Get Google Access Token

Gets the access token the Google Calendar and Sheets tools need. The bot calls this first.

Unverified

What the model is told

Get an access token for Google. Call this once before any other Google tool, then pass the access_token value from the response to those tools. Never read the token aloud or share it with the customer. If a Google tool returns a 401, call this again to get a fresh token.

Request

POSThttps://oauth2.googleapis.com/token

Headers

Content-Typeapplication/x-www-form-urlencoded

Body

grant_type=refresh_token&client_id=YOUR_GOOGLE_CLIENT_ID&client_secret=YOUR_GOOGLE_CLIENT_SECRET&refresh_token=YOUR_GOOGLE_REFRESH_TOKEN

Parameters

None.

Engage payload

{
  "source": "VOICE_AI",
  "tool": {
    "id": "53eadc3b-e746-4345-b2f8-a8eac6d30a36",
    "type": "HTTP_REQUEST",
    "label": "Get Google Access Token",
    "name": "get_google_access_token",
    "customName": false,
    "description": "Get an access token for Google. Call this once before any other Google tool, then pass the access_token value from the response to those tools. Never read the token aloud or share it with the customer. If a Google tool returns a 401, call this again to get a fresh token.",
    "parameters": [],
    "config": {
      "endpoint": {
        "method": "POST",
        "url": "https://oauth2.googleapis.com/token"
      },
      "headers": [
        {
          "name": "Content-Type",
          "value": "application/x-www-form-urlencoded"
        }
      ],
      "body": "grant_type=refresh_token&client_id=YOUR_GOOGLE_CLIENT_ID&client_secret=YOUR_GOOGLE_CLIENT_SECRET&refresh_token=YOUR_GOOGLE_REFRESH_TOKEN",
      "timeout": null
    }
  }
}

IDs are regenerated on every copy.

Verification

Unverified

Built from the vendor's documentation but not yet validated in a lab. Test it against your own account before using it with customers.

After you paste

Create an OAuth client (web application) in Google Cloud Console and enable the Google Calendar API and Google Sheets API. Replace YOUR_GOOGLE_CLIENT_ID and YOUR_GOOGLE_CLIENT_SECRET with its values.
Do the consent flow once yourself, with access_type=offline, to get a refresh token for the account that owns the calendar and sheet, and replace YOUR_GOOGLE_REFRESH_TOKEN with it. Request only the scopes you need: https://www.googleapis.com/auth/calendar.events, https://www.googleapis.com/auth/calendar.freebusy and https://www.googleapis.com/auth/spreadsheets. Publish the consent screen to production, as refresh tokens for apps in testing mode expire after 7 days.
Service accounts cannot be used here because they need a signed JWT, which plain HTTP tools cannot build. The access_token in the response is what the other tools take as accessToken.

Authentication

OAuth access token sent as a bearer token. The bot gets it from this vendor's token tool, then passes it in as a parameter. Tokens expire, so the bot calls the token tool again after a 401.

Details

Vendor: Google

Category: Authentication

API documentation