Google Business Profile MCP
NPM · MCP-GOOGLE-BUSINESS
MCP server for Google Business Profile: locations, reviews, local posts and performance metrics.
Available components
Last scanned (22 hours ago)
Scores higher than 78% of npm servers
Category Marketing and SEO
How this component scores in each security and reliability category. Every signal is checked automatically from public evidence about the published package, including repeated runs of it in an isolated sandbox, and we only credit what we can confirm. How we score → Why this is hard to score →
Supply Chain Security98
- No malware found by supply-chain analysis.Pass
- No known CVEs affecting this package version or its production dependencies.Pass
- No install/post-install scripts declared.Pass
- 31 of 94 dependencies flagged as unhealthy. View diagnostics → Partial
Provenance & Transparency45
- Source repository is publicly reachable at the declared URL. View diagnostics → Pass
- Provenance check failed: no build-provenance attestation is published. See how to fix → View diagnostics → Fail
- Clear OSI-approved license (MIT).Pass
- Actively maintained (last published 25 days ago).Pass
- Disclosure check failed: no security disclosure policy was found in the source repository. See how to fix → Fail
Schema Quality & AI Usability70
- AI-judged instruction clarity (excellent).Pass
- Context-footprint check failed: tool/resource definitions use about 4903 tokens (~188/item across 26 items; 26 tools + 0 resources), over budget; trim descriptions and params. See how to fix → Fail
- Usage-examples check failed: none of the tools include examples. See how to fix → Fail
Stability & Change Management100
- No destabilizing schema changes in the last 30 days.Pass
Tool Coverage100
- 100% of tools have a non-trivial description (not blank, and not just the tool's name).Pass
- 100% of tool parameters carry a description.Pass
Tool Safety100
- No prompt-injection markers were found in the server instructions, tool names or descriptions we captured.Pass
- All 3 tool(s) whose name or description implies an irreversible operation declare an MCP destructiveHint annotation.Pass
- An AI judge read all 27 captured unit(s) of tool text and found none that tries to manipulate the model reading it.Pass
Capabilities100
- Implements a supported MCP spec version (2025-11-25); the latest is 2026-07-28.Pass
Every change we have recorded for this component, newest first. Security-relevant changes are always shown. ▲ marks a change for the better, ▼ a change for the worse; unmarked changes are neutral.
- 16 Oct 26 0
- Stability: 0.97 → pass security
- 15 Oct 26 +1
No change was recorded against any check on this day. Stability & Change Management went from 93 to 97. That category is still filling its 30-day observation window: 28 days of observed history at the previous scan, 29 at this one. The score rises as the window fills, whether or not the server changes.
- 13 Oct 26 +1
- Security disclosure: unverified → fail ▼ functional
- 12 Oct 26 +15
- Malware scan: unverified → pass ▲ security
- 11 Oct 26 −15
- Malware scan: pass → unverified ▼ security
- Security disclosure: fail → unverified ▼ functional
- 4 Oct 26 +1
No change was recorded against any check on this day. Stability & Change Management went from 80 to 83. That category is still filling its 30-day observation window: 24 days of observed history at the previous scan, 25 at this one. The score rises as the window fills, whether or not the server changes.
- 3 Oct 26 −3
- Stability: pass → 0.80 functional
- 2 Oct 26 0
- Stability: 0.97 → pass security
Diagnostic detail from the automated scan of this channel: what the scanner observed at each step, so you can see exactly where a check passed or failed. It is informational only and never changes the trust score.
Captured 16 Oct 2026 · Analysed npm/mcp-google-business@1.2.0
Provenance No attestation
The registry publishes no build provenance for this version, so there is nothing to verify.
| Result | No attestation |
|---|---|
| Ecosystem | npm |
Background: How many MCP packages publish verified provenance →
Dependencies 94 packages
| Packages resolved | 94 |
|---|---|
| Stale | 31 |
| Tree resolution | Complete |
Background: SBOMs and build attestations, explained →
The tools this component advertises to a client, with an estimated token cost for each. Expand a tool to see its parameters and schema. The per-tool counts are indicative and are not scored directly; the schema's total context footprint is one signal in Schema Quality & AI Usability. A tool's description is untrusted text the model reads on every call, which is what makes this list a security surface and not just an inventory: how tool poisoning works →
auth_status Google connection status ~81
Shows whether this server is connected to Google: token presence and source (env variables or a stored in-chat login), expiry, the Google account email, granted vs missing OAuth scopes, where the credentials file lives and where the OAuth client comes from. Makes no network calls and never returns the token itself. Call it first when other tools report the server is not connected.
