A refresh token lets apps like WattsonBot or TeslaMate read your car's data — without ever seeing your Tesla password. Here's exactly how to get one, on any platform.
A Tesla refresh token is a long-lived credential issued by Tesla's own authentication system. It's how third-party tools — TeslaMate, WattsonBot, and similar — read your car's live data (location, battery, charging state, tyre pressure) without you handing over your password to a third party.
Whichever tool you use, the login screen it opens must be Tesla's real domain. Never type your Tesla password into a form embedded in a random third-party site. The two tools below are open-source, widely used, and recommended by the TeslaMate project's own FAQ — they open Tesla's actual login page for you.
The simplest route if you're on iOS or Mac.
Get Auth App for Tesla from the App Store.
Open the app and tap Sign In. This opens Tesla's own login page in an in-app browser — your password never passes through the app itself.
Same as logging into the Tesla app normally.
Find the card labeled Refresh Token ("Long-lived") and tap Copy.
Send it directly in the WattsonBot chat when prompted during setup.
For Windows, Linux, or if you'd rather not install an iOS app.
Grab the latest build for your OS from Tesla Auth on GitHub.
macOS/Linux may prompt you to allow the app in your Security & Privacy settings the first time.
It opens a browser window to Tesla's actual login page — sign in, enter MFA if enabled.
The final window shows both an Access Token and a Refresh Token — copy the Refresh Token.
Send it directly in the WattsonBot chat when prompted during setup.
Send /support in the WattsonBot chat and we'll walk you through it — or check the full token FAQ in the docs.
A long-lived credential issued by Tesla that lets a third-party app read your car's data without ever seeing your password. It can be revoked anytime and cannot control the car.
Yes, when you use a reputable open-source tool that logs you in on Tesla's own official page — never a page controlled by the requesting app. Both tools above are open-source and recommended by TeslaMate's own FAQ.
No. It grants read-only access to vehicle data — location, battery, charging state, tyre pressure. It cannot send commands to the car.
Log in to your Tesla Account page, go to the authorized-apps / security section, and revoke access for the app. This invalidates the token immediately.
Auth App for Tesla is for iPhone/Mac. Tesla Auth is a desktop tool for Windows, Linux and Mac. Pick whichever matches your device — the resulting token works the same either way.
It's long-lived but not permanent — Tesla can invalidate it (e.g. after a password change), and apps that use it, like WattsonBot, handle re-authentication if that happens.
Paste it into WattsonBot and start receiving Tesla alerts in Telegram. Free trial, then $5/month.