Firebase callable cloud functions can be accessed via client sdks, which requires a valid auth context for authentication and authorization. But and at the
I tried out as @Frank suggested using google cloud run to deploy and ESP container which can by used to invoke private cloud functions. A detailed overview is described in the documentations itself.