Input schema present but exposes no named parameters.
No output schema declared.
No examples provided.
create_local_post Create a local post ~320
Publishes a new local post on the Business Profile. Pass the LocalPost as `post`. LocalPost fields: languageCode; summary (the post text); topicType (STANDARD | EVENT | OFFER | ALERT); callToAction {actionType: BOOK | ORDER | SHOP | LEARN_MORE | SIGN_UP | CALL, url}; event {title, schedule{startDate{year,month,day}, startTime{hours,minutes}, endDate, endTime}} — required for EVENT and OFFER; offer {couponCode, redeemOnlineUrl, termsConditions}; media [{mediaFormat: "PHOTO", sourceUrl}]. ALERT posts are restricted to Google-initiated campaigns and are typically rejected. Returns the created post with its name and state (a fresh post is usually PROCESSING before it goes LIVE). Counts against the 10 edits/min per-profile cap. Local posts live only on the legacy v4 API (mybusiness.googleapis.com) — they were never migrated to v1.
| Name | Type | Req | Description |
|---|---|---|---|
| accountId | string | yes | Account id — bare "123" or "accounts/123". |
| locationId | string | yes | Location id — bare "456", "locations/456" or "accounts/1/locations/456". |
| post | object | yes | The LocalPost to create, e.g. {"languageCode": "en", "topicType": "STANDARD", "summary": "Fresh croissants every morning!", "callToAction": {"actionType": "LEARN_MORE", "url": "https://example.com"}}. |
No output schema declared.
No examples provided.
delete_local_post Delete a local post ~118
Deletes a local post from the Business Profile. Empty response on success. Local posts live only on the legacy v4 API (mybusiness.googleapis.com) — they were never migrated to v1.
| Name | Type | Req | Description |
|---|---|---|---|
| accountId | string | yes | Account id — bare "123" or "accounts/123". |
| locationId | string | yes | Location id — bare "456", "locations/456" or "accounts/1/locations/456". |
| postId | string | yes | Local post id (last segment of the post's `name`). |
No output schema declared.
No examples provided.
delete_review_reply Delete a review reply ~129
Deletes the business's reply to a review (the review itself is the customer's and cannot be deleted). Empty response on success. Reviews live only on the legacy v4 API (mybusiness.googleapis.com) — they were never migrated to v1.
| Name | Type | Req | Description |
|---|---|---|---|
| accountId | string | yes | Account id — bare "123" or "accounts/123". |
| locationId | string | yes | Location id — bare "456", "locations/456" or "accounts/1/locations/456". |
| reviewId | string | yes | Review id (from list_reviews `reviewId` or `name`). |
No output schema declared.
No examples provided.
fetch_multi_daily_metrics Multiple daily metrics at once ~200
Returns daily time series for SEVERAL performance metrics of a location in one call — same data as get_daily_metrics, but batched. Response: multiDailyMetricTimeSeries[].dailyMetricTimeSeries[] of {dailyMetric, timeSeries.datedValues[]}; values are int64 strings. Prefer this over several get_daily_metrics calls to save quota. Metrics for the most recent days are not available immediately (multi-day lag, typically a few days) — empty values near today are normal, not an error.
| Name | Type | Req | Description |
|---|---|---|---|
| dailyMetrics | array | yes | The metrics to fetch (one or more). |
| endDate | string | yes | Range end (inclusive), e.g. 2026-07-31. |
| locationId | string | yes | Location id from list_locations (the unobfuscated listing id; locations/123 also works). |
| startDate | string | yes | Range start (inclusive), e.g. 2026-07-01. |
No output schema declared.
No examples provided.
finish_login Finish the Google login ~116
Second step: confirms the browser consent finished, saves the tokens to an owner-only file and verifies the login with a read-only identity call, returning the account email and the granted scopes. After success every tool works immediately — no client restart. If the user granted only part of the requested permissions, the login is still saved and missingScopes lists what will not work. Logging in under a different Google account replaces the previous login (its refresh token is revoked best-effort) and the response carries previousAccountEmail so the change never goes unnoticed.
Input schema present but exposes no named parameters.
No output schema declared.
