Back to Browse

Google Business MCP Server

Developer ToolsLow Risk10.0MCP RegistryLocal
Free

Server data from the Official MCP Registry

MCP server for Google Business Profile: locations, reviews, local posts and performance metrics.

About

MCP server for Google Business Profile: locations, reviews, local posts and performance metrics.

Security Report

10.0
Low Risk10.0Low Risk

Valid MCP server (1 strong, 1 medium validity signals). No known CVEs in dependencies. Package registry verified. Imported from the Official MCP Registry. Trust signals: trusted author (6/6 approved).

4 files analyzed · 1 issue found

Security scores are indicators to help you make informed decisions, not guarantees. Always review permissions before connecting any MCP server.

Permissions Required

This plugin requests these system permissions. Most are normal for its category.

HTTP Network Access

Connects to external APIs or services over the internet.

file_system

Check that this permission is expected for this type of plugin.

What You'll Need

Set these up before or after installing:

OAuth2 client id from Google Cloud Console (refresh flow).Optional

Environment variable: GOOGLE_BUSINESS_CLIENT_ID

OAuth2 client secret. Treat it as a secret.Required

Environment variable: GOOGLE_BUSINESS_CLIENT_SECRET

OAuth2 refresh token with the business.manage scope. Treat it as a secret.Required

Environment variable: GOOGLE_BUSINESS_REFRESH_TOKEN

Ready-made access token (~1 h) as an alternative to the refresh-flow trio above.Required

Environment variable: GOOGLE_BUSINESS_ACCESS_TOKEN

Per-request timeout in milliseconds.Optional

Environment variable: GOOGLE_BUSINESS_TIMEOUT_MS

Retries on transient errors (429 always; 5xx/network on idempotent calls).Optional

Environment variable: GOOGLE_BUSINESS_MAX_RETRIES

Account Management API base override.Optional

Environment variable: GOOGLE_BUSINESS_ACCOUNTS_API_BASE

Business Information API base override.Optional

Environment variable: GOOGLE_BUSINESS_INFO_API_BASE

Business Profile Performance API base override.Optional

Environment variable: GOOGLE_BUSINESS_PERFORMANCE_API_BASE

Legacy v4 My Business API base override (reviews, local posts).Optional

Environment variable: GOOGLE_BUSINESS_V4_API_BASE

How to Install

Add this to your MCP configuration file:

{
  "mcpServers": {
    "io-github-a1-x-tech-mcp-google-business": {
      "env": {
        "GOOGLE_BUSINESS_CLIENT_ID": "your-google-business-client-id-here",
        "GOOGLE_BUSINESS_TIMEOUT_MS": "your-google-business-timeout-ms-here",
        "GOOGLE_BUSINESS_MAX_RETRIES": "your-google-business-max-retries-here",
        "GOOGLE_BUSINESS_V4_API_BASE": "your-google-business-v4-api-base-here",
        "GOOGLE_BUSINESS_ACCESS_TOKEN": "your-google-business-access-token-here",
        "GOOGLE_BUSINESS_CLIENT_SECRET": "your-google-business-client-secret-here",
        "GOOGLE_BUSINESS_INFO_API_BASE": "your-google-business-info-api-base-here",
        "GOOGLE_BUSINESS_REFRESH_TOKEN": "your-google-business-refresh-token-here",
        "GOOGLE_BUSINESS_ACCOUNTS_API_BASE": "your-google-business-accounts-api-base-here",
        "GOOGLE_BUSINESS_PERFORMANCE_API_BASE": "your-google-business-performance-api-base-here"
      },
      "args": [
        "-y",
        "mcp-google-business"
      ],
      "command": "npx"
    }
  }
}

Documentation

View on GitHub

From the project's GitHub README.

Google Business Profile MCP

npm CI Glama License: MIT

MCP server for Google Business Profile (formerly Google My Business): manage locations, answer reviews, publish local posts and read performance metrics — from Claude, Cursor, Codex and other AI clients, in natural language.

The assistant lists your business locations, replies to fresh reviews, checks how many calls and direction requests you got last month, and posts updates — everything you would otherwise click through in the Business Profile Manager.

