# Firebase App Check API API

> Firebase App Check API API on Apizie: 26 endpoints (Gets the requested ResourcePolicy configuration., Updates the specified ResourcePolicy configuration., Deletes the specified ResourcePolicy configuration., Accepts an App Attest assertion and an artifact previously obtained from ExchangeAppAttestAttestation and…, …) returned as clean JSON through one API key. Send your own provider key in the x-upstream-key header. Call it over REST at https://apizie.tech/v1/analytics:googleapis-firebaseappcheck/{endpoint} or from Claude, ChatGPT and Cursor through the Apizie MCP server. Free plan: 1,000 requests a month.

- Project key: `analytics:googleapis-firebaseappcheck`
- Category: Analytics
- Status: byok
- Source: https://firebase.google.com/docs/app-check
- Page: https://apizie.tech/api/analytics/googleapis-firebaseappcheck
- OpenAPI: https://apizie.tech/api/analytics/googleapis-firebaseappcheck/openapi.json

Firebase App Check works alongside other Firebase services to help protect your backend resources from abuse, such as billing fraud or phishing.

## Endpoints

### Gets the requested ResourcePolicy configuration.
`GET https://apizie.tech/v1/analytics:googleapis-firebaseappcheck/firebaseappcheck-projects-services-resource-policies-get` (byok)

| Parameter | Type | Required | Description |
|---|---|---|---|
| name | string | yes | Required. The relative resource name of the ResourcePolicy to retrieve, in the format: ```… |

### Updates the specified ResourcePolicy configuration.
`POST https://apizie.tech/v1/analytics:googleapis-firebaseappcheck/firebaseappcheck-projects-services-resource-policies-patch` (byok)

| Parameter | Type | Required | Description |
|---|---|---|---|
| name | string | yes | Required. Identifier. The relative name of the resource policy object, in the format: ```… |
| updateMask | string | no | Required. A comma-separated list of names of fields in the ResourcePolicy to update. Example: `enforcement_mode`. |
| body | object | yes | JSON request body |

### Deletes the specified ResourcePolicy configuration.
`POST https://apizie.tech/v1/analytics:googleapis-firebaseappcheck/firebaseappcheck-projects-services-resource-policies-delete` (byok)

| Parameter | Type | Required | Description |
|---|---|---|---|
| etag | string | no | The checksum to be validated against the current ResourcePolicy, to ensure the client has an up-to-date value before proceeding. This… |
| name | string | yes | Required. The relative resource name of the ResourcePolicy to delete, in the format: ```… |

### Accepts an App Attest assertion and an artifact previously obtained from ExchangeAppAttestAttestation and…
`POST https://apizie.tech/v1/analytics:googleapis-firebaseappcheck/firebaseappcheck-projects-apps-exchange-app-attest-assertion` (byok)

| Parameter | Type | Required | Description |
|---|---|---|---|
| app | string | yes | Required. The relative resource name of the iOS app, in the format: ``` projects/{project_number}/apps/{app_id} ``` If necessary, the… |
| body | object | yes | JSON request body |

### Accepts an App Attest CBOR attestation and verifies it with Apple using your preconfigured team and bundle…
`POST https://apizie.tech/v1/analytics:googleapis-firebaseappcheck/firebaseappcheck-projects-apps-exchange-app-attest-attestati` (byok)

| Parameter | Type | Required | Description |
|---|---|---|---|
| app | string | yes | Required. The relative resource name of the iOS app, in the format: ``` projects/{project_number}/apps/{app_id} ``` If necessary, the… |
| body | object | yes | JSON request body |

### Validates a debug token secret that you have previously created using CreateDebugToken. If valid, returns an…
`POST https://apizie.tech/v1/analytics:googleapis-firebaseappcheck/firebaseappcheck-projects-apps-exchange-debug-token` (byok)

| Parameter | Type | Required | Description |
|---|---|---|---|
| app | string | yes | Required. The relative resource name of the app, in the format: ``` projects/{project_number}/apps/{app_id} ``` If necessary, the… |
| body | object | yes | JSON request body |

