Data permissions explained
When you connect your Tesla account, you authorize specific data access through Tesla's official Fleet API using OAuth 2.0 scopes.
OAuth scopes we request
We request these Tesla API scopes:
- vehicle_device_data - Read-only access to vehicle sensor data, battery state, and configuration
- vehicle_charging_cmds - Access to charging history and invoice data
- vehicle_specs - Technical specifications (battery SoH, capacity, trim details)
Data we access
| Data | Tesla API Endpoint | Purpose |
|---|---|---|
| Vehicle info | Vehicle data | Model, VIN, configuration, display name |
| Battery state | Vehicle data / charge_state | Level, range, SoH, charging status, charger details |
| Tire pressure | Vehicle data / vehicle_state | TPMS readings for all four positions |
| Vehicle state | Vehicle data / vehicle_state | Odometer, software version, lock/Sentry/dashcam status |
| Climate state | Vehicle data / climate_state | Cabin temperature, seat heaters, defrosters |
| Vehicle config | Vehicle data / vehicle_config | Color, trim, wheels, interior, charge port, driver assist |
| Service data | Service data endpoint | Service mode status, appointments, messages |
| Recent alerts | Alerts endpoint | Active/recent system alerts with priority |
| Charging history | Charging history endpoint | Supercharger sessions, energy, cost, invoices |
| Warranty | Warranty endpoint | Coverage types, dates, odometer limits |
| Release notes | Release notes endpoint | Firmware update notes |
| Factory options | Options endpoint | Equipment codes and option names |
| Vehicle specs | Specs endpoint | Battery capacity, SoH, production date (partner-level) |
Data we do NOT access
- Your Tesla account credentials (username/password) are entered only on Tesla's site
- Vehicle controls - We cannot lock, unlock, honk, flash, start, or drive your vehicle
- Location tracking - We do not track or store your vehicle's location history
- Purchase or financial information from your Tesla account
- Camera or dashcam footage
How long do we keep access?
The access token is kept for the duration of your session, up to 60 minutes, and then automatically deleted. We do not store tokens for future use.