DEVELOPER_TOKEN_PROHIBITED error is leaking our developer token.

[Nick Petzold]

Hi,

I have two problems:

1) I am receiving a DEVELOPER_TOKEN_PROHIBITED error when trying to use our developer token to access the GoogleAdsAPI. We have only recently started using the AdsAPI and it is working as intended in 2 of the 3 environments we have (Production: yes, local: yes, development: no). Could this be as simple as we just haven't checked a box to say that we want our development client_id to be used on the GoogleAdsAPI?

2) The error message we receive on the above error is as follows:

(<_Rendezvous of RPC that terminated with (StatusCode.PERMISSION_DENIED, The caller does not have permission)>, <_Rendezvous of RPC that terminated with (StatusCode.PERMISSION_DENIED, The caller does not have permission)>, errors { error_code { authorization_error: DEVELOPER_TOKEN_PROHIBITED } message: "Developer token \'<DEVELOPER_TOKEN>\' is not allowed with project \'364503087527\'." } , 'DEVELOPER_TOKEN')

where <DEVELOPER_TOKEN> is our actual developer token we use to interact with the API. Obviously this is not good as this should be kept secret, but instead is being broadcast by the Python Lib as part of the exception handling. Please can this be addressed?

Many thanks,

Nick

[Google Ads API Forum Advisor Prod]

Hi Nick,

Thank you for contacting support.The DEVELOPER_TOKEN_PROHIBITED error indicates that in the past, there was at least one request to your Google Ads API using OAuth credentials from the same project ID but different developer token. Could you please create a new Google Cloud Project ID, obtain a new OAuth2 credentials from a client under the new project ID, and use those credentials in your requests with your developer token. If you are still facing issue, could you please share the MCC Id associated with developer token for me to investigate further? You could use reply privately to author option while sharing.

Regards,
Nikisha Patel, Google Ads API Team

ref:_00D1U1174p._5001UBmzUC:ref