← statichum.studio

Resilient Home Assistant Bridge for Volkswagen-Group EVs After VW Started Requiring App Attestation and Locked Out the Open Integrations

api service real project •• multiple requests

Volkswagen hardened its WeConnect/Connect API with client assertion, cryptographic proof that a request came from the official, reviewed app on a non-rooted phone, which broke the popular open-source Home Assistant integration owners used to read charge state, climate, and location and to automate cabin preconditioning. People who already pay roughly 100 dollars a year for WeConnect want programmatic access to their own car and are openly weighing a brand switch. The ask is a maintained, cross-brand (VW, Skoda, Seat, Cupra) bridge that keeps working as VW, in their words, keeps tightening the screws.

builder note

Do not sell a 'permanent' fix, because attestation will eventually win on the native-app path and a fire-and-forget HACS add-on will be dead within a quarter. The durable wedge is a hosted, fast-updating relay across all VW-group brands funded by a small subscription (which also pays for the cat-and-mouse), with an honest public changelog every time VW breaks it. The willingness to switch brands over this is the real signal of how much owners value local control.

landscape (3 existing solutions)

The open VW integrations are caught in an authentication arms race. Browser login via TLS fingerprinting still works today, but VW is signalling it will keep clamping down with full client attestation, so every community fix is provisional and there is no sanctioned local API to build on.

homeassistant-volkswagencarnet (robinostlund) The de facto community integration. Authentication keeps breaking against VW's changes (issues #924, #744) and it depends on the WeConnect-python library that is being retired this year. Each fix is temporary.
CarConnectivity (WeConnect-python successor) The multi-brand rebuild (VW/Skoda/Seat/Cupra) that replaces the dying library. It restores functionality for now but is subject to the exact same attestation arms race, so it does not solve the durability problem.
Official VW / WeConnect app + subscription The only sanctioned client and it works, but it is a closed phone app with no open or local API. Owners cannot automate against it from Home Assistant, which is the entire point.

sources (1)

hn https://news.ycombinator.com/item?id=48319509 "I would need to be in full control of what I can do with the API, not that I need to use special software to talk to my own car." 2026-05-29
home-assistantevvolkswagenapi-lockoutsmart-home