A true test mode for the GBP API: create fake locations, seed reviews and metrics, then point your real integration at a byte-for-byte sandbox replica of the Google Business Profile API — no Google approval, no verified listings, no risk to production.
# Point your existing client at the sandbox — same paths, same shapes. - const HOST = "https://mybusiness.googleapis.com" + const HOST = "https://api.gbpsandbox.com" $ curl "$HOST/v4/accounts/123/locations/456/reviews?pageSize=50" \ -H "Authorization: Bearer sk_sandbox_live_..." { "reviews": [ { "starRating": "FIVE", "comment": "Fast and friendly!" } ], "averageRating": 4.6, "totalReviewCount": 128, "nextPageToken": "CgkI8aH..." }
There's no official way to safely build a Business Profile integration. So teams test against production — or not at all.
Google ships no test environment for the GBP API. Your only options are to build against live data or guess — and find the bugs in production.
New projects start at zero quota. Before a single call works you need a verified profile (60+ days old), a matching business website, and a manual approval from Google.
Test against real listings and you risk polluting verified pages, posting real public replies, and tripping rate limits. And a review you create can't be deleted via API — only the customer or Google can remove it.
Reviews and posts still live on the legacy v4 API while everything else moved to v1 — spread across several hosts, versions, and docs pages you have to stitch together yourself.
Every surface you need to build, seed, test, and automate against Google Business Profile — from a polished UI to an MCP server for your AI agents.
Create locations, seed reviews, and shape metrics from a clean UI built for humans — not config files.
A byte-for-byte copy of Google's endpoints. Point your real integration at it — only the host changes.
- https://mybusiness.googleapis.com + https://api.gbpsandbox.com # same paths, params & errors
Script setup & teardown in CI or locally.
$ gbp-sandbox seed reviews --n 200 $ gbp-sandbox reset --env ci
Seed & reset fake data programmatically.
POST /control/v1/reviews { "rating":"FIVE", "reply":null }
Drive the whole sandbox from AI agents in natural language — create locations, seed reviews, and trigger failures straight from your editor or assistant.
Faithful where it counts, controllable where it helps.
Identical paths, query params, pagination tokens, field masks, and google.rpc.Status error envelopes. Usually you change only the host.
Create reviews with any star rating and replied / unreplied state. Generate stat time series with trends, spikes, and seasonality.
Enforce Google's real limits — 300 QPM, 50 reviews per page, 10 edits/min per profile — or force a 429 on demand to test your backoff deterministically.
Trigger NOT_FOUND, PERMISSION_DENIED, eventual consistency, and other failure modes whenever you want to test the unhappy path.
A Google-looking page per location to verify your changes visually — private while you build, public and shareable when you're ready to demo.
Keep dev, staging, and CI on separate datasets with their own credentials, so parallel test runs never clobber each other's state.
The core of any GBP integration — replicated exactly, across the same Google services.
Same resource names (accounts/{id}/locations/{id}/…), same pagination, same field masks. Only the host changes. More endpoints — posts, media — on the way.
In production you can't easily test backoff; you'd have to blast hundreds of requests a minute to trigger a 429. In the sandbox, dial the limit down or force the failure on command.
# Set the sandbox to fail the next request $ gbp-sandbox quota set --qpm 5 --force-next 429 { "error": { "code": 429, "status": "RESOURCE_EXHAUSTED", "message": "Quota exceeded for quota metric 'Requests'...", "details": [{ "@type": "type.googleapis.com/google.rpc.ErrorInfo", "reason": "RATE_LIMIT_EXCEEDED", "domain": "googleapis.com" }] } }
We crawl every Google Business Profile category and attribute across 240+ countries, every day. When Google adds, renames, or removes one, it lands in the public changelog — so your integration never ships stale taxonomy and your clients' profiles never break silently.
Don't want to poll? Pro includes real-time webhooks — an HMAC-signed POST to your endpoint the moment a change is detected. Be informed, never miss a change, keep every client's data fresh.
Limits track your real scale — never how thoroughly you test. Start free, upgrade when it goes into CI.
Move one environment off real Google and stop the pollution risk today.
No credit card required
Start building freeGive dev, staging, and every CI job a clean, already-verified dataset.
billed monthly
Contact usGoogle doesn't ship an official sandbox for the Business Profile API. GBP Sandbox is a drop-in replica — same paths, parameters, field masks and response shapes on a different host — so you can test your GBP integration end-to-end without touching production.
Point your existing client at the sandbox host with a sandbox credential. No Google approval, no verified listing, no quota request — create fake locations and seed reviews from the dashboard in minutes.
No. GBP Sandbox is an independent testing tool and is not affiliated with, endorsed by, or sponsored by Google. We replicate the public API contract so you can build against it safely.
No — that's the whole point. There's no access request, no verified listing requirement, and no quota approval. Sign up and start making calls in minutes.
Yes. Paths, query parameters, pagination tokens, field masks, and response shapes match Google's, so in most cases you only change the base URL and use a sandbox credential.
Today: list locations, get attributes, list categories, update location, list reviews, reply to a review, and fetch performance metrics — across the same Google services. Posts and media are on the roadmap.
Yes. Every sandbox account is fully isolated, with its own locations, reviews, metrics, and credentials. Nothing is shared between tenants.
Your replica API access is disabled and your sandbox data is retained for a grace period, so you can pick up exactly where you left off if you resubscribe.
The Business Profile API is under-documented and full of edge cases. Our forum is where developers compare notes, report what's broken, and shape what we build next.
Found a response that doesn't match Google? Tell us and we'll fix the replica — fidelity reports jump the queue.
Need an endpoint, a fault mode, or a seeding option we don't have yet? Post it — the roadmap is built from these threads.
Quota limits, field masks, review replies, verification quirks — ask people who have already hit the same wall.
Free to join — no account required to read.
Spin up a sandbox in minutes. No Google approval required.
GBP Sandbox