No examples provided.
get_daily_metrics Daily metric time series ~206
Returns a daily time series for ONE performance metric of a location: impressions by surface (Maps/Search × desktop/mobile), direction requests, call clicks, website clicks, conversations, bookings, food orders or menu clicks. Response: timeSeries.datedValues[] of {date{year,month,day}, value} — value is int64 serialized as a string; a missing value means no data for that day. Metrics for the most recent days are not available immediately (multi-day lag, typically a few days) — empty values near today are normal, not an error.
| Name | Type | Req | Description |
|---|---|---|---|
| dailyMetric | string | yes | The metric to fetch. |
| endDate | string | yes | Range end (inclusive), e.g. 2026-07-31. |
| locationId | string | yes | Location id from list_locations (the unobfuscated listing id; locations/123 also works). |
| startDate | string | yes | Range start (inclusive), e.g. 2026-07-01. |
No output schema declared.
No examples provided.
get_location Get a location ~180
Returns one location by id (Business Information API; v1 uses the bare locations/{id} name, no account prefix). The readMask picks which fields come back: title, categories, storefrontAddress, phoneNumbers, websiteUri, regularHours, specialHours, openInfo, profile (description), storeCode, latlng, metadata (mapsUri, newReviewUri, placeId).
| Name | Type | Req | Description |
|---|---|---|---|
| locationId | string | yes | Location id — bare "123", "locations/123" or "accounts/1/locations/123" all work. |
| readMask | string | – | Comma-separated FieldMask of Location fields to return, e.g. "name,title,storefrontAddress,regularHours,metadata". The API requires it; omit to use the default "name,title,storefrontAddress,phoneNumb… |
No output schema declared.
No examples provided.
get_review Get a review ~137
Returns one review by id — same shape as a list_reviews entry (starRating is an enum ONE..FIVE, reviewReply present only if the business already answered). Reviews live only on the legacy v4 API (mybusiness.googleapis.com) — they were never migrated to v1.
| Name | Type | Req | Description |
|---|---|---|---|
| accountId | string | yes | Account id — bare "123" or "accounts/123". |
| locationId | string | yes | Location id — bare "456", "locations/456" or "accounts/1/locations/456". |
| reviewId | string | yes | Review id (from list_reviews `reviewId` or `name`). |
No output schema declared.
No examples provided.
list_accounts List Business Profile accounts ~183
Lists all Google Business Profile accounts the authenticated user can access (the personal account first). Each account has name (accounts/{id} — the id feeds the accountId of other tools), accountName, type (PERSONAL / LOCATION_GROUP / USER_GROUP / ORGANIZATION), role, and verificationState. The API caps pageSize at 20 (unusually small), so follow nextPageToken to see every account.
| Name | Type | Req | Description |
|---|---|---|---|
| filter | string | – | Filter expression, e.g. "type=USER_GROUP". Omit to list every account. |
| pageSize | integer | – | Accounts per page (1..20 — the API's hard cap; default 20). |
| pageToken | string | – | nextPageToken from the previous page. |
| parentAccount | string | – | Account id or accounts/{id}: list this account's sub-accounts instead of top-level ones. |
No output schema declared.
No examples provided.
list_attribute_metadata List available attributes ~230
Lists which attributes (e.g. wheelchair accessibility, wi-fi, payment options) are legal for a location or for a category+region. Pass locationId for a concrete location, OR categoryName+regionCode to explore. Each entry has parent (the attribute id for update_location_attributes), valueType (BOOL / ENUM / REPEATED_ENUM / URL), displayName, repeatable and valueMetadata (legal values).
| Name | Type | Req | Description |
|---|---|---|---|
| categoryName | string | – | Category, e.g. "gcid:restaurant" or "categories/gcid:restaurant". |
| languageCode | string | – | BCP 47 language for display names. |
| locationId | string | – | Location id to list attributes for (alternative to categoryName+regionCode). |
| pageSize | integer | – | Attributes per page (default 200). |
| pageToken | string | – | nextPageToken from the previous page. |
| regionCode | string | – | ISO 3166-1 alpha-2 country code (with categoryName). |
| showAll | boolean | – | Return the whole attribute catalog (requires regionCode + languageCode). |
No output schema declared.
