Auth app for Tesla
iOS Universel / Utilitaires
Auth for Tesla is the fastest way to get a working Tesla API token — and the easiest place to inspect, test, and reuse it. Sign in once with your Tesla account, and your access and refresh tokens are ready to copy into Shortcuts, third-party tools, scripts, or anything else that talks to Tesla's API.
A TOKEN TOOL, NOT A TESLA CLIENT
Auth for Tesla doesn't drive your car, drain your battery, or pretend to be the Tesla app. It does one job extremely well: hand you a valid OAuth token and help you make sure it works.
BOTH TESLA APIS
• Owners API (v3) — the standard token used by most Tesla-compatible apps and Shortcuts.
• Fleet API (v4) — Tesla's modern, officially supported API for developers with a partner account.
MULTIPLE ACCOUNTS
Keep personal, work, and test accounts side by side. Switch between them with one tap, rename them, and add new ones without losing the others.
DEVELOPER TOOLS BUILT IN
• JWT Inspector — paste any token (or pick a stored one) and see the decoded header, payload, scopes, expiry, and a clear valid/expired status. No more flipping to jwt.io.
• Snippet Exporter — generate ready-to-paste cURL, HTTPie, Swift, or Python snippets for the active token, complete with bearer header.
• Test Your Token — run a few read-only diagnostic calls against the Tesla API to confirm your token actually works end to end, plus a local scopes inspection.
TOKEN HEALTH AT A GLANCE
Every profile shows a live countdown to expiry, the time of the last successful refresh, and the detected region (NA, EU, AP, ME, CN) so you always know what you're talking to.
SIRI & SHORTCUTS
All four token actions — Get and Refresh for both Owners and Fleet API — appear automatically in the Shortcuts app and work hands-free with Siri. Build automations that always have a fresh token.
PRIVATE BY DESIGN
Your Tesla username and password are entered directly in a secure in-app browser — they never pass through this app or any developer-run server. Tokens are stored encrypted in your iCloud Keychain and sync privately across your own devices. No analytics, no tracking, no third-party SDKs.
OPEN SOURCE
Every line of code is publicly available and auditable at github.com/TeslaBuds/AuthAppForTesla.
Disclaimer: This app is not affiliated with or endorsed by Tesla, Inc. Use at your own risk. No guarantee of proper function is given. You are solely responsible for any changes to your vehicle caused by the use of this app.
Made in Denmark.
Quoi de neuf dans la dernière version ?
Auth for Tesla 3.0.1 turns the app into a real developer cockpit for Tesla tokens.
NEW — Tools tab
• JWT Inspector — paste or pick any token and see decoded header, payload, scopes, and a valid/expired status. No more jwt.io detours.
• Snippet Exporter — copy your active token as ready-to-run cURL, HTTPie, Swift URLRequest, or Python requests.
• Test Your Token — run real, read-only Owners or Fleet API diagnostic calls to confirm end-to-end that your token works, including a scopes inspection.
NEW — Multiple accounts
• Keep personal, work, and test profiles side by side per API.
• One-tap switching, rename and add accounts at any time.
• Logout / 'Delete This Account' now confirms before wiping the token, so a misfired tap won't cost you a re-sign-in.
• Logout deletes only the active profile and falls through to the next.
NEW — Token cards with live status
• The Access Token card shows a live 'Valid for X' countdown badge that flips to red 'Expired' when it lapses.
• The Refresh Token card gets a quiet 'Long-lived' badge so you can tell the two apart at a glance.
• 'Show token details' opens a clean tabular breakdown of issuer, audiences, scopes, region, locale, and expiry.
• Auto-detected region (NA, EU, AP, ME, CN) on every Fleet token, so you know exactly which Tesla endpoint you're talking to.
DESIGN — Liquid Glass throughout
• Every screen rebuilt around iOS 26's Liquid Glass — glass cards, capsule buttons, consistent corner radii and rhythm across home, Tools, About, and Login.
• Toast notifications are proper glass capsules now, lifted clear of the floating tab bar.
• Fleet API form fields are subtle glass capsules instead of hard-black rounded rectangles.
• Account menu is a real glass button with a proper hit target, not just a tappable icon.
SIRI & SHORTCUTS
• All four token actions (Get / Refresh for both APIs) appear automatically in Shortcuts.
• Each intent now accepts an optional Account parameter so a Shortcut can target a specific stored profile.
• Fixes a long-standing bug where 'Refresh Fleet API Token' would refresh the Owners token by mistake when both were signed in.
UNDER THE HOOD
• Sign-in now survives a hop to your password manager — the auth web view stays put with whatever you'd typed, instead of reloading back to the email step.
• Token storage refactored around named profiles with seamless migration of any existing single-token install.
• Lots of small UX polish across the home views, Tools detail screens, and login flow.
