Notebooklm MCP Secure logo

Notebooklm MCP Secure

by Pantheon-Security

Queries and manages Google NotebookLM notebooks through MCP with browser authentication, research features, and security controls.

Install Notebooklm MCP Secure

Pick your client, then add it in one click or paste the config.

STDIONode.js
~/Library/Application Support/Claude/claude_desktop_config.json
claude_desktop_config.json
{
  "mcpServers": {
    "pantheon-security-notebooklm-mcp-secure": {
      "command": "npx",
      "args": [
        "-y",
        "@pan-sec/notebooklm-mcp@latest"
      ]
    }
  }
}

Settings → Developer → Edit Config, merge this into mcpServers, then fully quit and reopen Claude Desktop.

Automated check passed— started and listed 25 tools correctly (1mo ago).

Overview

Pantheon-Security/notebooklm-mcp-secure MCP server exposes Google NotebookLM capabilities to Claude and other MCP clients. It uses browser-based authentication for core features and supports notebook queries, session conversations, notebook management, source handling, and generated overviews. Optional Gemini and Document API features add Deep Research, document uploads, and model controls. Reach for it when an agent needs source-grounded work over NotebookLM content with local security and audit features.

Use cases

  • Query NotebookLM sources from an AI agent
  • Create and organize research notebooks programmatically
  • Generate audio, video, or table summaries from notebook content
  • Run source-grounded research over uploaded documents
  • Audit and protect local NotebookLM agent workflows

Key features

  • NotebookLM queries with session-based conversations
  • Programmatic notebook and source management
  • Audio and video overview generation
  • Structured data-table extraction
  • Optional Gemini Deep Research and Document API support
  • Security controls including audit logs and credential isolation

Tools25

What Notebooklm MCP Secure lets your agent do. Expand a tool for its parameters.

Verified live~7.4k tokens of context

Security & health

What it can reach and how reliably it runs — from our own checks, not the maintainer’s claims.

ActiveLast checked 1d ago

Recent health check succeeded.

20/21 checks healthy over the last 78d

Supply-chain signal

No high-severity advisories surfaced by our automated scan.

Critical 0High 0Medium 0Low 0

Scanned 8d ago via OSV.dev · @pan-sec/notebooklm-mcp@latest (npm)

Adoption & maintenance

Factual signals from GitHub, npm, and our automated checks — not a rating.

GitHub stars87Stargazers on the source repository.
npm downloads1.1kPackage downloads in the last 30 days.
Last commit1mo agoMost recent push to the default branch.
Availability100%Our rolling endpoint + install checks that succeeded.
Install checkPassedOur sandbox started it and listed its tools.
Tools exposed25Callable tools this server registers over MCP.
Directory activity4 viewsConfig copies, upvotes, and views on AllMCPs.

How Notebooklm MCP Secure works

What Pantheon-Security/notebooklm-mcp-secure MCP server does

Pantheon-Security/notebooklm-mcp-secure MCP server connects MCP-compatible AI clients to Google NotebookLM. It lets an agent query notebook sources and maintain session-based conversations, while also providing operations for notebook and source management. The repository describes the responses as source-grounded, so the server is intended for research and document analysis that should stay tied to NotebookLM material.

The project also includes programmatic notebook creation, audio overview generation, video overview generation, and data-table extraction. Chat history extraction and notebook health checks are included among the documented capabilities. The standard profile exposes a subset of the available tools, with the README noting an expansion to 33 tools; the audit section refers to 48 tools overall.

How it works

Core use does not require an API key. Authentication is performed through a browser-based NotebookLM login flow, with stored browser state used for later access.

Requests are made through MCP tool calls. Sessions allow conversations to continue across related queries, while quotas and context handling are part of the server’s NotebookLM interaction layer. Optional Gemini integration provides Gemini 3 models, Deep Research, thinking-level control, retry behavior, and structured JSON. The Document API can upload and query PDFs without relying on the browser flow, but these are optional API-backed features.

The implementation includes security controls described in the repository, including token handling, credential isolation, secrets scanning, audit logging, rate limiting, path validation, and a hybrid post-quantum encryption design for data at rest.

Setup and configuration

The documented quick-install command uses the npm package @pan-sec/notebooklm-mcp:

Terminal
npx -y @pan-sec/notebooklm-mcp@latest

The package is documented for Linux, macOS, and Windows. Because the core flow relies on browser state rather than an API key, setup should be performed in an environment where the authentication browser can open.

Tools and capabilities

Pantheon-Security/notebooklm-mcp-secure MCP server supports capabilities including:

  • Querying NotebookLM notebooks and their sources
  • Continuing conversations with session management
  • Creating and managing notebooks programmatically
  • Uploading or managing notebook documents and folders
  • Generating audio and video overviews
  • Extracting structured data tables
  • Running Gemini Deep Research when the optional API integration is enabled
  • Extracting chat history and checking notebook health

Limitations and notes

NotebookLM browser authentication is required for the core feature set, even though an API key is not. Gemini Deep Research and the Document API are optional integrations and may require separate API access. Claims in the repository about security layers and test counts refer to specific releases and should be checked against the version being deployed.

It also does not establish compatibility with every MCP client; the documented installation example specifically targets Claude’s MCP command.

Reviews

No reviews yet — be the first to share how it worked for you.

Frequently Asked Questions about Notebooklm MCP Secure

Run `npx -y @pan-sec/notebooklm-mcp@latest`, or use the documented `claude mcp add` setup for Claude.

No API key is required for the core features; they use browser authentication. Optional Gemini and Document API features may require separate API access.

Yes.

Yes. It documents audio overviews and video overviews, along with data-table generation.

Related MCP servers

Add a badge to your READMEShow it’s listed — live SVG, Markdown or HTML.

AllMCPs Directory Badge

Full Badge Customizer

Showcase your server listing on GitHub or your project documentation. Embed this dynamic SVG badge to highlight official listing status and live engagement.

Badge Style:
Live Dynamic SVG PreviewNotebooklm MCP Secure AllMCPs Directory Badge
Markdown (GitHub README)
[![AllMCPs](https://allmcps.com/api/badge/pantheon-security-notebooklm-mcp-secure?style=directory)](https://allmcps.com/mcp/pantheon-security-notebooklm-mcp-secure)
HTML Embed
<a href="https://allmcps.com/mcp/pantheon-security-notebooklm-mcp-secure"><img src="https://allmcps.com/api/badge/pantheon-security-notebooklm-mcp-secure?style=directory" alt="Notebooklm MCP Secure on AllMCPs" /></a>