The Google Keep API is a RESTful API used to create apps allowing enterprise
administrators to manage Google Keep notes, including creating, listing,
deleting, downloading note attachments, and mutating permissions of a note.
One use case for the API is resolving issues identified by cloud access
security broker (CASB) software. For example, if your CASB software identifies
a note with sensitive information, use the Google Keep API to restrict
permissions on that note or delete the note.

> [!NOTE]
> **Note:** For authorization, you can use [domain-wide delegation using a service account or an OAuth client ID](https://support.google.com/a/answer/162106). Domain-wide delegation with a service account is a powerful feature where the service account can impersonate any user in the domain without manual authorization on their part. Use this option when you want the domain administrator to allow your application to programmatically access any user's Google Keep data in your domain, such as for a CASB integration to audit Google Keep data across your domain. Alternatively, use domain-wide delegation with an OAuth client ID for enterprise apps where you'd want your Administrator to approve scopes for your users, but the application can only access the authenticated user's Google Keep data.

## Next steps

- To learn about developing with Google Workspace APIs, including handling
  authentication and authorization, refer to
  [Get started as a Workspace developer](https://developers.google.com/workspace/guides/getstarted-overview).

- To learn how to configure and run a Google Keep API app, read the
  [Quickstarts overview](https://developers.google.com/workspace/keep/api/guides/quickstarts-overview).