Skip to content
OpenParablePublic APIs

Identity Toolkit API API

by googleapis.com

OAuthHTTPSAnalytics
Open documentation ↗

Overview

The Google Identity Toolkit API lets you use open standards to verify a user's identity.

Identity Toolkit API is an analytics API from googleapis.com. Requests are authenticated with OAuth. It is served over HTTPS. Its OpenAPI description documents 27 endpoints.

At a glance

Authentication
OAuth
HTTPS
Yes
CORS
Unknown
Category
Analytics
Base URL
https://identitytoolkit.googleapis.com/
Version
v2
Endpoints
27
OpenAPI
Specification ↗
Spec updated
2023-04-21

Make a first request

Replace the placeholders; the documentation says exactly where credentials go.

cURL
curl -X GET "https://identitytoolkit.googleapis.com/v2/defaultSupportedIdps" \
  -H "Accept: application/json" \
  -H "Authorization: Bearer YOUR_TOKEN"
JavaScript
const response = await fetch("https://identitytoolkit.googleapis.com/v2/defaultSupportedIdps", {
  method: "GET",
  headers: {
    "Accept": "application/json",
    "Authorization": "Bearer YOUR_TOKEN",
  },
});
const data = await response.json();
console.log(data);
Python
import requests

response = requests.request(
    "GET",
    "https://identitytoolkit.googleapis.com/v2/defaultSupportedIdps",
    headers={
    "Accept": "application/json",
    "Authorization": "Bearer YOUR_TOKEN",
    },
    timeout=30,
)
print(response.json())

Endpoints

MethodPathWhat it does
POST/v2/accounts/mfaEnrollment:finalizeFinishes enrolling a second factor for the user.
POST/v2/accounts/mfaEnrollment:startStep one of the MFA enrollment process. In SMS case, this sends an SMS verification code to the user.
POST/v2/accounts/mfaEnrollment:withdrawRevokes one second factor from the enrolled second factors for an account.
POST/v2/accounts/mfaSignIn:finalizeVerifies the MFA challenge and performs sign-in
POST/v2/accounts/mfaSignIn:startSends the MFA challenge
POST/v2/accounts/passkeyEnrollment:finalizeFinishes enrolling a passkey credential for the user.
POST/v2/accounts/passkeyEnrollment:startStep one of the passkey enrollment process. Returns a challenge and parameters for creation of the passkey credential.
POST/v2/accounts/passkeySignIn:finalizeVerifies the passkey assertion and signs the user in.
POST/v2/accounts/passkeySignIn:startCreates and returns the passkey challenge
POST/v2/accounts:revokeTokenRevokes a user's token from an Identity Provider (IdP). This is done by manually providing an IdP credential, and the token types for revocation. An [API key](h
GET/v2/defaultSupportedIdpsList all default supported Idps.
GET/v2/recaptchaConfigGets parameters needed for reCAPTCHA analysis.
GET/v2/{name}Retrieve an Oidc Idp configuration for an Identity Toolkit project.
PATCH/v2/{name}Update an Oidc Idp configuration for an Identity Toolkit project.
DELETE/v2/{name}Delete an Oidc Idp configuration for an Identity Toolkit project.
GET/v2/{parent}/defaultSupportedIdpConfigsList all default supported Idp configurations for an Identity Toolkit project.
POST/v2/{parent}/defaultSupportedIdpConfigsCreate a default supported Idp configuration for an Identity Toolkit project.
GET/v2/{parent}/inboundSamlConfigsList all inbound SAML configurations for an Identity Toolkit project.
POST/v2/{parent}/inboundSamlConfigsCreate an inbound SAML configuration for an Identity Toolkit project.
GET/v2/{parent}/oauthIdpConfigsList all Oidc Idp configurations for an Identity Toolkit project.
POST/v2/{parent}/oauthIdpConfigsCreate an Oidc Idp configuration for an Identity Toolkit project.
GET/v2/{parent}/tenantsList tenants under the given agent project. Requires read permission on the Agent project.
POST/v2/{parent}/tenantsCreate a tenant. Requires write permission on the Agent project.
POST/v2/{project}/identityPlatform:initializeAuthInitialize Identity Platform for a Cloud project. Identity Platform is an end-to-end authentication system for third-party users to access your apps and service
POST/v2/{resource}:getIamPolicyGets the access control policy for a resource. An error is returned if the resource does not exist. An empty policy is returned if the resource exists but does
POST/v2/{resource}:setIamPolicySets the access control policy for a resource. If the policy exists, it is replaced. Caller must have the right Google IAM permission on the resource.
POST/v2/{resource}:testIamPermissionsReturns the caller's permissions on a resource. An error is returned if the resource does not exist. A caller is not required to have Google IAM permission to m

Questions

Does the Identity Toolkit API API need an API key?

Yes. The Identity Toolkit API API uses OAuth authentication; the documentation explains how to get credentials.

Does the Identity Toolkit API API support HTTPS?

Yes, the Identity Toolkit API API is served over HTTPS.

How many endpoints does the Identity Toolkit API API have?

Its OpenAPI description lists 27 endpoints in version v2. All of them are shown on this page.

What are alternatives to the Identity Toolkit API API?

Other Analytics APIs include Google Play Integrity API, versionhistory.googleapis.com API, Doc Converter, Perspective Comment Analyzer API, Safe Browsing API.

Compare alternatives →

Google Play Integrity API

Analytics

The Play Integrity API helps you check that you're interacting with your genuine app on a genuine Android device powered by Google Play services. The Play Integrity API has replaced SafetyNet Attestation and Android Device Verification.

OAuth1 endpoints

versionhistory.googleapis.com API

Analytics

Version History API - Prod

No auth4 endpoints

Doc Converter

Analytics

This api converts file formats of OpenXml and OpenOffice documents formats to vector files (e.g., svg)

No auth1 endpoints

Perspective Comment Analyzer API

Analytics

The Perspective Comment Analyzer API provides information about the potential impact of a comment on a conversation (e.g. it can provide a score for the "toxicity" of a comment). Users can leverage the "SuggestCommentScore" method to submit corrections to improve Perspective over time. Users can set the "doNotStore" flag to ensure that all submitted comments are automatically deleted after scores are returned.

OAuth2 endpoints

Safe Browsing API

Analytics

Enables client applications to check web resources (most commonly URLs) against Google-generated lists of unsafe web resources. The Safe Browsing APIs are for non-commercial use only. If you need to use APIs to detect malicious URLs for commercial purposes – meaning “for sale or revenue-generating purposes” – please refer to the Web Risk API.

No auth7 endpoints

Web Fonts Developer API

Analytics

The Google Web Fonts Developer API lets you retrieve information about web fonts served by Google.

No auth1 endpoints

Listed from APIs.guru (CC0).