Google Business Profile

Live

OAUTH 2.0

LOCAL LISTINGS

Marketing

Google Business Profile MCP gives agents authenticated access to your local listings: read locations, reply to reviews, publish posts, and pull performance insights.

  • Per-user credentials: each call uses the actual user's token, never a shared bot.
  • Encrypted per-tenant vault: AES-256, resolved at request time, never in LLM context.
  • Scoped before every call: pre-call scope check, 90-day SIEM-exportable audit chain.
Google Business Profile
agent · Acme Q3
Run
Reply to the new 2-star review on our downtown location and pull last month's search views.
S
googlebusinessprofile_list_reviews
121ms
Business Profile agent
Replied to the 2-star review. Downtown location had 3,412 search views last month, up 8%.
Sources: 1 location, 1 review
googlebusinessprofile
1 location
18:29
Message Claude...

Tools your local marketing agent reaches for on Google Business Profile, scoped per user.

CALL ANY TOOL
Manage local listings end to end: locations, reviews, posts, and performance insights, scoped to each user's own Business Profile access.
googlebusinessprofile_list_locations
List locations
List the business locations the authenticated user manages, with address, phone, and category.
Parameters
Name
Type
Required
Description
account_id
string
Optional
Restrict results to locations under this account.
googlebusinessprofile_get_location
Get location
googlebusinessprofile_list_reviews
List reviews
googlebusinessprofile_reply_to_review
Reply to review
googlebusinessprofile_create_post
Create post
googlebusinessprofile_get_performance_metrics
Get performance metrics
Build your Agent
Same auth pattern across LangChain, OpenAI, Anthropic, and Google ADK.
Python · LlamaIndex
import { ScalekitClient } from "@scalekit-sdk/node";
import { createReactAgent } from "@langchain/langgraph/prebuilt";

const sk = new ScalekitClient(env.SCALEKIT_ENV_URL, env.SCALEKIT_CLIENT_ID, env.SCALEKIT_CLIENT_SECRET);

// Google Business Profile tools scoped to this user
const { tools } = await sk.tools.listScopedTools("user_123", {
  filter: { connectionNames: ["googlebusinessprofile"], toolNames: [
    "googlebusinessprofile_list_locations",
    "googlebusinessprofile_get_location",
    "googlebusinessprofile_list_reviews"] },
  pageSize: 100,
});

const agent = createReactAgent({ llm, tools });
await agent.invoke({ messages: [{ role: "user", content: "Reply to the new 2-star review and pull last month's search views" }] });
import OpenAI from "openai";
import { ScalekitClient } from "@scalekit-sdk/node";

const sk = new ScalekitClient(env.SCALEKIT_ENV_URL, env.SCALEKIT_CLIENT_ID, env.SCALEKIT_CLIENT_SECRET);
const openai = new OpenAI();

const { tools } = await sk.tools.listScopedTools("user_123", {
  filter: { connectionNames: ["googlebusinessprofile"] }, pageSize: 100,
});

const res = await openai.chat.completions.create({
  model: "gpt-5",
  messages: [{ role: "user", content: "Reply to the new 2-star review and pull last month's search views" }],
  tools,
});

// Execute the tool call with the user's vaulted googlebusinessprofile credential
await sk.tools.executeTool(res.choices[0].message.tool_calls[0], "user_123");
import Anthropic from "@anthropic-ai/sdk";
import { ScalekitClient } from "@scalekit-sdk/node";

const sk = new ScalekitClient(env.SCALEKIT_ENV_URL, env.SCALEKIT_CLIENT_ID, env.SCALEKIT_CLIENT_SECRET);
const anthropic = new Anthropic();

const { tools } = await sk.tools.listScopedTools("user_123", {
  filter: { connectionNames: ["googlebusinessprofile"] }, pageSize: 100,
});

const msg = await anthropic.messages.create({
  model: "claude-sonnet-5",
  max_tokens: 1024,
  messages: [{ role: "user", content: "Reply to the new 2-star review and pull last month's search views" }],
  tools,
});

// Tool call runs with the user's vaulted googlebusinessprofile credential
await sk.tools.executeTool(msg.content, "user_123");
import { Agent } from "@google/adk/agents";
import { ScalekitClient } from "@scalekit-sdk/node";

const sk = new ScalekitClient(env.SCALEKIT_ENV_URL, env.SCALEKIT_CLIENT_ID, env.SCALEKIT_CLIENT_SECRET);

const { tools } = await sk.tools.listScopedTools("user_123", {
  filter: { connectionNames: ["googlebusinessprofile"] }, pageSize: 100,
});

const agent = new Agent({
  name: "googlebusinessprofile_agent",
  model: "gemini-2.5-pro",
  instruction: "Google Business Profile tools scoped to this user",
  tools,
});

