Tesla

Control your Tesla vehicles — lock/unlock, climate, location, charge status, and more. Supports multiple vehicles via Tesla Fleet API.

Security Scan

The skill's requests and behavior are consistent with its stated purpose (remote Tesla vehicle control); it only needs your Tesla email and caches OAuth tokens locally.

Purpose & Capability

Name and description match the included script and commands. The skill needs a Tesla account identifier (TESLA_EMAIL) to initiate OAuth and then uses the unofficial Tesla Owner API (via teslapy) to control vehicles, which is coherent with the claimed functionality.

Instruction Scope

SKILL.md and scripts instruct the agent to run the local Python script and perform OAuth in-browser, cache a token at ~/.tesla_cache.json, and call Tesla endpoints. There are no instructions to read unrelated system files, exfiltrate data, or contact unknown third parties.

Install Mechanism

No install spec or remote downloads are present (instruction-only with an included script). The script lists a dependency (teslapy) in comments but does not trigger any external installer; this is low-risk compared with arbitrary downloads.

Credentials

Only TESLA_EMAIL is required (used to start authentication). The script caches OAuth tokens locally (~30 days) at ~/.tesla_cache.json. No unrelated secrets or extra service credentials are requested.

Persistence & Privilege

The skill is not forced always-on (always:false). It stores tokens under the user's home directory (its own cache file) which is expected behavior for this use case and does not modify other skills or system-wide config.

Assessment

This skill appears to do what it says: it runs a local Python script that performs OAuth with Tesla and then calls the Tesla Owner API to control vehicles. Before installing, verify you trust the skill source and review scripts/tesla.py (it will cache a refresh token at ~/.tesla_cache.json). Ensure you have or will install the Python dependency (teslapy) and that network access to Tesla endpoints is acceptable. Note: SKILL.md mentions a 'tesla-fleet-api' package but the script uses teslapy—confirm dependencies before running. Keep your machine secure because the cached token grants access to your vehicles while valid.

Control your Tesla vehicles from OpenClaw. Supports multiple cars on one account.

Fleet API Update (2026): Tesla is deprecating direct /command REST calls. Vehicles on firmware 2024.26+ require the Vehicle Command Protocol (VCP) SDK. The tesla-fleet-api Python package (v1.x+) handles this automatically.

Setup

First-time authentication:

TESLA_EMAIL="[e-mail]" python3 {baseDir}/scripts/tesla.py auth

This will:

1. Display a Tesla login URL
2. You log in and authorize in browser
3. Paste the callback URL back
4. Token cached for future use (~30 days, auto-refreshes)

Environment variables:

• TESLA_EMAIL — Your Tesla account email
• Token cached in ~/.tesla_cache.json

Multi-Vehicle Support

Use --car or -c to specify which vehicle:

# List all vehicles
python3 {baseDir}/scripts/tesla.py list

# Commands for specific car
python3 {baseDir}/scripts/tesla.py --car "Snowflake" status
python3 {baseDir}/scripts/tesla.py -c "Stella" lock

Without --car, commands target your first vehicle.

Commands

# List all vehicles
python3 {baseDir}/scripts/tesla.py list

# Get vehicle status
python3 {baseDir}/scripts/tesla.py status
python3 {baseDir}/scripts/tesla.py --car "Stella" status

# Lock/unlock
python3 {baseDir}/scripts/tesla.py lock
python3 {baseDir}/scripts/tesla.py unlock

# Climate
python3 {baseDir}/scripts/tesla.py climate on
python3 {baseDir}/scripts/tesla.py climate off
python3 {baseDir}/scripts/tesla.py climate temp 72

# Charging
python3 {baseDir}/scripts/tesla.py charge status
python3 {baseDir}/scripts/tesla.py charge start
python3 {baseDir}/scripts/tesla.py charge stop

# Location
python3 {baseDir}/scripts/tesla.py location

# Honk & flash
python3 {baseDir}/scripts/tesla.py honk
python3 {baseDir}/scripts/tesla.py flash

# Wake up (if asleep)
python3 {baseDir}/scripts/tesla.py wake

Example Chat Usage

• "Is my Tesla locked?"
• "Lock Stella"
• "What's Snowflake's battery level?"
• "Where's my Model X?"
• "Turn on the AC in Stella"
• "Honk the horn on Snowflake"

API Reference

Uses the unofficial Tesla Owner API documented at: https://tesla-api.timdorr.com

Privacy & Security

• Credentials stored locally only
• Refresh token cached in ~/.tesla_cache.json
• No data sent to third parties
• Tokens auto-refresh for ~30 days