Pantheon-Security/notebooklm-mcp-secure

🏆 The World's Most Advanced NotebookLM MCP Server
**Zero-hallucination answers • Gemini Deep Research • 17 Security Layers • Enterprise Compliance**
**What's New 2026** • **Deep Research** • **Document API** • **Create Notebooks** • **Security** • **Install**
> **The only NotebookLM MCP with enterprise-grade security, post-quantum encryption, and full Gemini API integration.**
>
> Security-hardened fork of PleasePrompto/notebooklm-mcp • Maintained by Pantheon Security
⚡ TL;DR — What You Get
- 🔍 **Query your NotebookLM notebooks** — source-grounded, zero-hallucination answers
- 📚 **Create & manage notebooks programmatically** — no manual clicking
- 🎙️ **Generate audio overviews** — podcast-style summaries of your docs
- 🎬 **Generate video overviews** — AI video summaries with 10 visual styles **NEW**
- 📊 **Extract data tables** — structured JSON from notebook sources **NEW**
- 🔬 **Gemini 3 + Deep Research** — latest models with thinking control (optional API) **NEW**
- 📄 **Document API** — upload & query PDFs without browser (optional API)
- 🔐 **17 security layers** — post-quantum encryption, audit logs, secrets scanning
- ✅ **Compliance-ready architecture** — built to GDPR, SOC2, and CSSF standards (controls implemented; formal certification requires third-party audit)
- 💡 **No API key required** — core features work with just browser auth
---
🚀 What's New in 2026
**Latest: v2026.3.1** — All 334 audit issues resolved. 631 tests. Full MCP protocol compliance.
| Version | Highlights |
|---------|------------|
| **v2026.3.1** | **Security Audit Complete** — All 334 issues from the independent audit resolved. Tests: 609 → 631. Code quality: URL resolution deduplicated, handler extraction, non-null assertions eliminated. Test gaps closed: validateNotebookId, error body shape, delete_document confirm guard, sanitized throws, log rotation, rate-limiter memory bound, range clamping. |
| **v2026.3.0** | **The Security Audit Release** — Four parallel AI code reviews (security, protocol, architecture, testing) against 334 issues. All highs and mediums resolved. Tests: 139 → 609 across 50 files (4.4×). Full MCP protocol compliance: structuredContent, isError, transport tags. Schema bounds on all 48 tools. Annotation correctness. Webhook SSRF fix. Audit log integrity (hash chain, concurrent write lock, rotation continuity). Per-page mutex. HandlerContext DI. Cert pinning retracted (claims aligned with implementation). |
| **v2026.2.10** | **The Hardening Release** — 3 new security layers (14→17): secure-by-default auth, exponential backoff lockout, credential isolation. Architecture overhaul: 3,611-line handler split into 9 domain modules, tool registry pattern. Gemini API retry with backoff. Multi-stage Docker build. Token CLI (token show/rotate). 168 tests. |
| **v2026.2.9** | performSetup no longer wipes credentials before Chrome opens — prevents auth destruction on failed launch |
| **v2026.2.8** | cleanup_data never deletes auth dirs (browser_state/, chrome_profile/) — auth survives all cleanup paths |
| **v2026.2.7** | Block headless setup_auth calls; robust auth-now.mjs standalone script with Chrome profile lock handling |
| **v2026.2.6** | New add_folder tool for bulk PDF/file uploads; improved tier detection for NotebookLM Plus |
| **v2026.2.5** | Fix show_browser silently ignored in setup_auth — browser now reliably opens for auth |
| **v2026.2.4** | Auth stability: 7-day state expiry, touchStateFile on validation, block headless re_auth |
| **v2026.2.3** | Studio Panel tools restored: Video Overview, Data Table generation re-enabled |
| **v2026.2.1** | Standard profile expanded: 14 → 33 tools — notebook creation, audio, source management now visible by default |
| **v2026.2.0** | Gemini 3 models (2.5 retiring March 31), Video Overviews, Data Tables, thinking level, structured JSON, SDK 1.41 |
| **v2026.1.12** | Security hardening: constant-time auth, command injection fix, memory leak fixes, MCP SDK 1.26.0 |
| **v2026.1.11** | Notebook sync extraction for new Angular UI, NOTEBOOKLM_NO_GEMINI env var |
| **v2026.1.10** | Tool description clarity for multi-LLM compatibility |
| **v2026.1.9** | Documentation & UX improvements, npm audit fix |
| **v2026.1.8** | Major dependency updates (zod 4.x, dotenv 17.x, post-quantum 0.5.4) |
| **v2026.1.7** | MCP Protocol UX: tool icons, human-friendly titles, behavior annotations |
| **v2026.1.4** | Defense-in-depth path validation, security hardening |
| **v2026.1.1** | Deep health checks, chat history extraction, context management |