Decode a VIN

Type a VIN to see the year, make, model and engine NHTSA's vPIC data gives it.

Try one: 1HGCM82633A004352 a 2003 Honda Accord · 5YJ3E1EA2JF000316 a 2018 Tesla Model 3

For developers

Install

Every release embeds one vPIC data month; nitrovin --version names it.

Channel	Command	Platforms
Homebrew	brew install joshuasprow/tap/nitrovin	macOS, Linux
Scoop	scoop bucket add joshuasprow https://github.com/joshuasprow/scoop-bucket scoop install nitrovin	Windows amd64, arm64
winget	`JoshuaSprow.Nitrovin`, not yet submitted (#78)	Windows
Docker	docker run --rm -p 8080:8080 ghcr.io/joshuasprow/nitrovin	linux/amd64, linux/arm64
Go 1.27+	go install github.com/joshuasprow/nitrovin/cmd/nitrovin@latest	anywhere Go builds

Archives and the C library for linux, darwin and windows on amd64 and arm64 are on the v0.3.2 release.

In an AI assistant (MCP)

nitrovin mcp is an MCP server over stdio with the tools decode_vin, translate and list. For Claude Desktop (~/Library/Application Support/Claude/claude_desktop_config.json on macOS, %APPDATA%\Claude\claude_desktop_config.json on Windows) and Cursor (~/.cursor/mcp.json) the entry is the same.

A local binary

Use the absolute path which nitrovin prints: desktop apps do not see your shell's PATH.

{
  "mcpServers": {
    "nitrovin": {
      "command": "/opt/homebrew/bin/nitrovin",
      "args": ["mcp"]
    }
  }
}

The Docker image

{
  "mcpServers": {
    "nitrovin": {
      "command": "docker",
      "args": ["run", "--rm", "-i", "ghcr.io/joshuasprow/nitrovin", "mcp"]
    }
  }
}

Verify a release

Releases are signed with cosign keyless signatures from GitHub Actions: every asset has an <asset>.sigstore.json bundle and a line in checksums.txt. From the directory you downloaded v0.3.2's assets to:

TAG=v0.3.2
cosign verify-blob --bundle checksums.txt.sigstore.json \
  --certificate-identity https://github.com/joshuasprow/nitrovin/.github/workflows/release.yml@refs/tags/$TAG \
  --certificate-oidc-issuer https://token.actions.githubusercontent.com checksums.txt
sha256sum --check --ignore-missing checksums.txt
cosign verify ghcr.io/joshuasprow/nitrovin:$TAG \
  --certificate-identity https://github.com/joshuasprow/nitrovin/.github/workflows/release.yml@refs/tags/$TAG \
  --certificate-oidc-issuer https://token.actions.githubusercontent.com