Google Search Console MCP server — search analytics, URL inspection, and sitemaps
Runs on your machine from its package; the steps are below.
At most: only reads or looks up information.
Odel charges nothing per call. The publisher may charge for its own service.
Runs locally over stdio
This server isn't hosted — your MCP client launches it from a package registry. Use one of the commands below, or drop the config into your client (e.g. Claude Desktop).
Run
npx -y @sarahpark/google-search-console-mcp
MCP client config
{
"mcpServers": {
"google-search-console": {
"command": "npx",
"args": [
"-y",
"@sarahpark/google-search-console-mcp"
]
}
}
}A minimal MCP server for Google Search Console.
Give Codex, Claude Code, or Claude Desktop read-only access to your search analytics, URL indexing information, and sitemap status. Runs locally; cannot change your site or Search Console settings.
Once connected, ask your agent:
Setup · Tools · Limitations · Troubleshooting
You need Node.js and npm, an MCP client, and access to a Search Console property. To sign in as yourself, also install the Google Cloud CLI. Server startup and tool discovery were checked with Node.js 22.
Create or select a project in Google Cloud Console, then enable the Search Console API. Note the project ID for the next step.
Recommended for new users: sign in as yourself. Application Default Credentials (ADC) use your existing Search Console permissions, so you don't need to add another user to your properties.
Run both commands, replacing YOUR_PROJECT_ID with the project you enabled above:
gcloud auth application-default login \
--scopes=https://www.googleapis.com/auth/webmasters.readonly,https://www.googleapis.com/auth/cloud-platform
gcloud auth application-default set-quota-project YOUR_PROJECT_ID
The quota project is required. For permission or scope errors, see troubleshooting.
Caution
Store the key outside your repo and never commit it. Use its absolute path in your client's configuration below.
If Search Console rejects the email with "Failed to add user: email not found," sign in as yourself instead; see troubleshooting.
The server checks GOOGLE_APPLICATION_CREDENTIALS before local ADC. If switching to ADC, remove an old key-path setting from your client configuration and environment.
The npx commands in the next step download and run version 1.1.0 for you. Both authentication methods work with the npm package; no clone or build is required.
git clone https://github.com/sarahpark/google-search-console-mcp.git
cd google-search-console-mcp
npm install
npm run build
In the client commands below, replace npx -y @sarahpark/google-search-console-mcp@1.1.0 with node "/absolute/path/to/google-search-console-mcp/build/index.js". In Claude Desktop, set command to node and args to an array containing that absolute path. Run npm test for offline authentication checks.
After completing authentication, paste this into your agent:
Add
npx -y @sarahpark/google-search-console-mcp@1.1.0asgscin this client's user-level MCP config, preserving existing servers. Use my local Application Default Credentials. Tell me when setup is complete and whether I need to restart the client.
For a service account, replace "Use my local Application Default Credentials" with "Set GOOGLE_APPLICATION_CREDENTIALS to /path/to/service-account-key.json" and use your actual file location.
Once configured, skip to step 5.
Choose your client and run the command for your authentication method. Replace placeholder paths with your actual absolute paths; keep quotes around paths containing spaces. Preserve any existing server entries.
Sign in as yourself (ADC):
codex mcp add gsc -- npx -y @sarahpark/google-search-console-mcp@1.1.0
npm package with a service account:
codex mcp add gsc \
--env "GOOGLE_APPLICATION_CREDENTIALS=/absolute/path/to/service-account-key.json" \
-- npx -y @sarahpark/google-search-console-mcp@1.1.0
For manual configuration in ~/.codex/config.toml, see the Codex MCP documentation.
Sign in as yourself (ADC):
claude mcp add gsc --scope user -- npx -y @sarahpark/google-search-console-mcp@1.1.0
npm package with a service account:
claude mcp add gsc --scope user \
--env "GOOGLE_APPLICATION_CREDENTIALS=/absolute/path/to/service-account-key.json" \
-- npx -y @sarahpark/google-search-console-mcp@1.1.0
--scope user makes the server available across your projects. Use --scope project to share configuration through the project's .mcp.json instead.
