How to Connect Google Search Console to Agency: A Complete Guide

Welcome to the Agentic Web

The internet is evolving. We are moving away from traditional software where you have to click around to find insights, and entering the era of the Agentic Web—where autonomous AI "Agents" do the heavy lifting for you.

To power this securely, Agency uses a 2-Step Verification system. First, you prove ownership of your property using standard Google OAuth. Then, you grant read access to our Background Service Account, which gives your autonomous AI team a secure 24/7 pipeline to your raw data even while you sleep.

Connecting Google Search Console (GSC) to Agency allows the platform to fetch your performance metrics, analyze winners and losers, automatically trigger PageSpeed scans on your top-performing pages, and build a master crawl record of your site.

1. Connect with Google (Verify Ownership)

Before our background bots are allowed to fetch any data, you must first prove that you actually own the property you are trying to connect.

Navigate to your Analyst Console Settings (https://thisisagency.ai/console/settings).
Click the Connect with Google button.
Approve the webmasters.readonly permission screen. The button will turn green and say "✅ Connected via OAuth".

2. Grant Access to the AI Service Account

Because Agency operates autonomously in the background, it cannot use a simple "Log in with Google" button for its 24/7 agents. Instead, it uses a Google Service Account—a special type of invisible user account that works entirely in the background.

On your Analyst Console Settings page, locate the Your Master Worker Email box (e.g., data-reader@...) and copy it.
Open https://search.google.com/search-console
Select your property from the top-left dropdown, click Settings, and go to Users and permissions.
Click the Add User button.
Paste the Master Worker Email into the Email address field.
Set Permission level to Restricted and click Add.

Note: If you only have "Restricted" access to the property yourself, you will not see the "Add User" button. You must ask the Property Owner to add the email on your behalf.

3. Unlock the Background Bot

Finally, tell Agency which client "door" to open and verify the connection.

In Agency, ensure you have selected your project from the top-left dropdown.
Navigate back to your Analyst Console Settings (https://thisisagency.ai/console/settings).
Under the Site URL field, enter your exact Search Console property URL (e.g., https://www.hobo-web.co.uk/ or sc-domain:hobo-web.co.uk).
Click Verify. The system will use your OAuth token from Step 1 to verify you own the property, and then permanently unlock the background bot!

Security & Privacy

We take the security of your Google Search Console data very seriously. Here is exactly how your credentials are treated:

Read-Only Access: When Agency connects to Google Search Console on your behalf, it forces a Read-Only scope (https://www.googleapis.com/auth/webmasters.readonly). It is physically impossible for Agency to make changes to your Search Console settings, delete users, or modify your property data.
The OAuth Lock: We force you to verify ownership via standard Google OAuth before our bots are allowed to fetch data. This prevents malicious users from guessing your URL and stealing your data using the master key.
Why a Service Account?: Using a Service Account allows Agency to perform background tasks (like queuing PageSpeed audits when traffic spikes) without your browser needing to be open. It restricts access strictly to the bot.

How the System Works Under the Hood

Automated Tasks

After a successful connection, Agency will immediately begin working:

Background Syncs: Agency will automatically pull the last 90 days of performance data and store it securely for analysis.
Auto-Scanning: Agency will identify your top 50 pages based on click volume and automatically queue them for performance scanning (PageSpeed/Lighthouse) to ensure your most important pages are fast.
Reporting: You will be able to view Reports, Winners & Losers, and Keyword history directly inside the Agency interface at https://thisisagency.ai/console.

Troubleshooting

If Agency reports an error accessing your site:

Ensure you added the exact Service Account email to the correct GSC property.
Ensure you spelled your property URL exactly as it appears in Search Console (including `sc-domain:` if it is a domain property).

How to Navigate the Console

Once your Search Console data is flowing, you can explore it via the tabs at the top of your Console interface.

Overview (https://thisisagency.ai/console/): Your primary dashboard showing traffic trends, overall clicks, impressions, and algorithm impact analysis.
Keywords (https://thisisagency.ai/console/keywords/): Explore the top search queries driving traffic to your site.
Winners / Losers (https://thisisagency.ai/console/winners-losers/): Automatically compares current performance against previous periods to highlight which pages and queries are gaining or losing traction.
Rank Tracker (https://thisisagency.ai/console/tracker/): Monitor your visibility and average position for specific target keywords over time.
Performance (https://thisisagency.ai/console/performance/): Automatically pulls your top-trafficked URLs directly from Search Console and sequentially triggers automated PageSpeed Insights scans (Mobile, Desktop, and Accessibility) for them. It consumes 1 credit per scan.
Talking to Elsa: Because Agency uses "frontend grounding," all the Search Console and Performance data you see in your browser is securely passed to Elsa behind the scenes. You don't need any special commands—just open the chat sidebar and ask her things like, "How is my mobile performance affecting my top keywords?" or "Summarize my Winners & Losers," and she already knows exactly what you're looking at.
Pages (https://thisisagency.ai/console/url-bank/): A complete inventory of your website's URLs, broken down into sub-tabs:
- Indexed: URLs successfully indexed by Google.
- Zero Traffic: URLs that are indexed but currently receive no clicks.
- Indexation Issues: URLs with technical issues or warnings from Google.
Connected (https://thisisagency.ai/console/import-clients/): Manage connected properties and client data.
Settings (https://thisisagency.ai/console/settings/): The setup area where you connect your Google Account and verify your target Site URL.

Works Perfectly with Google Analytics (GA4)

The best part of this "Keys vs. Doors" setup is that it works exactly the same for Google Analytics 4! Once you create your master Service Account key in Google Cloud, you can use the exact same email address for all of your clients' GA4 properties.

Read the GA4 Integration Guide →

Is this Best Practice?

Yes. The hybrid OAuth + Service Account model is the ultimate enterprise-grade security standard.

By forcing a manual OAuth check first, we completely eliminate the risk of a user hijacking the master key to view a competitor's data.

However, in the Agentic Era, software must also work for you in the background while you sleep. To achieve this securely, Google explicitly designed Service Accounts. As stated in Google's official documentation:

"A service account is a special type of Google account intended to represent a non-human user that needs to authenticate and be authorized to access data in Google APIs... It is a credential used for server-to-server interactions, such as an application without a user interface that runs as a process to access data or perform operations."

Read Google's Official Documentation on Service Accounts →

How to Disconnect

Revoking Verification (OAuth): You can revoke your personal OAuth access at any time by going to your Google Account Security settings (myaccount.google.com/connections) and removing Agency.

Revoking Bot Access (Service Account): Simply log into Search Console, go to Settings > Users and permissions, and remove the Service Account email address. Access is revoked immediately.

Agency_