notebooklm-mcp-secure
Secure NotebookLM MCP Server - Query Google NotebookLM from Claude/AI agents with 17 security hardening layers
Install / Use
claude mcp add Pantheon-Security -- npx -y github:Pantheon-Security/notebooklm-mcp-secureIf the server publishes to npm under a different name, use that package instead — check the repo README.
MCP Server
Model Context Protocol server
Quality Score
Category
SecuritySupported Platforms
Our assessment of notebooklm-mcp-secure
notebooklm-mcp-secure scores 43/100 on our quality scale, 1091st of 1,102 Security skills we index.
Its MCP Server is 3.8 KB long, written without headings and no code examples: a solid amount of guidance for an agent.
It has no GitHub stars yet, so there is no community track record; judge it on its content.
Maintenance, license and trust
- We could not determine when the repository was last updated.
- Our last check on 2026-08-30 found the source still online.
- No license is declared. By default that means all rights are reserved: you can read it, but reusing or redistributing it is not clearly permitted. Ask the author before building on it commercially.
- Its trust signals score 68/100, with 3 cautions from licensing, adoption, age or documentation. These come from repository metadata, not a code audit — read the skill file before letting an agent act on it.
Safety scan
No issues foundOur scan of the whole file found no instruction hijacking, hidden characters, credential access, data exfiltration or destructive commands. An AI review of the same text found nothing harmful.
AI review by kimi-k2.7-code on 2026-11-03. Automated pattern scan on 2026-11-03. It catches known dangerous patterns, not every risk — read a skill before letting an agent act on it.
notebooklm-mcp-secure compared with similar skills
All 4 of these similar skills score higher than notebooklm-mcp-secure; compare them before choosing.
| Skill | Score | Stars | Updated | Format |
|---|---|---|---|---|
| notebooklm-mcp-secure (this skill)by Pantheon-Security | 43 | 0 | — | MCP Server |
| Agent-Reachby Panniantong | 100 | 109.2k | today | CLAUDE.md |
| headroomby headroomlabs-ai | 100 | 78.9k | today | CLAUDE.md |
| CowAgentby zhayujie | 100 | 47.8k | today | CLAUDE.md |
| Scraplingby D4Vinci | 100 | 97.9k | today | MCP Server |
Frequently asked questions
- How do I install notebooklm-mcp-secure?
- Run
claude mcp add Pantheon-Security -- npx -y github:Pantheon-Security/notebooklm-mcp-secure. The install tabs above show the steps for each supported agent. - Which AI agents does notebooklm-mcp-secure work with?
- It is written for Claude Code and Claude Desktop, as a MCP Server file. Other agents that read the same format can often use it too.
- Is notebooklm-mcp-secure safe to use?
- Our scan of the whole file found no instruction hijacking, hidden characters, credential access, data exfiltration or destructive commands. An AI review of the same text found nothing harmful. It declares no license and scores 68/100 on trust signals. Skills are instructions an agent will follow, so read the file before installing it and do not approve commands you do not understand.
- Is notebooklm-mcp-secure still maintained?
- We could not determine when the repository was last updated.