Add the appropriate entry to claude_desktop_config.json, merging it into any existing mcpServers object.
Sign in as yourself (ADC):
{
"mcpServers": {
"gsc": {
"command": "npx",
"args": ["-y", "@sarahpark/google-search-console-mcp@1.1.0"]
}
}
}
npm package with a service account:
{
"mcpServers": {
"gsc": {
"command": "npx",
"args": ["-y", "@sarahpark/google-search-console-mcp@1.1.0"],
"env": {
"GOOGLE_APPLICATION_CREDENTIALS": "/absolute/path/to/service-account-key.json"
}
}
}
}
Restart your client or start a new session, then ask:
Use the gsc MCP server to list my Search Console properties.
A successful list_sites call verifies both the connection and Google access. Use the exact property URL it returns in later requests, such as sc-domain:example.com or https://example.com/.
list_sitesList all sites (properties) you have access to in Google Search Console.
No parameters required.
search_analyticsQuery search analytics data — clicks, impressions, CTR, and position.
| Parameter | Type | Required | Description |
|---|---|---|---|
siteUrl | string | Yes | Site URL as it appears in Search Console (e.g. https://example.com/ or sc-domain:example.com) |
startDate | string | Yes | Start date in YYYY-MM-DD format |
endDate | string | Yes | End date in YYYY-MM-DD format |
dimensions | string | No | Comma-separated: query, page, country, device, searchAppearance, date |
rowLimit | number | No | Max rows to return (default 100, max 25000) |
searchType | string | No | web, image, video, news, discover, or googleNews (default web) |
queryFilter | string | No | Filter by query. Prefix with regex: for regex matching |
pageFilter | string | No | Filter by page URL. Prefix with regex: for regex matching |
countryFilter | string | No | ISO 3166-1 alpha-3 country code (e.g. USA, GBR) |
deviceFilter | string | No | DESKTOP, MOBILE, or TABLET |
inspect_urlCheck indexing status, crawl info, and mobile usability for a URL.
| Parameter | Type | Required | Description |
|---|---|---|---|
siteUrl | string | Yes | Site URL as it appears in Search Console |
inspectionUrl | string | Yes | The full URL to inspect (must belong to the site) |
list_sitemapsList all submitted sitemaps and their status for a site.
| Parameter | Type | Required | Description |
|---|---|---|---|
siteUrl | string | Yes | Site URL as it appears in Search Console |
If the error says the API "requires a quota project," rerun:
gcloud auth application-default set-quota-project YOUR_PROJECT_ID
Your account needs serviceusage.services.use on that project. If permission is denied, ask a project administrator to grant it or use a project where you have it, with the Search Console API enabled.
Login attempts to attach your configured project automatically but can skip it when you lack permission. Setting it explicitly makes that failure visible. The cloud-platform scope in the setup command allows the quota project to be attached.
The built-in gcloud client was confirmed to grant webmasters.readonly with Google Cloud SDK 557.0.0. If it doesn't work in your version, follow the gcloud guidance for additional scopes to create your own OAuth client, then sign in with its downloaded client file:
gcloud auth application-default login \
--client-id-file=client_id.json \
--scopes=https://www.googleapis.com/auth/webmasters.readonly,https://www.googleapis.com/auth/cloud-platform
gcloud auth application-default set-quota-project YOUR_PROJECT_ID
Keep credential files outside your repo.
This has been reported when adding newly created service accounts and motivated the ADC option. Sign in as yourself, or use an existing service account that already has access to the property.
GOOGLE_APPLICATION_CREDENTIALS setting isn't overriding your login. The signed-in Google account must have access to the property.GOOGLE_APPLICATION_CREDENTIALS to the key's absolute path and confirm its email was added to each property you want to read.