How to register your own Google Ads OAuth app

If you don't already have one, sign up for a Google Cloud account.

1. Go to the Google Cloud Console.
2. Click on the project dropdown at the top left of the page.
3. Click New Project.
4. Enter a Project Name for your project.
5. Under Location, select the appropriate organization or folder where this project should belong.
   If you're not part of an organization, it will default to No organization
6. Click Create and wait for the project to be created.
7. Select it from the project dropdown.

1. Go to the API Library in the Google Cloud Console.
2. Search for Google Ads API and click Enable.

1. Go to APIs & Services > OAuth consent screen in the Google Cloud Console.
2. Click Get started.
3. Fill in all the required fields in the App Information form.
4. Click Next. Select the appropriate Audience:
   • External: For applications available to any Google user
   • Internal: For applications restricted to users within your Google Workspace organization
5. Click Next. Fill in the Contact Information; these are the email addresses that Google will use to notify you about any changes to your project.
6. Click Next, then check the I agree to the Google API Services: User Data Policy checkbox, and click Continue.
7. Add the scopes your application needs. Under Data Access, click Add or Remove Scopes and select the scopes that correspond to the APIs you enabled.

8. Under Audience, click Add users if you selected External user type (required for testing before verification).

1. Go to APIs & Services > Credentials in the Google Cloud Console.
2. Click Create Credentials and select OAuth client ID.
3. Select Web application as the application type.
4. Enter a name for your OAuth client.
5. Under Authorized redirect URIs, add https://api.tenklo.dev/oauth/callback.

6. Click Create.
7. A dialog will appear with your client ID and client secret. Save these credentials securely as you'll need them when configuring your integration in Tenklo.

The Google Ads API requires a developer token on every request, separate from your OAuth client ID and secret.

1. Sign in to a Google Ads manager account (create one if you don't already have one).
2. Go to Admin > API Center.
3. Copy your developer token.

The developer token isn't something Tenklo asks each end user for — it belongs to your app, not to any individual Google Ads account. Set it once as a connection config default instead:

{
    "integrations_config_defaults": {
        "<INTEGRATION-ID>": {
            "connection_config": {
                "developer_token": "<YOUR-DEVELOPER-TOKEN>"
            }
        }
    }
}

If you also always access accounts through the same manager account, include login_customer_id in the same object so it's set automatically instead of shown in the Connect UI:

{
    "integrations_config_defaults": {
        "<INTEGRATION-ID>": {
            "connection_config": {
                "developer_token": "<YOUR-DEVELOPER-TOKEN>",
                "login_customer_id": "<YOUR-MANAGER-ACCOUNT-CUSTOMER-ID>"
            }
        }
    }
}

If your end users each have their own manager account instead, leave login_customer_id out of the defaults — it'll appear as an optional field in the Connect UI for them to fill in themselves.

Follow the Quickstart to build your integration.

Most Google Ads scopes are marked "sensitive" by Google.

You can develop your integration in test mode, but you need to pass a security review to go live.

Follow our guide to prepare and pass as quickly as possible.

To move your OAuth app from testing to production:

1. Go to APIs & Services > OAuth consent screen > Audience.
2. Click Publish App to switch your app from testing to production.