Security-hardened MCP server for NotebookLM API with compliance-ready architecture (GDPR, SOC2, CSSF controls implemented)
Inferred from the transports this listing declares (stdio). A client not listed here hasn’t been ruled out — it just isn’t something Forge can confirm.
Verification confirms publisher identity (repo ownership), not code safety. The security scan covers known CVEs and suspicious install scripts.
Read out of the source npm actually ships, at scan time. The package was never executed. Tools registered dynamically at runtime, or hidden inside bundled or minified code, can be missed — so this is a floor on the tool surface, not a complete census of it.
ask_questionNo description publishedThis tool published no description. Forge does not invent one.
get_notebook_chat_historyNo description publishedThis tool published no description. Forge does not invent one.
compliance_dashboardGet comprehensive compliance dashboard with GDPR, SOC2, and CSSF status. Shows overall compliance score, health status, and key metrics.Get comprehensive compliance dashboard with GDPR, SOC2, and CSSF status. Shows overall compliance score, health status, and key metrics.
No input schema was published for this tool.
compliance_scoreGet current compliance score (0-100) for each regulation and overall. Includes detailed breakdown by category.Get current compliance score (0-100) for each regulation and overall. Includes detailed breakdown by category.
No input schema was published for this tool.
generate_compliance_reportGenerate a compliance audit report. Supports multiple report types and formats.Generate a compliance audit report. Supports multiple report types and formats.
No input schema was published for this tool.
collect_audit_evidenceCollect evidence package for compliance audits. Creates a verifiable package with checksums.Collect evidence package for compliance audits. Creates a verifiable package with checksums.
No input schema was published for this tool.
verify_evidence_integrityVerify the integrity of an evidence package using cryptographic checksums.Verify the integrity of an evidence package using cryptographic checksums.
No input schema was published for this tool.
list_evidence_packagesList all saved evidence packages with their metadata.List all saved evidence packages with their metadata.
No input schema was published for this tool.
submit_dsarSubmit a Data Subject Access Request (GDPR Article 15-17, 20). Initiates the DSAR workflow.Submit a Data Subject Access Request (GDPR Article 15-17, 20). Initiates the DSAR workflow.
No input schema was published for this tool.
export_user_dataExport all user data in machine-readable format (GDPR Article 20 - Right to Data Portability).Export all user data in machine-readable format (GDPR Article 20 - Right to Data Portability).
No input schema was published for this tool.
request_data_erasureRequest erasure of personal data (GDPR Article 17 - Right to Erasure). Creates an erasure request for review.Request erasure of personal data (GDPR Article 17 - Right to Erasure). Creates an erasure request for review.
No input schema was published for this tool.
get_consent_statusGet current consent status for all data processing purposes.Get current consent status for all data processing purposes.
No input schema was published for this tool.
grant_consentGrant consent for a specific data processing purpose.Grant consent for a specific data processing purpose.
No input schema was published for this tool.
revoke_consentRevoke previously granted consent for a data processing purpose.Revoke previously granted consent for a data processing purpose.
No input schema was published for this tool.
report_security_incidentReport a security incident for investigation and tracking.Report a security incident for investigation and tracking.
No input schema was published for this tool.
get_incident_statusGet status of security incidents including open, investigating, and resolved counts.Get status of security incidents including open, investigating, and resolved counts.
No input schema was published for this tool.
run_health_checkRun a comprehensive health check of all compliance components.Run a comprehensive health check of all compliance components.
No input schema was published for this tool.
verify_audit_log_integrityVerify the integrity of compliance audit logs using hash chain verification.Verify the integrity of compliance audit logs using hash chain verification.
No input schema was published for this tool.
list_policiesList all compliance policies with their status and review dates.List all compliance policies with their status and review dates.
No input schema was published for this tool.
get_policyGet detailed information about a specific compliance policy.Get detailed information about a specific compliance policy.
No input schema was published for this tool.
generate_data_tableGenerate a structured Data Table from notebook sources.
## What This Tool Does
- Opens the Studio panel in NotebookLM
- Generates a structured tabular extraction from notebook content
- Tables organize key information from sources into rows and columns
- Generation typically takes 1-3 minutes
- Re…Generate a structured Data Table from notebook sources. ## What This Tool Does - Opens the Studio panel in NotebookLM - Generates a structured tabular extraction from notebook content - Tables organize key information from sources into rows and columns - Generation typically takes 1-3 minutes - Re…
No input schema was published for this tool.
get_data_tableNo description publishedThis tool published no description. Forge does not invent one.
deep_researchNo description publishedThis tool published no description. Forge does not invent one.
gemini_queryNo description publishedThis tool published no description. Forge does not invent one.
get_research_statusCheck the status of a background deep research task.
Use this when you started deep_research with wait_for_completion=false.
