Google Business Profile API: Who Gets Access, Setup and Quotas

Here's the catch. Until your access is approved, the Google My Business API doesn't even appear in the Google Cloud console, so a developer can't simply switch it on. And once you're in, there's no sandbox to practise on. Google says fake test listings usually get flagged by moderation and suspended.

Who can get access to the API

Google's developer pages list four requirements for anyone who wants to use the APIs.

• A valid Google Account
• A valid business reason to request access, which rules out the prohibited uses in Google's API policies
• A valid Google Cloud project
• A valid business website URL

Google says any individual or company that can demonstrate a legal business reason is approved. Its two tips for showing you're a real business are to apply from a business email address tied to your business domain, and to make sure your website is updated and live. A Gmail address and a holding page is a weak application.

Access doesn't open up Google's data, either. Even with API access, you can't query a Business Profile unless you already have access to that particular profile.

What the Business Profile APIs manage

Google says the APIs offer almost the same features as the Business Profile interface, with a few extra ones specific to the APIs. Here's what each one does.

API	Example capabilities, as of October 2026
Account Management	Manage access to a location, list accounts and pending invitations, move a location between accounts
Business Information	Get, create, update or delete profiles, and get or update attributes and categories
Lodging	Update lodging attributes such as amenities and policies for hotels
Place Actions	Add links for actions like booking an appointment, reserving a table or ordering food delivery
Notifications	Manage notification settings for accounts
Verifications	Start verification for a location and list the options available
Business Profile Performance	Fetch insights such as impressions, direction requests, call clicks, website clicks and bookings
Media	Upload photos and videos
Reviews	Get reviews and reply to them
Local Posts	Get, create or update posts
FoodMenus	Get, create or update food menus

Media, Reviews, Local Posts and FoodMenus sit inside the Google My Business API, version 4.9. If you only want to show business information to people, for example on a map in your own app, Google points you to the Google Maps Platform instead.

How to set up the Google Business Profile API

1. Get a Google Account and try Business Profile itself, so you know what the interface does.
2. Create a project in the Google Cloud console.
3. Request access to the APIs through Google's access request form. Requests are reviewed within 14 days.
4. Once approved, enable the Business Profile APIs in the Cloud console. If the shortcut doesn't work, open the API Library, search for each one and click Enable, accepting billing or terms if prompted.
5. If you're a Google Workspace user, check Google Business Profile is turned on for your account, or every call returns error 403 PERMISSION DENIED.
6. Create an OAuth 2.0 client ID under Credentials, because the APIs access private data and every request needs an OAuth 2.0 token.
7. Test a first call in the OAuth 2.0 Playground with the business.manage scope. Listing your accounts should come back as 200 OK.

Approved projects get a standard default quota for the APIs, so there's nothing extra to request on day one.

Access is granted to the project, not the person

This is the detail most business owners don't expect. If one person applies for access on a Cloud project, the access belongs to that project, and anyone with access to the project can make calls to the APIs. Google tells partners to control who's on the project on a need-to-access basis to avoid abuse. If you hire a developer, keep the project in your own account and add them to it, so you can remove them later.

No sandbox: how to test safely

There's no sandbox environment for the Business Profile APIs, and no direct way to create a fake listing to test against. Google's suggestions instead:

• Use the validateOnly parameter where a call supports it, which checks a request without making changes.
• Work on a client listing after hours, without changing primary information such as the name, address or category.
• Create a listing for your own company headquarters and test on that.
• Use mock API responses for actions like verification that need a live listing.

Quotas and how to get more

Standard quota limits are published on Google's usage limits page, and rate limits apply. If you need more, you submit a standard quota request. Google's support team checks your past usage first: if your average usage is below seven tenths of your current limit, you might be refused an increase. Ask for more when you're close to the ceiling, not before.

For agencies managing other people's profiles

Google's route for third-party partners is to register a Business Profile Organization account as an agency and learn how user groups and business groups work. A business can then give you access in one of two ways: through OAuth, where your platform uses the business's credentials, or by adding you as a manager on its profile. Google strongly recommends partners add themselves as a manager, never as an owner. Businesses with 10 or more locations can request bulk verification.

My verdict on the Business Profile API

If you run one or two locations, you don't need it. The interface does almost everything the API does, and your posts, photos and replies are quicker by hand. My guide to Google Business Profile posts covers that side. The API earns its keep when you manage many locations, want reviews or insights pulled into your own systems, or run an agency. Apply from a business email with a live website, keep the Cloud project in your name, and make sure the profile is verified first: here's how Business Profile verification works.

Connecting Google's data to your own tools is a good first automation project. Planning automations like this, and getting your business named in AI answers, is what I help teams with. I run AI training and workshops for teams, and help businesses with AI enablement, AI automation and GEO, which is about getting your business seen and cited in AI answers. Most of that work is with SaaS marketing teams and small businesses. Here's how we can work together.

Frequently asked questions

Who can get access to the Google Business Profile API?

The APIs aren't open to the public. You need a Google Account, a valid business reason, a Google Cloud project and a business website URL, and requests are reviewed within 14 days.

Why can't I see the Google My Business API in Cloud console?

It's only visible to users who submit the access request form and get approval for their Google Account. Until then it won't appear.

Is there a sandbox for the Google Business Profile API?

No. There's no sandbox environment. Some calls accept a validateOnly parameter that checks a request without making changes, and Google suggests mock API responses for other tests.

Can the API read any business's profile?

No. Even with API access, you can't query a Business Profile unless you have access to that particular profile.

How long does Google Business Profile API approval take?

Google says access requests are reviewed within 14 days.