Server data from the Official MCP Registry
Automate Google NotebookLM — Q&A with citations, audio, video, content generation
Automate Google NotebookLM — Q&A with citations, audio, video, content generation
This MCP server provides browser automation for NotebookLM with concerning security patterns. While it includes path traversal protection and avoids hardcoded credentials, it has significant vulnerabilities: (1) unauthenticated HTTP API with no rate limiting or input validation, (2) arbitrary file upload/download with weak path checking, (3) OTP token storage in plaintext in data directory, (4) excessive browser permissions (file system, network, potentially environment variables), and (5) unsafe error logging that may leak sensitive paths or file contents. The server requires careful deployment in trusted environments only. Supply chain analysis found 6 known vulnerabilities in dependencies (0 critical, 2 high severity). Package verification found 1 issue.
4 files analyzed · 18 issues found
Security scores are indicators to help you make informed decisions, not guarantees. Always review permissions before connecting any MCP server.
This plugin requests these system permissions. Most are normal for its category.
Unverified package source
We couldn't verify that the installable package matches the reviewed source code. Proceed with caution.
Add this to your MCP configuration file:
{
"mcpServers": {
"io-github-roomi-fields-notebooklm-mcp": {
"args": [
"-y",
"@roomi-fields/notebooklm-mcp"
],
"command": "npx"
}
}
}Be the first to review this server!
by Modelcontextprotocol · Developer Tools
Read, search, and manipulate Git repositories programmatically
by Toleno · Developer Tools
Toleno Network MCP Server — Manage your Toleno mining account with Claude AI using natural language.
by mcp-marketplace · Developer Tools
Create, build, and publish Python MCP servers to PyPI — conversationally.