Google Keep API
Browse all Google APIs✓ Official Vendor SpecProductivityNote Takingoauth26 EndpointsREST
For Agents
List, create, and delete enterprise Google Keep notes, download attached media, and adjust note permissions in bulk. Intended for Workspace admins and security tooling.
Use for: List all notes in a flagged Workspace user's Keep account, I need to delete a note that contains leaked credentials, Download the image attached to a Keep note for review, I want to share a note with three security analysts at once
Not supported: Does not handle consumer Keep accounts, note editing, label management, or reminders — use only for enterprise note listing, creation, deletion, media download, and batch permissions.
The Google Keep API gives Google Workspace administrators and security tools programmatic access to notes stored in user accounts so they can investigate and remediate findings raised by data loss prevention or insider risk software. It exposes operations to list, create, and delete notes, download attached media, and batch-manage permissions on a note. The API is restricted to enterprise contexts and is not available for consumer Keep accounts.
Install Jentic One Beta
Connect the Google Keep API to your agent
Jentic One is a self-hosted execution layer for AI agents. It lets your agent call the Google Keep API, or any other public or private API you need. You set the rules, the agent never sees your credentials, and every call is logged.
Two steps, two machines. Install the instance in a safe environment, then register your agent from wherever it runs.
1
Step 1: Jentic One Host machine
# On the machine that will host your Jentic One instance:
curl -fsSL https://raw.githubusercontent.com/jentic/jentic-one/main/tools/install.sh | sh2
Step 2: Agent machine
# On the machine where your agent runs (keep this separate from the instance):
curl -fsSL https://raw.githubusercontent.com/jentic/jentic-one/main/tools/install.sh | sh
jentic register # connects your agent to your Jentic One instanceJentic One is in public beta. The setup above keeps your agent separate from the instance, which is what you want before using real credentials: an agent running as the same OS user as Jentic One can read its stored keys directly. Just evaluating? A single local install is fine to start. See the secure deployment guide for the tiers.
Capabilities
What an agent can do with Google Keep API.
List notes in a Workspace user account for security review
Create a new note with a title and body content
Delete a note flagged by a data loss prevention scan
Download a media attachment from a note
Grant note access to multiple principals in a single batch call
Revoke note access from multiple principals in a single batch call
Use Cases
Patterns agents use Google Keep API for, with concrete tasks.
★ DLP-triggered note remediation
Workspace data loss prevention scanners flag Keep notes that contain credentials, customer PII, or regulated data. A security agent uses the Keep API to fetch the offending note via /v1/{+name}, optionally download attached media for evidence, and call DELETE /v1/{+name} to remove the violation. The API only works with enterprise Workspace accounts, which keeps the workflow within the admin perimeter.
Given a note resource name flagged by DLP, GET the note, save the media attachment, then DELETE the note and confirm the response is empty.
Bulk permission management on shared notes
When teams reorganise, security teams need to add or remove access to internal Keep notes for many principals at once. POST /v1/{+parent}/permissions:batchCreate and permissions:batchDelete accept a list of permissions in a single call so the agent can keep ACLs in sync with HR systems without making one request per user.
Call POST /v1/notes/{noteId}/permissions:batchCreate with three Permission objects granting WRITER role to three user emails.
Evidence collection for an investigation
During a security investigation an analyst needs the contents of a user's Keep notes preserved before account suspension. Listing notes with GET /v1/notes and downloading media with GET /v1/{+name} produces an evidence trail without touching the user's primary mailbox or drive.
List all notes in the target account, then for each note with attachments, download the media file and store it in the evidence bucket.
Agent-driven Keep cleanup via Jentic
A Workspace security agent invoked from a SIEM alert can use Jentic to call the Keep API without learning its resource paths. The agent searches for the right operation in natural language, and Jentic returns the schema for batch permission and delete calls so the agent can act on the alert end-to-end.
From an alert with a note resource name, run google_keep_delete_note to remove the note and post a confirmation back to the SIEM.
Key Endpoints
6 endpoints — the google keep api gives google workspace administrators and security tools programmatic access to notes stored in user accounts so they can investigate and remediate findings raised by data loss prevention or insider risk software.
METHOD
PATH
DESCRIPTION
GET
/v1/notes
List notes in the calling user's Keep account
POST
/v1/notes
Create a new note
DELETE
/v1/{+name}
Delete a note by resource name
GET
/v1/{+name}
Download a media attachment
POST
/v1/{+parent}/permissions:batchCreate
Grant note access to multiple principals at once
POST
/v1/{+parent}/permissions:batchDelete
Revoke note access from multiple principals at once
GET
/v1/notes
List notes in the calling user's Keep account
POST
/v1/notes
Create a new note
DELETE
/v1/{+name}
Delete a note by resource name
GET
/v1/{+name}
Download a media attachment
POST
/v1/{+parent}/permissions:batchCreate
Grant note access to multiple principals at once
POST
/v1/{+parent}/permissions:batchDelete
Revoke note access from multiple principals at once
Why Jentic?
Three things that make agents converge on Jentic-routed access.
Credential isolation
Workspace service account keys with domain-wide delegation are stored encrypted in the Jentic vault. Agents receive a short-lived OAuth 2.0 token scoped to the keep scopes; the JSON key file never enters the agent context.
Intent-based discovery
Agents search Jentic with intents like 'delete a google keep note' or 'list notes for a workspace user' and Jentic returns the matching v1 operation with the right resource name format already documented.
Time to first call
Direct integration: 1-2 days to set up domain-wide delegation, scope approval, and OAuth token refresh. Through Jentic: under 30 minutes — search the operation, load schema, execute.
Related APIs
Alternatives and complements available in the Jentic catalogue.
FAQs
Specific to using Google Keep API through Jentic.
What authentication does the Google Keep API use?
OAuth 2.0 with the https://www.googleapis.com/auth/keep and keep.readonly scopes. The API is restricted to Google Workspace accounts and typically uses domain-wide delegation. Through Jentic the service account credentials stay in the encrypted vault and the agent only ever sees a short-lived access token.
Can I read consumer Google Keep notes with this API?
No. The Keep API only works for enterprise Google Workspace accounts and is intended for admin or security tooling. Consumer Keep accounts have no public API and must be accessed through the Keep app.
What are the rate limits for the Google Keep API?
Google enforces a default quota of 1,200 read and 600 write requests per minute per project, shared across all 6 endpoints. Higher quotas can be requested through the Google Cloud console for large Workspace tenants.
How do I delete a flagged note through Jentic?
Run jentic search 'delete a google keep note' to find the DELETE /v1/{+name} operation, then jentic execute with the note resource name like notes/abc123 to remove it. Jentic handles the OAuth domain-wide delegation behind the scenes.
Can I share a note with multiple users in one call?
Yes. POST /v1/{+parent}/permissions:batchCreate accepts a list of Permission objects so an agent can grant WRITER or COMMENTER access to several users at once, and permissions:batchDelete revokes access in the same way.
Does the API allow editing existing notes?
No. The current v1 API supports list, create, delete, media download, and batch permission changes only. To modify the content of a note you must delete and recreate it.
GET STARTED