2 · not comparableDocs show Tailscale can run inside Docker containers, be automated via auth keys/IaC/webhooks, and has a documented CLI for scripting—strongly suggesting headless/CI use—but there's no explicit CI pipeline example (e.g., GitHub Actions) in the evidence, and community feedback notes API keys expire every 60 days, complicating long-running automation. missing for 10: explicit CI/CD integration examples, confirmation of long-lived non-expiring credentials for unattended automation, and independent hands-on CI usage reports.
- [claimed-docs] “Explore how to use Tailscale inside Docker containers.”
- [claimed-docs] “Automate your tailnet using infrastructure-as-code providers, webhooks, and other integrations.”
- [probe] “official CLI documented at https://tailscale.com/docs/reference/tailscale-cli”
- [community] “our pricing ties number of servers to number of users... I don't see how this can ever work within the limits in their pricing plans... thei…”
ai-native userPlug MCP servers into this product so it can use their tools
weight 3 · not comparableTailscalen/aTailscale is a networking/VPN product, not an AI agent or agentic tool; plugging MCP servers into it to gain tool access is a category error for this product type.
ai-native userConnect an agent via an official MCP server
weight 3 · not comparableTailscalen/aTailscale is a networking/VPN infrastructure product, not an AI agent or agent-serving platform; no evidence of an MCP server offering exists, and this axis is a category error for a network connectivity tool.
ai-native userIssue scoped/least-privilege API credentials for an agent
weight 2 · not comparableTailscalenone0/10The evidence pack shows general automation/API mentions (docs-12) and API keys expiring after 60 days (comm-15), but nothing about issuing scoped or least-privilege credentials specifically for an AI agent's use — no ACL tag scoping, OAuth client scopes, or agent-specific access controls are documented.
- [claimed-docs] “Automate your tailnet using infrastructure-as-code providers, webhooks, and other integrations.”
- [community] “our pricing ties number of servers to number of users... I don't see how this can ever work within the limits in their pricing plans... thei…”
ai-native userBuild against official SDKs
weight 2 · not comparableTailscalenone0/10Evidence shows only infra-as-code/webhook integrations and a CLI reference, with no mention of official SDKs; probes explicitly show the OpenAPI spec and llms.txt endpoints returning 404, indicating no discoverable machine-readable API/SDK surface for AI-native builders.
- [claimed-docs] “Automate your tailnet using infrastructure-as-code providers, webhooks, and other integrations.”
- [probe] “PROBE llms.txt: HTTP 404 at https://tailscale.com/llms.txt”
- [probe] “PROBE openapi: all candidate paths 404 (https://tailscale.com/openapi.json, https://tailscale.com/swagger.json, https://tailscale.com/api/op…”
- [probe] “official CLI documented at https://tailscale.com/docs/reference/tailscale-cli”
ai-native userSubscribe to events via webhooks
weight 2 · not comparableTailscale docs explicitly mention automating the tailnet via 'infrastructure-as-code providers, webhooks, and other integrations,' indicating webhook support exists, but there's no detail on event types, subscription setup, or payload schema, and no independent/community corroboration of using this feature. Missing for 10: documentation of specific webhook event catalog, setup/config details, and independent confirmation of real-world webhook usage.
- [claimed-docs] “Automate your tailnet using infrastructure-as-code providers, webhooks, and other integrations.”
ai-native userGet AI-generated insights and suggestions from my data inside the product
weight 2 · not comparableTailscalen/aTailscale is a networking/VPN product for connecting devices and infrastructure; it has no data analytics or AI-insights layer over user data, and this axis is a category error for its product type.
ai-native userDelegate tasks to a built-in AI assistant inside the product
weight 3 · not comparableTailscalen/aTailscale is a networking/VPN product; it does not offer or claim any built-in AI assistant feature. Delegating tasks to an AI assistant is outside its product category, making this axis a category error rather than an unmet capability.
ai-native userTest against a sandbox environment without touching production data
weight 1 · not comparableTailscalen/aTailscale is a network connectivity/VPN product, not a testing, data-management, or sandbox-environment tool; the notion of 'sandbox vs production data' for AI testing is a wrong axis for this product category.
ai-native userRely on versioned APIs with a documented deprecation policy
weight 2 · not comparableTailscalenone0/10No evidence of API versioning documentation or a deprecation policy; probes for OpenAPI/spec files returned 404s and no docs mention API version lifecycle. missing for 10: documented API versioning scheme, deprecation policy, changelog for breaking changes.
