A free, keyless VIN-lookup service that returns the original factory window sticker (Monroney label) PDF plus an NHTSA vPIC specification decode for any 17-character US VIN. Serves decoded vehicle specs, EPA fuel economy, crash ratings, and recalls over an open, CORS-enabled JSON API with no registration, no API key and no paid tiers. Factory PDFs are available for 20 makes (Ford, Lincoln, the GM and Stellantis brands, Subaru, Kia, Hyundai, Genesis, Toyota and Lexus from model year 2025, and Nissan and Infiniti as Nissan's copy stamped "Unofficial Copy"); every other make still returns a full specification decode. A remote MCP server at https://windowsticker.org/mcp exposes the same lookup to agents.
Window Sticker VIN API publishes 2 API contracts indexed on the APIs.io network: Sticker API and Vin API. Tagged areas include Automotive, Vehicle Data, VIN Decoding, Monroney, and Window sticker.
The Window Sticker VIN API catalog on APIs.io includes 1 JSON-LD context and 1 Spectral governance ruleset.
Window Sticker VIN API’s developer surface includes documentation, API reference, authentication, and 22 more developer resources.
Regulatory Posture applies to this provider. Its tags matched the
Government & Public Sector regime, so
Regulatory Posture carries 15 points of the composite.
If this regime is wrong for your business, say so on your
provider repo — the
applicability map is public and we will correct it.
Create-or-Update Ergonomics does not apply to this provider. The published contracts declare
no write operations, and a read-only API cannot create-or-update. The facet is excluded from this provider's
denominator entirely — not scored zero. A reference or data API is not deficient for being unable to
upsert.
The six quality facets above are damped to 85 points between them,
because the conditional facet above carries the other
15. That is why each facet's contribution is shown against a damped
maximum: raising a quality facet moves the composite by 85% of its nominal
weight, not 100%. The full arithmetic is at apis.io/rating/.
Show this score on your site.
It updates itself when the score changes. Paste this where you link to your API docs:
<a href="https://apis.io/providers/window-sticker-vin-api/"><img src="https://apis.io/badge/window-sticker-vin-api/card.svg" alt="Window Sticker VIN API on APIs.io — Kin Score by API Evangelist"></a>
Other styles, a README pill and a shields.io endpoint are on the badge page.
Raise your score.
Agent readiness — checks not met, largest first (exact, from this profile):
A2A Agent Card+8 pts — a2a/-a2a.yml manifest, graded on conformance.grade against A2A 1.0.0
Request/Response Examples+7 pts — share of operations carrying request/response examples; else an Examples / Code Samples link
Delegated User Identity+6 pts — a served discovery document listing authorization_code in grant_types_supported (served), else an oauth2 authorizationCode flow or openIdConnect declared in an OpenAPI (documented)
Typed Event Surface+6 pts — AsyncAPI document, OR webhooks/callbacks objects in the as-published OpenAPI, OR common[].type includes Webhooks
Protected Resource Metadata+5 pts — a served /.well-known/oauth-protected-resource carrying `resource` (documented), and naming its authorization_servers (verified)
2 more unmet checks in the Agent Readiness table above.
Kin Score — facets with the most composite points still available (weight × headroom):
Access Clarityscores 10.5 — up to +17.9 composite points
Standards this provider implements or carries. De facto ones are profiled and measured by the API Commons; formal ones come from the standards directory and are linked by the provider's own tags. The evidence column says how each claim was established — not that it was made.
Overlays applied on top of this provider's contracts. Each card says who wrote it: a document the provider publishes, or one API Evangelist derived or generated.
name: Window Sticker VIN API
description: A free, keyless VIN-lookup service that returns the original factory window sticker (Monroney label) PDF plus
an NHTSA vPIC specification decode for any 17-character US VIN. Serves decoded vehicle specs, EPA fuel economy, crash ratings,
and recalls over an open, CORS-enabled JSON API with no registration, no API key and no paid tiers. Factory PDFs are available
for 20 makes (Ford, Lincoln, the GM and Stellantis brands, Subaru, Kia, Hyundai, Genesis, Toyota and Lexus from model year
2025, and Nissan and Infiniti as Nissan's copy stamped "Unofficial Copy"); every other make still returns a full specification
decode. A remote MCP server at https://windowsticker.org/mcp exposes the same lookup to agents.
