diff --git a/tokens/fcm-server-key.yaml b/tokens/fcm-server-key.yaml
new file mode 100644
index 0000000000..b5d0331291
--- /dev/null
+++ b/tokens/fcm-server-key.yaml
@@ -0,0 +1,20 @@
+id: fcm-server-key
+
+info:
+  name: FCM Server Key
+  author: Abss (@absshax)
+  severity: high
+
+  # Reference:- https://abss.me/posts/fcm-takeover
+  # FCM Project Credentials
+
+requests:
+  - method: GET
+    path:
+      - "{{BaseURL}}"
+
+    extractors:
+      - type: regex
+        part: body
+        regex:
+          - "AAAA[a-zA-Z0-9_-]{7}:[a-zA-Z0-9_-]{140}"
\ No newline at end of file