@corsair-dev/googleanalytics

GA4 Admin API, Data API, and Measurement Protocol.

Authentication

OAuth 2 (oauth_2).

1. In the Google Cloud Console, enable Google Analytics Admin API and Google Analytics Data API.
2. Create a Web application OAuth client. Add the Corsair callback as a redirect URI.
3. Give Corsair the client ID and secret. The flow requests:
   • https://www.googleapis.com/auth/analytics for Data API reports
   • https://www.googleapis.com/auth/analytics.edit for Admin API reads and writes. The bare analytics scope is not enough for Admin calls.

Corsair refreshes the access token and retries once on 401.

measurementProtocol.sendEvents and validateEvents take an api_secret from Admin, Data Streams, Measurement Protocol API secrets, plus either measurementId (web) or firebaseAppId (app).

Endpoints

| Domain | Operations | | ------------------------ | ---------------------------------------------------------------------------------------------------------------------------------------------------------------------- | | accounts | get, list, listV1Beta, listSummaries, getDataSharingSettings, provisionAccountTicket | | properties | get, list, listFiltered, update, createRollup, getAttributionSettings, getDataRetentionSettings, getGoogleSignalsSettings, getPropertyQuotasSnapshot | | dataStreams | list, listMeasurementProtocolSecrets, listEventCreateRules, listSKAdNetworkConversionValueSchemas | | customDimensions | create, get, list, archive | | customMetrics | create, list | | keyEvents | get, list | | conversionEvents | list | | audiences | get, list | | audienceExports | create, get, list, query | | audienceLists | create, get, list, query | | recurringAudienceLists | create, get, list | | calculatedMetrics | list | | channelGroups | list | | expandedDataSets | create, list | | links | listGoogleAds, listBigQuery, listFirebase, listAdSense, listDV360Advertiser, listDV360Proposals, listSearchAds360 | | reports | run, runRealtime, runPivot, runFunnel, batchRun, batchRunPivot, checkCompatibility, getMetadata | | reportTasks | create, get, query, list | | reportingData | listAnnotations, listSubpropertyEventFilters, listSubpropertySyncConfigs | | measurementProtocol | sendEvents, validateEvents |

Provider quirks

• dataStreams.listMeasurementProtocolSecrets returns secretValue. It is a write so readonly agent mode cannot dump stream secrets.
• properties.list (v1alpha, deprecated) needs a filter like parent:accounts/{account} or firebase_project:projects/{project}.
• Admin API name / parent values are full resource names, e.g. properties/123 or properties/123/customDimensions/456. A bare numeric ID 404s. Reports (property) and properties.update also accept 123.
• Measurement Protocol needs exactly one of measurementId or firebaseAppId.
• validateEvents hits the debug collect path and does not record hits.
• Data API quotas are per property. batchRun* burns them fast; check properties.getPropertyQuotasSnapshot.