Skip to main content

​
Call API

Action ID: tools.google_api.call_api Call a Google API method. Reference: https://googleapis.github.io/google-api-python-client/docs/dyn/

​
Secrets

Optional secrets:
  • google_oauth: OAuth token GOOGLE_SERVICE_TOKEN.
  • google_api: required values GOOGLE_API_CREDENTIALS; optional values GOOGLE_API_SUBJECT.

​
Input fields

​
string
required
Google API method name, e.g. list or get.
​
string
required
Resource path, e.g. files or spreadsheets.values.
​
string
required
Google API service name, e.g. drive or sheets.
​
string
required
Google API version, e.g. v3 or v4.
​
string | null
OAuth access token from a Tracecat OAuth integration, e.g. ${{ SECRETS.google_drive_oauth.GOOGLE_DRIVE_USER_TOKEN || SECRETS.google_drive_oauth.GOOGLE_DRIVE_SERVICE_TOKEN }}. When set it is used as-is and scopes/subject are ignored.Default: null.
​
GoogleMediaUpload | null
File content for upload methods (e.g. Drive files.create). Sent as media_body.Default: null.
​
GoogleAPIParams | null
Parameters for the Google API method.Default: null.
​
array[string] | null
Scopes used when minting a token from GOOGLE_API_CREDENTIALS. Defaults to [“https://www.googleapis.com/auth/cloud-platform”].Default: null.
​
boolean | null
Whether to use the discovery document bundled with the client library. Defaults to the library behaviour (bundled). Set to false to fetch the discovery document at runtime, which is required for API versions that are not bundled (e.g. securitycenter v2).Default: null.
​
string | null
Optional domain-wide delegation subject (user email) applied when minting from GOOGLE_API_CREDENTIALS. Defaults to the GOOGLE_API_SUBJECT secret key, then the subject key inside the JSON.Default: null.

​
Call paginated API

Action ID: tools.google_api.call_paginated_api Call a paginated Google API method and return every page fetched. Reference: https://googleapis.github.io/google-api-python-client/docs/dyn/

​
Secrets

Optional secrets:
  • google_oauth: OAuth token GOOGLE_SERVICE_TOKEN.
  • google_api: required values GOOGLE_API_CREDENTIALS; optional values GOOGLE_API_SUBJECT.

​
Input fields

​
string
required
Google API method name, e.g. list or get.
​
string
required
Resource path, e.g. files or spreadsheets.values.
​
string
required
Google API service name, e.g. drive or sheets.
​
string
required
Google API version, e.g. v3 or v4.
​
string | null
OAuth access token from a Tracecat OAuth integration, e.g. ${{ SECRETS.google_drive_oauth.GOOGLE_DRIVE_USER_TOKEN || SECRETS.google_drive_oauth.GOOGLE_DRIVE_SERVICE_TOKEN }}. When set it is used as-is and scopes/subject are ignored.Default: null.
​
integer | null
Maximum number of pages to fetch. If null, fetches every page.Default: null.
​
string
Dot-separated response path for the next page token. Defaults to “nextPageToken”.Default: "nextPageToken".
​
string
Request parameter name for the next page token. Defaults to “pageToken”.Default: "pageToken".
​
GoogleAPIParams | null
Parameters for the Google API method.Default: null.
​
array[string] | null
Scopes used when minting a token from GOOGLE_API_CREDENTIALS. Defaults to [“https://www.googleapis.com/auth/cloud-platform”].Default: null.
​
boolean | null
Whether to use the discovery document bundled with the client library. Defaults to the library behaviour (bundled). Set to false to fetch the discovery document at runtime, which is required for API versions that are not bundled (e.g. securitycenter v2).Default: null.
​
string | null
Optional domain-wide delegation subject (user email) applied when minting from GOOGLE_API_CREDENTIALS. Defaults to the GOOGLE_API_SUBJECT secret key, then the subject key inside the JSON.Default: null.