Frequently Asked Questions
Why do some calls return a 429?
Receiving status code 429 is an indication of faulty application logic. The rate limits section defines the rate limits in place. These limits allow more requests than an application should use and are in place to prevent unexpectedly large bills.
The 'RateLimit--Limit', 'RateLimit--Remaining' and 'RateLimit-*-Reset' request define when the next request is allowed.
Why do some calls to vehicles return a 408?
This tends to mean the device is offline. Does the device have internet connectivity? If so, is it asleep (saving energy) in which case might need to wake it up?
What does it mean when I get an 'Unauthorized missing scopes' 403 error?
The token that is being provided does not have the required scopes for the current resource. Look at the scopes requirements for the endpoint and ensure the token has those scopes. If the token is not created with the required scopes, it means the owner needs to explicitly grant the required scope(s) as part of the authorization flow.
Why are my API requests for new users returning unknown user?
Before requests can be made on behalf of an account, the owner of the account must have logged into the mobile app at least once.
Why are authorization requests failing?
Re-read the authentication section and follow the examples exactly as they are written.
How can an application determine which scopes a user has granted?
Decode the access_token (A standard JWT), and inspect the scp claim.
My auth requests are returning "We don't recognize this client_id and client_secret combination."
Follow the examples given in the authentication section.
Why does my request not have a refresh_token in it?
Per the Authorization Scopes section, the offline_access scope must be requested to get a refresh token.
Why are my refresh tokens suddenly invalid?
Refresh tokens are valid for 3 months. The most recently used refresh token is valid for up to 24 hours. When performing a token exchange using a refresh token, ensure the new refresh token is saved for use on the next exchange.
How can a business automatically pair their virtual key to their vehicles?
Vehicles that do not require signed commands will automatically have a virtual key paired once the Partner Account register endpoint is called. Automatic virtual key pairing is available for businesses managing their own partner account or third-party business account authorizations.
After registration, why does the product endpoint return an empty response?
This occurs when using the wrong token type. Review token types to determine the proper token type to use, based on the application's use case. The most frequent issue is using a partner account token when a third-party token is needed instead.
Is there a staging environment for Fleet API?
No. There are no simulators or staging environments available.
As an installer of Tesla energy products, like Powerwall, why can't we access customer products via the API?
Fleet API doesn’t support accessing customer products. The only way to do that through the API would be having the product owner go through the authorization flow, granting you access to their products.
How can virtual key removal be detected?
There are two methods for detecting virtual key removal:
- Check the pairing state through the fleet status endpoint.
- Analyze the response of signed command failures.