/ 100

1 month ago

github_topic

notebooklm-mcp-secure

Item: notebooklm-mcp-secure
Rating: 74
Author: M8ven

Secure NotebookLM MCP Server - Query Google NotebookLM from Claude/AI agents with 17 security hardening layers

→ Pantheon-Security/notebooklm-mcp-secure · listed on github_topic

Is this your MCP?

Claim it to get a verified publisher badge, a free copy of our full audit findings, and direct contact for any high-priority issues we find.

Install from

GitHub Glama

M8ven verifies MCPs across every public registry — install directly from whichever one you prefer.

// key findings

✅

No credential exfiltration, no sensitive file access, no obfuscation

Static analysis found nothing flowing your secrets to unexpected places.

✅

Open source with a license and README

Anyone can audit the code, the license is declared, and the publisher documents what it does.

🔐

You'll be asked for 9 credentials: GEMINI_API_KEY, LOGIN_PASSWORD, NLMCP_AUDIT_CHECKPOINT_KEY, NLMCP_AUTH_READONLY_TOKEN, NLMCP_AUTH_TOKEN, NLMCP_ENCRYPTION_KEY, NLMCP_SIEM_API_KEY, NLMCP_USE_MACHINE_KEY, NLMCP_WEBHOOK_SECRET

These are read from process.env at runtime. Make sure you trust where they’ll be sent.

// required environment variables

This server reads these from process.env. You'll be asked to provide them before it can run.

configAUTO_LOGIN_ENABLED

configAUTO_LOGIN_TIMEOUT_MS

configBROWSER_TIMEOUT

configCOMPUTERNAME

🔐 secretGEMINI_API_KEY— ### Gemini API (Optional - Requires )

configGEMINI_DEEP_RESEARCH_ENABLED— true # Enable Deep Research

configGEMINI_DEFAULT_MODEL— gemini-3-flash-preview # Default model (was gemini-2.5-flash)

