In the reference of safetynet docs it is mentioned that "The default request quota for a SafetyNet Attestation API key is 10,000 requests per day. If you require additional capacity, send a request to the SafetyNet API quota team".
I am not using any kind of key as mentioned in the docs for making compatibility check request.Based on above information i have following queries:
is the above quota limit is for online verification of safetynet response?
Yes. This quota is separate from the quota for the online validation service
do we require any kind of API_KEY by creating project on developer console etc for getting safetynet response?
Generally yes. It may possible to use attestation without an API key, but there are no guarantees about quotas, and it may stop working at any time without notice. Also, if you hit a quota and you don't use an API key, there is no way to get the quota increased. There is no reason not to get an API key, so please get one if you want to use attestation.
Note that from Google Play Services 11.0. the attestation API call changed, and now you have to provide a key when using the API.
so how safetynet compatibility check APIs(not verification API) do client identification? Is it android application specific or user's google account specific?
It's API key specific. Please make sure you set up your key to work with only the apps you specify (you can set this in the developer console). This way, if a user finds out your API key, they can't reuse it for a different app.
if the safetynet compatibility check API is application specific,then is there any kind of quota ? e.g. if there are 100000 android devices which have my application installed in it and the application uses safetynet compatibility check APIs with per day 1000000 requests for compatibility check, will it work or not? Do I need something else ?
if safetynet compatibility check APIs are user's google account(gmail) specific then is there any kind of quota ?
what if the user of my application which is using safetynet APIs dont have google account(gmail id)? will it works on his android phone or not?
The quota is 10000 calls per day per key. In this case you will hit the quota and you will need to have the quota raised.
Finally, keep in mind that while the attestation quota can be raised if needed, the online validation service is meant for test and debug purposes only, and the quota will most likely not be raised. Please don't use the online validation service for non-debug purposes. Use offline validation instead.