Access Token Generator for Tesla

Enables generating access tokens for tesla.com for use with third-party services

Tesla Access Token Extension - Secure Authentication

'Access Token Generator for Tesla' is a Chrome extension facilitating the secure generation of Tesla.com access tokens required by third-party services to interact with Tesla vehicles and energy products. Source code is openly accessible on GitHub. The extension ensures all data communication is directly with Tesla, with a strict focus on auth.tesla.com, safeguarding users' credentials from external servers. It’s designed to automatically detect the completion of the login process by monitoring relevant browsing traffic without recording your browsing history.

Download

Extension stats

By: Dr. McKay

Users: 3,000+

Rating: 3.67

(3)

Version: 2.0.3 (Last updated: 2023-10-12)

Creation date: 2021-09-29

Risk impact: Moderate risk impact

Risk likelihood:

Low risk likelihood

Manifest version: 3

Permissions:

storage
webRequest

Host permissions:

https://auth.tesla.com/*

Size: 18.18K

Email: mc*****@doctormckay.com

Ranking

# 18,769 ▲ 291

Other platforms

Access for Yahoo (v4.0)

3.40

(116) 6,592+

Not available on Firefox

Access Token Generator for Tesla (v2.0.3)

5.00

(3) 1,169+

Want to check extension ranking and stats more quickly for other Chrome extensions? Install Chrome-Stats extension to view Chrome-Stats data as you browse the Chrome Web Store.

Extension summary

Analyze keywords

This listing is no longer supported. Please install the extension from its new store page instead: https://chrome.google.com/webstore/detail/access-token-generator-fo/djpjpanpjaimfjalnpkppkjiedmgpjpe

There exist several third-party services which interact with Tesla vehicles and energy products, but the only way those services can communicate with your Tesla products is by using access tokens. This extension enables you to get those necessary access tokens.

Source code is available on GitHub: https://github.com/DoctorMcKay/chromium-tesla-token-generator

All communication is directly to tesla.com. The only origin declared in the extension's manifest is auth.tesla.com, so it is not possible for the extension to send your credentials to another external server.

Why is the extension requesting access to read my browsing history? Because of the way that Tesla's authentication server works, it's necessary to watch your browsing traffic to detect when the login has completed. This particular login request is the only thing that the extension is watching for. No data is ever sent to any external server except for auth.tesla.com.