Create a Google service account
Create a Google Cloud service account, enable the Gmail and Calendar APIs, and download the JSON key that Tantra uses to send as your mailboxes.
Open in Tantra
These open the app in a new tab. You may be asked to sign in.
Overview
A service account is a non-human Google identity that Tantra uses to send on behalf of your mailboxes. You create it once in the Google Cloud console, download its key as a JSON file, and later upload that file to Tantra. This article covers creating the account and getting the JSON key. Granting it permission to your mailboxes is a separate step.
Before you start
- Access to the Google Cloud console at
console.cloud.google.com. - Permission to create service accounts and enable APIs in a Google Cloud project.
- A Google Workspace domain whose mailboxes you want to send from.
Step-by-step
- Open the Google Cloud console and select or create a project for Tantra.
- Go to APIs & Services, then Library. Enable the Gmail API if you will send cold email, and the Google Calendar API if you will run calendar campaigns.
- Go to APIs & Services, then Credentials.
- Click Create credentials, then Service account.
- Give the service account a name you will recognize, such as
tantra-sender, then click Create and continue and Done. - Open the new service account and go to its Keys tab.
- Click Add key, then Create new key, choose JSON, and click Create. A JSON file downloads to your computer. Keep it safe.
- Note the service account's client ID, a long numeric string on its details page. You need it to grant domain-wide delegation.
What happens next
You now have a JSON key file and a client ID. Next, grant the service account permission to act as your mailboxes, then upload the JSON to Tantra:
Best practices
- Use a dedicated project and service account for Tantra so you can manage and revoke it independently.
- Store the JSON key in a password manager or secrets vault. Anyone with the file can act as the account.
- Enable only the APIs you need. Gmail for cold email, Calendar for calendar campaigns.
Common mistakes
- Downloading the key as a type other than JSON. Tantra accepts the JSON key file.
- Forgetting to enable the Gmail or Calendar API. Delegation alone does not enable an API.
Troubleshooting
| Symptom | Cause | Fix |
|---|---|---|
| No option to create a JSON key | You are on the wrong credential type | Create a Service account, then use its Keys tab |
| Later verification fails | The relevant API is not enabled in the project | Enable the Gmail and Calendar APIs in APIs & Services, then Library |
FAQ
Which APIs should I enable?
Enable the Gmail API for cold email and the Google Calendar API for calendar campaigns. Enable both if you use both engines.
Where do I find the client ID?
On the service account's details page in the Google Cloud console. It is a long numeric value, separate from the account email.
Can I create more than one service account?
Yes. You can upload multiple service accounts to Tantra. Verification matches each sender to a working account.
Is the JSON key sensitive?
Yes. It grants the ability to act as the service account. Store it securely and never share it.
Related articles
Was this article helpful?
Related articles
- Grant domain-wide delegation and scopesAuthorize your Tantra service account in the Google Admin console with the exact OAuth scopes needed to send email and calendar invites.
- Upload your service account to TantraUpload your service account JSON files to Tantra, tag them, and manage them. Files are encrypted at rest and can be soft-deleted.
- How Tantra sends as your mailboxesTantra sends from your own Google Workspace mailboxes using a service account and domain-wide delegation, without ever holding your passwords.