### Generates a challenge that protects the integrity of an immediately following call to…
`POST https://apizie.tech/v1/analytics:googleapis-firebaseappcheck/firebaseappcheck-projects-apps-generate-app-attest-challenge` (byok)

| Parameter | Type | Required | Description |
|---|---|---|---|
| app | string | yes | Required. The relative resource name of the iOS app, in the format: ``` projects/{project_number}/apps/{app_id} ``` If necessary, the… |
| body | object | yes | JSON request body |

### Validates a custom token signed using your project's Admin SDK service account credentials. If valid,…
`POST https://apizie.tech/v1/analytics:googleapis-firebaseappcheck/firebaseappcheck-projects-apps-exchange-custom-token` (byok)

| Parameter | Type | Required | Description |
|---|---|---|---|
| app | string | yes | Required. The relative resource name of the app, in the format: ``` projects/{project_number}/apps/{app_id} ``` If necessary, the… |
| body | object | yes | JSON request body |

### Accepts a [`device_token`](https://developer.apple.com/documentation/devicecheck/dcdevice) issued by…
`POST https://apizie.tech/v1/analytics:googleapis-firebaseappcheck/firebaseappcheck-projects-apps-exchange-device-check-token` (byok)

| Parameter | Type | Required | Description |
|---|---|---|---|
| app | string | yes | Required. The relative resource name of the iOS app, in the format: ``` projects/{project_number}/apps/{app_id} ``` If necessary, the… |
| body | object | yes | JSON request body |

### Validates an [integrity verdict response token from Play…
`POST https://apizie.tech/v1/analytics:googleapis-firebaseappcheck/firebaseappcheck-projects-apps-exchange-play-integrity-token` (byok)

| Parameter | Type | Required | Description |
|---|---|---|---|
| app | string | yes | Required. The relative resource name of the Android app, in the format: ``` projects/{project_number}/apps/{app_id} ``` If necessary, the… |
| body | object | yes | JSON request body |

### Validates a [reCAPTCHA Enterprise response…
`POST https://apizie.tech/v1/analytics:googleapis-firebaseappcheck/firebaseappcheck-projects-apps-exchange-recaptcha-enterprise` (byok)

| Parameter | Type | Required | Description |
|---|---|---|---|
| app | string | yes | Required. The relative resource name of the web app, in the format: ``` projects/{project_number}/apps/{app_id} ``` If necessary, the… |
| body | object | yes | JSON request body |

### Validates a [reCAPTCHA v3 response token](https://developers.google.com/recaptcha/docs/v3). If valid,…
`POST https://apizie.tech/v1/analytics:googleapis-firebaseappcheck/firebaseappcheck-projects-apps-exchange-recaptcha-v3-token` (byok)

| Parameter | Type | Required | Description |
|---|---|---|---|
| app | string | yes | Required. The relative resource name of the web app, in the format: ``` projects/{project_number}/apps/{app_id} ``` If necessary, the… |
| body | object | yes | JSON request body |

### Generates a challenge that protects the integrity of an immediately following integrity verdict request to…
`POST https://apizie.tech/v1/analytics:googleapis-firebaseappcheck/firebaseappcheck-projects-apps-generate-play-integrity-chall` (byok)

| Parameter | Type | Required | Description |
|---|---|---|---|
| app | string | yes | Required. The relative resource name of the app, in the format: ``` projects/{project_number}/apps/{app_id} ``` If necessary, the… |
| body | object | yes | JSON request body |

### Mints a new App Check token for the specified Firebase App. This method is intended to be called from a…
`POST https://apizie.tech/v1/analytics:googleapis-firebaseappcheck/firebaseappcheck-projects-apps-mint-app-check-token` (byok)

| Parameter | Type | Required | Description |
|---|---|---|---|
| app | string | yes | Required. The relative resource name of the app, in the format: ``` projects/{project_number}/apps/{app_id} ``` If necessary, the… |
| body | object | yes | JSON request body |

