Kiaaccess MCP server

Read from the package source without running it. The installed server may list more.

• kia_charge_targetswrite action

  Read the EV charge targets (`…`): the target state of charge per plug type

• kia_export_refresh_token

  Return the stored Kia remember-me token (rmtoken) IN PLAINTEXT. This is a CREDENTIAL: it bypasses MFA

• kia_forget_session

  Discard the locally stored Kia session (the remember-me token), so the next Kia call needs the one-time

• kia_list_vehicles

  List the vehicles enrolled on this Kia Owners account (ownr/gvl). Returns each vehicleKey — the id every

• kia_refresh_status

  Ask the car for a fresh reading (rems/rvs, requestType 0). This WAKES THE TELEMATICS UNIT, so it is much

• kia_send_otpwrite action

  Step 2 of the Kia MFA bootstrap (cmm/sendOTP): deliver a one-time passcode to the account by SMS or

• kia_session_status

  Whether this server is configured and logged in to Kia: are credentials present, has the one-time MFA

• kia_set_charge_limitswrite action

  Set the target state of charge per plug type (`…`).

• kia_start_chargewrite action

  Ask the vehicle to start charging (`…`).

• kia_start_climate

  Start remote climate control / preconditioning (Kia `rems/start`, live-verified). Without confirm:true

• kia_start_login

  Step 1 of the ONE-TIME Kia MFA bootstrap (prof/authUser): send the configured credentials and get back the

• kia_stop_chargewrite action

  Ask the vehicle to stop charging (`…`).

• kia_stop_climate

  Stop remote climate control (Kia `rems/stop`, live-verified). Without confirm:true this makes NO network

• kia_vehicle_location

  The vehicle's last known location, from the `location` block of the cached cmm/gvi read. This is where the

• kia_vehicle_status

  Read the vehicle's CACHED status (cmm/gvi): door lock, ignition, and the remote-climate block. Fast, but

• kia_verify_otp

  Step 3 of the Kia MFA bootstrap (cmm/verifyOTP): exchange the passcode for a session. The resulting

• Code scan19 source files scanned25/25
• –Live reliabilityno gateway calls yet and no remote to proben/a
• –Tool poisoningtools not inspected (local package is not executed); not countedn/a
• Auth qualitystatic API keys via environment variables6/15
• Maintenancelast push 2 days ago15/15
• Maintainer identityregistry namespace matches repository owner; GitHub account older than a year8/10

Grade history

• 2026-09-19downgradeA → Bscore 83

Kiaaccess: common questions

Is Kiaaccess MCP server safe?

Mostly: it is graded B (83/100). Read the Kiaaccess safety report

How do I install Kiaaccess?

It runs on your machine. Copy the Claude Code, Claude Desktop or Cursor config from the install section.

Does Kiaaccess need an API key?

Yes. The registry entry asks for KIA_PASSWORD.

Is Kiaaccess maintained?

The last commit was 2 days ago (2026-09-17). The latest release is v0.9.0.

What can I use instead of Kiaaccess?

Servers from other publishers that do the same job: Toyota & Lexus MCP server, HasData Airbnb MCP server and RepeaterBook MCP server. Compare all Kiaaccess alternatives.