Token lifecycle

This article explains how we handle Tesla access tokens.

The OAuth flow

1. You click "Connect to Tesla" and are redirected to Tesla's login page (auth.tesla.com)
2. You log in and approve permissions on Tesla's website
3. Tesla redirects back to us with a one-time authorization code
4. Our server exchanges that code for an access token via Tesla's token endpoint
5. We use the access token to call Tesla's Fleet API and pull your vehicle data

Token storage

• Each token is associated with a single session
• Tokens are stored securely for the duration of your session, up to 60 minutes
• When the session expires, the token is automatically deleted

What if I want another report?

You can use the "Delete My Data" button in the top navigation to clear your current session and start over. You will need to connect your Tesla account again and complete a new payment. Each report requires its own payment and fresh authorization from Tesla.

Can you access my vehicle after the report?

No. Once your session expires, the token is deleted and we have zero access to your Tesla account or vehicle. During the session we only have read-only access. We cannot lock, unlock, start, or control your vehicle in any way.