Quick start

  1. Get OAuth credentials and make sure your Google Cloud project has approved API access — without it every call fails.

  2. Add the server — e.g. in Claude Code (other clients):

    claude mcp add google-business \
      -e GOOGLE_BUSINESS_CLIENT_ID=your_client_id \
      -e GOOGLE_BUSINESS_CLIENT_SECRET=your_client_secret \
      -e GOOGLE_BUSINESS_REFRESH_TOKEN=your_refresh_token \
      -- npx -y mcp-google-business
    
  3. Ask the assistant: "List my business locations and show the newest unanswered reviews."

What it can do

GroupTools
Accountslist_accounts
Locations (Business Information API)list_locations, get_location, update_location, list_categories, list_attribute_metadata, update_location_attributes, search_chains
Performanceget_daily_metrics, fetch_multi_daily_metrics, list_search_keyword_impressions
Reviews (legacy v4 API)list_reviews, get_review, reply_to_review, delete_review_reply
Local posts (legacy v4 API)list_local_posts, create_local_post, update_local_post, delete_local_post
Escape hatchraw_request — any endpoint on any of the four GBP hosts

Under the hood the server talks to all four Google Business Profile hosts behind one OAuth scope (business.manage): Account Management, Business Information and Performance (v1) plus the legacy v4 API, where reviews and local posts still live — they were never migrated to v1. Resilience built in: automatic token refresh, retries with backoff on 429/5xx (writes are never replayed), request timeouts and an SSRF guard.

Example prompts

  • "Reply to the latest 3-star review of my coffee shop — apologize and offer a discount."
  • "How many calls and direction requests did location X get in July, day by day?"
  • "Which search keywords surfaced my business this quarter?"
  • "Publish a post about our new summer menu with a link to the site."
  • "Update the website URL of my downtown location."

API access application

⚠️ Enabling the APIs in Google Cloud Console is NOT enough. Business Profile APIs ship with a default quota of 0 QPM — every call fails (usually 429 RESOURCE_EXHAUSTED) until Google approves your project's "Application for Basic API Access".

To get approved:

  1. Prerequisites: you manage a Business Profile that is verified and active for 60+ days; you apply from an email address that is an owner or manager of that profile; the business has a website matching your application.
  2. Create a Google Cloud project and note its Project Number (Console → Dashboard).
  3. Submit the GBP API contact form — choose "Application for Basic API Access" and fill it in using the authorized business email.
  4. Check approval in Cloud Console → Quotas: 0 QPM = not approved, 300 QPM = approved. Google also sends a follow-up email (no documented SLA).

The server surfaces this on quota errors: if every call fails with a quota message, the error text points back at this form.

Installation

claude mcp add google-business \
  -e GOOGLE_BUSINESS_CLIENT_ID=your_client_id \
  -e GOOGLE_BUSINESS_CLIENT_SECRET=your_client_secret \
  -e GOOGLE_BUSINESS_REFRESH_TOKEN=your_refresh_token \
  -- npx -y mcp-google-business

claude_desktop_config.json — macOS ~/Library/Application Support/Claude/, Windows %APPDATA%\Claude\

{
  "mcpServers": {
    "google-business": {
      "command": "npx",
      "args": ["-y", "mcp-google-business"],
      "env": {
        "GOOGLE_BUSINESS_CLIENT_ID": "your_client_id",
        "GOOGLE_BUSINESS_CLIENT_SECRET": "your_client_secret",
        "GOOGLE_BUSINESS_REFRESH_TOKEN": "your_refresh_token"
      }
    }
  }
}

~/.cursor/mcp.json (or .cursor/mcp.json in the project)

{
  "mcpServers": {
    "google-business": {
      "command": "npx",
      "args": ["-y", "mcp-google-business"],
      "env": {
        "GOOGLE_BUSINESS_CLIENT_ID": "your_client_id",
        "GOOGLE_BUSINESS_CLIENT_SECRET": "your_client_secret",
        "GOOGLE_BUSINESS_REFRESH_TOKEN": "your_refresh_token"
      }
    }
  }
}

.vscode/mcp.json — note the servers key (not mcpServers)

