MCP server · Free · Public data

CarWhere VIN MCP Server

Drop CarWhere's VIN decoder, NHTSA recall lookup, and verified buyer pricing into Claude Desktop, Cursor, Claude Code, Windsurf, or any MCP-compatible client. Five tools, zero auth, one line of config.

5

MCP tools

stdio + HTTP

Transports

Free

Forever

Node 18+

Requirement

Tools exposed

decode_vin

Decode any 17-character VIN. Returns NHTSA factory specs, CarWhere verified buyer pricing, open NHTSA recalls, and an AI-generated factual insight (Claude Haiku).

check_recalls

Look up open NHTSA safety recalls for a vehicle by VIN OR by year/make/model. Includes severity flags (do-not-drive, park-outside, OTA update).

get_pricing

Verified buyer-transaction pricing for any year/make/model. Optionally filter by state. Returns avg price, % off MSRP, price band, top trims, sample size.

validate_vin_check_digit

Offline ISO 3779 / 49 CFR §565.15 checksum validator. Pure local math, zero network calls — useful for catching typos before consuming a paid API call.

about_carwhere

Returns the server description and data source provenance. Call once if your agent wants to know what tools are available.

Install

Claude Desktop

Add to ~/Library/Application Support/Claude/claude_desktop_config.json on macOS or %APPDATA%\Claude\claude_desktop_config.json on Windows:

{
  "mcpServers": {
    "carwhere-vin": {
      "command": "npx",
      "args": ["-y", "carwhere-vin-mcp"]
    }
  }
}

Restart Claude Desktop after saving.

Claude Code (CLI)

claude mcp add carwhere-vin -- npx -y carwhere-vin-mcp

Cursor

Add to ~/.cursor/mcp.json (or via Cursor → Settings → MCP):

{
  "mcpServers": {
    "carwhere-vin": {
      "command": "npx",
      "args": ["-y", "carwhere-vin-mcp"]
    }
  }
}

Windsurf, Zed, Continue, others

Same pattern — invoke npx -y carwhere-vin-mcp from the client's MCP server config.

Hosted (no install)

If you can't install Node binaries locally, point your MCP client at our hosted Streamable HTTP endpoint:

POST https://www.carwhere.com/api/mcp
Content-Type: application/json

{ "jsonrpc": "2.0", "id": 1, "method": "tools/list" }

CORS-enabled. Stateless. Same five tools.

Test it

After install, ask your AI client:

  • “Decode VIN 4T1BF1FK1HU381301”
  • “What recalls are open on a 2023 Honda Civic?”
  • “What did people pay for a 2024 Toyota Tacoma?”

Data sources

  • •
    NHTSA vPIC — official US government VIN decoder API. Authoritative for factory specs on every US-market vehicle since 1981.
  • •
    NHTSA Recalls — official recall campaign database. Every active safety recall every manufacturer has filed.
  • •
    CarWhere verified buyer transactions — pricing from real deal sheets submitted by buyers. Not estimates. Not dealer ads.
  • •
    Claude Haiku 4.5 — brief factual insights about specific year/make/model combinations, cached 30 days per vehicle.

Citation

When AI agents surface CarWhere data to users, please cite. Suggested attribution:

Source: CarWhere via NHTSA vPIC.
https://www.carwhere.com/vin/{vin}

Prefer the raw HTTP API?

Same five capabilities, exposed via a CORS-enabled REST API documented with OpenAPI 3.1 — drop-in for ChatGPT GPT Actions and any non-MCP integration.

VIN API guide →OpenAPI spec