Tailcat is a Go-based, netcat-like tool that uses Tailscale’s encrypted data plane for peer-to-peer connections without requiring Tailscale’s control plane.
Tailcat is both a CLI and a reusable Go library for moving data or forwarding connections between two machines over Tailscale’s networking stack. It is positioned as a userspace tool that does not require a Tailscale account or admin/root access, and it leaves routing tables and DNS untouched. The README also mentions an experimental browser demo compiled to WebAssembly that can interoperate with the CLI for sending text or files.
It addresses the need for a simple, encrypted, point-to-point connection tool that behaves like netcat, but without relying on Tailscale’s control plane or requiring the user to manage a full Tailscale setup. The connection metadata can be exchanged out of band, so two parties only need a token to rendezvous and communicate.
Conceptually, one side starts a Tailcat server and receives a short connection token; the other side uses that token to connect. The initial rendezvous goes through a DERP relay, and then Tailcat tries to upgrade to a direct peer-to-peer UDP path when possible. The README says traffic is encrypted end to end with WireGuard, and that tokens can be parsed or resolved into a longer form that embeds DERP information; beyond that, the README does not describe implementation details.
It is attracting attention because it combines a familiar netcat-style workflow with Tailscale’s well-known encrypted transport model, while remaining open source and easy to try. The README highlights practical convenience points that are likely to resonate: no account required, no admin access needed, support for stdin/stdout piping, port forwarding, SOCKS5, SSH, and an experimental browser demo. The repository’s star growth suggests people are responding to that blend of simplicity, privacy, and novelty.
The README explicitly compares Tailcat to netcat as the closest mental model. It also points to Tailscale’s own open-source pieces, especially the data-plane and DERP-related components, as the foundation it remixes. For relay infrastructure, the README notes that users can use Tailscale’s free rate-limited DERP relays or run their own DERP server, but it does not name other direct competing tools.
AI-explained · grounded in each repo's README