{
  "servers": {
    "google-business": {
      "type": "stdio",
      "command": "npx",
      "args": ["-y", "mcp-google-business"],
      "env": {
        "GOOGLE_BUSINESS_CLIENT_ID": "your_client_id",
        "GOOGLE_BUSINESS_CLIENT_SECRET": "your_client_secret",
        "GOOGLE_BUSINESS_REFRESH_TOKEN": "your_refresh_token"
      }
    }
  }
}

Getting credentials

The server uses standard Google OAuth 2.0 with a long-lived refresh token (scope https://www.googleapis.com/auth/business.manage):

  1. Create a Google Cloud project (or reuse one) at console.cloud.google.com and enable the APIs: My Business Account Management API, My Business Business Information API, Business Profile Performance API and Google My Business API (the legacy v4 — needed for reviews and posts).
  2. Apply for API access — see API access application. Without approval the quota stays at 0 and every call fails.
  3. Configure the OAuth consent screen (External is fine; add your Google account as a test user while the app is unpublished).
  4. Create an OAuth client id (Credentials → Create credentials → OAuth client ID, type "Web application"; add https://developers.google.com/oauthplayground as an authorized redirect URI if you plan to use the playground below). Save the client id and client secret.
  5. Mint a refresh token with the account that owns/manages the Business Profile. The quickest way is the OAuth 2.0 Playground:
    • gear icon → check "Use your own OAuth credentials" → paste your client id/secret;
    • in step 1 enter the scope https://www.googleapis.com/auth/business.manage and authorize with the business owner/manager account;
    • in step 2 press "Exchange authorization code for tokens" and copy the refresh token.
  6. Put the three values into GOOGLE_BUSINESS_CLIENT_ID, GOOGLE_BUSINESS_CLIENT_SECRET and GOOGLE_BUSINESS_REFRESH_TOKEN.

⚠️ The credentials are stored in plain text in your MCP client config — treat them like passwords. For a quick one-hour test you can instead set GOOGLE_BUSINESS_ACCESS_TOKEN to a token from the playground's step 2 (it expires in ~1 hour and is not refreshed).

Configuration

VariableRequiredDefaultDescription
GOOGLE_BUSINESS_CLIENT_IDyes¹OAuth2 client id (Google Cloud Console).
GOOGLE_BUSINESS_CLIENT_SECRETyes¹OAuth2 client secret.
GOOGLE_BUSINESS_REFRESH_TOKENyes¹OAuth2 refresh token, scope business.manage.
GOOGLE_BUSINESS_ACCESS_TOKENno¹Ready-made access token (~1 h) instead of the trio above.
GOOGLE_BUSINESS_TIMEOUT_MSno60000Per-request timeout, ms.
GOOGLE_BUSINESS_MAX_RETRIESno3Retries on 429 (and 5xx/network for idempotent calls).
GOOGLE_BUSINESS_ACCOUNTS_API_BASEnohttps://mybusinessaccountmanagement.googleapis.comAccount Management host override.
GOOGLE_BUSINESS_INFO_API_BASEnohttps://mybusinessbusinessinformation.googleapis.comBusiness Information host override.
GOOGLE_BUSINESS_PERFORMANCE_API_BASEnohttps://businessprofileperformance.googleapis.comPerformance host override.
GOOGLE_BUSINESS_V4_API_BASEnohttps://mybusiness.googleapis.comLegacy v4 host override (reviews, posts).

¹ Either the CLIENT_ID + CLIENT_SECRET + REFRESH_TOKEN trio or ACCESS_TOKEN must be set.

Requirements

  • Node.js 20+ (runs via npx, no separate install needed).
  • A Google Cloud project with the GBP APIs enabled and an approved Basic API Access application — see above.

Limits

  • 300 QPM per API for approved projects; 10 edits per minute per Business Profile (a hard cap Google does not raise) — the write tools note this in their descriptions.
  • accounts.list pages are capped at 20 items, reviews at 50 — the tools paginate with pageToken.
  • Performance metrics lag by a few days; empty values near today are normal.
  • Review replies only work on verified locations.

Documentation

Support

Questions, ideas and contributions — Telegram: @gistrec or GitHub issues.

License

MIT — see LICENSE.

Reviews

No reviews yet

Be the first to review this server!