No examples provided.
list_categories Search business categories ~207
Lists/searches the reference taxonomy of business categories (e.g. gcid:restaurant). Category names (categories/gcid:...) feed location.categories on update_location and categoryName on list_attribute_metadata. view=FULL also returns serviceTypes and moreHoursTypes per category; filter narrows by display name, e.g. "displayName=coffee".
| Name | Type | Req | Description |
|---|---|---|---|
| filter | string | – | Filter, e.g. "displayName=coffee". |
| languageCode | string | yes | BCP 47 language for display names, e.g. "en". |
| pageSize | integer | – | Categories per page (1..100; default 100). |
| pageToken | string | – | nextPageToken from the previous page. |
| regionCode | string | yes | ISO 3166-1 alpha-2 country code the categories should be valid in, e.g. "US". |
| view | string | – | BASIC (default) returns name + displayName; FULL adds serviceTypes and moreHoursTypes. |
No output schema declared.
No examples provided.
list_local_posts List local posts ~177
Lists the local posts (What's New / Event / Offer updates shown on the Business Profile) of a location. Each post has name (accounts/*/locations/*/localPosts/{post_id}), summary, topicType, state (LIVE / PROCESSING / REJECTED), searchUrl, createTime and updateTime. Local posts live only on the legacy v4 API (mybusiness.googleapis.com) — they were never migrated to v1.
| Name | Type | Req | Description |
|---|---|---|---|
| accountId | string | yes | Account id — bare "123" or "accounts/123". |
| locationId | string | yes | Location id — bare "456", "locations/456" or "accounts/1/locations/456". |
| pageSize | integer | – | Posts per page (default 20). |
| pageToken | string | – | nextPageToken from the previous page. |
No output schema declared.
No examples provided.
list_locations List locations of an account ~261
Lists the business locations under an account (Business Information API). Each location's name is locations/{id} — that id feeds locationId everywhere else (including the Performance API and, together with the account id, the v4 reviews/posts tools). totalSize is only present when filter is set. Fields are limited by readMask; ask for metadata to get mapsUri/placeId/newReviewUri.
| Name | Type | Req | Description |
|---|---|---|---|
| accountId | string | yes | Account id — bare "123" or "accounts/123" (get it from list_accounts). |
| filter | string | – | Filter expression, e.g. 'title="Coffee Corner"'. Also enables totalSize in the response. |
| orderBy | string | – | Sort order, e.g. "title" or "title, storeCode desc". |
| pageSize | integer | – | Locations per page (1..100; default 10). |
| pageToken | string | – | nextPageToken from the previous page. |
| readMask | string | – | Comma-separated FieldMask of Location fields to return, e.g. "name,title,storefrontAddress,regularHours,metadata". The API requires it; omit to use the default "name,title,storefrontAddress,phoneNumb… |
No output schema declared.
No examples provided.
list_reviews List reviews ~218
Lists reviews of a location, newest-updated first by default. Response: reviews[] of {name, reviewId, reviewer{displayName, isAnonymous}, starRating (ONE..FIVE enum, not a number), comment, createTime, updateTime, reviewReply{comment, updateTime} if answered}, plus averageRating (1–5) and totalReviewCount. pageSize caps at 50. Reviews live only on the legacy v4 API (mybusiness.googleapis.com) — they were never migrated to v1.
| Name | Type | Req | Description |
|---|---|---|---|
| accountId | string | yes | Account id — bare "123" or "accounts/123". |
| locationId | string | yes | Location id — bare "456", "locations/456" or "accounts/1/locations/456". |
| orderBy | string | – | Sort order; default "updateTime desc". |
| pageSize | integer | – | Reviews per page (1..50 — API cap; default 50). |
| pageToken | string | – | nextPageToken from the previous page. |
No output schema declared.
No examples provided.
list_search_keyword_impressions Monthly search keywords ~193
Returns the search keywords that surfaced the business on Google, month by month. Response: searchKeywordsCounts[] of {searchKeyword, insightsValue} — insightsValue is a UNION: either an exact {value} or a {threshold} for low-volume keywords (the true count is below it; never sum thresholds as exact counts). Months are calendar months; data for the current month appears with a lag.
| Name | Type | Req | Description |
|---|---|---|---|
| endMonth | string | yes | Last month (inclusive), e.g. 2026-06. |
| locationId | string | yes | Location id from list_locations (the unobfuscated listing id; locations/123 also works). |
| pageSize | integer | – | Keywords per page (1..100; default 100). |
| pageToken | string | – | nextPageToken from the previous page. |
| startMonth | string | yes | First month (inclusive), e.g. 2026-01. |
No output schema declared.
No examples provided.
logout Disconnect from Google ~62
Revokes the stored token at Google (oauth2.googleapis.com/revoke) and deletes the local credentials file. Tokens supplied via env variables are NOT touched — remove them from the MCP client config manually; envTokenStillSet in the response says whether any are still in effect.
