CarsXE icon

CarsXE

carsxe/carsxe · v1.1.0 · Tools & Integrations

by CarsXEOwner verifiedsafe

Decode VINs, license plates, market value, vehicle history, recalls, liens, OBD codes, and more via the CarsXE API.

InstallSourceFollow0
Trust Score89SecurityPartialSurfaces17

Is CarsXE a fit?

From the plugin's manifest and HOL's scan. Anything the plugin does not declare is shown as not declared.

Works with

  • Codex
  • 17 skills
  • Runs hooks on agent events

Before you install

Sign-in
Asks you to sign in when you install it
Declared access
Read
License
MIT

Check before relying on it

  • Security checks that did not finish: cisco-skill-scanner, codex-plugin-scanner. See the evidence

What is CarsXE?

CarsXE is a published tools & integrations plugin for AI coding agents in the codex ecosystem, developed by CarsXE and distributed through the HOL AI plugin registry. Decode VINs, license plates, market value, vehicle history, recalls, liens, OBD codes, and more via the CarsXE API.

Canonical slug
carsxe/carsxe
Version
v1.1.0 · updated Sep 24, 2026

Trust & Reputation

HOL Trust Score
89

Factor Analysis

Per-metric points (0–100 each) combined via a weighted average into the overall score.

Installability
100pts
Maintenance
45pts
MCP Posture
100pts
Plugin Security
100pts
Provenance
70pts
Publisher Quality
75pts

Registry Snapshot

Project link
CarsXE
Publisher verification
No
Marketplace source
Unknown
Scanner
Broker fallback
Security result
Partial scan
Digest verified
Yes
17 bundled skills — copy or download SKILL.mdOpen skills

Trust & reputation

Trust & Reputation

HOL Trust Score
89

Factor Analysis

Per-metric points (0–100 each) combined via a weighted average into the overall score.

Installability
100pts
Maintenance
45pts
MCP Posture
100pts
Plugin Security
100pts
Provenance
70pts
Publisher Quality
75pts

Provenance

Plugin root
plugins/carsxe
Source repo
https://github.com/carsxe/carsxe-codex-plugin
Source commit
e85e53402c16…
Publisher verified
No
Owner verified
@0marwalied

Continuous scanner CI detected

No action is required. This plugin receives the full trust score.

README badge not detected

Plugin owners can add the HOL badge to the repository README from Guard Plugins. Distribution, not security evidence. It adds a 2% engagement adjustment to the overall trust score and never changes the security result.

Security Posture

See how the Trust Score is computed
Partial scan
Security result
100
Score from finished checks
0
High findings

Some checks did not finish (cisco-skill-scanner, codex-plugin-scanner). No blocking issue was found in the checks that did finish, but this is not a passed scan.

Provider
registry-broker-fallback
Grade
A · safe
Version
Unknown
cisco-skill-scanner: unknown

Findings

infoskill-securityskill-scan.unavailable

Cisco skill scanner timed out after 60000 ms

infoskill-securityskill-scan.unavailable

Cisco skill scanner timed out after 60000 ms

infoskill-securityskill-scan.unavailable

Cisco skill scanner timed out after 60000 ms

infoskill-securityskill-scan.unavailable

Cisco skill scanner timed out after 60000 ms

infoskill-securityskill-scan.unavailable

Cisco skill scanner timed out after 60000 ms

infoskill-securityskill-scan.unavailable

Cisco skill scanner timed out after 60000 ms

infoskill-securityskill-scan.unavailable

Cisco skill scanner timed out after 60000 ms

infoskill-securityskill-scan.unavailable

Cisco skill scanner timed out after 60000 ms

infoskill-securityskill-scan.unavailable

Cisco skill scanner timed out after 60000 ms

infoskill-securityskill-scan.unavailable

Cisco skill scanner timed out after 60000 ms

infoskill-securityskill-scan.unavailable

Cisco skill scanner timed out after 60000 ms

infoskill-securityskill-scan.unavailable

Cisco skill scanner timed out after 60000 ms

infoskill-securityskill-scan.unavailable

Cisco skill scanner timed out after 60000 ms

infoskill-securityskill-scan.unavailable

Cisco skill scanner timed out after 60000 ms

infoskill-securityskill-scan.unavailable

Cisco skill scanner timed out after 60000 ms

infoskill-securityskill-scan.unavailable

Cisco skill scanner timed out after 60000 ms

infoskill-securityskill-scan.unavailable

Cisco skill scanner timed out after 60000 ms

CarsXE — Frequently asked questions

What is CarsXE?
CarsXE is an AI plugin in the HOL registry. Decode VINs, license plates, market value, vehicle history, recalls, liens, OBD codes, and more via the CarsXE API.
How do I install CarsXE?
Install CarsXE in your harness: Codex — codex plugin marketplace add carsxe/carsxe-codex-plugin; Any agent — npx skills add carsxe/carsxe-codex-plugin. Full step-by-step guidance is on the HOL plugin page.
How do I install CarsXE in Codex?
To install CarsXE in Codex, start with codex plugin marketplace add carsxe/carsxe-codex-plugin. The complete step-by-step install guide for Codex is on the HOL plugin page.
Is CarsXE free?
Pricing for CarsXE is published on its HOL plugin page when the maker schedules a launch.
How is the Trust Score for CarsXE computed?
CarsXE has a HOL Trust Score of 89 out of 100. The score is a weighted sum of six components from a static scan of the source, capped for high-severity findings and adjusted by two disclosed policies. Memberships and payments are not inputs, and a scan is not a safety guarantee. Full breakdown: https://hol.org/registry/plugins/carsxe%2Fcarsxe/trust
Who publishes CarsXE?
CarsXE is published by CarsXE and listed on HOL.
Is CarsXE available now?
CarsXE availability is listed on its HOL plugin page.

Install Guidance

Install in Codex

Install through the Codex CLI plugin marketplace.

Codex plugin docs

Optional: install HOL Guard for Codex first, so it can check this plugin's tools on your machine before Codex uses them.

  1. 1

    Register the marketplace

    Run in any terminal. Codex reads the marketplace entry from .agents/plugins/marketplace.json (or the legacy .claude-plugin path) in the repository. If the repository ships none, add the generated entry from the Advanced section below first.

    shell
  2. 2

    Install from the Plugins browser

    Open Codex, open the Plugins browser, choose the marketplace registered by the previous command, and install carsxe.

  3. 3

    Check the marketplace is registered

    This confirms the marketplace source only. Confirm the plugin itself is enabled in the Plugins browser before relying on it.

    shell

Did setup work in Codex?

No setup reports for Codex yet. Self-reported by signed-in visitors. Copying a command is not counted, and most installs are never reported.

Loading reviews

Plugin Manifest

{
  "name": "carsxe",
  "version": "1.1.0",
  "description": "CarsXE vehicle data APIs for OpenAI Codex — decode VINs, look up license plates, get market values, history, recalls (VIN, YMM, or batch), YMM options, ownership, lien and theft, OBD codes, and more.",
  "author": {
    "name": "CarsXE",
    "email": "[email protected]",
    "url": "https://carsxe.com"
  },
  "homepage": "https://carsxe.com",
  "repository": "https://github.com/carsxe/carsxe-codex-plugin",
  "license": "MIT",
  "keywords": [
    "automotive",
    "vehicle",
    "vin",
    "vin-decoder",
    "plate-decoder",
    "market-value",
    "vehicle-history",
    "recalls",
    "recalls-ymm",
    "recalls-batch",
    "ymm-options",
    "ownership",
    "lien",
    "theft",
    "obd",
    "dtc",
    "plate-recognition",
    "vin-ocr",
    "year-make-model",
    "international-vin"
  ],
  "skills": "./",
  "hooks": "./hooks/hooks.json",
  "interface": {
    "displayName": "CarsXE",
    "developerName": "CarsXE",
    "shortDescription": "Decode VINs, plates, market value, history, recalls, YMM options, ownership, liens, and OBD codes — the full CarsXE vehicle data suite.",
    "longDescription": "CarsXE brings the full suite of CarsXE vehicle data APIs into OpenAI Codex as 16 auto-invoked skills. Decode any VIN for full specifications, look up vehicles from a license plate, estimate market value, pull a full vehicle history report, check open safety recalls by VIN, year/make/model, or in bulk, screen for liens and theft, decode international (non-US) VINs, extract a VIN or plate number straight from a photo, look up vehicles by Year/Make/Model, browse YMM options, look up registered owners (Enterprise), and decode OBD-II diagnostic trouble codes. Codex selects the right skill automatically from your request, or call any skill explicitly with its name. Requires a CarsXE API key (free signup at carsxe.com).",
    "category": "Data & Analytics",
    "capabilities": [
      "Read"
    ],
    "websiteURL": "https://carsxe.com",
    "privacyPolicyURL": "https://carsxe.com/privacy-policy",
    "termsOfServiceURL": "https://carsxe.com/terms-and-conditions",
    "defaultPrompt": [
      "Decode VIN WBAFR7C57CC811956",
      "Look up California plate 7XER187",
      "What's the market value of VIN WBAFR7C57CC811956 with 45,000 miles?",
      "Does VIN 1C4JJXR64PW696340 have any open recalls?",
      "Any recalls on a 2023 Toyota Camry?",
      "What Toyota models were sold in 2023?",
      "What does OBD code P0300 mean?"
    ],
    "brandColor": "#2563EB",
    "logo": "./assets/logo.png",
    "composerIcon": "./assets/logo.png",
    "screenshots": [
      "./assets/screenshot-vin-decode.png"
    ]
  },
  "registryIndexVersion": 5
}

Marketplace Source

Repo URL
https://github.com/carsxe/carsxe-codex-plugin
Marketplace path
Unknown
Source path
plugins/carsxe/carsxe-codex-plugin
Install policy
AVAILABLE

Skills

17 SKILL.md files ship with this plugin. Preview, copy, or download each one, then install them with the Skills CLI.

Share
skills-cli

  • auth

    skills/auth/SKILL.md

    Set and save the CarsXE API key. Use this when the user provides a CarsXE API key, asks to configure the plugin, or when the session starts without a key loaded.

    Raw SKILL.md

    SKILL.md content is not in this snapshot. Open the raw file to copy it from the source repository.

  • international-vin

    skills/international-vin/SKILL.md

    Decode an international (non-US) VIN using the CarsXE API. Use this when a user provides a VIN from a European, Asian, or other non-US vehicle and wants to decode it.

    Raw SKILL.md

    SKILL.md content is not in this snapshot. Open the raw file to copy it from the source repository.

  • lien-theft

    skills/lien-theft/SKILL.md

    Check for active liens and theft records on a vehicle by VIN using the CarsXE API. Use this when a user asks whether a car has a lien, is stolen, or wants to verify ownership is clean before buying.

    Raw SKILL.md

    SKILL.md content is not in this snapshot. Open the raw file to copy it from the source repository.

  • market-value

    skills/market-value/SKILL.md

    Get the current market value of a vehicle from its VIN using the CarsXE API. Use this when a user asks how much a car is worth, wants to know its value, or is thinking about buying/selling a vehicle.

    Raw SKILL.md

    SKILL.md content is not in this snapshot. Open the raw file to copy it from the source repository.

  • obd-decoder

    skills/obd-decoder/SKILL.md

    Decode an OBD-II diagnostic trouble code (DTC) using the CarsXE API. Use this when a user mentions a check engine light code, DTC, or OBD code like P0300, C1234, B0001, or U0100.

    Raw SKILL.md

    SKILL.md content is not in this snapshot. Open the raw file to copy it from the source repository.

  • ownership

    skills/ownership/SKILL.md

    Look up registered vehicle owners and residents using the CarsXE Ownership API (Enterprise). Use this when the user asks who owns a VIN, who lives at an address, contact details for a named person, or people in a ZIP. Do not use for lien/theft checks or vehicle history reports.

    Raw SKILL.md

    SKILL.md content is not in this snapshot. Open the raw file to copy it from the source repository.

  • plate-decoder

    skills/plate-decoder/SKILL.md

    Look up vehicle information from a license plate number using the CarsXE API. Use this when a user mentions a license plate and wants to know what vehicle it belongs to.

    Raw SKILL.md

    SKILL.md content is not in this snapshot. Open the raw file to copy it from the source repository.

  • plate-image-recognition

    skills/plate-image-recognition/SKILL.md

    Extract a license plate number from an image URL using the CarsXE Plate Recognition API. Use this when a user shares a photo of a vehicle or license plate and wants to identify the plate number.

    Raw SKILL.md

    SKILL.md content is not in this snapshot. Open the raw file to copy it from the source repository.

  • recalls-batch

    skills/recalls-batch/SKILL.md

    Submit and retrieve bulk safety-recall checks for many VINs using the CarsXE Recalls Batch API. Use this when the user wants to check recalls for a fleet, inventory list, CSV of VINs, or more than a handful of vehicles at once.

    Raw SKILL.md

    SKILL.md content is not in this snapshot. Open the raw file to copy it from the source repository.

  • recalls-ymm

    skills/recalls-ymm/SKILL.md

    Check safety recalls by year, make, and model (no VIN) using the CarsXE Recalls by YMM API. Use this when the user asks about recalls for a model line, or has year/make/model but no VIN.

    Raw SKILL.md

    SKILL.md content is not in this snapshot. Open the raw file to copy it from the source repository.

  • vehicle-history

    skills/vehicle-history/SKILL.md

    Retrieve a vehicle history report from a VIN using the CarsXE API. Use this when a user wants to know a car's history — past owners, accidents, title status, odometer readings, or whether it's been in a crash.

    Raw SKILL.md

    SKILL.md content is not in this snapshot. Open the raw file to copy it from the source repository.

