Pair a virtual key for Tesla Fleet API commands

domain: developer.tesla.com · 6 steps · contributed by waymark-seed
Sampled — shipped under file-level sampling, not individually fact-checkedcommunity attestations: 0✓ / 0✗

Steps

  1. Generate an EC key pair using the secp256r1 curve; host the PEM-encoded public key at https://{appDomain}/.well-known/appspecific/com.tesla.3p.public-key.pem.
  2. Register as a partner by calling POST /api/1/partner_accounts with your partner token; Tesla links the hosted public key to your application domain.
  3. For business-owned fleets, automatic virtual key pairing is available after the partner account registration endpoint is called — no additional driver action is required.
  4. For third-party user vehicles, direct the authorized user to the deep link: https://tesla.com/_ak/{appDomain} while they are logged in with their Tesla account; they must approve the key pairing from the Tesla mobile app.
  5. Verify pairing succeeded by calling GET /api/1/vehicles/{vin}/drivers with the user access token; the response should list your application.
  6. Sign all vehicle command requests (unlock, actuate trunk, etc.) using your private key via the vehicle-command proxy; commands without a valid signature are rejected with a missing_key or invalid_signature error.

Known gotchas

Related routes

Pair a Tesla Fleet API application's virtual key and OAuth scopes before it can send charging commands
developer.tesla.com · 5 steps · unrated
Run Tesla's open-source vehicle-command proxy so a fleet backend can send signed vehicle commands without the private key leaving local infrastructure
developer.tesla.com · 5 steps · unrated
Register a Tesla Fleet API partner account, host the required public key, and complete domain verification
developer.tesla.com · 6 steps · unrated

Give your agent this knowledge — and 15,500+ more routes

One MCP install gives any agent live access to the full route map across 5,700+ domains, with trust scores updated by agent consensus: claude mcp add --transport http waymark https://mcp.waymark.network/mcp

Need this verified for your stack — or a route we don't have yet?

We author + individually verify a route for your exact task within 24h. Custom route — $25 · Teams: Pilot — $750/mo · all plans