Stay organized with collections Save and categorize content based on your preferences.
The Google Keep API is a RESTful API used to create apps allowing enterprise administrators to manage Google Keep notes, including creating, listing, deleting, downloading note attachments, and mutating permissions of a note. An example use case for the API would be to resolve issues identified by cloud access security broker (CASB) software. For example, if your CASB software identified a note with sensitive information, the Google Keep API could be used to restrict permissions on that note, or even delete the note.
Next steps
To learn about developing with Google Workspace APIs, including handling authentication and authorization, refer to Get started as a Workspace developer.
To learn how to configure and run a simple Google Keep API app, read the Quickstarts overview.
[[["Easy to understand","easyToUnderstand","thumb-up"],["Solved my problem","solvedMyProblem","thumb-up"],["Other","otherUp","thumb-up"]],[["Missing the information I need","missingTheInformationINeed","thumb-down"],["Too complicated / too many steps","tooComplicatedTooManySteps","thumb-down"],["Out of date","outOfDate","thumb-down"],["Samples / code issue","samplesCodeIssue","thumb-down"],["Other","otherDown","thumb-down"]],["Last updated 2025-08-04 UTC."],[],[],null,["The Google Keep API is a RESTful API used to create apps allowing enterprise\nadministrators to manage Google Keep notes, including creating, listing,\ndeleting, downloading note attachments, and mutating permissions of a note.\nAn example use case for the API would be to resolve issues identified by cloud\naccess security broker (CASB) software. For example, if your CASB software\nidentified a note with sensitive information, the Google Keep API could be used to\nrestrict permissions on that note, or even delete the note.\n| **Note:** For authorization, you can use [domain-wide delegation using a service account or an OAuth client ID](https://support.google.com/a/answer/162106). Domain-wide delegation with a service account is a powerful feature where the service account can impersonate any user in the domain without manual authorization on their part. Use this option when you want the domain administrator to allow your application to programmatically access any user's Google Keep data in your domain, such as for a CASB integration to audit Google Keep data across your domain. Alternatively, use domain-wide delegation with an OAuth clientID for enterprise apps where you'd want your Administrator to approve scopes for your users, but the application can only access the authenticated user's Google Keep data.\n\nNext steps\n\n- To learn about developing with Google Workspace APIs, including handling\n authentication and authorization, refer\n to [Get started as a Workspace developer](/workspace/guides/getstarted-overview).\n\n- To learn how to configure and run a simple Google Keep API app, read the\n [Quickstarts overview](/workspace/keep/api/guides/quickstarts-overview)."]]