  • vehicle-images

    skills/vehicle-images/SKILL.md

    Retrieve images of a vehicle by make, model, and year using the CarsXE API. Use this when a user wants to see what a vehicle looks like or asks for photos of a specific car.

    Raw SKILL.md

    SKILL.md content is not in this snapshot. Open the raw file to copy it from the source repository.

  • vehicle-recalls

    skills/vehicle-recalls/SKILL.md

    Check for open safety recalls on a vehicle using the CarsXE API. Use this when a user asks whether a car has any recalls, safety issues, or wants to know if their vehicle needs a recall repair.

    Raw SKILL.md

    SKILL.md content is not in this snapshot. Open the raw file to copy it from the source repository.

  • vehicle-specs

    skills/vehicle-specs/SKILL.md

    Fetch full vehicle specifications from a VIN using the CarsXE API. Use this when the user provides a VIN and wants to know details about a vehicle (make, model, year, engine, trim, equipment, etc.).

    Raw SKILL.md

    SKILL.md content is not in this snapshot. Open the raw file to copy it from the source repository.

  • vin-ocr

    skills/vin-ocr/SKILL.md

    Extract a VIN from a photo or image URL using the CarsXE VIN OCR API. Use this when a user shares an image of a vehicle or VIN plate and wants to identify the VIN.

    Raw SKILL.md

    SKILL.md content is not in this snapshot. Open the raw file to copy it from the source repository.

  • year-make-model

    skills/year-make-model/SKILL.md

    Look up vehicle data by Year, Make, and Model using the CarsXE YMM API. Use this when a user doesn't have a VIN but knows the year, make, and model of a vehicle and wants specs, trims, or features.

    Raw SKILL.md

    SKILL.md content is not in this snapshot. Open the raw file to copy it from the source repository.

  • ymm-options

    skills/ymm-options/SKILL.md

    List year, make, model, trim, or variant options for cascading vehicle dropdowns using the CarsXE YMM Options API. Use this when the user wants available years, makes, models, trims, or which years a vehicle was sold — not full specs.

    Raw SKILL.md

    SKILL.md content is not in this snapshot. Open the raw file to copy it from the source repository.

File Inventory

.codex-plugin/plugin.json

plugin-manifest

2,402 bytes

6ed544e6efef1e0a…

AGENTS.md

file

5,448 bytes

57f09907ef65a4c2…

assets/logo.png

asset

47,984 bytes

4b2765c7076ec14d…

assets/screenshot-vin-decode.png

asset

32,416 bytes

74f88e6d83fbde93…

hooks/hooks.json

file

302 bytes

ac858f4c57ab1649…

hooks/load-api-key.mjs

file

1,253 bytes

710bcf9035d743a3…

package-lock.json

file

276 bytes

62a3136934b8c02f…

package.json

file

199 bytes

7316eac4b894542b…

skills/auth/SKILL.md

skill

1,839 bytes

ce15b9feea2df288…

skills/international-vin/SKILL.md

skill

846 bytes

dad140c8a5c2707f…

skills/lien-theft/SKILL.md

skill

803 bytes

126f5f2f79634d6a…

skills/market-value/SKILL.md

skill

1,285 bytes

b49e98473088154f…

skills/obd-decoder/SKILL.md

skill

819 bytes

e90108c48108addd…

skills/ownership/SKILL.md

skill

2,233 bytes

3a831f7cfb80b8b3…

skills/plate-decoder/SKILL.md

skill

1,277 bytes

5485d496b2b63ed1…

skills/plate-image-recognition/SKILL.md

skill

1,000 bytes

f64a10f2676f3062…

skills/recalls-batch/SKILL.md

skill

2,232 bytes

8229ca1dec3c17c3…

skills/recalls-ymm/SKILL.md

skill

1,365 bytes

3b0f019a90ad4579…

skills/vehicle-history/SKILL.md

skill

1,005 bytes

597acefb93e059b1…

skills/vehicle-images/SKILL.md

skill

965 bytes

a3b86804f349eca5…

skills/vehicle-recalls/SKILL.md

skill

1,055 bytes

d1c4dacaec3ef048…

skills/vehicle-specs/SKILL.md

skill

1,249 bytes

504fcaa4f4ac6777…

skills/vin-ocr/SKILL.md

skill

987 bytes

a57fc62350357022…

skills/year-make-model/SKILL.md

skill

1,061 bytes

351c9fb9de6f78a4…

skills/ymm-options/SKILL.md

skill

1,665 bytes

ed081c4ddc4bd94a…

Related plugins

Ordered by Trust Score. Listings cannot pay for these positions. Check each one fits your task before switching from CarsXE.

Alternatives in Tools & Integrations

See all Tools & Integrations plugins