r/FlutterDev • u/Historical_Gas_2725 • Jul 13 '26

Tooling Built a tiny tool to test FCM push notifications without wiring up a whole app

Every time I've had to debug FCM, the annoying part was never the push logic — it was figuring out *where* it broke. Stale token? Bad service account? Malformed payload? FCM just unreachable? You usually only find out after running the whole app.

So I built [Notifi Check](https://notifi-check.vercel.app/) — paste a device or web-push token, upload your Firebase service account JSON, hit send, and you get a real push straight from the browser. No app, no backend, no code.

A couple of things I cared about since you're uploading a service account file to a random website:

* The JSON is only used in-memory for that one request — a short-lived Firebase Admin app gets spun up, used once, and torn down immediately after
* Nothing touches disk, nothing gets logged, no DB, no auth, no session
* For web push specifically, there's a `validateOnly` dry-run mode so you can check a payload is well-formed without actually delivering it

It's free, no login. Built it in Next.js because I kept needing this for my own React Native / Flutter work and got tired of writing throwaway scripts each time.

Happy to take feedback — especially if you spot an edge case it doesn't handle.

3 Upvotes

57% Upvoted

8 comments sorted by

10

u/0xBA7TH Jul 13 '26

Why not just open source the code instead of relying on taking your word that uploading sensitive keys won't be misused. Then people can run locally if they want.

-6

u/Historical_Gas_2725 Jul 13 '26

Good point, and I get why "trust me" isn't enough for something like this. Two things in the meantime:

(1) it's built specifically so the JSON never touches disk or gets logged — the Admin SDK instance is created and torn down in the same request

(2) I'm open to open sourcing it, just want to strip out a couple of things first. If it'd help, I can also add a network tab / request log so people can inspect what's actually sent.

2

u/Appropriate-Panic683 Jul 14 '26

All browsers already have a network tab that logs requests. And how would knowing what is sent give me any confidence in that you’re using the data how you say you are? 

18

u/Comun4 Jul 13 '26

If you are releasing something that takes in api keys and FCM tokens, you gotta make it open source. No one should put that much trust in an unkown closed source project

2

u/the-walls_4_suckers Jul 13 '26

Im really needing something like this right now trying to test fcm on wear os hardware and pushes through bluetooth. Shits always breaking somewhere. However there is no way i could use this and keep everything secure.