Two read scopes, asked one at a time
Search Console asks for webmasters.readonly; Analytics for analytics.readonly. Nothing is ever changed in Google.
Google Search Console and Analytics
Connect Google once and pick a property for each SEO project. Every SEO run then reads real clicks, rankings, indexing and organic outcomes, at no credit cost.
Connect a Google account
Use the Google account that can see your verified Search Console property or your GA4 property. You can connect several accounts and add the second product to an account later.
Pick a property for an SEO project
Each project reads one Search Console property and one Analytics property. Use the same project key in the step's SEO project field, e.g. acme-com.
Projects and their properties
No property is picked yet. Steps that read Google fail with a link back here until one is.
How Google access is handled
Grants are encrypted at rest
The long-lived Google grant is sealed with AES-256-GCM and bound to your account. Access tokens live in memory for one run.
Only your agents read it
A property is picked per SEO project. Search Console, URL Inspection, Analytics, and Search Opportunities steps read that pick.