1. Service account

Drop service-account.json here, or click to browse.

Sent once per request to sign a short-lived OAuth token, then discarded. Never written to disk, a database, or logs. See the security note below.

2. Device tokens

0 tokens

3. Notification payload

Data payload (key/value — all values sent as strings)

Full control over the FCM v1 message object (minus token, which is injected per recipient). Customize it however your app's payload needs — this is what's actually sent when this tab is active.