- [probe] “PROBE openapi: all candidate paths 404 (https://tailscale.com/openapi.json, https://tailscale.com/swagger.json, https://tailscale.com/api/op…”
ai-native userSchedule recurring jobs or workflows
weight 2 · not comparableTailscalen/aTailscale is a networking/VPN product; scheduling recurring jobs or workflows is not a networking capability and falls entirely outside its product category. This is a wrong-axis question, not a missing feature.
ai-native userVersion, review, and roll back my automations
weight 1 · not comparableTailscalen/aTailscale is a networking/VPN product, not an automation/workflow-building tool with versionable automations; versioning, reviewing, and rolling back 'automations' is not a fair axis for its category.
power-userAmend the latest commit or undo unpushed commits to fix or split them
weight 2 · not comparableTailscalen/aTailscale is a networking/VPN product with no git functionality; amending commits or managing git history is entirely outside its product category.
developerSearch and navigate code content using fuzzy matching, filters, and regular expressions
weight 2 · not comparableTailscalen/aTailscale is a networking/VPN product; code search, fuzzy matching, and regex-based navigation of code content are outside its category entirely — this is a wrong-axis question, not a missing feature.
a-Shellnone0/10The evidence pack shows a-Shell as an iOS terminal app with grep, help search, and vim, but no evidence of dedicated fuzzy-matching code search, filters, or regex-based code navigation tooling like fzf, ripgrep, or ctags integration.
- [github] “For help, type `help` in the command line. `help -l` lists all the available commands. `help -l | grep command` will tell you if your favori…”
- [claimed-docs] “a-Shell comes with Vim included. You can edit your files and even run syntax checkers using e.g. vim-lsp or ALE.”
developerClone Git repositories over HTTPS, SSH, or the Git protocol
weight 3 · not comparableTailscalen/aTailscale is a networking/VPN tool, not a Git hosting or code-clone tool; cloning repos via HTTPS/SSH/Git protocol is outside its product category, though it could enable network access to a self-hosted Git server as a side effect.
power-userVisualize the full commit graph across branches
weight 2 · not comparableTailscalen/aTailscale is a networking/VPN product; visualizing git commit graphs is entirely outside its category and unrelated to any of its documented features.
developerCommit and push changes directly from my device
weight 3 · not comparableTailscalen/aTailscale is a networking/VPN product, not a git or source-control tool; committing and pushing code is entirely outside its category (wrong axis).
power-userSign my commits with a GPG or SSH key for verification
weight 1 · not comparableTailscalen/aTailscale is a networking/VPN product, not a git or code-signing tool; signing commits with GPG/SSH keys is entirely outside its product category.
power-userInteractively rewrite history by deleting, editing, squashing, or reordering commits
weight 2 · not comparableTailscalen/aTailscale is a networking/VPN product, not a version control tool; interactive git history rewriting is entirely outside its category.
developerResolve merge conflicts across many files at once with a dedicated tool
weight 2 · not comparableTailscalen/aTailscale is a networking/VPN product; merge conflict resolution is a git/code-editing capability entirely outside its category.
developerCreate pull requests on hosted Git platforms directly from my device
weight 3 · not comparableTailscalen/aTailscale is a networking/VPN tool; creating pull requests on Git platforms is a source-control feature entirely outside its category — this is a wrong-axis question, not a missing capability.
developerReview pull requests from my phone while on the go
weight 3 · not comparableTailscalen/aTailscale is a network connectivity/VPN tool; reviewing pull requests is a git-hosting/code-review workflow entirely outside its product category. It could enable mobile access to a self-hosted git server, but that's a stretch not evidenced, and the axis itself is a wrong-category fit for a networking product.
a-Shellnone0/10a-Shell is a terminal/shell app for iOS with git-like command-line tools, but the evidence pack shows no PR review functionality, no GitHub/GitLab integration for reviewing diffs, comments, or approvals from mobile. Nothing indicates a UI or workflow for browsing/reviewing pull requests.
power-userStash and unstash changes to temporarily clear my working directory
weight 2 · not comparableTailscalen/aTailscale is a networking/VPN product with no git or version control functionality; git stash/unstash is entirely outside its product category.
power-userClone, update, and manage Git submodules within a repository
weight 1 · not comparableTailscalen/aTailscale is a networking/VPN tool, not a Git or version-control product; managing Git submodules is entirely outside its category and not a fair axis for it.
developerPreview Markdown, HTML, and other rendered files with live reload
weight 2 · not comparableTailscalen/aTailscale is a networking/VPN tool; live-reload preview of Markdown/HTML files is a code-editor/IDE feature, entirely outside its product category.
a-Shellnone0/10a-Shell is a terminal/shell app with vim editing and command-line tools, but there is no evidence of any Markdown/HTML preview or live-reload rendering capability.
