Does my app need verification for using Gmail API?

Viewed 188

I'm developing an application that shows to users their Gmail inbox and they can read, delete and send messages from within the app. I've read the Gmail API docs and have read their restricted scopes docs, but I also came across a part where it says that the application will need to be verified by Google.

Could anyone provide some advice/articles where the process is documented and whether the app will really need verification? The verification itself is fine, but it does come at a pretty big price ($25k+).

1 Answers

An app or Apps Script that requests a sensitive or restricted OAuth scope, must go though the Google verification process.

The following is a list of Gmail scopes and and there security level

For the most part

As you can see https://mail.google.com/ is a restricted scope which will mean that yes your application will need to go through the verification process.

To my knowledge the verification process is between ($25k - $75k) this is paid to a third party company which is responsible for the security check on your application. As you are requesting full access i would prepare for this to be on the higher end of the pricing curve.

Tip: If you intend to go through with it i recommend that you start early as it can take months.

Related