Microsoft Copilot security directory

NHTSA vPIC (Independent Publisher)

Published by Troy Taylor

Medium risk

The NHTSA Product Information Catalog Vehicle Listing (vPIC) Application Programming Interface (API) provides different ways to gather information on Vehicles and their specifications. The vPIC Dataset is populated using the information submitted by the Motor Vehicle manufacturers through the 565 submittals. All the information on how a VIN is assigned by the manufacturer is captured in this catalog and used to decode a VIN and extract vehicle information.

Security assessment

Plutonium assessed this connector for permissions, capabilities, and security-relevant behavior.

  • Reads your private information: This connector can read data the connected service holds about you - documents, messages, contact lists, source code, customer records, or saved profile details - and pass it back to the AI.
  • Sends your data to outside companies: Anything you share with this connector flows to a third-party service. That company sees, stores, and may use the data according to their own policies.

Available capabilities

This add-on exposes 16 tools or capabilities.

  • Decode VIN
  • Decode WMI
  • Get all makes
  • Get all manufacturers
  • Get equipment plant codes
  • Get makes by vehicle type name
  • Get makes for manufacturer by manufacturer name
  • Get makes for manufacturer by manufacturer name and year
  • Get manufacturer details
  • Get models for make
  • Get models for make a combination of year and vehicle type
  • Get parts
  • Get vehicle types for make
  • Get vehicle variable values
  • Get vehicle variables
  • Get WMIs for Manufacturer

The interactive security report will load automatically.