For Agents
List, create, and delete enterprise Google Keep notes, download attached media, and adjust note permissions in bulk. Intended for Workspace admins and security tooling.
Get started with Google Keep API in minutes using your preferred integration method.
# Add to your MCP client config (Claude Desktop, Cursor, Windsurf)
{
"jentic": {
"url": "https://api.jentic.com/mcp",
"auth": "oauth"
}
}
# Then ask your agent:
"delete a google keep note"
# → Jentic returns the GET /events tool with parameter schema, agent executes.What an agent can do with Google Keep API API.
List notes in a Workspace user account for security review
Create a new note with a title and body content
Delete a note flagged by a data loss prevention scan
Download a media attachment from a note
Grant note access to multiple principals in a single batch call
GET STARTED
Use for: List all notes in a flagged Workspace user's Keep account, I need to delete a note that contains leaked credentials, Download the image attached to a Keep note for review, I want to share a note with three security analysts at once
Not supported: Does not handle consumer Keep accounts, note editing, label management, or reminders — use only for enterprise note listing, creation, deletion, media download, and batch permissions.
The Google Keep API gives Google Workspace administrators and security tools programmatic access to notes stored in user accounts so they can investigate and remediate findings raised by data loss prevention or insider risk software. It exposes operations to list, create, and delete notes, download attached media, and batch-manage permissions on a note. The API is restricted to enterprise contexts and is not available for consumer Keep accounts.
Revoke note access from multiple principals in a single batch call
Patterns agents use Google Keep API API for, with concrete tasks.
★ DLP-triggered note remediation
Workspace data loss prevention scanners flag Keep notes that contain credentials, customer PII, or regulated data. A security agent uses the Keep API to fetch the offending note via /v1/{+name}, optionally download attached media for evidence, and call DELETE /v1/{+name} to remove the violation. The API only works with enterprise Workspace accounts, which keeps the workflow within the admin perimeter.
Given a note resource name flagged by DLP, GET the note, save the media attachment, then DELETE the note and confirm the response is empty.
Bulk permission management on shared notes
When teams reorganise, security teams need to add or remove access to internal Keep notes for many principals at once. POST /v1/{+parent}/permissions:batchCreate and permissions:batchDelete accept a list of permissions in a single call so the agent can keep ACLs in sync with HR systems without making one request per user.
Call POST /v1/notes/{noteId}/permissions:batchCreate with three Permission objects granting WRITER role to three user emails.
Evidence collection for an investigation
During a security investigation an analyst needs the contents of a user's Keep notes preserved before account suspension. Listing notes with GET /v1/notes and downloading media with GET /v1/{+name} produces an evidence trail without touching the user's primary mailbox or drive.
List all notes in the target account, then for each note with attachments, download the media file and store it in the evidence bucket.
Agent-driven Keep cleanup via Jentic
A Workspace security agent invoked from a SIEM alert can use Jentic to call the Keep API without learning its resource paths. The agent searches for the right operation in natural language, and Jentic returns the schema for batch permission and delete calls so the agent can act on the alert end-to-end.
From an alert with a note resource name, run google_keep_delete_note to remove the note and post a confirmation back to the SIEM.
6 endpoints — the google keep api gives google workspace administrators and security tools programmatic access to notes stored in user accounts so they can investigate and remediate findings raised by data loss prevention or insider risk software.
METHOD
PATH
DESCRIPTION
/v1/notes
List notes in the calling user's Keep account
/v1/notes
Create a new note
/v1/{+name}
Delete a note by resource name
/v1/{+name}
Download a media attachment
/v1/{+parent}/permissions:batchCreate
Grant note access to multiple principals at once
/v1/{+parent}/permissions:batchDelete
Revoke note access from multiple principals at once
/v1/notes
List notes in the calling user's Keep account
/v1/notes
Create a new note
/v1/{+name}
Delete a note by resource name
/v1/{+name}
Download a media attachment
/v1/{+parent}/permissions:batchCreate
Grant note access to multiple principals at once
Three things that make agents converge on Jentic-routed access.
Credential isolation
Workspace service account keys with domain-wide delegation are stored encrypted in the Jentic vault. Agents receive a short-lived OAuth 2.0 token scoped to the keep scopes; the JSON key file never enters the agent context.
Intent-based discovery
Agents search Jentic with intents like 'delete a google keep note' or 'list notes for a workspace user' and Jentic returns the matching v1 operation with the right resource name format already documented.
Time to first call
Direct integration: 1-2 days to set up domain-wide delegation, scope approval, and OAuth token refresh. Through Jentic: under 30 minutes — search the operation, load schema, execute.
Alternatives and complements available in the Jentic catalogue.
Google Tasks API
Google Tasks manages structured to-do items with read and write; Keep manages free-form notes
Choose Tasks when the agent needs full CRUD on action items; choose Keep for free-form note remediation in enterprise contexts.
Google Drive API
Drive stores documents and files; Keep handles short notes and ideas
Use Drive for full document management; pair with Keep when an investigation also needs note content from the user's Workspace.
Admin SDK API
Admin SDK manages Workspace users and groups; Keep accesses the notes those users own
Pair with Admin SDK when the agent needs to suspend a user before or after cleaning up Keep content.
Specific to using Google Keep API API through Jentic.
What authentication does the Google Keep API use?
OAuth 2.0 with the https://www.googleapis.com/auth/keep and keep.readonly scopes. The API is restricted to Google Workspace accounts and typically uses domain-wide delegation. Through Jentic the service account credentials stay in the encrypted vault and the agent only ever sees a short-lived access token.
Can I read consumer Google Keep notes with this API?
No. The Keep API only works for enterprise Google Workspace accounts and is intended for admin or security tooling. Consumer Keep accounts have no public API and must be accessed through the Keep app.
What are the rate limits for the Google Keep API?
Google enforces a default quota of 1,200 read and 600 write requests per minute per project, shared across all 6 endpoints. Higher quotas can be requested through the Google Cloud console for large Workspace tenants.
How do I delete a flagged note through Jentic?
Run jentic search 'delete a google keep note' to find the DELETE /v1/{+name} operation, then jentic execute with the note resource name like notes/abc123 to remove it. Jentic handles the OAuth domain-wide delegation behind the scenes.
Can I share a note with multiple users in one call?
Yes. POST /v1/{+parent}/permissions:batchCreate accepts a list of Permission objects so an agent can grant WRITER or COMMENTER access to several users at once, and permissions:batchDelete revokes access in the same way.
Does the API allow editing existing notes?
No. The current v1 API supports list, create, delete, media download, and batch permission changes only. To modify the content of a note you must delete and recreate it.
/v1/{+parent}/permissions:batchDelete
Revoke note access from multiple principals at once