/ 100

25 days ago

glama

NotebookLM MCP Server (Security Hardened)

Enables AI agents to interact with Google NotebookLM and Gemini API for document analysis, deep research, and notebook creation with enterprise-grade security including post-quantum encryption and 14 security layers.

→ Pantheon-Security/notebooklm-mcp-secure · listed on glama

Is this your MCP?

Claim it to get a verified publisher badge, a free copy of our full audit findings, and direct contact for any high-priority issues we find.

Install from

Glama github_topic

M8ven verifies MCPs across every public registry — install directly from whichever one you prefer.

// key findings

✅

No credential exfiltration, no sensitive file access, no obfuscation

Static analysis found nothing flowing your secrets to unexpected places.

✅

Open source with a license and README

Anyone can audit the code, the license is declared, and the publisher documents what it does.

🔐

You'll be asked for 9 credentials: GEMINI_API_KEY, LOGIN_PASSWORD, NLMCP_AUDIT_CHECKPOINT_KEY, NLMCP_AUTH_READONLY_TOKEN, NLMCP_AUTH_TOKEN, NLMCP_ENCRYPTION_KEY, NLMCP_SIEM_API_KEY, NLMCP_USE_MACHINE_KEY, NLMCP_WEBHOOK_SECRET

These are read from process.env at runtime. Make sure you trust where they’ll be sent.

// required environment variables

This server reads these from process.env. You'll be asked to provide them before it can run.

configAUTO_LOGIN_ENABLED

configAUTO_LOGIN_TIMEOUT_MS

configBROWSER_TIMEOUT

configCOMPUTERNAME

🔐 secretGEMINI_API_KEY— ### Gemini API (Optional - Requires )

configGEMINI_DEEP_RESEARCH_ENABLED— true # Enable Deep Research

configGEMINI_DEFAULT_MODEL— gemini-3-flash-preview # Default model (was gemini-2.5-flash)