Skill content
View source on GitHub{ "name": "@pan-sec/notebooklm-mcp", "version": "2026.5.0", "mcpName": "io.github.Pantheon-Security/notebooklm-mcp-secure", "description": "Security-hardened MCP server for NotebookLM API with compliance-ready architecture (GDPR, SOC2, CSSF controls implemented)", "type": "module", "bin": { "notebooklm-mcp": "dist/index.js" }, "scripts": { "build": "tsc", "build:publish": "node -e "require('fs').rmSync('dist',{recursive:true,force:true})" && tsc -p tsconfig.build.json", "postbuild": "node -e "if(process.platform!=='win32'){require('fs').chmodSync('dist/index.js',0o755)}"", "prepublishOnly": "npm run build:publish && node -e "if(process.platform!=='win32'){require('fs').chmodSync('dist/index.js',0o755)}"", "watch": "tsc --watch", "dev": "tsx watch src/index.ts", "prepare": "npm run build:publish", "ci:install": "npm ci --ignore-scripts", "test": "npx vitest run", "test:integration": "npx vitest run tests/mcp-server.integration.test.ts", "test:property": "npx vitest run tests/property-based.test.ts", "test:mutation": "npx stryker run --dryRunOnly", "test:watch": "npx vitest", "test:coverage": "npx vitest run --coverage", "security-check": "npm audit", "security-scan": "medusa scan . --fail-on high", "discover-selectors": "npx tsx scripts/run-discovery.ts" }, "keywords": [ "mcp", "notebooklm", "gemini", "ai", "claude", "security", "hardened", "gdpr", "soc2", "cssf", "compliance", "enterprise", "audit-logging" ], "author": "Pantheon Security support@pantheonsecurity.io (https://pantheonsecurity.io)", "contributors": [ "Gérôme Dexheimer hello@geromedexheimer.de (https://github.com/PleasePrompto) - Original Author" ], "license": "MIT", "repository": { "type": "git", "url": "git+https://github.com/Pantheon-Security/notebooklm-mcp-secure.git" }, "homepage": "https://github.com/Pantheon-Security/notebooklm-mcp-secure#readme", "bugs": { "url": "https://github.com/Pantheon-Security/notebooklm-mcp-secure/issues" }, "files": [ "dist", "server.json", "README.md", "SECURITY.md", "LICENSE" ], "dependencies": { "@google/genai": "1.41.0", "@modelcontextprotocol/sdk": "1.29.0", "@noble/post-quantum": "0.5.4", "dotenv": "17.2.3", "env-paths": "4.0.0", "globby": "16.1.0", "patchright": "1.57.0", "pdf-lib": "1.17.1" }, "overrides": { "@google/genai": { "protobufjs": "7.5.5" }, "glob": { "minimatch": "9.0.7" }, "micromatch": { "picomatch": "2.3.2" } }, "devDependencies": { "@stryker-mutator/core": "9.6.1", "@types/node": "20.19.30", "@vitest/coverage-v8": "4.1.4", "fast-check": "4.7.0", "tsx": "4.21.0", "typescript": "5.3.3" }, "engines": { "node": ">=18.0.0" }, "securityHardening": { "inputValidation": true, "urlWhitelisting": true, "rateLimiting": true, "logSanitization": true, "credentialMasking": true, "auditLogging": true, "sessionTimeout": true, "mcpAuthentication": true, "responseValidation": true, "postQuantumEncryption": true, "secretsScanning": true, "memoryScrubbing": true, "medusaIntegration": true, "secureByDefaultAuth": true, "exponentialBackoffLockout": true, "credentialIsolation": true }, "enterpriseCompliance": { "gdpr": { "consentManagement": true, "dataSubjectRights": true, "dataPortability": true, "rightToErasure": true, "privacyNotice": true }, "soc2": { "hashChainedAuditLogs": true, "changeManagement": true, "incidentResponse": true, "availabilityMonitoring": true }, "cssf": { "sevenYearRetention": true, "siemIntegration": true, "policyDocumentation": true } } }
Related Skills
Agent-Reach
109.2kGive your AI agent eyes to see the entire internet. Read & search Twitter, Reddit, YouTube, GitHub, Bilibili, XiaoHongShu — one CLI, zero API fees.
headroom
78.9kCompress tool outputs, logs, files, and RAG chunks before they reach the LLM. 20% fewer tokens for coding agents, 60-95% fewer tokens for JSON, same answers. Library, proxy, MCP server.
CowAgent
47.8kOpen-source personal AI assistant & Agent Harness. Plans tasks, runs tools and skills, self-evolves with memory and knowledge. Multi-agent, multi-model, multi-channel. Lightweight, extensible, one-line install.
Scrapling
97.9k🕷️ The BEST Web Scraping framework that handles everything from a single request to a full-scale crawl! Don't be shy, join here: https://discord.gg/EMgGbDceNQ and follow here for daily tips and tricks: https://x.com/Scrapling_dev
Trust signals
From repository metadata: license, adoption, age and documentation. Not a code audit — see the Safety scan above for what the skill file itself contains.