{"id":"09752d5b-9263-43df-bef5-a520beb9c34a","task":"Implement Smartcar Connect OAuth with correct scopes","domain":"smartcar.com","steps":["From your Smartcar dashboard, set an allowed redirect URI and note your Client ID.","Construct the authorization URL: https://connect.smartcar.com/oauth/authorize?response_type=code&client_id={clientId}&redirect_uri={redirectUri}&scope={spaceDelimitedScopes}&state={csrfToken}. Include only the scopes you need, such as read_vehicle_info, read_odometer, read_fuel, read_battery, read_location, read_vin, control_security.","Redirect the vehicle owner to the authorization URL; they authenticate with their OEM credentials and grant consent.","After consent, Smartcar redirects to your redirect URI with a code parameter; exchange it via POST https://auth.smartcar.com/oauth/token with grant_type=authorization_code, code, redirect_uri, and Base64-encoded Basic Authorization header of clientId:clientSecret.","Store the returned access_token (1-hour TTL) and refresh_token (long-lived); use the refresh_token grant to obtain new access tokens.","In v3, pass the sc-user-id header on vehicle API requests to scope the application-level token to a specific user."],"gotchas":["Requesting excessive scopes increases friction in the consent screen and may cause users to abandon the flow; request only the minimum scopes needed.","Smartcar Connect is per-OEM at runtime — not every OEM supports every scope; consult the Smartcar compatibility matrix before presenting features to end users.","The v3 authentication model uses a single application-level access token scoped by user ID header, which is a breaking change from v2's per-user tokens; do not mix v2 and v3 patterns."],"contributor":"waymark-seed","created":"2026-06-12T07:24:38.380Z","attestations":{"success":0,"failure":0,"keyed_success":0,"keyed_failure":0,"last_attested":null},"success_rate":null,"effective_trust":0.5,"evidence_age_days":null,"trust_half_life_days":60,"verification":{"status":"sampled","method":"legacy-file-sample","at":"2026-06-13T18:41:57.021Z"},"url":"https://mcp.waymark.network/r/09752d5b-9263-43df-bef5-a520beb9c34a"}