await agent.run("Reply to the new 2-star review and pull last month's search views");
Try these prompts
Copy any prompt into your agent. Each maps directly to a Google Business Profile tool. Click to copy, paste into your agent, done.
Reviews
Copy the prompt
Copied
List reviews at 3 stars or below for the downtown location.
Copy the prompt
Copied
Reply to the newest review thanking the customer and offering to make it right.
Copy the prompt
Copied
How many unreplied reviews does the airport location have?
Posts and listings
Copy the prompt
Copied
Publish a weekend-hours update post for the downtown location.
Copy the prompt
Copied
Get the full listing details for location loc_9021.
Copy the prompt
Copied
Create an offer post for 20% off this weekend.
Performance
Copy the prompt
Copied
Pull search views and map clicks for last month.
Copy the prompt
Copied
Compare this month's calls to last month for the downtown location.
Copy the prompt
Copied
List all locations under account acc_442.
SEE HOW AUTH WORKS
Your users connect once. Their Google Business Profile credentials stay vaulted, every call is checked, and every action is logged.
1
Authorize
Your user connects
Google Business Profile
once. We tie it to their identity and the meetings they approved — no shared bot account, no org-wide access
Who:
user ‘A’
when:
Once per user
access:
Limited to user
2
Store
Their
Google Business Profile
token lives in a vault scoped to them. User A's meetings are never reachable by an agent acting for user B, even on the same connection
vault:
encrypted
scope:
per-user
tokens:
auto-refreshed
3
Resolve
When your agent calls a
Google Business Profile
tool, we fetch the right token server-side. It never touches your agent, never appears in the LLM context, never shows up in your logs
speed:
~40ms
check:
before every call
seen by:
nobody
4
Audit
Every
Google Business Profile
tool call is logged — who triggered it, which meeting was fetched, what came back. 90 days of history, tied to the user who authorized it
history:
90 days
export:
SIEM-ready
logged:
every call
Test other agents
See the same per-user auth pattern across other marketing and local-listings connectors.
SALES
Outbound prospecting agent
Build targeted prospect lists with Apollo, enrich with firmographic data, and draft personalised outreach. Runs on a schedule.
GTM
HubSpot to Slack updates agent
Watch HubSpot deal stage changes and post structured updates to the right Slack channel. Reps stop checking the CRM all day.
Why Scalekit
Secure your agent's access. Connectors ship in minutes
Other connector libraries treat auth as a demo afterthought. Scalekit starts with identity, scope enforcement, and audit. Connectors follow.
01.
Shared tokens break per-user analytics
A shared Google Business Profile token looks fine in a demo. In production every listing update looks like one service account, and you cannot tell which user triggered it. Scalekit resolves the credential of the actual user who triggered the agent, never a shared bot.
// shared token
audit → bot_service_account

// scalekit
audit → user_abc ✓
02.
Authentication is not authorization
03.
Multi-tenancy is architectural
04.
Google Business Profile today. Ten connectors tomorrow.
“Our agents act across Salesforce, Gong, Google Drive, and more, on behalf of every customer. Scalekit behind the scenes meant we can keep adding tools without ever rebuilding how credentials or tool calling work.”
Venu Madhav Kattagoni
Head of Engineering / Von
FAQs
Frequently Asked Questions
Does the agent access Google Business Profile as the user or through a shared key?
As the user. Scalekit resolves the credential of the person who triggered the agent at request time, so every Google Business Profile action in your audit trail is attributed to a real user, not a shared service account.
Where is the Google Business Profile token stored?
In an AES-256 encrypted vault with per-tenant namespacing. Tokens are resolved at request time, never enter LLM context, refresh automatically, and can be revoked from one dashboard.
Can I limit what the agent does in Google Business Profile?
Yes. Filter by tool name in listScopedTools to expose only what you want. Scalekit also enforces scope checks before every API call.
What happens when a user revokes access?
The credential is invalidated at the next tool call. The call fails closed, other users' connections are unaffected, and the revocation is logged in the audit chain.
Can the agent reply to reviews without a human checking the wording first?
Only if you scope reply_to_review into the tool set you expose. Keep the agent to list_reviews and get_performance_metrics for a read-only rollout, or require a human approval step before replies post publicly.
Start in your coding agent
Up and running in one command
Install the Scalekit skill in your editor of choice. Connector, auth, tools, prompt, all wired up
Claude Code REPL
/plugin marketplace add scalekit-inc/claude-code-authstack
/plugin install agentkit@scalekit-auth-stack
Cursor Code REPL
# ~/.cursor/mcp.json
{
""mcpServers"": {
""googlebusinessprofile"": {
""url"": ""https://mcp.scalekit.com/googlebusinessprofile"",
""headers"": { ""Authorization"": ""Bearer $SCALEKIT_TOKEN"" }
}
}
}
Codex Code REPL
# ~/.codex/config.toml
[mcp_servers.googlebusinessprofile]
url = ""https://mcp.scalekit.com/googlebusinessprofile""
auth_env = ""SCALEKIT_TOKEN""
Copilot Code REPL
# .vscode/mcp.json
{
""servers"": {
""googlebusinessprofile"": {
""url"": ""https://mcp.scalekit.com/googlebusinessprofile"",
""type"": ""http""
}
}
}