configGEMINI_TIMEOUT_MS— 30000 # API timeout

configHEADLESS

configHOSTNAME

configLOGIN_EMAIL

🔐 secretLOGIN_PASSWORD

configMAX_DELAY_MS

configMAX_SESSIONS

configMIN_DELAY_MS

configNLMCP_ADVANCED_TOOLS

configNLMCP_ALERTS_COOLDOWN

configNLMCP_ALERTS_ENABLED

configNLMCP_ALERTS_FILE

configNLMCP_ALERTS_MAX_PER_HOUR

configNLMCP_ALERTS_MIN_SEVERITY

configNLMCP_ALERTS_WEBHOOK_HEADERS

configNLMCP_ALERTS_WEBHOOK_URL

configNLMCP_ALLOWED_DOMAINS

🔐 secretNLMCP_AUDIT_CHECKPOINT_KEY

configNLMCP_AUDIT_CHECKPOINT_PATH

configNLMCP_AUDIT_DIR

configNLMCP_AUDIT_ENABLED

configNLMCP_AUDIT_HASH_CHAIN

configNLMCP_AUDIT_INCLUDE_DETAILS

configNLMCP_AUDIT_RETENTION_DAYS

configNLMCP_AUTH_DISABLED

configNLMCP_AUTH_ENABLED— env =true \

configNLMCP_AUTH_LOCKOUT_MS

configNLMCP_AUTH_MAX_FAILED

🔐 secretNLMCP_AUTH_READONLY_TOKEN

configNLMCP_AUTH_ROTATION_INTERVAL_HOURS

🔐 secretNLMCP_AUTH_TOKEN— env =$(openssl rand -base64 32) \

configNLMCP_AUTH_TOKEN_FILE

configNLMCP_BLOCK_ENCODED_PAYLOADS

configNLMCP_BLOCK_PROMPT_INJECTION

configNLMCP_BLOCK_SUSPICIOUS_URLS

configNLMCP_BREACH_DETECTION

configNLMCP_COMPLIANCE_DIR

configNLMCP_COMPLIANCE_ENABLED

configNLMCP_COMPLIANCE_LOGGING

configNLMCP_COMPLIANCE_RETENTION_YEARS

configNLMCP_CONFIG_DIR

configNLMCP_CONSENT_REQUIRED

configNLMCP_CONSENT_VERSION

configNLMCP_DEBUG

configNLMCP_DISCORD_WEBHOOK_URL

configNLMCP_ENCRYPTION_ENABLED

🔐 secretNLMCP_ENCRYPTION_KEY— base64-32-bytes # Optional custom key

configNLMCP_ENCRYPTION_KEY_FILE

configNLMCP_EXPORT_DIR

configNLMCP_FOLDER_ALLOWLIST

configNLMCP_FOLLOW_UP_ENABLED

configNLMCP_FOLLOW_UP_REMINDER

configNLMCP_HEALTH_CHECK_INTERVAL

configNLMCP_HEALTH_MONITORING

configNLMCP_LOG_FORMAT

configNLMCP_PBKDF2_ITERATIONS

configNLMCP_PRIVACY_NOTICE_URL

configNLMCP_QUERY_LOG_DIR

configNLMCP_QUERY_LOG_ENABLED

configNLMCP_QUERY_LOG_RETENTION_DAYS

configNLMCP_RESPONSE_TIMEOUT_MS

configNLMCP_RESPONSE_VALIDATION

configNLMCP_SECRETS_BLOCK— false # Block on detection

configNLMCP_SECRETS_IGNORE

configNLMCP_SECRETS_MIN_SEVERITY

configNLMCP_SECRETS_REDACT— true # Auto-redact

configNLMCP_SECRETS_SCANNING

configNLMCP_SESSION_HARD_TIMEOUT

configNLMCP_SESSION_INACTIVITY— 1800 # 30 minutes

configNLMCP_SESSION_INACTIVITY_TIMEOUT

configNLMCP_SESSION_MAX_LIFETIME— 28800 # 8 hours

configNLMCP_SESSION_WARNING_BEFORE

🔐 secretNLMCP_SIEM_API_KEY

configNLMCP_SIEM_ENABLED

configNLMCP_SIEM_ENDPOINT

configNLMCP_SIEM_SYSLOG_HOST

configNLMCP_SLACK_WEBHOOK_URL

🔐 secretNLMCP_USE_MACHINE_KEY

configNLMCP_USE_POST_QUANTUM

configNLMCP_WARN_SUSPICIOUS

configNLMCP_WEBHOOK_ALLOW_HTTP

configNLMCP_WEBHOOK_EVENTS

configNLMCP_WEBHOOK_RESOLVE_DNS

🔐 secretNLMCP_WEBHOOK_SECRET

configNLMCP_WEBHOOK_URL

configNOTEBOOKLM_DISABLED_TOOLS— Comma-separated list of tools to hide

configNOTEBOOKLM_NO_GEMINI— v2026.1.11 Notebook sync extraction for new Angular UI, env var

configNOTEBOOKLM_PROFILE— standard # minimal (5 tools) standard (33 tools) full (all 47)

configNOTEBOOK_CLEANUP_ON_SHUTDOWN

configNOTEBOOK_CLEANUP_ON_STARTUP

configNOTEBOOK_CLONE_PROFILE— true # Clone auth from base profile

configNOTEBOOK_CONTENT_TYPES

configNOTEBOOK_DESCRIPTION

configNOTEBOOK_INSTANCE_MAX_COUNT

configNOTEBOOK_INSTANCE_TTL_HOURS

configNOTEBOOK_PROFILE_STRATEGY— isolated # isolatedsingleauto

configNOTEBOOK_TOPICS

configNOTEBOOK_URL

configNOTEBOOK_USE_CASES

configSESSION_TIMEOUT

configSTEALTH_ENABLED

configSTEALTH_HUMAN_TYPING

configSTEALTH_MOUSE_MOVEMENTS

configSTEALTH_RANDOM_DELAYS

configTEST_NOTEBOOK_URL

configTYPING_WPM_MAX

configTYPING_WPM_MIN

configXDG_CONFIG_HOME

configXDG_DATA_HOME

// full audit trail

The full breakdown of what we checked, the deductions that landed, the network hosts, the dependency advisories, and concrete fix guidance is available to verified publishers.

// improvement guidance — verified publishers only

We have 5 concrete improvements we can share with the publisher of this MCP. Each comes with specific guidance to raise the trust score.

// embed badge in your README

[![M8ven Score](https://m8ven.ai/badge/mcp/pantheon-security-notebooklm-mcp-secure-1ujccs)](https://m8ven.ai/mcp/pantheon-security-notebooklm-mcp-secure-1ujccs)

commit: 778fcc003c854a7ee37be9f5f4b82152352ccc9a

code hash: 19a84fcf180d7e62ff6db9d92bafd1bcce12d7cb5ac09e764ddd31331fa8c1bd

verified: 6/15/2026, 1:26:47 PM

view raw JSON →