tessie-mcp-server-e3b0c4 — independently scanned and version-tracked by SaferSkills.
SaferSkills independently audited tessie-mcp-server-e3b0c4 (MCP Server) and scored it 100/100 (green). The audit ran 55 deterministic rules across Security, Supply Chain, Maintenance, Transparency, and Community; it found 0 high-severity and 0 lower-severity findings. The full rule-by-rule trace and per-finding evidence are below. Free, methodology-open.
Findings & checks · 0 flagged
Every scanned point with the score it earned and what moved between them.
First recorded scan — no prior version to compare against.
The primary manifest — the file an agent reads to learn what this artifact does.
MCP server rebuilt on the latest developer.tessie.com API. Summary-first tools, composite commands, and live-tested smoke scripts.
npx -y @smithery/cli install @keithah/tessie-mcpTESSIE_API_KEY (<https://dash.tessie.com/settings/api>) in your MCP client or .env. In Smithery UI the field appears as accessToken.get_active_context, “Lock VIN ...” → manage_vehicle_command with confirm: true.get_active_context — vehicle roster with next-step guidance.fetch_vehicle_state — locks, climate, battery, location snapshot.fetch_vehicle_battery — charging-focused battery view.search_drives — recent drives with optional date range.get_driving_path — coordinate series for mapping/analysis.manage_vehicle_command — lock/unlock, charging, climate, speed limit, sentry, cabin overheat, seat heat/cool, flash/honk, wake.Destructive operations require params.confirm: true.
{
"vin": "YOUR_VIN",
"operation": "lock",
"params": { "confirm": true }
}Non-destructive actions like flash_lights / honk skip confirmation.
npm run build:stdionpm run build:shttp or npm run build:allnpm test (includes command validation)npm run smoke (raw client), npm run smoke:tools (MCP tools)npm run dev or npx @smithery/cli devnpm run build:stdio), shttp (npm run build:shttp, default for publish)npx create-smithery@latest.well-known/mcp-config (expects TESSIE_API_KEY). Server card: .well-known/mcp.json (aliases in .well-known/mcp-server.json and .well-known/mcp/server.json).npm run build:shttp → npx @smithery/cli publish (uses manifest.json). Ensure TESSIE_API_KEY is provided in user config.docs/llms-full.txt and docs/tessie-api-metadata.json for offline context.manage_vehicle_command.docs/glama-links.md for glama.ai best-practice articles.speed_limit_pin (sensitive); avoid logging or sharing it.TESSIE_MCP_DEBUG=1 (or true) to emit request failures with URLs/status only (no headers/API keys); retry/backoff is built-in for 429/5xx responses.~30 seconds. Free. No account. Every finding cites a rule and a line of evidence.