diff --git a/core/headscale/main.go b/core/headscale/main.go
new file mode 100644
index 0000000..a2e429c
--- /dev/null
+++ b/core/headscale/main.go
@@ -0,0 +1,73 @@
+package main
+
+import (
+	"encoding/json"
+	"flag"
+	"fmt"
+	"log"
+	"net/http"
+
+	"github.com/labstack/echo/v4"
+)
+
+var port = flag.Int("port", 3000, "Port to listen on")
+var config = flag.String("config", "", "Path to headscale config")
+
+type server struct {
+	port   int
+	client *client
+}
+
+func newServer(port int, client *client) *server {
+	return &server{
+		port,
+		client,
+	}
+}
+
+func (s *server) start() {
+	e := echo.New()
+	e.POST("/user/:user/preauthkey", s.createReusablePreAuthKey)
+	e.POST("/user", s.createUser)
+	e.POST("/routes/:id/enable", s.enableRoute)
+	log.Fatal(e.Start(fmt.Sprintf(":%d", s.port)))
+}
+
+type createUserReq struct {
+	Name string `json:"name"`
+}
+
+func (s *server) createUser(c echo.Context) error {
+	var req createUserReq
+	if err := json.NewDecoder(c.Request().Body).Decode(&req); err != nil {
+		return err
+	}
+	if err := s.client.createUser(req.Name); err != nil {
+		return err
+	} else {
+		return c.String(http.StatusOK, "")
+	}
+}
+
+func (s *server) createReusablePreAuthKey(c echo.Context) error {
+	if key, err := s.client.createPreAuthKey(c.Param("user")); err != nil {
+		return err
+	} else {
+		return c.String(http.StatusOK, key)
+	}
+}
+
+func (s *server) enableRoute(c echo.Context) error {
+	if err := s.client.enableRoute(c.Param("id")); err != nil {
+		return err
+	} else {
+		return c.String(http.StatusOK, "")
+	}
+}
+
+func main() {
+	flag.Parse()
+	c := newClient(*config)
+	s := newServer(*port, c)
+	s.start()
+}