Tesla Fleet API

• Analyzed: May 12, 2026, 3:05 AM
• Findings: 1
• Version: 1.5.2
• Hash: e31f9895ee0ca62eaee2b16510085a68284278aced1e567730d83903f03df3dc
• Source: palm
• External report: View on VirusTotal

Findings (1)

The tesla-fleet-api skill bundle is a legitimate implementation for interacting with the official Tesla Fleet API. It includes scripts for OAuth authentication (auth.py, tesla_oauth_local.py), vehicle data retrieval (vehicle_data.py), and command execution (command.py) using Tesla's recommended signing proxy architecture. Sensitive data such as OAuth tokens and client secrets are stored locally with restricted file permissions (0o600) and are only transmitted to official Tesla endpoints (e.g., fleet-auth.prd.vn.cloud.tesla.com). The bundle follows Tesla's official security model for third-party integration, including virtual key enrollment and signed commands via the tesla-http-proxy.