### Atomically gets the AppAttestConfigs for the specified list of apps.
`GET https://apizie.tech/v1/analytics:googleapis-firebaseappcheck/firebaseappcheck-projects-apps-app-attest-config-batch-get` (byok)

| Parameter | Type | Required | Description |
|---|---|---|---|
| names | string | no | Required. The relative resource names of the AppAttestConfigs to retrieve, in the format ```… |
| parent | string | yes | Required. The parent project name shared by all AppAttestConfigs being retrieved, in the format ``` projects/{project_number} ``` The… |

### Lists all DebugTokens for the specified app. For security reasons, the `token` field is never populated in…
`GET https://apizie.tech/v1/analytics:googleapis-firebaseappcheck/firebaseappcheck-projects-apps-debug-tokens-list` (byok)

| Parameter | Type | Required | Description |
|---|---|---|---|
| pageSize | integer | no | The maximum number of DebugTokens to return in the response. Note that an app can have at most 20 debug tokens. The server may return… |
| pageToken | string | no | Token returned from a previous call to ListDebugTokens indicating where in the set of DebugTokens to resume listing. Provide this to… |
| parent | string | yes | Required. The relative resource name of the parent app for which to list each associated DebugToken, in the format: ```… |

### Creates a new DebugToken for the specified app. For security reasons, after the creation operation…
`POST https://apizie.tech/v1/analytics:googleapis-firebaseappcheck/firebaseappcheck-projects-apps-debug-tokens-create` (byok)

| Parameter | Type | Required | Description |
|---|---|---|---|
| parent | string | yes | Required. The relative resource name of the parent app in which the specified DebugToken will be created, in the format: ```… |
| body | object | yes | JSON request body |

### Atomically gets the DeviceCheckConfigs for the specified list of apps. For security reasons, the…
`GET https://apizie.tech/v1/analytics:googleapis-firebaseappcheck/firebaseappcheck-projects-apps-device-check-config-batch-get` (byok)

| Parameter | Type | Required | Description |
|---|---|---|---|
| names | string | no | Required. The relative resource names of the DeviceCheckConfigs to retrieve, in the format ```… |
| parent | string | yes | Required. The parent project name shared by all DeviceCheckConfigs being retrieved, in the format ``` projects/{project_number} ``` The… |

### Atomically gets the PlayIntegrityConfigs for the specified list of apps.
`GET https://apizie.tech/v1/analytics:googleapis-firebaseappcheck/firebaseappcheck-projects-apps-play-integrity-config-batch-g` (byok)

| Parameter | Type | Required | Description |
|---|---|---|---|
| names | string | no | Required. The relative resource names of the PlayIntegrityConfigs to retrieve, in the format ```… |
| parent | string | yes | Required. The parent project name shared by all PlayIntegrityConfigs being retrieved, in the format ``` projects/{project_number} ``` The… |

### Atomically gets the RecaptchaEnterpriseConfigs for the specified list of apps.
`GET https://apizie.tech/v1/analytics:googleapis-firebaseappcheck/firebaseappcheck-projects-apps-recaptcha-enterprise-config-b` (byok)

| Parameter | Type | Required | Description |
|---|---|---|---|
| names | string | no | Required. The relative resource names of the RecaptchaEnterpriseConfigs to retrieve, in the format: ```… |
| parent | string | yes | Required. The parent project name shared by all RecaptchaEnterpriseConfigs being retrieved, in the format ``` projects/{project_number}… |

### Atomically gets the RecaptchaV3Configs for the specified list of apps. For security reasons, the…
`GET https://apizie.tech/v1/analytics:googleapis-firebaseappcheck/firebaseappcheck-projects-apps-recaptcha-v3-config-batch-get` (byok)

| Parameter | Type | Required | Description |
|---|---|---|---|
| names | string | no | Required. The relative resource names of the RecaptchaV3Configs to retrieve, in the format: ```… |
| parent | string | yes | Required. The parent project name shared by all RecaptchaV3Configs being retrieved, in the format ``` projects/{project_number} ``` The… |

