A computer includes a processor and a memory, the memory storing instructions executable by the processor to receive a first message from a vehicle specifying an event in the vehicle; identify vehicle data to confirm or disprove the event in the vehicle; identify an application programming interface (API) in the vehicle to access at least some of the vehicle data; and transmit to the vehicle a second message including a query for the vehicle data according to the API.