Repository navigation
gws auth login does not include Google Keep scope #184
Description
Body:
When running gws auth login, the interactive scope selection menu shows 9 scopes but does not include https://www.googleapis.com/auth/keep, even when keep is explicitly listed in the gws mcp -s services.
Steps to reproduce:
Run gws auth login
Observe the scope selection menu — Keep scope is absent
Run gws keep notes list → returns 403 Request had insufficient authentication scopes
Expected behavior:
When keep is a supported service (gws mcp -s keep works), its required OAuth scope should be included in the auth login flow automatically.
Workaround attempted:
bash
GOOGLE_WORKSPACE_CLI_EXTRA_SCOPES="https://www.googleapis.com/auth/keep" gws auth login
The env var GOOGLE_WORKSPACE_CLI_EXTRA_SCOPES does not appear to be supported — Keep scope still missing from the menu.
Environment:
OS: Ubuntu (WSL2 on Windows 11)
gws version: gws --version
Node: node --version
Sonnet 4.6
Activity
schoberwirt commentedon Mar 5, 2026
Same problem. Keep was the one thing I actually was the most excited for.
GLunPy commentedon Mar 7, 2026
Same issue here
sangwook-kim commentedon Mar 7, 2026
same issue. I look forward to this scope to be included.
defel commentedon Mar 9, 2026
Damn it, I thought this was just a small bug, but keep is intentionally not included, as API access is only enabled for enterprise with service-account access.
Here it is filtered out for OAuth2 auth: https://github.com/googleworkspace/cli/blob/main/src/setup.rs#L288-L294
Here is the issue on the Google issue tracker:
https://issuetracker.google.com/issues/263769283?pli=1
And while opening up this API, please also add API-Access for NotebookLM 🙏thanks google