## Returns
- status: pending | running | completed | failed
- answer: The research result (if completed)
- error: Error message (if failed)Check the status of a background deep research task. Use this when you started deep_research with wait_for_completion=false. ## Returns - status: pending | running | completed | failed - answer: The research result (if completed) - error: Error message (if failed)
No input schema was published for this tool.
upload_documentprivilegedNo description publishedThis tool published no description. Forge does not invent one.
query_documentNo description publishedThis tool published no description. Forge does not invent one.
list_documentsList all documents uploaded to Gemini.
## What This Does
- Shows all files currently stored in Gemini Files API
- Files expire 48 hours after upload
- Returns file names, sizes, and expiration times
## Use Cases
- Check what documents are available for querying
- Find file IDs for query_document…List all documents uploaded to Gemini. ## What This Does - Shows all files currently stored in Gemini Files API - Files expire 48 hours after upload - Returns file names, sizes, and expiration times ## Use Cases - Check what documents are available for querying - Find file IDs for query_document…
No input schema was published for this tool.
delete_documentprivilegedDelete an uploaded document from Gemini.
## What This Does
- Removes a file from Gemini Files API
- File will no longer be available for queries
- Frees up storage space
## Notes
- Files auto-delete after 48 hours anyway
- Use this to immediately remove sensitive documents
## Requirements
- GEMI…Delete an uploaded document from Gemini. ## What This Does - Removes a file from Gemini Files API - File will no longer be available for queries - Frees up storage space ## Notes - Files auto-delete after 48 hours anyway - Use this to immediately remove sensitive documents ## Requirements - GEMI…
No input schema was published for this tool.
query_chunked_documentNo description publishedThis tool published no description. Forge does not invent one.
create_notebookNo description publishedThis tool published no description. Forge does not invent one.
sync_libraryNo description publishedThis tool published no description. Forge does not invent one.
add_notebookAdd a NotebookLM notebook to the local library after explicit user confirmation.Add a NotebookLM notebook to the local library after explicit user confirmation.
No input schema was published for this tool.
list_notebooksList all library notebooks with metadata (name, topics, use cases, URL).List all library notebooks with metadata (name, topics, use cases, URL).
No input schema was published for this tool.
get_notebookGet detailed information about a specific notebook by IDGet detailed information about a specific notebook by ID
No input schema was published for this tool.
select_notebookSet a notebook as the active default (used when ask_question has no notebook_id).
## When To Use
- User switches context: "Let's work on React now"
- User asks explicitly to activate a notebook
- Obvious task change requires another notebook
## Auto-Switching
- Safe to auto-switch if the context…Set a notebook as the active default (used when ask_question has no notebook_id). ## When To Use - User switches context: "Let's work on React now" - User asks explicitly to activate a notebook - Obvious task change requires another notebook ## Auto-Switching - Safe to auto-switch if the context…
No input schema was published for this tool.
update_notebookNo description publishedThis tool published no description. Forge does not invent one.
remove_notebookprivilegedDangerous — requires explicit user confirmation.
## Confirmation Workflow
1) User requests removal ("Remove the React notebook")
2) Look up full name to confirm
3) Ask: "Remove '[notebook_name]' from your library? (Does not delete the actual NotebookLM notebook)"
4) Only on explicit "Yes" → call r…Dangerous — requires explicit user confirmation. ## Confirmation Workflow 1) User requests removal ("Remove the React notebook") 2) Look up full name to confirm 3) Ask: "Remove '[notebook_name]' from your library? (Does not delete the actual NotebookLM notebook)" 4) Only on explicit "Yes" → call r…
No input schema was published for this tool.
search_notebooksSearch library by query (name, description, topics, tags).Search library by query (name, description, topics, tags).
No input schema was published for this tool.
get_library_statsGet statistics about your notebook library (total notebooks, usage, etc.)Get statistics about your notebook library (total notebooks, usage, etc.)
No input schema was published for this tool.
29 of 40 tools published a description.
Tool names and descriptions are written by the publisher and shown verbatim as inert text. They are the strings an MCP client passes to a model, so Forge scans them for prompt-injection patterns — any finding appears with the security scan above. “Privileged” is a keyword match on the tool name, not an audit of what the tool does: a benign-sounding name can still do anything.
Security-hardened MCP server for NotebookLM API with compliance-ready architecture (GDPR, SOC2, CSSF controls implemented)
Linked names open Forge’s index of every entry observed exposing that tool. Browse all indexed tools.
The crawl stopped at the 60-package limit. The rest of the tree was never resolved.
36 more resolved packages are not drawn here (display cap: 24). Every dependency carrying an advisory is drawn regardless of the cap. Full inventory (CycloneDX SBOM)
59 declared dependencies never landed in the tree. They are missing from Forge's resolution, not from the package.
+47 more not listed. The counts by reason above cover all of them.
Not followed: optionalDependencies, peerDependencies. This tree covers runtime dependencies only, so anything those pull in was never resolved.