- [claimed-docs] “a-Shell comes with Vim included. You can edit your files and even run syntax checkers using e.g. vim-lsp or ALE.”
- [github] “For help, type `help` in the command line. `help -l` lists all the available commands. `help -l | grep command` will tell you if your favori…”
power-userRoute all my internet traffic through a specific device on my network using an exit node
weight 2 · not comparableFirst-party docs explicitly document exit nodes for routing all internet traffic through a specific device, and community evidence corroborates real-world use of exit nodes (e.g., using a home exit node to bypass geo-blocking). Missing for 10: independent hands-on walkthrough of exit-node setup/performance and more detail on configuration nuances.
- [claimed-docs] “Route all internet traffic through a specific device on your network.”
- [community] “I was once in South Africa and needed to look up my prescriptions in the CVS app... CVS geoblocked me. Luckily I had a TailScale exit node r…”
developerGet secure infrastructure access to resources wherever they live, including Kubernetes clusters
weight 3 · not comparableFirst-party docs explicitly claim infrastructure access 'wherever your resources live, including Kubernetes clusters,' with auditable SSH/K8s/database access, subnet routers, and infra-as-code integrations, and community testimonials corroborate managing home k8s clusters and SSH access remotely. Missing for 10: independent hands-on validation specifically of Kubernetes access (only a generic homelab testimonial), and no detailed K8s-operator documentation excerpt beyond marketing claims.
- [claimed-docs] “Infrastructure access to wherever your resources live, including Kubernetes clusters”
- [claimed-docs] “Auditable access to SSH, K8s, databases, and more.”
- [claimed-docs] “I now can manage my home NAS and my home k8s cluster…from my phone!”
- [claimed-docs] “Use subnet routers to give devices outside your local network access to services within specific subnets.”
- [claimed-docs] “Automate your tailnet using infrastructure-as-code providers, webhooks, and other integrations.”
- [community] “Tailscale is my favorite (product) discovery of 2022... SSH'ing into a raspberry pi, accessing dev servers from other devices, giving access…”
developerUse subnet routers to reach devices outside my local network as if I were on it
weight 2 · not comparableTailscale's docs explicitly describe subnet routers giving devices outside the local network access to services within specific subnets, plus broader infrastructure access (Kubernetes, SSH, cloud/on-prem) and community hands-on confirmation of SSH'ing into remote boxes and managing home NAS/k8s clusters as if local. Missing for 10: independent third-party benchmark or detailed hands-on walkthrough specifically of subnet router setup (rather than general VPN/exit-node use).
- [claimed-docs] “Use subnet routers to give devices outside your local network access to services within specific subnets.”
- [claimed-docs] “Auditable access to SSH, K8s, databases, and more.”
- [claimed-docs] “Across clouds or on-prem, Tailscale’s mesh overlay network connects it all.”
- [claimed-docs] “just SSH'ed into my boxes, building code and pushing configs around like I'm home”
- [claimed-docs] “I now can manage my home NAS and my home k8s cluster…from my phone!”
- [community] “Tailscale is my favorite (product) discovery of 2022... SSH'ing into a raspberry pi, accessing dev servers from other devices, giving access…”
developerAccess and work with files and repositories from other apps' sandboxes on my device
weight 2 · not comparableTailscalen/aThis story concerns sandboxed app file/repo access (an OS-level app-sandbox interoperability concern), which is unrelated to Tailscale's category as a mesh VPN/networking tool for device and service connectivity — wrong axis for this product type.
a-Shell explicitly supports accessing other apps' sandboxed directories via the `pickFolder` command using iOS 13's app sandbox access API, plus bookmarking directories for repeated use, enabling developers to work with files/repos across app sandboxes directly from the shell. Missing for 10: no explicit mention of git/repository workflows using this feature, and no independent/hands-on corroboration of pickFolder working reliably in practice.
ai-native userDo everything through the API that I can do in the UI
weight 2 · not comparableDocs mention automating a tailnet via infrastructure-as-code, webhooks, and other integrations, and a CLI reference exists, implying some API/CLI parity with the admin console, but there is no explicit claim or evidence that every UI action (e.g., user management, subnet routing, ACL editing) is fully exposed via API, and probes found no discoverable OpenAPI spec. Missing for 10: explicit API/UI feature-parity documentation, a discoverable OpenAPI/API reference, and independent confirmation that admin console actions map 1:1 to API calls.
