# Recallroll by CyberMax

> VIN decoder API and vehicle recall check API: decode up to 10 VINs per call (year, make, model, trim, engine, plant) and get every NHTSA safety recall with Do Not Drive / Park Outside advisories, remedy and campaign links. REST + MCP server.

> Paid API keys from $19/month (Shop: 2,000 calls a month); free tier 50 calls a day per IP with no key. Buy: https://recallroll-api.cybermaxtools.com/buy/shop?s=lead · all plans: https://recallroll-api.cybermaxtools.com/docs#pricing

Send up to 10 VINs per call and get each vehicle decoded plus every NHTSA safety recall for it, with Do Not Drive and Park Outside warnings first. For dealers, fleets, lenders, insurers and apps. Free tier, no key; plans from $5 (one-time pack) or $19/month.

## API (free tier without a key; paid API keys for more)
- [/api/check](https://recallroll-api.cybermaxtools.com/api/check?vin=1HGCM82633A004352): Decode VINs and list their safety recalls (up to 10 per call)
- [/api/recalls](https://recallroll-api.cybermaxtools.com/api/recalls?make=Ford&model=F-150&year=2021): Safety recalls for a make, model and model year (no VIN needed)
- GET for simple calls, POST a JSON body for lists. Same field names as the bulk version's dataset records.
- OpenAPI 3.1: https://recallroll-api.cybermaxtools.com/openapi.json

## MCP (remote, streamable HTTP, no auth)
- Endpoint: https://recallroll-api.cybermaxtools.com/mcp
- `check_vins`: Decode 1-10 US VINs (year, make, model, trim, engine, plant) and list every NHTSA safety recall for each vehicle, with Do Not Drive / Park Outside advisories first, remedy and campaign link.
- `vehicle_recalls`: List NHTSA safety recalls for a make, model and model year (no VIN needed), advisories first.

## Limits
- Up to 10 VINs per call; 10 calls a minute per IP on the free tier.
- Free tier: 50 calls a day per IP, no key. Paid keys from $5 (one-time pack) or $19/month (see Get an API key).
- Recalls are listed per make, model and model year, as NHTSA publishes them; confirm a specific VIN at nhtsa.gov/recalls.
- Nothing is stored: each call asks NHTSA live (cached up to 10 minutes).

## More
- Health: https://recallroll-api.cybermaxtools.com/health
- All CyberMax tools: https://cybermax-tools-cybermax.static.hf.space/
- Need more than 10 VINs per call? Loop over your list: an API key covers thousands of calls a month, and the weekly Recallroll Brief lists every new campaign each Monday.

## Pricing
- Free: 50 calls a day per IP, 10/min, no key.
- Shop: $19/month, 2,000 calls a month, 30/min. Buy: https://recallroll-api.cybermaxtools.com/buy/shop?s=llms
- Dealer: $49/month, 7,500 calls a month, 60/min. Buy: https://recallroll-api.cybermaxtools.com/buy/dealer?s=llms
- Fleet: $99/month, 20,000 calls a month, 120/min. Buy: https://recallroll-api.cybermaxtools.com/buy/fleet?s=llms
- Pay as you go: $5, 400 calls (one-time pack, no expiry), 30/min. Buy: https://recallroll-api.cybermaxtools.com/buy/payg?s=llms
- Shop yearly: $190/year, 2,000 calls a month, 30/min. Buy: https://recallroll-api.cybermaxtools.com/buy/shop-yearly?s=llms
- Dealer yearly: $490/year, 7,500 calls a month, 60/min. Buy: https://recallroll-api.cybermaxtools.com/buy/dealer-yearly?s=llms
- Fleet yearly: $990/year, 20,000 calls a month, 120/min. Buy: https://recallroll-api.cybermaxtools.com/buy/fleet-yearly?s=llms
- Using several CyberMax APIs? CyberMax API All-Access: one key for all 10 APIs (this one included, 2,000 calls a month here) for $119/month. https://api-all-access.cybermaxtools.com/
- Use the key as `x-api-key: KEY` or `Authorization: Bearer KEY` (MCP too). Usage: https://recallroll-api.cybermaxtools.com/key. Machine-readable: https://recallroll-api.cybermaxtools.com/pricing.json

## Pay per call (x402, USDC on Base): for AI agents, no key, no account
- $0.015 per call, paid in USDC on Base (x402 "exact" scheme, v1 and v2).
- https://recallroll-api.cybermaxtools.com/x402/api/check: same as /api/check, always pay-per-call (an unpaid call returns HTTP 402 with the payment requirements).
- https://recallroll-api.cybermaxtools.com/x402/api/recalls: same as /api/recalls, always pay-per-call (an unpaid call returns HTTP 402 with the payment requirements).
- Plain endpoints keep the free tier and API keys; with no key, they also answer 402 (instead of 429) once the free daily quota is used.
- Send the signed payment as X-PAYMENT (v1) or PAYMENT-SIGNATURE (v2); the receipt comes back in X-PAYMENT-RESPONSE / PAYMENT-RESPONSE. Failed calls are not charged.