Google Business Profile
Connect Google Business Profile to read and reply to reviews, update hours and photos, publish offers and events, and track calls and directions.
You end up pasting an OAuth Client ID and Client Secret from a Google Cloud project that has been approved for Business Profile API access and has the Business Profile APIs enabled.
Partner application before this connector works
Google manually reviews a Business Profile API access request tied to your specific Google Cloud project, and until it is approved the APIs are not even selectable in the Cloud console for your account and the project's quota stays at 0 queries per minute.
- Typical wait
- Google does not publish a review time; the docs only say a follow-up email is sent after review. Developers commonly report a few days to a few weeks, with a resubmission after rejection adding another cycle.
- Cost
- Free
- Blocked until approved
- All Business Profile API use. Google states the API is 'only visible in the Google Cloud console to users who submit and receive approval for their Google Account through the access request form', so before approval you cannot enable the seven Business Profile APIs on the project at all. Once enabled, an unapproved project sits at 0 QPM, so accounts.list, locations, reviews, posts and performance calls fail on quota even with a valid access token.
- Works meanwhile
- Limited. You can create the Google Cloud project, configure the OAuth consent screen and get the profile itself in order (verified, 60+ days old, website live), but you cannot enable the APIs or make any call until access is granted. Check status in Cloud Console quota: 0 QPM means still pending, 300 QPM is the approved default for the Account Management, Performance, Verifications, Lodging, Place Actions, Notifications and Business Information APIs.
Where to apply: Submit the GBP API contact form at support.google.com/business/contact/api_default (linked from developers.google.com/my-business/content/prereqs), selecting 'Application for Basic API Access'. Google emails the outcome.
- The GCP project number on the form must be the exact project you intend to use; a mismatch is a common rejection reason.
- Submit while signed in as the Business Profile owner, not a manager.
- Google requires the profile to be verified and active for 60+ days and to have a website representing the business; a website domain that does not match your email domain gets flagged.
- Vague use-case descriptions ('manage my business') get rejected. Name the product, the endpoints and who the end users are.
- On a Google Workspace account, Business Profile must be turned on for your account in the Workspace organization or every call returns 403 PERMISSION_DENIED even after approval.
- Separately, if you publish your own OAuth app to external users, the business.manage scope goes through Google's OAuth app verification on top of this access approval.
- Setup time
- 20 min setup, then days waiting on Google's approval
- Auth
- OAuth authorization
- API base URL
- https://mybusinessaccountmanagement.googleapis.com/v1
- Rate limits
- Most Business Profile APIs default to 300 queries per minute per project (about 5 per second), and Business Information edits are hard-capped at 10 per minute per profile.
Before you begin
- A Google Business Profile that has been verified and active for 60+ days, with you as owner or manager
- A website representing the business listed on that profile. Google checks for it on the access form
- Approved Business Profile API access. Every new Cloud project sits at 0 QPM until Google reviews the request, which takes days
- A Google Cloud project where you are Owner or Editor
- Willingness to click Publish app on Google Auth Platform. Testing-mode apps get refresh tokens that expire after 7 days
Get your credentials
Request Business Profile API access and wait for approval
Open the GBP API contact form and pick Application for Basic API Access, signing in as an owner or manager of the profile. Track the result under IAM & Admin -> Quotas & system limits, where 0 QPM means pending and 300 QPM means approved.
Enable the Business Profile APIs on the project
Open APIs & Services -> Library, search each API by name, and click Enable on it. Enable Google My Business API, My Business Account Management API, My Business Business Information API, My Business Q&A API, My Business Place Actions API, My Business Verifications API, My Business Notifications API, My Business Lodging API and Business Profile Performance API.
API Library
Browse and enable APIs for project popmcp-gbp-482910.
| API | Quota (QPM) | Status |
|---|---|---|
| My Business Account Management APImybusinessaccountmanagement.googleapis.com | 300 | Enabled |
| My Business Business Information APImybusinessbusinessinformation.googleapis.com | 300 | Enabled |
| Business Profile Performance APIbusinessprofileperformance.googleapis.com | 300 | Not enabled |
| My Business Q&A APImybusinessqanda.googleapis.com | 0 | Not enabled |
A quota of 0 means Google has not approved the project for that API yet.
Publish the app on Google Auth Platform -> Audience
Fill in app name, support email and domain under Google Auth Platform -> Branding, then open Audience. If Publishing status reads Testing, click Publish app.
Audience
The user groups that can authorize your app to access their account data.
| Test users | Added |
|---|---|
| owner@northwind-dental.comProfile owner | Mar 2, 2026 |
Publishing needs no Google review. It adds a one-time unverified-app screen where you click Advanced and continue.