- [claimed-docs] “Automate your tailnet using infrastructure-as-code providers, webhooks, and other integrations.”
- [claimed-docs] “See how to invite users, assign or change user roles, remove users, and quickly switch between accounts.”
- [probe] “PROBE openapi: all candidate paths 404 (https://tailscale.com/openapi.json, https://tailscale.com/swagger.json, https://tailscale.com/api/op…”
- [probe] “official CLI documented at https://tailscale.com/docs/reference/tailscale-cli”
ai-native userExport all of my data in open formats and leave
weight 3 · not comparableTailscalen/aTailscale is a network connectivity/VPN product, not a data-store or content-authoring platform; the notion of 'exporting all my data in open formats and leaving' does not apply to its category — this is a wrong axis rather than a missing feature.
a-Shellnone0/10a-Shell's evidence pack shows it operates on files, config, and bookmarks, but there is no documentation or claim about an explicit data export mechanism, open-format guarantee, or ability to migrate history/config/bookmarks out of the app. The probes for llms.txt/openapi also returned 404s, showing no additional documentation on this front. Missing for 10: any statement on export formats, data portability tools, or guarantees that user data (history, bookmarks, config) isn't locked into a-Shell-specific formats.
- [github] “Each window has its own context, appearance, command history and current directory. `newWindow` opens a new window, `exit` closes the curren…”
- [github] “You can also bookmark the current directory with `bookmark`. `showmarks` will list all the existing bookmarks, `jump mark` and `cd ~mark` wi…”
- [probe] “PROBE llms.txt: HTTP 404 at https://holzschu.github.io/llms.txt”
- [probe] “PROBE openapi: all candidate paths 404 (https://holzschu.github.io/openapi.json, https://holzschu.github.io/swagger.json, https://holzschu.g…”
ai-native userSelf-host the core product
weight 3 · not comparableTailscalenone0/10No vendor documentation claims a self-hostable control server; multiple independent community comments explicitly note Tailscale's coordination/control server is closed-source and cannot be self-hosted, with users citing this as a trust/lock-in concern.
- [community] “Am I the only one that has an issue with a VPN that I can't self host? Presumably if Tailscale get's PWN'd or subpoenaed then your network i…”
- [community] “we're all meant to be happy giving full control of our entire network to a commercial company running a closed source command and control se…”
- [community] “As soon as Tailscale provides option for Wireguard preshared keys, I will use it. I need Tailscale out of my network... Self hosting Tailsca…”
ai-native userChoose where my data is stored (region/residency)
weight 2 · not comparableTailscalenone0/10Tailscale is a mesh VPN/networking product; the evidence pack contains nothing about choosing a data storage region or data residency controls for user data/AI content. This is a plausible axis for privacy-conscious SaaS-style products, but there is no documentation of regional data storage or residency options, so it is 'none' rather than 'na'.
ai-native userPrevent my data from being used to train AI models
weight 3 · not comparableTailscalen/aTailscale is a networking/VPN mesh product, not an AI model provider or data processor that trains AI models; the axis of preventing data use for AI training is a category error for this product type.
ai-native userControl data retention and deletion
weight 2 · not comparableTailscalenone0/10No evidence addresses data retention policies, deletion controls, or AI-native data handling settings; evidence pack focuses on networking features, VPN performance, and identity provider concerns unrelated to data retention/deletion.
ai-native userOpt out of telemetry and usage tracking
weight 2 · not comparableTailscalenone0/10The evidence pack contains no documentation or community mention of a telemetry/usage-tracking opt-out setting for Tailscale; only unrelated product marketing, feature docs, and general community trust/security discussions are present. This is a fair question for a network/VPN product, but no capability is evidenced.
ai-native userHave an AI agent analyze my pull requests and suggest code improvements from my phone
weight 3 · not comparableTailscalen/aTailscale is a network connectivity/VPN product, not an AI agent or code-analysis tool; analyzing PRs and suggesting code improvements is entirely outside its category. It could at most provide network access to reach such an agent, but that's a different axis from the story itself.
ai-native userGet AI-generated commit message suggestions based on my staged changes
weight 2 · not comparableTailscalen/aTailscale is a networking/VPN product, not a coding tool or git assistant; AI-generated commit message suggestions are entirely outside its product category and wrong axis for this type of product.
ai-native userDirect an AI agent to browse, search, edit, commit, pull, and push in a repository via conversation
weight 3 · not comparableTailscalen/aTailscale is a network connectivity/VPN product, not a coding agent or repository tool; browsing/editing/committing/pushing code is entirely outside its product category — this is a wrong-axis question, not a gap in its networking feature set.
a-Shellnone0/10a-Shell is an iOS terminal app with git-like commands and vim available, but there is no evidence of any AI agent integration, conversational control, or automation for browsing/searching/editing/committing/pulling/pushing via an AI agent — the evidence only covers manual shell usage, Shortcuts, and UI features.
ai-native userAssign an issue to an AI coding agent and receive a ready-to-review pull request
weight 3 · not comparableTailscalen/aTailscale is a networking/VPN product; assigning issues to AI coding agents and receiving pull requests is entirely outside its category — this is a wrong-axis question, not a capability gap.
ai-native userConverse with an AI agent in natural language to get insights into repositories and open pull requests
weight 2 · not comparableTailscalen/aTailscale is a networking/VPN product; conversing with an AI agent about repository/PR insights is entirely outside its category (wrong axis), not something Tailscale's evidence pack even attempts to address.
developerManage and track cloud-based coding agent tasks from my phone
weight 2 · not comparableTailscalen/aTailscale is a network connectivity/VPN mesh product, not a coding-agent task management or tracking tool; nothing in the evidence relates to managing or tracking cloud-based coding agent tasks, only network access from devices including phones.
ai-native userDescribe what I want in plain language and have the tool generate the corresponding shell command
weight 2 · not comparableTailscalen/aTailscale is a networking/VPN product, not a natural-language-to-command generation tool; this axis is a category error for its product type.
developerStore credentials once in a secure vault and reference them from multiple hosts
weight 2 · not comparableTailscalen/aTailscale is a networking/VPN mesh product, not a secrets/credentials vault; the evidence pack shows it provides secure network access (SSH, Kubernetes, subnet routing) but no capability for storing or referencing credentials/secrets. This story is a category error for this product type.
power-userStore my SSH keys in a hardware-backed secure enclave protected by biometrics
weight 2 · not comparableTailscalen/aTailscale is a mesh networking/VPN product; hardware-backed secure enclave storage for SSH keys protected by biometrics is a credential-management/OS-security feature outside its product category, not something a networking tool ships.
a-Shellnone0/10No evidence in the pack mentions SSH key storage, hardware-backed secure enclave, or biometric protection for a-Shell; the docs focus on shell commands, package installation, and appearance customization. This is a plausible security axis for a terminal app dealing with SSH, but absence of any supporting evidence means it must be marked none.
developerEdit files with a terminal-based editor and run syntax/lint checkers inside the app
weight 2 · not comparableTailscalen/aTailscale is a networking/VPN product providing connectivity (SSH, subnet routing, mesh network); it is not an editor, IDE, or code-quality tool and does not provide in-app terminal editing or lint/syntax checking. This is a wrong-axis story for the product category.
a-Shell ships Vim for file editing and explicitly documents running syntax checkers via vim-lsp/ALE, plus compilers (clang) for building/checking C/C++ code. However, evidence lacks detail on lint checker installation/setup specifics, dedicated linters for other languages, or hands-on confirmation of this workflow succeeding. missing for 10: independent/hands-on verification of lint checker setup, broader language linting support beyond vim-lsp/ALE mention.
- [claimed-docs] “a-Shell comes with Vim included. You can edit your files and even run syntax checkers using e.g. vim-lsp or ALE.”
- [claimed-docs] “clang/clang++ compiles your C/C++ files to webAssembly with wasi included. Execute the resulting files using 'wasm command'.”
developerInstall additional pure-Python packages using pip directly on my device
weight 2 · not comparableTailscalen/aTailscale is a networking/VPN product; installing pip packages is a local development environment concern unrelated to network connectivity, which is entirely outside its category.
a-Shell's official docs explicitly state pip install works for pure-Python packages directly on-device, matching the story exactly. missing for 10: independent hands-on confirmation of pip install working, and details on limitations (e.g. packages requiring compiled extensions).
- [claimed-docs] “Use 'pip install' to add more Python packages (if they are pure Python).”
power-userGroup multiple terminal sessions together and broadcast the same command to all of them
weight 2 · not comparableTailscalen/aTailscale is a networking/VPN product providing connectivity between devices; it has no terminal multiplexing or broadcast-command-to-multiple-sessions feature, and grouping terminal sessions is a wrong axis for a mesh-networking tool, not a networking capability gap.
a-Shellnone0/10a-Shell supports multiple independent windows each with their own context (a-shell-gh-1), but there is no evidence of any mechanism to group sessions and broadcast a single command to all of them simultaneously.
- [github] “Each window has its own context, appearance, command history and current directory. `newWindow` opens a new window, `exit` closes the curren…”
developerRun local UNIX commands like ls, grep, cat, tar, and curl directly in the app
weight 3 · not comparableTailscalen/aTailscale is a networking/VPN mesh product, not a terminal/agent app with a built-in shell; running local UNIX commands like ls/grep/tar/curl inside 'the app' is a category error for this product type — it enables SSH connectivity to remote machines but does not itself execute local shell commands.
The evidence confirms a-Shell is a genuine command-line environment (help/help -l lists commands, and the example 'help -l | grep command' implies grep is a working built-in), and it supports compiling/running code and pip installs, suggesting a real UNIX-like command set. However, the pack never explicitly documents ls, cat, tar, or curl as available commands. Missing for 10: explicit documentation or example usage of ls, cat, tar, and curl, and independent confirmation that these specific commands run natively.
- [github] “For help, type `help` in the command line. `help -l` lists all the available commands. `help -l | grep command` will tell you if your favori…”
- [claimed-docs] “clang/clang++ compiles your C/C++ files to webAssembly with wasi included. Execute the resulting files using 'wasm command'.”
- [claimed-docs] “Use 'pip install' to add more Python packages (if they are pure Python).”
power-userOpen multiple terminal sessions, each with its own context, appearance, and history
weight 3 · not comparableTailscalen/aTailscale is a networking/VPN mesh product, not a terminal emulator or SSH client with session/appearance/history management — multi-session terminal UX is a wrong-axis question for this category of product.
First-party GitHub docs confirm each window (multiple terminal sessions) has its own context, appearance, command history, and current directory, with `newWindow` to open additional sessions and `config` to customize appearance per session. Missing for 10: independent hands-on corroboration specifically of multi-window session isolation (community comments are about an unrelated web demo/HN thread, not this feature).
- [github] “Each window has its own context, appearance, command history and current directory. `newWindow` opens a new window, `exit` closes the curren…”
- [github] “You can change the appearance of a-Shell using `config`. It lets you change the font, the font size, the background color, the text color an…”
power-userKeep my terminal session alive across network changes and device sleep
weight 3 · not comparableEvidence shows Tailscale is commonly used to SSH into always-reachable devices (docs-7, comm-1) via a stable mesh network, which implies some resilience, but there is no explicit evidence that an active terminal session survives network changes or device sleep (e.g., no mosh-like session persistence claim). Community reports also note connectivity breakage from ISPs/guest wifi blocking Tailscale ports and NAT traversal failures (comm-11, comm-10), casting doubt on seamless roaming. missing for 10: explicit documentation or hands-on test of session persistence across network/device changes, confirmation of roaming behavior during sleep/wake cycles.
- [claimed-docs] “just SSH'ed into my boxes, building code and pushing configs around like I'm home”
- [community] “Tailscale is my favorite (product) discovery of 2022... SSH'ing into a raspberry pi, accessing dev servers from other devices, giving access…”
- [community] “Tailscale is becoming less useful as network providers become hostile to it. Last week I noticed McDonalds guest wifi is blocking new connec…”
- [community] “If you have more complex cases, the IPTables/Netfilter rules make it vastly more difficult to manage... They've also broken features I relie…”
power-userCustomize the font, colors, and cursor appearance of my terminal and persist the settings
weight 2 · not comparableTailscalen/aTailscale is a VPN/networking product, not a terminal or CLI application with UI customization features; terminal appearance settings are entirely outside its product category.
The `config` command explicitly supports changing font, font size, background color, text color, and cursor color/shape (a-shell-gh-2), directly matching the story's customization request. However, there is no documented evidence that these settings persist across sessions/app restarts, and community feedback (unrelated HN comments) doesn't corroborate the persistence or usability of these settings. missing for 10: explicit confirmation that config changes persist across sessions, independent/hands-on corroboration of the customization workflow.
- [github] “You can change the appearance of a-Shell using `config`. It lets you change the font, the font size, the background color, the text color an…”