### Atomically updates the specified Service configurations.
`POST https://apizie.tech/v1/analytics:googleapis-firebaseappcheck/firebaseappcheck-projects-services-batch-update` (byok)

| Parameter | Type | Required | Description |
|---|---|---|---|
| parent | string | yes | Required. The parent project name shared by all Service configurations being updated, in the format ``` projects/{project_number} ``` The… |
| body | object | yes | JSON request body |

### Lists all Service configurations for the specified project. Only Services which were explicitly configured…
`GET https://apizie.tech/v1/analytics:googleapis-firebaseappcheck/firebaseappcheck-projects-services-list` (byok)

| Parameter | Type | Required | Description |
|---|---|---|---|
| pageSize | integer | no | The maximum number of Services to return in the response. Only explicitly configured services are returned. The server may return fewer… |
| pageToken | string | no | Token returned from a previous call to ListServices indicating where in the set of Services to resume listing. Provide this to retrieve… |
| parent | string | yes | Required. The relative resource name of the parent project for which to list each associated Service, in the format: ```… |

### Atomically updates the specified ResourcePolicy configurations.
`POST https://apizie.tech/v1/analytics:googleapis-firebaseappcheck/firebaseappcheck-projects-services-resource-policies-batch-u` (byok)

| Parameter | Type | Required | Description |
|---|---|---|---|
| parent | string | yes | Required. The parent service name, in the format ``` projects/{project_number}/services/{service_id} ``` The parent collection in the… |
| body | object | yes | JSON request body |

### Lists all ResourcePolicy configurations for the specified project and service.
`GET https://apizie.tech/v1/analytics:googleapis-firebaseappcheck/firebaseappcheck-projects-services-resource-policies-list` (byok)

| Parameter | Type | Required | Description |
|---|---|---|---|
| filter | string | no | Optional. Filters the results by the specified rule. For the exact syntax of this field, please consult the… |
| pageSize | integer | no | The maximum number of ResourcePolicy objects to return in the response. The server may return fewer than this at its own discretion. If no… |
| pageToken | string | no | Token returned from a previous call to ListResourcePolicies indicating where in the set of ResourcePolicy objects to resume listing.… |
| parent | string | yes | Required. The relative resource name of the parent Service for which to list each associated ResourcePolicy, in the format: ```… |

### Creates the specified ResourcePolicy configuration.
`POST https://apizie.tech/v1/analytics:googleapis-firebaseappcheck/firebaseappcheck-projects-services-resource-policies-create` (byok)

| Parameter | Type | Required | Description |
|---|---|---|---|
| parent | string | yes | Required. The relative resource name of the parent Service in which the specified ResourcePolicy will be created, in the format: ```… |
| body | object | yes | JSON request body |

## Example
```
curl "https://apizie.tech/v1/analytics:googleapis-firebaseappcheck/firebaseappcheck-projects-services-resource-policies-get" \
  -H "x-api-key: $APIZIE_KEY" \
  -H "x-upstream-key: $PROVIDER_KEY"
```

## FAQ

### How do I call the Firebase App Check API API?
Create a free Apizie key, then send GET https://apizie.tech/v1/analytics:googleapis-firebaseappcheck/firebaseappcheck-projects-services-resource-policies-get with the header x-api-key. Every endpoint returns { project, data, timestamp }.

### Is the Firebase App Check API API free on Apizie?
Yes. The Free plan includes 1,000 requests a month at 100 requests a minute, no credit card. Firebase App Check API itself also needs your own key from googleapis.com.

### Can AI agents use the Firebase App Check API API?
Yes. Add the Apizie MCP server (https://apizie.tech/mcp) to Claude, ChatGPT, Cursor or VS Code, then ask in plain language. The agent calls run_scraper with project key analytics:googleapis-firebaseappcheck.

### What is the status of the Firebase App Check API API?
Needs your own provider key (bring your own key)