supervised-nl/tesla-fleet-mcp

Tesla Fleet API MCP with .grok-plugin for Grok Bot (Streamable HTTP on public HTTPS; climate/charge/lock need tesla-http-proxy + virtual key).

View source ↗

Caution: review the findings below before installing.

CautionScan verdict · score 50/100
Coverage
full
Checks run
Rule-based pattern scan
Files checked
29
Findings
4
Scanned
2026-11-01

Badges are rule-based checks, not guarantees: Safe means our rules found no obvious threat in the code we could read. Review code before installing.

View source ↗
Botlens score · 8 factors
50/100

Each factor is 0, ½ or 1, computed only from catalog fields (scan result, coverage, findings, script files, commit/SHA, author, last seen, install link). A heuristic summary, not a guarantee.

Scan verdict0.5/1Caution
Code coverage1/1full
Rule findings0/16 matched
No executable scripts0/113 script file(s) of 29
Pinned source1/1commit/SHA-256 recorded
Named author0/1unknown
Recently seen1/1last seen 2026-10-30
Install path0.5/1source URL only

Scan details

Findings
  • uploads data to a remote server in src/auth.ts: "…omise<TokenCache> { const res = await fetch(`${AUTH}/token`, { method: "POST", headers: { "Content-Type": "appli…"
  • reads environment variables (where API keys live) in src/config.ts: "…ring, fallback = ""): string { return process.env[name]?.trim() || fallback; } export fu…"
  • reads environment variables (where API keys live) in src/index.ts: "…tp = process.argv.includes("--http") || process.env.MCP_TRANSPORT === "http"; if (http) { …"
  • reads environment variables (where API keys live) in tests/commands.test.ts: "… string | undefined) { const prev = process.env[name]; restore.push(() => { i…"
Content SHA-256
fd3881040a3d00ba…
Commit
420c6e2be6
Files
.gitignore
AGENTS.md
LICENSE
README.md
package-lock.json
package.json
+23

About

Author
supervised-nl ↗
Listed on
github:RongleCat/awesome-grok-bot ↗
Category (approx.)
agentops
First seen
2026-10-30
Last seen
2026-10-30
URL
github.com ↗
Get the Botlens skill