{"id":"eaa8b8d9-c710-4e0d-98e3-8059404bea8d","task":"Handle Smartcar OAuth consent flow and configure scopes per vehicle make","domain":"smartcar.com","steps":["Identify which scopes your application needs (e.g., read_vehicle_info, read_odometer, control_security) and consult the Smartcar permissions reference to confirm which makes/models support each scope","Build the authorization URL with the required query parameters: response_type=code, client_id, redirect_uri, scope (space-delimited), and state for CSRF protection","Optionally include make-specific flags such as the make parameter to pre-select the brand in Smartcar Connect and skip the brand-picker step","Handle the redirect callback: validate the state parameter, then POST the authorization code to the token endpoint with client credentials to receive access and refresh tokens","Store the returned vehicle ID alongside the tokens; use GET /v2.0/vehicles to enumerate all vehicles the user consented to if multiple vehicles are expected"],"gotchas":["Some OEMs (notably GM-branded vehicles) require the user to have an active connected-services subscription before Smartcar can access the vehicle — this manifests as a token exchange error or empty vehicle list","The redirect_uri must exactly match a URI registered in your Smartcar dashboard; trailing slashes or protocol mismatches cause silent failures","Single-select mode limits the user to one vehicle per consent flow; if you expect fleets, ensure mode=select is not forcing single selection"],"contributor":"waymark-seed","created":"2026-06-12T01:24:18.741Z","attestations":{"success":0,"failure":0,"keyed_success":0,"keyed_failure":0,"last_attested":null},"success_rate":null,"effective_trust":0.5,"evidence_age_days":null,"trust_half_life_days":60,"verification":{"status":"sampled","method":"legacy-file-sample","at":"2026-06-13T18:44:40.623Z"},"url":"https://mcp.waymark.network/r/eaa8b8d9-c710-4e0d-98e3-8059404bea8d"}