configGEMINI_TIMEOUT_MS— 30000 # API timeout

configHEADLESS

configHOSTNAME

configLOGIN_EMAIL

🔐 secretLOGIN_PASSWORD

configMAX_DELAY_MS

configMAX_SESSIONS

configMIN_DELAY_MS

configNLMCP_ADVANCED_TOOLS

configNLMCP_ALERTS_COOLDOWN

configNLMCP_ALERTS_ENABLED

configNLMCP_ALERTS_FILE

configNLMCP_ALERTS_MAX_PER_HOUR

configNLMCP_ALERTS_MIN_SEVERITY

configNLMCP_ALERTS_WEBHOOK_HEADERS

configNLMCP_ALERTS_WEBHOOK_URL

configNLMCP_ALLOWED_DOMAINS

🔐 secretNLMCP_AUDIT_CHECKPOINT_KEY

configNLMCP_AUDIT_CHECKPOINT_PATH

configNLMCP_AUDIT_DIR

configNLMCP_AUDIT_ENABLED

configNLMCP_AUDIT_HASH_CHAIN

configNLMCP_AUDIT_INCLUDE_DETAILS

configNLMCP_AUDIT_RETENTION_DAYS

configNLMCP_AUTH_DISABLED

configNLMCP_AUTH_ENABLED— env =true \

configNLMCP_AUTH_LOCKOUT_MS

configNLMCP_AUTH_MAX_FAILED

🔐 secretNLMCP_AUTH_READONLY_TOKEN

configNLMCP_AUTH_ROTATION_INTERVAL_HOURS

🔐 secretNLMCP_AUTH_TOKEN— env =$(openssl rand -base64 32) \

configNLMCP_AUTH_TOKEN_FILE

configNLMCP_BLOCK_ENCODED_PAYLOADS

configNLMCP_BLOCK_PROMPT_INJECTION

configNLMCP_BLOCK_SUSPICIOUS_URLS

configNLMCP_BREACH_DETECTION

configNLMCP_COMPLIANCE_DIR

configNLMCP_COMPLIANCE_ENABLED

configNLMCP_COMPLIANCE_LOGGING

configNLMCP_COMPLIANCE_RETENTION_YEARS

configNLMCP_CONFIG_DIR

configNLMCP_CONSENT_REQUIRED

configNLMCP_CONSENT_VERSION

configNLMCP_DEBUG

configNLMCP_DISCORD_WEBHOOK_URL

configNLMCP_ENCRYPTION_ENABLED

🔐 secretNLMCP_ENCRYPTION_KEY— base64-32-bytes # Optional custom key

configNLMCP_ENCRYPTION_KEY_FILE

configNLMCP_EXPORT_DIR

configNLMCP_FOLDER_ALLOWLIST

configNLMCP_FOLLOW_UP_ENABLED

configNLMCP_FOLLOW_UP_REMINDER

configNLMCP_HEALTH_CHECK_INTERVAL

configNLMCP_HEALTH_MONITORING

configNLMCP_LOG_FORMAT

configNLMCP_PBKDF2_ITERATIONS

configNLMCP_PRIVACY_NOTICE_URL

configNLMCP_QUERY_LOG_DIR

configNLMCP_QUERY_LOG_ENABLED

configNLMCP_QUERY_LOG_RETENTION_DAYS

configNLMCP_RESPONSE_TIMEOUT_MS

configNLMCP_RESPONSE_VALIDATION

configNLMCP_SECRETS_BLOCK— false # Block on detection

configNLMCP_SECRETS_IGNORE

configNLMCP_SECRETS_MIN_SEVERITY

configNLMCP_SECRETS_REDACT— true # Auto-redact

configNLMCP_SECRETS_SCANNING

configNLMCP_SESSION_HARD_TIMEOUT

configNLMCP_SESSION_INACTIVITY— 1800 # 30 minutes

configNLMCP_SESSION_INACTIVITY_TIMEOUT

configNLMCP_SESSION_MAX_LIFETIME— 28800 # 8 hours

configNLMCP_SESSION_WARNING_BEFORE

🔐 secretNLMCP_SIEM_API_KEY

configNLMCP_SIEM_ENABLED

configNLMCP_SIEM_ENDPOINT

configNLMCP_SIEM_SYSLOG_HOST

configNLMCP_SLACK_WEBHOOK_URL

🔐 secretNLMCP_USE_MACHINE_KEY

configNLMCP_USE_POST_QUANTUM

configNLMCP_WARN_SUSPICIOUS

configNLMCP_WEBHOOK_ALLOW_HTTP

configNLMCP_WEBHOOK_EVENTS

configNLMCP_WEBHOOK_RESOLVE_DNS

🔐 secretNLMCP_WEBHOOK_SECRET

configNLMCP_WEBHOOK_URL

configNOTEBOOKLM_DISABLED_TOOLS— Comma-separated list of tools to hide

configNOTEBOOKLM_NO_GEMINI— v2026.1.11 Notebook sync extraction for new Angular UI, env var

configNOTEBOOKLM_PROFILE— standard # minimal (5 tools) standard (33 tools) full (all 47)

configNOTEBOOK_CLEANUP_ON_SHUTDOWN

configNOTEBOOK_CLEANUP_ON_STARTUP

configNOTEBOOK_CLONE_PROFILE— true # Clone auth from base profile

configNOTEBOOK_CONTENT_TYPES

configNOTEBOOK_DESCRIPTION

configNOTEBOOK_INSTANCE_MAX_COUNT

configNOTEBOOK_INSTANCE_TTL_HOURS

configNOTEBOOK_PROFILE_STRATEGY— isolated # isolatedsingleauto

configNOTEBOOK_TOPICS

configNOTEBOOK_URL

configNOTEBOOK_USE_CASES

configSESSION_TIMEOUT

configSTEALTH_ENABLED

configSTEALTH_HUMAN_TYPING

configSTEALTH_MOUSE_MOVEMENTS

configSTEALTH_RANDOM_DELAYS

configTEST_NOTEBOOK_URL

configTYPING_WPM_MAX

configTYPING_WPM_MIN

// full audit trail

The full breakdown of what we checked, the deductions that landed, the network hosts, the dependency advisories, and concrete fix guidance is available to verified publishers.

// improvement guidance — verified publishers only

We have 5 concrete improvements we can share with the publisher of this MCP. Each comes with specific guidance to raise the trust score.

// embed badge in your README

[![M8ven Score](https://m8ven.ai/badge/mcp/pantheon-security-notebooklm-mcp-secure-1afg7b)](https://m8ven.ai/mcp/pantheon-security-notebooklm-mcp-secure-1afg7b)

commit: 778fcc003c854a7ee37be9f5f4b82152352ccc9a

code hash: 19a84fcf180d7e62ff6db9d92bafd1bcce12d7cb5ac09e764ddd31331fa8c1bd

verified: 6/18/2026, 10:41:17 AM

view raw JSON →