Slightly embarrassed to ask but I clicked into /search-console and hit a Google sign-in screen, then chickened out. What exactly am I authorizing, and is it safe? I manage a client's property so I want to be sure I'm not handing over anything I shouldn't.
Totally reasonable to pause there. The connection uses Google's official OAuth, and we request read-only scopes — we can read your Search Console performance data and analytics, we cannot change anything in your Google account or your site. You can revoke access anytime from your Google security settings.
For a client property: as long as your Google account has access to that property in Search Console, the connection will surface it. If you're a delegated user rather than owner, that's fine and often the safer setup. Once connected, /search-console and the audit tools start pulling your real query, impression, and click data instead of estimates.
Read-only was the magic phrase. Connected it just now and my actual queries are showing up. Much better than the guesswork I was living with.
Worth adding: connecting GSC also unlocks better AI readiness scoring because the tool can see which of your real ranking pages are or aren't getting cited. Don't skip it.
