3 posts tagged with "mcp"

Until version 4.0.0 this server bound to every network interface, accepted any browser origin, and required no credential on any of its 45 routes. Anyone on the same Wi-Fi could drive it. Any web page you visited could drive it too.

Someone reported it. We fixed it, published the advisory, and then found a second hole of the same family a few weeks later. Here is what we learned, written down because the pattern is not ours alone — researchers scanning public MCP servers keep finding the same three mistakes.

Claude Code is good at reasoning and bad at knowing what is in your PDFs. If you have already put those documents into NotebookLM, you can hand the agent a way to ask them — and get back answers that name the source and quote the passage, instead of a confident paragraph you then have to verify.

Two commands and one login.

PleasePrompto/notebooklm-mcp is the server most guides still point at. Its author archived it, and the package on npm has not moved since. If you installed it on the strength of a 2026 tutorial, you are running something nobody is fixing.

This is not a dunk. It was good work, it taught the pattern everyone else copied, and the author said so plainly rather than letting it rot quietly.