
NotebookLM MCP Server: Tools, Setup for Claude Code, Cursor & More
Google Gemini Notebook (ex NotebookLM) over MCP + a local REST API — cited answers, Studio, history
Works in
12 should work
Tap an app to see how to set it up and any known problems.
Supports local MCP servers.
Supports local MCP servers.
Supports local MCP servers.
Supports local MCP servers.
Supports local MCP servers.
Supports local MCP servers.
Supports local MCP servers.
Supports local MCP servers.
Supports local MCP servers.
Supports local MCP servers.
Supports local MCP servers.
Supports local MCP servers.
Client does not support this transport.
Client does not support this transport.
Install NotebookLM MCP
Claude Code
- 1
Copy this prompt.
Add the NotebookLM MCP server to Claude Code. Run this command: claude mcp add notebooklm -- npx -y @roomi-fields/notebooklm-mcp Then check that it loaded and tell me if I need to sign in or restart.
- 2
Paste it into Claude Code. It shows the change and asks before running it.
Requires Node.js.
Built from the package data we hold. Not yet tested by us.
Tools
We don't list NotebookLM MCP's tools here yet. After you connect it, ask your assistant "What can you do with NotebookLM MCP?" to see them.
Security advisories
4 advisories
4 known advisories, all fixed in a newer version.
- The origin guard trusts any request that forgets to send an Origin (DNS-rebinding read of the local API)high · Fixed in 4.4.0 · GHSA-2fgr-6pf3-3hcx
- HTTP mode binds every interface, allows any origin, and requires no credentialshigh · Fixed in 4.0.0 · GHSA-p69m-c5rf-g2c3
- @roomi-fields/notebooklm-mcp has a path traversal in vault.batch tool that allows arbitrary file write outside intended vault directoryhigh · Fixed in 2.0.3 · GHSA-jjhp-8crj-mppq
- notebook_url is navigated by the authenticated browser; only one route validates the host (SSRF / forced navigation)medium · Fixed in 4.4.0 · GHSA-q565-44p7-45pv
Information
updated Nov 2, 2026
- Publisher
- Community
- Package
@roomi-fields/notebooklm-mcp- Registry
- npm
- Transport
- stdio
- Version
- 4.5.0
- License
- MIT
- Last commit
- Oct 30, 2026
- Open issues
- 1
- Listed in
- Official MCP registry