Create a Web application OAuth client
Open Google Auth Platform -> Clients, click Create client, set Application type to Web application, and name it PopMCP. Under Authorized redirect URIs paste the exact callback URL shown above the credential fields in PopMCP.
Create OAuth client ID
A client ID identifies your app to Google's OAuth 2.0 endpoint.
Copy the Client ID and Client Secret from the dialog
Copy Client ID and Client secret out of the OAuth client created dialog into PopMCP's OAuth Client ID and OAuth Client Secret fields. If the dialog is already closed, open the client and click Add secret.
Clients
| Name | Type | Client ID | Created |
|---|---|---|---|
| PopMCP1 secret | Web application | 4829****googleusercontent.com | Aug 30, 2026 |
After this dialog the console shows only the last four characters of the secret.
Connect in PopMCP
Open your workspace, choose Google Business Profile in the marketplace, and fill in the connect dialog:
| Field | What to enter |
|---|---|
| OAuth Client IDtext | Google Cloud Console → Google Auth Platform → Clients → Create client → Web application, with the callback URL above under Authorized redirect URIs. On the same project, enable the Business Profile APIs you want (APIs & Services → Library): Account Management and Business Information are the minimum; add My Business Q&A, Place Actions, Verifications, Notifications, Lodging and Business Profile Performance for the rest of the tools. They are separate APIs with SEPARATE quotas, so enabling only one is a common cause of a connection that half works. |
| OAuth Client Secretsecret | Shown once, in the popup right after you create the client. Google hashes it and never shows it again. If you closed that popup, open the client and add a new secret. Stored encrypted here, used server-side only. TWO setup steps catch almost everyone: (1) Request Business Profile API access at https://developers.google.com/my-business/content/prereqs — every new Cloud project starts at 0 requests per minute and stays there until Google approves you, which takes days; you can check under IAM & Admin → Quotas (0 = not approved, 300 = approved). (2) In Google Auth Platform → Audience, if the status says "Testing", click "Publish app" — Testing-mode apps get a refresh token Google expires after exactly 7 days, so the connection would work for a week and then stop. Publishing needs no Google review; it only adds a one-time unverified-app screen where you click Advanced and continue.Encrypted with AES-256-GCM on save and never shown again. |
https://app.popmcp.com/api/providers/google/callbackPopMCP verifies the credential against Google Business Profile immediately. On success the connection flips to Verified and its MCP tools are provisioned.
Permissions PopMCP requests
These are the scopes sent to Google Business Profile at authorization time.
| Scope | Why PopMCP asks for it |
|---|---|
| https://www.googleapis.com/auth/business.manage | The single scope behind every Business Profile tool: reading and replying to reviews, editing hours and attributes, uploading photos, publishing posts and offers, and pulling call and direction metrics. |
Verify it worked
After you paste the client ID and secret, PopMCP opens Google's consent screen. Approve it, clicking Advanced then Continue if the unverified-app warning appears, and the connector flips to Connected with your business account listed. Ask the assistant to list your locations. Real names coming back means the APIs are enabled and the quota is live.
Troubleshooting
403 with "has not been used in project" or a 0-quota error
Why: The specific Business Profile API for that tool is not enabled, or Google has not approved the project yet.
Fix: Enable that exact API in APIs & Services -> Library, then confirm IAM & Admin -> Quotas & system limits shows 300 rather than 0 for it.
Connection works for a week and then breaks
Why: The OAuth app is still in Testing, so Google expires the refresh token after 7 days.
Fix: Google Auth Platform -> Audience -> Publish app, then reconnect in PopMCP to mint a fresh refresh token.
redirect_uri_mismatch on the consent screen
Why: The Authorized redirect URI on the client is not byte-for-byte the callback URL PopMCP uses.
Fix: Copy the callback URL straight from the PopMCP connect form into the client's Authorized redirect URIs, with no trailing slash differences.
Google My Business API cannot be found in the API Library
Why: That API only becomes visible to projects whose access request Google has approved.
Fix: Submit the GBP API contact form and wait for the approval email before retrying.
Reviews load but photo or post edits fail with rate errors
Why: Business Information edits are capped at 10 per minute per profile and that limit cannot be raised.
Fix: Batch edits and space them out. The cap is per Business Profile, not per project.
Reference
Google Ads
Connect Google Ads to manage campaigns, ad groups, ads, keywords, and budgets, and track conversions and performance.
Connect Instagram to publish posts, reels, stories and carousels, moderate and reply to comments, answer DMs and @mentions, and track account and per-post performance.