REST Resource: projects.apps.debugTokens

Resource: DebugToken

Adebug token is a secret used during the development or integration testing of an app. It essentially allows the development or integration testing to bypass app attestation while still allowing App Check to enforce protection on supported production Firebase services.

JSON representation
{"name":string,"displayName":string,"token":string,"updateTime":string}
Fields
name

string

Required. The relative resource name of the debug token, in the format:

projects/{project_number}/apps/{app_id}/debugTokens/{debug_token_id}
displayName

string

Required. A human readable display name used to identify this debug token.

token

string

Required. Input only. Immutable. The secret token itself. Must be provided during creation, and must be a UUID4, case insensitive.

This field is immutable once set, and cannot be provided during andebugTokens.patch request. You can, however, delete this debug token usingdebugTokens.delete to revoke it.

For security reasons, this field will never be populated in any response.

updateTime

string (Timestamp format)

Output only. Timestamp when this debug token was most recently updated.

Uses RFC 3339, where generated output will always be Z-normalized and use 0, 3, 6 or 9 fractional digits. Offsets other than "Z" are also accepted. Examples:"2014-10-02T15:01:23Z","2014-10-02T15:01:23.045123456Z" or"2014-10-02T15:01:23+05:30".

Methods

create

 Creates a newDebugToken for the specified app.

delete

 Deletes the specifiedDebugToken.

get

 Gets the specifiedDebugToken.

list

 Lists allDebugTokens for the specified app.

patch

 Updates the specifiedDebugToken.

Except as otherwise noted, the content of this page is licensed under theCreative Commons Attribution 4.0 License, and code samples are licensed under theApache 2.0 License. For details, see theGoogle Developers Site Policies. Java is a registered trademark of Oracle and/or its affiliates.

Last updated 2025-09-25 UTC.