Skip to content

🔒 Security Notes

  • BMW CarData is a private API — use responsibly.
  • Never publish or share your id_token / refresh_token.
  • Tokens expire automatically; the bridge refreshes them securely.
  • Keep your Mosquitto broker private or protected by authentication.