accessModel:
pricing: unknown
onboarding: open
trial: false
try_now: false
public: true
gated: none
gated_source:
- onboarding
label: Open access
confidence: medium
source:
- authentication
- rate-limits
- security
generated: '2026-11-06'
method: derived
image: https://windowsticker.org/og.png
url: https://raw.githubusercontent.com/api-evangelist/window-sticker-vin-api/refs/heads/main/apis.yml
created: '2026-09-19'
modified: '2026-10-03'
specificationVersion: '0.21'
tags:
- Automotive
- Vehicle Data
- VIN Decoding
- Monroney
- Window sticker
- Government open data
- Auto Retail
- Dealer tooling
tags_raw:
- Automotive
- Vehicle data
- VIN decoding
- Monroney
- Window sticker
- Government open data
- Auto retail
- Dealer tooling
maintainers:
- FN: Window Sticker VIN API
url: https://windowsticker.org
common:
- type: AgenticAccess
url: agentic-access/window-sticker-vin-api-agentic-access.yml
- type: Spectral
url: rules/window-sticker-vin-api-rules.yml
- type: JSONLD
url: json-ld/window-sticker-vin-api-context.jsonld
- type: Vocabulary
url: vocabulary/window-sticker-vin-api-vocabulary.yml
- type: LLMsTxt
url: llms/window-sticker-vin-api-llms.txt
- type: MCPServer
url: mcp/window-sticker-vin-api-mcp.yml
- type: Hosts
url: hosts/window-sticker-vin-api-hosts.yml
- type: Vendors
url: vendors/window-sticker-vin-api-vendors.yml
- type: TermsOfService
url: https://windowsticker.org/terms
- type: Overlay
url: overlays/window-sticker-vin-api-openapi-overlay.yaml
- type: Website
url: https://windowsticker.org/
- type: Documentation
url: https://windowsticker.org/api-docs
- type: APIReference
url: https://windowsticker.org/api-docs
- type: PrivacyPolicy
url: https://windowsticker.org/privacy
- type: StatusPage
url: https://windowsticker.org/status
- type: LLMsTxt
url: https://windowsticker.org/llms.txt
- type: WellKnown
url: well-known/window-sticker-vin-api-well-known.yml
- type: Authentication
url: authentication/window-sticker-vin-api-authentication.yml
- type: Conventions
url: conventions/window-sticker-vin-api-conventions.yml
- type: Lifecycle
url: lifecycle/window-sticker-vin-api-lifecycle.yml
- type: Conformance
url: conformance/window-sticker-vin-api-conformance.yml
- type: DomainSecurity
url: security/window-sticker-vin-api-domain-security.yml
- type: AgentSkill
url: skills/_index.yml
- type: RateLimits
url: rate-limits/window-sticker-vin-api-rate-limits.yml
- type: Plans
url: plans/window-sticker-vin-api-plans-pricing.yml
apis:
- aid: window-sticker-vin-api:window-sticker-vin-api-sticker-api
name: Window Sticker VIN API Sticker API
description: The Sticker API from Window Sticker VIN API — 1 operation(s) for sticker.
humanURL: https://windowsticker.org/api-docs
tags:
- Sticker
properties:
- type: OpenAPI
url: openapi/window-sticker-vin-api-sticker-api-openapi.yml
- type: Documentation
url: https://windowsticker.org/api-docs
- type: APIReference
url: https://windowsticker.org/api-docs
- type: LLMsTxt
url: https://windowsticker.org/llms.txt
- type: Authentication
url: authentication/window-sticker-vin-api-authentication.yml
- type: Conventions
url: conventions/window-sticker-vin-api-conventions.yml
- type: DataModel
url: data-model/window-sticker-vin-api-data-model.yml
- type: ErrorCatalog
url: errors/window-sticker-vin-api-problem-types.yml
- aid: window-sticker-vin-api:window-sticker-vin-api-vin-api
name: Window Sticker VIN API Vin API
description: The Vin API from Window Sticker VIN API — 1 operation(s) for vin.
