Tailscale gates customer model access by tailnet identity and issues no API keys to agents at all
Vercel Blog·medium signal
Tailscale built Aperture, a customer-facing model router, on Vercel's AI Gateway and Sandbox. Access works like VPC membership: 'Add someone to the network, and they can immediately use approved models. Remove them, and access disappears.' Critically, no API keys are handed to agents; sandboxes connect through Aperture and validate tailnet identity before executing work. Tailscale shipped hundreds of models in-product and says it 'cut the entire company over to using AI Gateway in seconds, and nobody noticed.'