Vin Recall Mcp

io.github.pratikmehkarkarPublished by GitHub account pratikmehkarkarv1.0.0Updated Nov 2, 2026

Decodes US VINs and looks up open NHTSA safety recall campaigns for a vehicle.

VerifiedStreamable HTTPWeb executableLocation & LifestyleBusiness & Commerce

Overview

AI-generated overview

Remote MCP server that decodes US vehicle VINs and lists open NHTSA safety recall campaigns for a vehicle.

What you can do
  • Decode a 17-character US VIN into make, model, year, body class, engine cylinders, fuel type, drive type and assembly plant country, using the NHTSA vPIC database
  • List open safety recall campaigns for a vehicle by VIN, decoding the VIN internally to find the make/model/year configuration
When to use it
Useful when you want an assistant to identify a US-market vehicle from its VIN or check whether that vehicle configuration has open NHTSA recall campaigns, for example when buying a used car or answering vehicle questions.
Requirements
A remote streamable HTTP endpoint; no packages, environment variables, headers or authentication are declared. Network access to the hosted endpoint is needed.
Before you install
Recall results are campaigns issued for the make/model/year configuration, not a confirmation that a specific VIN is affected. Decoding covers US-market vehicles from 1981 onward, so pre-1981 and some foreign-market vehicles may not resolve. VINs are sent to the hosted endpoint and to NHTSA data lookups.

Installation

In SourceWeft

  1. Open Vin Recall Mcp in the dashboard and add it to a workspace.
  2. Enable the server for the chats that should use its tools.

Web executable via Streamable HTTP. Remote servers run from the web runtime once configured in a workspace.

Use with an agent

Paste this prompt into Claude Code, Codex, Cursor or another agent — or into SourceWeft chat. The agent reads this server's install guide, shows you its publisher, endpoint and sign-in, and adds it to your client once you agree. Keys never go into a command.

Read https://sourceweft.com/mcp/io.github.pratikmehkarkar%2Fvin-recall-mcp/install.md and connect the MCP server it describes to my client. Before changing any config, show me its publisher, endpoint and sign-in method and wait for my OK. Never put an API key in a command or in a file I would commit; ask me where it should come from.

Read the install guide the agent follows

Other MCP clients

Add this to your client's mcpServers config.

{
  "mcpServers": {
    "vin-recall": {
      "type": "http",
      "url": "https://vin-recall-mcp.zenithserver.duckdns.org/mcp"
    }
  }
}

README

vin-recall-mcp (server package)

See the repo-root README for what this server does, architecture, tool contracts, install instructions, caveats, and how to run the eval suite.

This directory is the Node/Express project itself (package.json, src/, evals/).

Source: vin-recall-mcp/README.md at commit e6242ba

Tools

2

decode_vin

Decode VIN

Decode a 17-character US vehicle VIN into make, model, year, body class, engine cylinders, fuel type, drive type, and assembly plant country, using the NHTSA vPIC database. Covers US-market vehicles built from 1981 onward (the 17-character VIN standard); pre-1981 and some foreign-market vehicles may return partial or no data. Decoded fields are manufacturer-submitted and individual fields may be missing even for a successfully decoded VIN.

Parametersvinrequired

check_recalls

Check Vehicle Recalls

List open safety recall campaigns for a vehicle by VIN, using the NHTSA Recalls database. Decodes the VIN internally to get make/model/year, then looks up campaigns for that vehicle configuration. Important: results are recall campaigns issued for the make/model/year configuration — this does NOT confirm whether this specific VIN's vehicle was actually repaired at a dealer. Always describe results as 'open recall campaigns for this vehicle,' never as whether the car 'is' or 'isn't' fixed.

Parametersvinrequired

Version history

1
  1. v1.0.0LatestSep 16, 2026

Score

100% of the applicable checks met

How complete this listing is, computed from the registry entry, the endpoint and public sources. Not a rating of the server and not a statement that it is safe or working today: reachability is a dated check, and no installs or reviews go into the score.

  • Reached in the last 30 daysRequired25 pts
  • Auth declaredRequired10 pts
  • Tools listedRequired15 pts
  • DescriptionRequired15 pts
  • Logo10 pts
  • Documentation15 pts
  • License10 pts