OpenGMB

[OpenGMB, the open-source Google Business Profile manager with approval rules and an MCP server]

[License: MIT] [CI] [GitHub stars] [MCP server] [Self-host with Docker] [Next.js 16] [PostgreSQL]

Website · Docs · Self-host guide · MCP tools · Roadmap · Hosted version

OpenGMB

OpenGMB manages Google Business Profiles for local businesses and the agencies that run them. Reviews, review replies, posts, profile edits, performance, reports and Maps rank tracking, for every location, in one place.

Two things make it different. Every reply, post and profile edit passes a set of rules and waits for a person to approve it before Google sees it. And every action in the app is also an MCP tool, so Claude, Cursor or any MCP client can do the routine work while you keep the final say.

This repository is the community edition: MIT licensed, self-hosted with Docker Compose, your own keys, one owner login for as many clients and locations as you need. It talks to Google only through the official Business Profile API.

[The OpenGMB reviews inbox with filters, replied badges and a review assigned to a teammate]

Why we built it

We run an SEO agency and manage Google Business Profiles for clinics and local businesses. The tools we paid for charged per location, so the bill grew with every client before any work got done. And when we tried AI for replies and posts, we wanted it to draft the routine work while a person still signed off on everything that went live.

So we built the tool we wanted, used it for our own work, and opened the core.

What it does

Also in the community edition:

• Rank tracking on a geo-grid around each location, next to its competitors, with your own DataForSEO account.
• AI drafts for replies, posts and descriptions with your own Anthropic key. No credits, no markup.
• Review requests with tracked links, QR codes and public location pages, and no review gating.
• Approvals inbox, location groups, white-label branding on reports.
• REST API (v1), outgoing webhooks, and the source of the Zapier app.
• Two-factor sign-in (required) and an append-only, hash-chained audit log.

Built for AI agents

The MCP server exposes around 250 tools, one for every action in the app: list reviews, draft and submit replies, schedule posts, edit hours, pull performance, run a health check, and more. Writes go through the same guardrails and approvals as the web app.

Create a token in Settings → API tokens (read only, or read and write), then add the server to your client. For Claude Code:

claude mcp add --transport http opengmb https://your-mcp-host/mcp \  --header "Authorization: Bearer sgmb_your_token"

Then ask in plain words:

Draft replies for this week's 1- and 2-star reviews at every location, and put them in the approval queue.

Which locations lost the most calls last month compared with the month before?

Schedule a holiday hours post for all dental clients for Friday, and send it for approval.

A human-in-the-loop token can draft and submit, but it cannot approve or publish. Every tool, with its inputs and the permission it needs, is listed at opengmb.synectus.com/docs/mcp/tools.

Nothing goes live without a person

The rules run again just before anything is sent to Google.

Quick start

You need Docker Engine 24 or newer with the Compose plugin, about 4 GB of free RAM while the images build, and a public HTTPS hostname if you want Google sign-in.

git clone https://github.com/synectus/OpenGMB.gitcd OpenGMB/deploy/selfhostcp .env.example .env     # set OWNER_EMAIL and OWNER_PASSWORD; the comments explain every valuedocker compose up -d --build

Open http://localhost:8080 and sign in with the owner email and password. Two-factor sign-in is required, so have an authenticator app ready and keep the backup codes it shows.

The Google client starts in mock mode: under Settings → Google, press "Use the sample Google account" to import sample locations and click through everything without any Google keys. Going live needs Google's approval of Business Profile API access for your own Google Cloud project, which you request yourself and which can take a few days.

SETUP.md covers every step: ports, email, Google, backups and upgrades. The same guide is online at opengmb.synectus.com/docs/self-hosting.

How it fits together

flowchart LR  you([You and your team]) --> web[Web app<br/>Next.js]  agent([Claude, Cursor or any<br/>MCP client]) --> mcp[MCP server]  zap([Zapier and scripts]) --> mcp  web --> core[Core<br/>actions, permissions,<br/>guardrails, audit log]  mcp --> core  worker[Worker<br/>sync, publishing,<br/>reports, schedules] --> core  core --> db[(PostgreSQL)]  core --> google[Google Business<br/>Profile API]  core -. optional .-> ai[Anthropic API]  core -. optional .-> dfs[DataForSEO]

Every surface (web, MCP, REST, worker) runs the same actions through one executor, so permissions, guardrails and the audit log apply the same way no matter who or what makes the change.

The docker-compose.yml at the repository root is only a development Postgres for contributors.

Community edition or hosted

If you would rather not run servers or wait for Google's API approval, the hosted version gives you $0.50 of trial credit with no card.

Roadmap

What we are working on and what comes next is public at opengmb.synectus.com/roadmap. Ideas and bug reports are welcome as GitHub issues.

Contributing

Pull requests are welcome. Read CONTRIBUTING.md first: commits need a DCO sign-off, and accepted changes are merged in our main repository and then synced here, with credit to you. Report vulnerabilities privately, as described in SECURITY.md.

License and trademarks

The code is released under the MIT license. Third-party notices are in THIRD_PARTY_NOTICES.md.

The license covers the code, not the OpenGMB name or logo, which are trademarks of Synectus Private Limited. A fork needs its own name and logo. See TRADEMARKS.md.

OpenGMB is made by Synectus. It is not affiliated with or endorsed by Google. Google Business Profile is a trademark of Google LLC.

Star history