---
title: "Firebase integration for LuumenAI"
url: "https://www.luumen.ai/integrations/firebase/"
entity: SoftwareIntegration
category: "Identity & security"
audience: "SRE, DevOps, platform engineering, IT operations"
---

# Firebase integration for LuumenAI

Check Firebase Authentication config and sign-in flows from the terminal

## What LuumenAI can do with Firebase

LuumenAI connects to Firebase with an API token and exposes 8 tools (3 read-only · 5 write). For connected tools, admins configure which actions may run automatically and which require approval, within the access granted to the user.

## Key facts

- Authentication: API token
- Tools available: 8 tools (3 read-only · 5 write)
- Deployment: scoped as part of your Pilot, Platform, or Managed rollout
- Category: Identity & security

## About Firebase with LuumenAI

Connect Firebase Authentication with a Web API key and Luumen can read the public auth config for the project, see which sign-in methods an account has used, and validate a password-reset code before anyone touches the account. Sign-in and token exchange calls run as previewed steps you approve, so support work leaves a record.

## Example tools

Read-only (3 in total):

- `FIREBASE_DISCOVER_SIGN_IN_METHODS` — Look up sign-in methods previously used by a Firebase account email.
- `FIREBASE_GET_AUTH_PROJECT_CONFIG` — Get the public Firebase Authentication configuration associated with the connected Web API key, including the project ID and authorized domains.
- `FIREBASE_VERIFY_PASSWORD_RESET_CODE` — Validate a Firebase password-reset OOB code and identify the associated email and request type without changing the password.

Write and destructive (5 in total, subject to configured approval policy):

- `FIREBASE_REFRESH_ID_TOKEN` — Exchange a Firebase refresh token for a fresh Firebase ID token and rotated refresh token using Google's Secure Token service.
- `FIREBASE_SIGN_IN_WITH_CUSTOM_TOKEN` — Exchange a trusted server-minted Firebase custom token for a Firebase ID token and refresh token.
- `FIREBASE_SIGN_IN_WITH_EMAIL_LINK` — Complete Firebase email-link sign-in using an email address and the one-time OOB code from a previously delivered sign-in link.
- `FIREBASE_SIGN_IN_WITH_IDP` — Sign in with one configured external identity provider using provider-specific OAuth or OIDC credential parameters.
- `FIREBASE_SIGN_IN_WITH_PASSWORD` — Sign in an existing Firebase Authentication user with email and password and return fresh ID and refresh tokens.

## Frequently asked questions

### How does LuumenAI connect to Firebase?

Authorize once with API token. Luumen lists the scopes each action needs before you approve the connection, and credentials never appear in the chat.

### Can LuumenAI change things in Firebase on its own?

For connected tools, admins configure which actions may run automatically and which require approval, within the access granted to the user.

### Is there an audit trail?

Every call to Firebase — read or write, approved or declined — is recorded with the actor, the input, and the result.

Full page: https://www.luumen.ai/integrations/firebase/
