gws auth login does not include Google Keep scope

[rubensmau]

Body:
When running gws auth login, the interactive scope selection menu shows 9 scopes but does not include https://www.googleapis.com/auth/keep, even when keep is explicitly listed in the gws mcp -s services.
Steps to reproduce:

Run gws auth login
Observe the scope selection menu — Keep scope is absent
Run gws keep notes list → returns 403 Request had insufficient authentication scopes

Expected behavior:
When keep is a supported service (gws mcp -s keep works), its required OAuth scope should be included in the auth login flow automatically.
Workaround attempted:
bash
GOOGLE_WORKSPACE_CLI_EXTRA_SCOPES="https://www.googleapis.com/auth/keep" gws auth login
The env var GOOGLE_WORKSPACE_CLI_EXTRA_SCOPES does not appear to be supported — Keep scope still missing from the menu.
Environment:

OS: Ubuntu (WSL2 on Windows 11)
gws version: gws --version
Node: node --version
Sonnet 4.6

[schoberwirt]

Same problem. Keep was the one thing I actually was the most excited for.

[GLunPy]

Same issue here

[sangwook-kim]

same issue. I look forward to this scope to be included.

[defel]

Damn it, I thought this was just a small bug, but keep is intentionally not included, as API access is only enabled for enterprise with service-account access.

Here it is filtered out for OAuth2 auth: https://github.com/googleworkspace/cli/blob/main/src/setup.rs#L288-L294

Here is the issue on the Google issue tracker:
https://issuetracker.google.com/issues/263769283?pli=1

And while opening up this API, please also add API-Access for NotebookLM 🙏thanks google

[jadbox]

I agree with @defel. Please do not be a gatekeeper on my Keep notes. This is not an Enterprise feature!

Edit: At least allow this feature if I am a Google One subscriber.

[pyrexfm]

Exactly. The sole reason I'm using Keep is because it's what Google Nest integrates with. If I'm locked down here, I'll probably change the speaker...
Also, who the hell uses Keep in Enterprise?

[krzyk]

Pretty wild that Keep does have API on Enterprise level, where it has very few cases that it us useful and does not have API on for consumers that it has way more uses (e.g. shopping lists).

Fortunately there are libs that workaround that (I haven't tried them yet), but it is a pity that gws does not. I was so hopeful for it, Google Keep was my first thought how I'll use it (gmail is another, yet to see it if can use it to retrieve titles, emails and attachments).