# VIN Decoder + Safety Recalls (NHTSA)

> Decode a VIN and list NHTSA recalls for that model (US data). $0.003/call via x402.

- name: io.github.pcp183/vin-decode
- version: 0.2.0
- connection class: unknown (unknown)
- trust: 67/100 flags: unreachable
- quality: 73/100 (new)
- owner: not claimed
- descriptor: https://api.protogrid.dev/v1/servers/io.github.pcp183%2Fvin-decode
- tools: https://api.protogrid.dev/v1/servers/io.github.pcp183%2Fvin-decode/tools

**Not classified yet.** The remote endpoints have not been probed successfully, or the listing has nothing to connect to.

## Connection (mcpServers)

```json
{
  "mcpServers": {
    "vin-decode": {
      "type": "http",
      "url": "https://vin-decode-production.up.railway.app/mcp"
    }
  }
}
```


## Trust

- hygiene: 100
- liveness: 0
- freshness: 100
- provenance: 90
- drivers: +repository +namespace-matches-repo +website -unreachable(3 failures) +updated-3d-ago
- Derived from observable signals (official registry feed and our own credential-free probes); no code audit performed.

## Quality 73/100 (new)

### protocol: 75 (weight 25)

- warn `protocol.modern`: newest supported version is 2025-11-25; 2026-07-28 not supported, older versions are deprecated until 2027-07-28
- n/a `protocol.stateless`: only applies to 2026-07-28 servers
- pass `protocol.transport`: streamable HTTP
- n/a `protocol.list_ttl`: only applies to 2026-07-28 servers

### authorization: n/a (weight 15)

- n/a `auth.prm`, `auth.as_metadata`, `auth.cimd`: no remote uses OAuth
- n/a `auth.secret_in_url`: no templated URL

### tool hygiene: 71 (weight 30)

- pass `tools.descriptions`: every tool has a description
- pass `tools.description_length`: descriptions are concise
- pass `tools.schemas`: every tool has an object input schema
- fail `tools.annotations`: no tool declares readOnlyHint or destructiveHint, so clients cannot tell safe calls from risky ones
- fail `tools.directory_hints`: no tool declares all four of readOnlyHint, destructiveHint, idempotentHint and openWorldHint; missing: vin_decode (readOnlyHint, destructiveHint, idempotentHint, openWorldHint)
- pass `tools.token_cost`: about 223 tokens to load every tool
- pass `tools.api_dump`: tools are not a one-to-one API dump

### stability: n/a (weight 15)

- n/a `stability.changes`, `stability.rug_pull`: tool history recorded for 3 of the 7 days needed

### dependencies: n/a (weight 15)

- n/a `deps.known_vulns`, `deps.mcp_sdk_version`, `deps.resolvable`: no npm or PyPI package

- tools: 1, about 223 tokens to load them all
- tool set hash: 9857e56c8036b1eb85ef3a67c9016e3e
- tools last changed: 2026-10-17T07:31:50.872Z
- badge: [![protogrid quality](https://protogrid.dev/badge/io.github.pcp183/vin-decode.svg)](https://protogrid.dev/servers/io.github.pcp183/vin-decode)
- Checks run on what our credential-free, read-only probes observe; tools are never called and no code audit is performed.

### Tool changes

- 2026-10-17 `vin_decode` changed (description)
  - before: Decode a 17-character VIN with NHTSA vPIC: make, model, model year, trim, body class, engine, fuel, drive type, transmission, plant, plus checksum validation and NHTSA error notes, and the NHTSA safety recall campaigns for that make, model and year (component, summary, remedy, park-it and park-outside flags). Use when an agent must identify a vehicle from its VIN (make, model, year, engine, plant) and check open safety recalls before a purchase, listing, insurance quote or repair. Paid per call via x402 (USDC on Base).
  - after: Identify a vehicle from its VIN and check for safety recalls before a purchase, listing, insurance quote or repair. Decodes a 17-character VIN with NHTSA vPIC (make, model, year, trim, body, engine, fuel, drive, transmission, plant, check-digit validation) and lists NHTSA recall campaigns for that make, model and year. Recalls are per model, not VIN-specific. Use when a VIN is all you have; coverage is best for US-market vehicles. $0.003 per call, USDC on Base (x402).

Full history: https://api.protogrid.dev/v1/servers/io.github.pcp183%2Fvin-decode/changes

## Remotes

- https://vin-decode-production.up.railway.app/mcp (streamable-http, auth none, reachable false, uptime30d 0.5)

## Packages

_none_

## Tools (1)

- `vin_decode`: Identify a vehicle from its VIN and check for safety recalls before a purchase, listing, insurance quote or repair. Decodes a 17-character VIN with NHTSA vPIC (make, model, year, trim, body, engine, fuel, drive, transmission, plant, check-digit validation) and lists NHTSA recall campaigns for that make, model and year. Recalls are per model, not VIN-specific. Use when a VIN is all you have; coverage is best for US-market vehicles. $0.003 per call, USDC on Base (x402).