Notebooklm MCP Secure

What Pantheon-Security/notebooklm-mcp-secure MCP server does

Pantheon-Security/notebooklm-mcp-secure MCP server connects MCP-compatible AI clients to Google NotebookLM. It lets an agent query notebook sources and maintain session-based conversations, while also providing operations for notebook and source management. The repository describes the responses as source-grounded, so the server is intended for research and document analysis that should stay tied to NotebookLM material.

The project also includes programmatic notebook creation, audio overview generation, video overview generation, and data-table extraction. Chat history extraction and notebook health checks are included among the documented capabilities. The standard profile exposes a subset of the available tools, with the README noting an expansion to 33 tools; the audit section refers to 48 tools overall.

How it works

Core use does not require an API key. Authentication is performed through a browser-based NotebookLM login flow, with stored browser state used for later access. The README documents setup and re-authentication safeguards, including protections against headless authentication attempts and preservation of authentication directories during cleanup.

Requests are made through MCP tool calls. Sessions allow conversations to continue across related queries, while quotas and context handling are part of the server’s NotebookLM interaction layer. Optional Gemini integration provides Gemini 3 models, Deep Research, thinking-level control, retry behavior, and structured JSON. The Document API can upload and query PDFs without relying on the browser flow, but these are optional API-backed features.

The implementation includes security controls described in the repository, including token handling, credential isolation, secrets scanning, audit logging, rate limiting, path validation, and a hybrid post-quantum encryption design for data at rest. The README also describes hash-chain verification for audit logs, write locking, schema bounds, and MCP response and annotation compliance.

Setup and configuration

The documented quick-install command uses the npm package @pan-sec/notebooklm-mcp:

npx -y @pan-sec/notebooklm-mcp@latest

For Claude, the README shows adding the server with the claude mcp add command and then completing browser authentication. The package is documented for Linux, macOS, and Windows. Because the core flow relies on browser state rather than an API key, setup should be performed in an environment where the authentication browser can open. The repository also documents a standalone authentication script and token-management functionality, but the supplied material does not specify every configuration option.

Tools and capabilities

Pantheon-Security/notebooklm-mcp-secure MCP server supports capabilities including:

• Querying NotebookLM notebooks and their sources
• Continuing conversations with session management
• Creating and managing notebooks programmatically
• Uploading or managing notebook documents and folders
• Generating audio and video overviews
• Extracting structured data tables
• Running Gemini Deep Research when the optional API integration is enabled
• Extracting chat history and checking notebook health

Limitations and notes

NotebookLM browser authentication is required for the core feature set, even though an API key is not. Gemini Deep Research and the Document API are optional integrations and may require separate API access. The README describes the architecture as ready for GDPR, SOC2, and CSSF controls, while explicitly noting that formal certification requires a third-party audit. Claims in the repository about security layers and test counts refer to specific releases and should be checked against the version being deployed.

The supplied material does not identify a software license, nor does it provide a complete environment-variable reference. It also does not establish compatibility with every MCP client; the documented installation example specifically targets Claude’s MCP command.