# Google Business Profile setup for PopMCP

You end up pasting an OAuth Client ID and Client Secret from a Google Cloud project that has been approved for Business Profile API access and has the Business Profile APIs enabled.

- Auth: OAuth authorization
- Setup time: 20 min setup, then days waiting on Google's approval
- API base URL: https://mybusinessaccountmanagement.googleapis.com/v1
- Credentials screen: https://console.cloud.google.com/auth/clients
- Provider docs: https://developers.google.com/my-business/content/overview

## Approval required before this works

Google manually reviews a Business Profile API access request tied to your specific Google Cloud project, and until it is approved the APIs are not even selectable in the Cloud console for your account and the project's quota stays at 0 queries per minute.

- Typical wait: Google does not publish a review time; the docs only say a follow-up email is sent after review. Developers commonly report a few days to a few weeks, with a resubmission after rejection adding another cycle.
- Cost: Free
- Blocked until approved: All Business Profile API use. Google states the API is 'only visible in the Google Cloud console to users who submit and receive approval for their Google Account through the access request form', so before approval you cannot enable the seven Business Profile APIs on the project at all. Once enabled, an unapproved project sits at 0 QPM, so accounts.list, locations, reviews, posts and performance calls fail on quota even with a valid access token.
- Works meanwhile: Limited. You can create the Google Cloud project, configure the OAuth consent screen and get the profile itself in order (verified, 60+ days old, website live), but you cannot enable the APIs or make any call until access is granted. Check status in Cloud Console quota: 0 QPM means still pending, 300 QPM is the approved default for the Account Management, Performance, Verifications, Lodging, Place Actions, Notifications and Business Information APIs.

## Before you begin

- A Google Business Profile that has been verified and active for 60+ days, with you as owner or manager
- A website representing the business listed on that profile. Google checks for it on the access form
- Approved Business Profile API access. Every new Cloud project sits at 0 QPM until Google reviews the request, which takes days
- A Google Cloud project where you are Owner or Editor
- Willingness to click Publish app on Google Auth Platform. Testing-mode apps get refresh tokens that expire after 7 days

## Get your credentials

### 1. Request Business Profile API access and wait for approval

Open the GBP API contact form and pick Application for Basic API Access, signing in as an owner or manager of the profile. Track the result under IAM & Admin -> Quotas & system limits, where 0 QPM means pending and 300 QPM means approved.

Screen: https://support.google.com/business/contact/api_default

### 2. Enable the Business Profile APIs on the project

Open APIs & Services -> Library, search each API by name, and click Enable on it. Enable Google My Business API, My Business Account Management API, My Business Business Information API, My Business Q&A API, My Business Place Actions API, My Business Verifications API, My Business Notifications API, My Business Lodging API and Business Profile Performance API.

Screen: https://console.cloud.google.com/apis/library

### 3. Publish the app on Google Auth Platform -> Audience

Fill in app name, support email and domain under Google Auth Platform -> Branding, then open Audience. If Publishing status reads Testing, click Publish app.

Screen: https://console.cloud.google.com/auth/audience

### 4. Create a Web application OAuth client

Open Google Auth Platform -> Clients, click Create client, set Application type to Web application, and name it `PopMCP`. Under Authorized redirect URIs paste the exact callback URL shown above the credential fields in PopMCP.

Screen: https://console.cloud.google.com/auth/clients

### 5. Copy the Client ID and Client Secret from the dialog

Copy Client ID and Client secret out of the OAuth client created dialog into PopMCP's OAuth Client ID and OAuth Client Secret fields. If the dialog is already closed, open the client and click Add secret.

## Fields PopMCP asks for

- OAuth Client ID (clientId) [required]: Google Cloud Console → Google Auth Platform → Clients → Create client → Web application, with the callback URL above under Authorized redirect URIs. On the same project, enable the Business Profile APIs you want (APIs & Services → Library): Account Management and Business Information are the minimum; add My Business Q&A, Place Actions, Verifications, Notifications, Lodging and Business Profile Performance for the rest of the tools. They are separate APIs with SEPARATE quotas, so enabling only one is a common cause of a connection that half works.
- OAuth Client Secret (clientSecret) [required]: Shown once, in the popup right after you create the client. Google hashes it and never shows it again. If you closed that popup, open the client and add a new secret. Stored encrypted here, used server-side only. TWO setup steps catch almost everyone: (1) Request Business Profile API access at https://developers.google.com/my-business/content/prereqs — every new Cloud project starts at 0 requests per minute and stays there until Google approves you, which takes days; you can check under IAM & Admin → Quotas (0 = not approved, 300 = approved). (2) In Google Auth Platform → Audience, if the status says "Testing", click "Publish app" — Testing-mode apps get a refresh token Google expires after exactly 7 days, so the connection would work for a week and then stop. Publishing needs no Google review; it only adds a one-time unverified-app screen where you click Advanced and continue.

## Callback URL to register

https://app.popmcp.com/api/providers/google/callback

## Scopes requested

- https://www.googleapis.com/auth/business.manage

## Verify

After you paste the client ID and secret, PopMCP opens Google's consent screen. Approve it, clicking Advanced then Continue if the unverified-app warning appears, and the connector flips to Connected with your business account listed. Ask the assistant to list your locations. Real names coming back means the APIs are enabled and the quota is live.

## Troubleshooting

### 403 with "has not been used in project" or a 0-quota error

Cause: The specific Business Profile API for that tool is not enabled, or Google has not approved the project yet.

Fix: Enable that exact API in APIs & Services -> Library, then confirm IAM & Admin -> Quotas & system limits shows 300 rather than 0 for it.

### Connection works for a week and then breaks

Cause: The OAuth app is still in Testing, so Google expires the refresh token after 7 days.

Fix: Google Auth Platform -> Audience -> Publish app, then reconnect in PopMCP to mint a fresh refresh token.

### redirect_uri_mismatch on the consent screen

Cause: The Authorized redirect URI on the client is not byte-for-byte the callback URL PopMCP uses.

Fix: Copy the callback URL straight from the PopMCP connect form into the client's Authorized redirect URIs, with no trailing slash differences.

### Google My Business API cannot be found in the API Library

Cause: That API only becomes visible to projects whose access request Google has approved.

Fix: Submit the GBP API contact form and wait for the approval email before retrying.

### Reviews load but photo or post edits fail with rate errors

Cause: Business Information edits are capped at 10 per minute per profile and that limit cannot be raised.

Fix: Batch edits and space them out. The cap is per Business Profile, not per project.

---

Source: https://www.docs.popmcp.com/docs/integrations/google-business-profile/