humanURL: https://windowsticker.org/api-docs
tags:
- VIN
tags_raw:
- Vin
properties:
- type: OpenAPI
url: openapi/window-sticker-vin-api-vin-api-openapi.yml
- type: Documentation
url: https://windowsticker.org/api-docs
- type: APIReference
url: https://windowsticker.org/api-docs
- type: LLMsTxt
url: https://windowsticker.org/llms.txt
- type: Authentication
url: authentication/window-sticker-vin-api-authentication.yml
- type: Conventions
url: conventions/window-sticker-vin-api-conventions.yml
- type: DataModel
url: data-model/window-sticker-vin-api-data-model.yml
- type: ErrorCatalog
url: errors/window-sticker-vin-api-problem-types.yml
- type: JSONSchema
url: json-schema/window-sticker-vin-api-vin-response-schema.json
generated:
by: apis.io/add
model: claude-opus-4-8
confidence: 90
at: '2026-09-19T01:43:34.140Z'
x-correction-request:
requested: '2026-09-27'
source: https://github.com/api-evangelist/window-sticker-vin-api/issues/1
request: 'Corrections: (1) factory window-sticker PDFs cover 20 makes since 2026-09-21, not 16 (Toyota/Lexus from MY2025;
Nissan/Infiniti as Nissan''s own copy stamped "Unofficial Copy"; list at https://windowsticker.org/coverage and llms.txt).
(2) Auth: the API takes no key and no token (the 2026-09-21 run graded auth_clarity "bearer"; our own authentication file
says requires_auth: false). (3) There is an MCP server -- record it.'
applied: '2026-10-03'
applied_note: Applied by hand. (1) Description now says 20 makes, verified live on https://windowsticker.org/coverage and
llms.txt (Ford, Lincoln, Chevrolet, GMC, Buick, Cadillac, Jeep, Ram, Dodge, Chrysler, Fiat, Alfa Romeo, Subaru, Kia, Hyundai,
Genesis, Toyota, Lexus, Nissan, Infiniti). (2) Keyless auth confirmed already recorded (authentication requires_auth false).
(3) MCP server confirmed already recorded; the manifest now carries the live initialize result and tools/list (get_window_sticker,
which_makes_are_covered, why_no_sticker; no auth). docs/corrections.yml note that placed the MCP server at /api/sticker/{vin}
corrected to /mcp.
x-enrichment:
date: '2026-09-28'
status: enriched
artifacts_added: 9
pass: modular-v1
engine: identity=local,contract=local,surfaces=local,docs=local,regulatory=local
Window Sticker VIN API — frequently asked questions
Does Window Sticker VIN API have an API?
Yes. APIs.io lists 2 APIs from Window Sticker VIN API, including Window Sticker VIN API Sticker API and Window Sticker VIN API Vin API.
Is there an OpenAPI specification for the Window Sticker VIN API?
Yes. APIs.io indexes 2 OpenAPI specifications for Window Sticker VIN API, each linked for download from this page.
How do I authenticate with the Window Sticker VIN API?
Window Sticker VIN API uses bearer-token authentication (1 scheme). The details are profiled on APIs.io as Window Sticker Vin Api Authentication.
Does Window Sticker VIN API have an MCP server?
Yes. APIs.io lists 1 MCP server for Window Sticker VIN API: Remote MCP server at windowsticker.org; 3 tools listed.
Is the Window Sticker VIN API ready for AI agents?
Window Sticker VIN API has a Kin Score of 31.3 out of 100 (thin) and an Agent Readiness score of 35.4 (agent-ready), scored by API Evangelist on 2026-11-06.
Calls without X-API-Key need no key. Calls with it need a paid plan — get a key.
Get an API key
Free tier, no form to fill in. Signing in shares your email address with us — we
store it to create your key and to recognise you if you sign in with another
provider. See our Privacy Policy and
Terms.
Kin Score
How this is scored →
It updates itself when the score changes. Paste this where you link to your API docs: