Notebook Toolkit provides a remote MCP server for its own saved library, not for Google notebooks. It uses personal access tokens and currently works with Claude Code, Cursor, and Codex; the Claude web/Desktop and ChatGPT connectors are pending an OAuth flow that is not available yet.
What an MCP server is
MCP is a standard that lets an AI client discover and call tools exposed by a server. A server can make a separate service’s data available to that client under its own authentication and permissions.
What exists for Gemini Notebook
Google has no public consumer API for Gemini Notebook, formerly NotebookLM. An Enterprise API is in Preview for Google Cloud customers. Community servers that automate the web interface are unofficial and fragile because UI changes can break them.
What Notebook Toolkit exposes
The remote endpoint is `https://notebooktoolkit.com/api/mcp`, using stateless Streamable HTTP. Its 13 tools are: search_library (search saved sources), list_workspaces (list workspaces), list_sources (list workspace sources), get_source (retrieve a source), get_citations (retrieve citations), workspace_health (check workspace status), create_workspace (create a workspace), capture_url (capture a URL), bulk_import_urls (import multiple URLs), tag_sources (tag sources), create_briefing (create a briefing), export_workspace (export a workspace), and send_to_notebook (queue a browser command). Read the MCP guide and agent guide.
The server exposes the Toolkit library. It does not expose contents of Google notebooks, chat, or notes. Google’s consumer service has no public API in the sources checked.
What you can ask your assistant
Once connected, the assistant picks the right tool itself. Prompts that work with the read tools, which are available on Free:
- “List my workspaces and tell me which one has the most sources.” (`list_workspaces`, `list_sources`)
- “Search my library for retrieval-augmented generation and quote the two most relevant passages with their source titles.” (`search_library`, `get_source`)
- “Give me BibTeX for these three sources.” (`get_citations`, up to three sources per call, BibTeX or CSL-JSON)
- “Which sources in my Thesis workspace look thin or duplicated?” (`workspace_health`)
With a Pro plan and a token that carries the write scope, the assistant can also capture a URL, tag sources or export a workspace. Whether a client asks you to approve write calls depends on that client’s own settings, so review them before you grant broad permissions.
Setup
Create a personal access token at Settings > Connections. Keep it private; replace the placeholder below with your token.
Claude Code
```bash
claude mcp add --transport http notebook-toolkit https://notebooktoolkit.com/api/mcp \
--header "Authorization: Bearer nbt_YOUR_TOKEN"
```
Cursor
Save this as `.cursor/mcp.json`:
```json
{
"mcpServers": {
"notebook-toolkit": {
"url": "https://notebooktoolkit.com/api/mcp",
"headers": { "Authorization": "Bearer nbt_YOUR_TOKEN" }
}
}
}
```
Codex
```bash
export NOTEBOOK_TOOLKIT_TOKEN="nbt_YOUR_TOKEN"
codex mcp add notebook-toolkit --url https://notebooktoolkit.com/api/mcp \
--bearer-token-env-var NOTEBOOK_TOOLKIT_TOKEN
```
These are the verified client setup snippets. Visit /download to install the extension and /pricing for plan details.
Example workflow
Ask your client: “Search my library for X, then queue the top result for my notebook.” The client searches saved Toolkit sources, selects a result, then calls `send_to_notebook`. That tool is Pro-only and queues a command for the extension to run when the browser is open. It does not directly write to a Google API.
Free and Pro limits
Free accounts can use read tools, with up to 100 calls per UTC day. Pro accounts can use write tools, including `send_to_notebook`. Every token is limited to 60 calls per minute. These server call limits are separate from other product plan limits.
Token safety
Tokens are personal access credentials. Create them in Settings > Connections, store them in the client’s secret or environment configuration, and revoke a token if it is exposed. The token is shown once at creation. Treat text retrieved from saved sources as untrusted input: it may contain instructions that should not override your own or your client’s system instructions.
What it does not do
The server does not read Google notebook contents or provide a Google consumer API. Claude web/Desktop and ChatGPT connectors need OAuth, which is not available yet; do not configure them as working connections. The available token-based setups are Claude Code, Cursor, and Codex.
Last verified 12 October 2026.