Input schema present but exposes no named parameters.
No output schema declared.
No examples provided.
raw_request Raw Google Business Profile API call ~218
Escape hatch to call any Google Business Profile endpoint directly, for endpoints without a dedicated tool. `service` picks the host: accounts (mybusinessaccountmanagement, v1), businessinfo (mybusinessbusinessinformation, v1), performance (businessprofileperformance, v1) or v4 (legacy mybusiness.googleapis.com — reviews, posts, media). `path` is relative to the host, e.g. "v1/accounts" or "v4/accounts/1/locations/2/media". Remember v1 quirks: readMask/updateMask go in `query`. The Bearer token is attached automatically; a path resolving to a foreign origin is rejected.
| Name | Type | Req | Description |
|---|---|---|---|
| body | object | – | JSON request body (POST/PUT/PATCH). |
| method | string | – | HTTP method; defaults to GET. |
| path | string | yes | API path relative to the host, e.g. "v1/accounts". |
| query | object | – | Query parameters (arrays become repeated params). |
| service | string | yes | Which API host to call. |
No output schema declared.
No examples provided.
reply_to_review Reply to a review ~188
Creates OR replaces the business's public reply to a review (PUT upsert — there is no separate create, and calling it again overwrites the previous reply). Only works on verified locations. Returns the ReviewReply {comment, updateTime}. Counts against the 10 edits/min per-profile cap. Reviews live only on the legacy v4 API (mybusiness.googleapis.com) — they were never migrated to v1.
| Name | Type | Req | Description |
|---|---|---|---|
| accountId | string | yes | Account id — bare "123" or "accounts/123". |
| comment | string | yes | The public reply text (plain text; keep it concise — very long replies may be rejected). |
| locationId | string | yes | Location id — bare "456", "locations/456" or "accounts/1/locations/456". |
| reviewId | string | yes | Review id (from list_reviews `reviewId` or `name`). |
No output schema declared.
No examples provided.
search_chains Search chains ~98
Searches business chains by name (exact/partial/fuzzy), ranked by relevance. Each chain has name (chains/{chain_id}), chainNames, websites and locationCount. Use the chain name when relating a location to its brand (location.relationshipData).
| Name | Type | Req | Description |
|---|---|---|---|
| chainName | string | yes | Chain name to search for, e.g. "walmart". |
| pageSize | integer | – | Matches to return (1..500; default 10). |
No output schema declared.
No examples provided.
set_client Save the OAuth client ~111
Saves the OAuth client credentials from the JSON file downloaded from Google Cloud Console ('Download JSON' on a Desktop-app client). Pass the file PATH — the secret must never be pasted into the chat. The client is stored once in the shared ~/.config/mcp-google-auth/client.json (owner-only) and reused by every mcp-google-* server; tokens stay per-server. After this, call start_login.
| Name | Type | Req | Description |
|---|---|---|---|
| path | string | yes | Absolute path to the client_secret_*.json file downloaded from Google Cloud Console. |
No output schema declared.
No examples provided.
setup_instructions Setup instructions ~109
Step-by-step checklist for connecting this server to Google: creating a Google Cloud project and a Desktop-app OAuth client, publishing the consent screen (mandatory — Testing-mode refresh tokens die after 7 days), downloading the client JSON and handing its PATH to set_client. Works without any credentials; the checklist shortens to 'enable the API + log in' when an OAuth client is already configured (one client serves the whole mcp-google-* line). Never asks the user to paste secrets into the chat.
Input schema present but exposes no named parameters.
No output schema declared.
No examples provided.
start_login Start the Google login ~114
First step of connecting from the chat, without editing config files or restarting the client. Returns authorizeUrl — show it to the user as a clickable link and ask them to open it in the browser ON THIS MACHINE, pick the Google account and approve access. A one-shot listener on 127.0.0.1 catches Google's redirect; the code is exchanged locally and never passes through the chat. Does not open the browser itself. The attempt lives 10 minutes; when the browser shows the success page, call finish_login.
Input schema present but exposes no named parameters.
No output schema declared.
