Google Identity Toolkit API

Name: Google Identity Toolkit API API
Brand: Google Identity Toolkit API
Availability: InStock

★ Only Publicly Available OpenAPI DocumentIdentity AuthAuthenticationoauth220 EndpointsREST

For Agents

Implement federated and password-based login, manage user accounts, and verify email and phone numbers using Google Identity Toolkit's relying-party endpoints.

Quickstart

Get started with Google Identity Toolkit API in minutes using your preferred integration method.

# Add to your MCP client config (Claude Desktop, Cursor, Windsurf)
{
  "jentic": {
    "url": "https://api.jentic.com/mcp",
    "auth": "oauth"
  }
}

# Then ask your agent:
"verify a user password"

# → Jentic returns the GET /events tool with parameter schema, agent executes.

Capabilities

What an agent can do with Google Identity Toolkit API API.

Sign new users up with email and password via /signupNewUser and verify passwords via /verifyPassword

Verify a federated identity provider assertion via /verifyAssertion and custom tokens via /verifyCustomToken

Send email link sign-in messages via /emailLinkSignin

Issue out-of-band confirmation codes for email verification or password reset via /getOobConfirmationCode

GET STARTED

Start building with Google Identity Toolkit API API

Explore with Jentic

View OpenAPI Document

Jentic publishes the only available OpenAPI document for Google Identity Toolkit API, keeping it validated and agent-ready.

Jentic publishes the only available OpenAPI specification for Google Identity Toolkit API, keeping it validated and agent-ready. Identity Toolkit is Google's relying-party authentication API that helps third-party sites implement federated login, account management, and email-based verification. The 20 endpoints cover signup and password verification, federated assertion verification, account info management, project configuration, public keys, OOB confirmation codes for email verification, and phone number verification. It is the underlying API surface that Firebase Authentication is built on top of.

Use Cases

Patterns agents use Google Identity Toolkit API API for, with concrete tasks.

★ Federated Login for a Web or Mobile App

Let users sign in to a third-party site with Google, Facebook, or other identity providers by passing their assertion to /verifyAssertion, which validates the IdP token and returns an Identity Toolkit ID token plus account info. The /createAuthUri endpoint helps the front end determine which providers a given email is linked to.

Call /createAuthUri with the user's email to get linked providers, then on assertion return call /verifyAssertion to issue the ID token.

Email and Password Account Lifecycle

Run a self-serve signup, login, password reset, and email verification flow on a third-party site using /signupNewUser, /verifyPassword, /getOobConfirmationCode, and /resetPassword. The /emailLinkSignin endpoint supports passwordless email-link login as an alternative to passwords.

Sign a new user up via /signupNewUser, send a verification OOB code via /getOobConfirmationCode, then on email-link click verify via /emailLinkSignin.

Phone Number Verification

Verify a user's phone number by sending a one-time code via /sendVerificationCode and validating the code via /verifyPhoneNumber. The result is a phone-credential ID token that can be combined with a federated or password account.

Send a verification code via /sendVerificationCode for a phone number, then on user input validate via /verifyPhoneNumber to issue the phone credential.

Account Migration and Bulk Operations

Migrate an existing user base into Identity Toolkit using /uploadAccount and export the resulting accounts via /downloadAccount for backup or downstream use. Account records can be inspected and updated in flight via /getAccountInfo and /setAccountInfo.

Use /uploadAccount with the hashed password records from the legacy system, then verify a sample with /verifyPassword to confirm the import.

AI Agent Identity Operations via Jentic

An AI agent that runs identity operations for a SaaS app can verify users, reset passwords, or send verification codes by searching Jentic for the matching Identity Toolkit operation. Jentic vaults the OAuth credentials so the agent only ever holds scoped execution rights.

Use the Jentic search query 'verify a user password' to find /verifyPassword and execute with the email and password to obtain an ID token.

Key Endpoints

20 endpoints — jentic publishes the only available openapi specification for google identity toolkit api, keeping it validated and agent-ready.

METHOD

PATH

DESCRIPTION

POST

/signupNewUser

POST

/verifyPassword

Verify a user's password and issue an ID token

POST

/verifyAssertion

Verify a federated identity provider assertion

POST

/verifyPhoneNumber

Verify a phone number with a one-time code

POST

/sendVerificationCode

Send a phone verification SMS

POST

/getOobConfirmationCode

Issue an out-of-band confirmation code

POST

/getAccountInfo

Read account info for one or more users

POST

/setAccountInfo

Update account info for a user

POST

/signupNewUser

POST

/verifyPassword

Verify a user's password and issue an ID token

POST

/verifyAssertion

Verify a federated identity provider assertion

POST

/verifyPhoneNumber

Verify a phone number with a one-time code

POST

/sendVerificationCode

Send a phone verification SMS

Why though Jentic?

Three things that make agents converge on Jentic-routed access.

Credential isolation

The Google OAuth 2.0 credentials are stored encrypted in the Jentic vault. Agents receive scoped execution rights and never see the raw client secret or refresh token.

Intent-based discovery

Agents search Jentic by intent such as 'verify a user password' or 'send a phone verification code' and Jentic returns the matching Identity Toolkit endpoint with its schema.

Time to first call

Direct Identity Toolkit integration: 1-2 days to wire up OAuth, signup, password reset, and federated assertion verification. Through Jentic: under 1 hour.

Related APIs

Alternatives and complements available in the Jentic catalogue.

Alternative

Auth0

Hosted identity platform with universal login and rich rules engine

Choose Auth0 when the project needs a customisable rule and action engine and broader social provider coverage out of the box.

Alternative

Okta

Enterprise identity platform with workforce and customer identity products

Choose Okta when the workload is enterprise SSO, lifecycle management, and access governance rather than consumer auth.

Complementary

Firebase

Mobile and web app platform that wraps Identity Toolkit auth

Pair Firebase when the front end uses Firebase SDKs and you want to drive backend identity ops directly via Identity Toolkit.

FAQs

Specific to using Google Identity Toolkit API API through Jentic.

Why is there no official OpenAPI spec for Google Identity Toolkit API?

Google does not publish a structured OpenAPI specification for the public Identity Toolkit relying-party API. Jentic generates and maintains this spec so that AI agents and developers can call Google Identity Toolkit API via structured tooling. It is validated against the live API and kept up to date. Get started at https://app.jentic.com/sign-up.

What authentication does the Google Identity Toolkit API use?

The API uses OAuth 2.0 with Google-issued credentials for the relying-party project. Through Jentic the OAuth credentials are stored encrypted in the vault and the agent only holds a scoped execution context.

Can I verify a Google or Facebook login token with this API?

Yes. POST the IdP assertion to /verifyAssertion to validate the token and receive an Identity Toolkit ID token along with the linked account info. /createAuthUri can be used first to learn which providers an email is linked to.

How do I send a phone OTP through Jentic?

Search Jentic for 'send a phone verification code', load the schema for /sendVerificationCode, and execute with the phone number. The Python SDK uses await client.search, await client.load, await client.execute, then verify the user's code via /verifyPhoneNumber.

How do I trigger a password reset email?

Call /getOobConfirmationCode with the password reset request type and the user's email to send the reset email. When the user follows the link, exchange the OOB code via /resetPassword to set the new credential.

Is this the same as Firebase Authentication?

Identity Toolkit is the underlying relying-party API that Firebase Authentication is built on. Firebase wraps these endpoints with client SDKs and additional configuration; calling Identity Toolkit directly is appropriate when you want to manage relying-party flows from a backend.