Firebase's AI Studio integration now sets up AI Logic and App Check for Android apps, so generated apps call Gemini without an exposed API key.
Android apps built in Google AI Studio with generative AI features now come with Firebase AI Logic and Firebase App Check already set up. Firebase said in its Oct. 26 release notes that the integration configures both automatically. The app calls Gemini models directly, with no API key in the code (Firebase release notes, Oct. 26, 2026).
What changed #
Firebase said the generated app uses debug tokens during testing and reCAPTCHA Enterprise for production releases on Google Play. The developer no longer opens the console to switch App Check on.
The change builds on a Sept. 28 release-notes entry, in which Firebase said its AI Studio integration had started supporting Android apps alongside web apps, setting up Cloud Firestore (including Rules) and Firebase Authentication. Oct. 26 adds the AI half: AI Logic and App Check.
Why it matters #
A prompt-to-app tool is where an unprotected Gemini key is most likely to ship. Builders who describe an app in a chat box may not know what App Check is. Firerun reported on July 8 that the console’s AI Logic setup flow began enforcing App Check by default. This extends that default to a path that skips the setup flow.
The take #
This is the right default. Firebase’s notes describe what the integration configures. Before release, open the Firebase console, confirm App Check enforcement is on for AI Logic, and confirm the production attestation provider is registered.
Key Takeaways #
- Firebase’s Oct. 26 release notes say AI Studio now sets up AI Logic and App Check automatically for Android apps with generative AI features.
- Debug tokens cover testing. reCAPTCHA Enterprise covers production releases on Google Play.
- It follows the Sept. 28 addition of Android support, which covered Firestore and Authentication.
- Check enforcement and the production provider in the Firebase console before shipping.