projects

PATCH /v1/projects/{projectsId}/apps/{appsId}/debugTokens/{debugTokensId}

Changed on Nov 2, 2026

Updates the specified DebugToken. For security reasons, the token field cannot be updated, nor will it be populated in the response, but you can revoke the debug token using DeleteDebugToken.

Request

Base URL
https://firebaseappcheck.googleapis.com
URL
https://firebaseappcheck.googleapis.com/v1/projects/{projectsId}/apps/{appsId}/debugTokens/{debugTokensId}
Auth
- OAuth 2 and OAuth 2
  Implicit: https://accounts.google.com/o/oauth2/auth
  Scopes: https://www.googleapis.com/auth/cloud-platform
  Authorization code: https://accounts.google.com/o/oauth2/auth
  Token URL: https://accounts.google.com/o/oauth2/token scopes: https://www.googleapis.com/auth/cloud-platform
- or OAuth 2 and OAuth 2
  Implicit: https://accounts.google.com/o/oauth2/auth
  Scopes: https://www.googleapis.com/auth/firebase
  Authorization code: https://accounts.google.com/o/oauth2/auth
  Token URL: https://accounts.google.com/o/oauth2/token scopes: https://www.googleapis.com/auth/firebase

Path parameters

projectsIdstring required

appsIdstring required

debugTokensIdstring required

Query parameters

updateMaskstring google-fieldmask

Required. A comma-separated list of names of fields in the DebugToken to update. Example: display_name.

Request body

displayNamestring

Required. A human readable display name used to identify this debug token.

etagstring

Optional. This checksum is computed by the server based on the value of other fields, and may be sent on update and delete requests to ensure the client has an up-to-date value before proceeding. This etag is strongly validated as defined by RFC 7232.

namestring

Required. The relative resource name of the debug token, in the format: projects/{project_number}/apps/{app_id}/debugTokens/{debug_token_id}

tokenstring

Required. Input only. Immutable. The secret token itself. Must be provided during creation, and must be a UUID4, case insensitive. This field is immutable once set, and cannot be provided during a UpdateDebugToken request. You can, however, delete this debug token using DeleteDebugToken to revoke it. For security reasons, this field will never be populated in any response.

updateTimestring google-datetime

Output only. Timestamp when this debug token was most recently updated.

Response

Successful response