Speaking of, are there tools to audit/explore firebase/firestore databases i.e. see if collections/documents are readable?

I imagine a web tool that could take the app id and other api values (that are publicly embedded in frontend apps), optionally support a session id (for those firestore apps that use a lightweight “only visible to logged in users” security rule) and accept names of collections (found in the js code) to explore?