No examples provided.
update_local_post Update a local post ~323
Updates fields of an existing local post (PATCH with a required updateMask — only masked fields change, e.g. updateMask "summary" with post {"summary": "New text"}). LocalPost fields: languageCode; summary (the post text); topicType (STANDARD | EVENT | OFFER | ALERT); callToAction {actionType: BOOK | ORDER | SHOP | LEARN_MORE | SIGN_UP | CALL, url}; event {title, schedule{startDate{year,month,day}, startTime{hours,minutes}, endDate, endTime}} — required for EVENT and OFFER; offer {couponCode, redeemOnlineUrl, termsConditions}; media [{mediaFormat: "PHOTO", sourceUrl}]. ALERT posts are restricted to Google-initiated campaigns and are typically rejected. Returns the updated post. Counts against the 10 edits/min per-profile cap. Local posts live only on the legacy v4 API (mybusiness.googleapis.com) — they were never migrated to v1.
| Name | Type | Req | Description |
|---|---|---|---|
| accountId | string | yes | Account id — bare "123" or "accounts/123". |
| locationId | string | yes | Location id — bare "456", "locations/456" or "accounts/1/locations/456". |
| post | object | yes | Partial LocalPost with the new field values. |
| postId | string | yes | Local post id (last segment of the post's `name`). |
| updateMask | string | yes | Comma-separated FieldMask of post fields to overwrite, e.g. "summary,callToAction". |
No output schema declared.
No examples provided.
update_location Update a location ~196
Updates fields of a location (PATCH with a required updateMask — only masked fields change). Pass the new values in `location`, e.g. {"title": "New name"} with updateMask "title". Set validateOnly to check the change without applying it. Note: every profile has a hard cap of 10 edits per minute (not raisable) — batch your changes into one call where possible. Returns the updated Location.
| Name | Type | Req | Description |
|---|---|---|---|
| location | object | yes | Location object with the new field values (only fields named in updateMask are applied). |
| locationId | string | yes | Location id — bare "123", "locations/123" or "accounts/1/locations/123" all work. |
| updateMask | string | yes | Comma-separated FieldMask of the fields to overwrite, e.g. "title,phoneNumbers.primaryPhone". |
| validateOnly | boolean | – | If true, validate the update without applying it. |
No output schema declared.
No examples provided.
update_location_attributes Update location attributes ~193
Updates attributes of a location (PATCH). Each attribute needs its name (attributes/{attribute_id} from list_attribute_metadata's parent field) plus values (BOOL/ENUM), uriValues (URL) or repeatedEnumValue ({setValues, unsetValues}). attributeMask defaults to the names of the attributes you pass; name an attribute in the mask with no values to clear it. Counts against the 10 edits/min per-profile cap.
| Name | Type | Req | Description |
|---|---|---|---|
| attributeMask | string | – | Comma-separated attribute names to update. Defaults to the names of `attributes`. |
| attributes | array | yes | Attribute objects to set, e.g. [{"name": "attributes/wi_fi", "repeatedEnumValue": {"setValues": ["free_wi_fi"]}}]. |
| locationId | string | yes | Location id — bare "123", "locations/123" or "accounts/1/locations/123" all work. |
No output schema declared.
No examples provided.
How do I install the Google Business Profile MCP server?
Google Business Profile MCP runs locally as an npm package, launched with npx -y mcp-google-business. Ready-made configuration for Claude, Cursor, VS Code, Codex and 5 more is on this page, copied from each client's own documentation.
npm · mcp-google-business
claude mcp add a1-x-tech-mcp-google-business -- npx -y mcp-google-business
What is the Google Business Profile MCP server?
Google Business Profile MCP is listed in the public MCP registry as io.github.A1-x-Tech/mcp-google-business. MCP server for Google Business Profile: locations, reviews, local posts and performance metrics. This page covers its npm package (mcp-google-business).
Is the Google Business Profile MCP server safe to use?
Google Business Profile MCP scores 83 out of 100 on VerifyMCP. We found no known CVEs affecting it as of 16 October 2026. It declares no install or post-install scripts. That is a record of what we were able to check automatically, not an endorsement. The category breakdown on this page shows every signal behind the number, including the ones we could not confirm.
What tools does the Google Business Profile MCP server expose?
Google Business Profile MCP exposes 26 tools: auth_status, setup_instructions, set_client, start_login, finish_login, and 21 more. Their descriptions and schemas cost roughly 4,568 tokens of context every time the server is loaded.
Is the Google Business Profile MCP server still maintained?
Google Business Profile MCP is still listed as active in the MCP registry. We last reached this channel on 16 October 2026. Those dates come from our own scans of the registry and the channel itself, not from anything the publisher announced.
What licence is the Google Business Profile MCP server under?
Google Business Profile MCP declares the MIT licence, which is OSI-approved. That covers the source only, and says nothing about the cost of any service it calls.