Notion
by Notion
Search, read, create and update Notion pages and databases from your AI assistant. OAuth sign-in grants your full workspace access with no page picker, one update command replaces a whole page, and no tool deletes anything.
Verified connector
Listed by Anthropic as a partner connector in its Connectors Directory.
Connection checked by Agentman on .
Anthropic states this reflects the level of review a connector received, not a security audit.
Connect Notion via MCP
https://mcp.notion.com/mcpWorks in any MCP-compatible client. In Agentman Studio it is one click — no config file to edit.
Use in Agentman
Connect Notion once and your agents call these tools on their own — on a schedule, in a workflow, with nobody at the keyboard.
Open in Agentman StudioNotion Tools & Capabilities (13)
Tool names from Anthropic's directory listing. This server requires sign-in, so we could not read tool descriptions or parameter schemas.
Limits
- No page-level consent. One scope,
default, granting your full workspace permissions. There is no read-only grant and no way to fence off a teamspace. - No delete tool, but
replace_contentoverwrites a page's body without touching Trash. The documented guard protects child pages, not the page being written. - Version history is plan-gated: 7 days on Free through unlimited on Enterprise, while the overwrite hazard is available on every plan.
- Restoring a database does not restore its pages' contents — only pages and properties. Body text must be restored page by page, and a restore may alter existing views.
- Admin controls are Enterprise-only. Tokens issued before a tool leaves the approved list cannot be revoked, per-app disconnection is unsupported, and per-user usage visibility is not yet available.
- We could not read tool schemas or safety annotations. The endpoint returned 401 to our anonymous probe on 2026-08-18, so tool names come from Anthropic's directory snapshot and behaviour from Notion's documentation. No tool here is annotated read-only by anything we observed.
- The directory's 13 names understate the documented surface of 22, and Notion says the tool list changes over time. Verify against a live handshake after authorising.
- Rate limits: 180 requests/min per user across all tool calls, 30/min for search, plus a separate per-workspace limit shared across every connection and scaled to the plan — so you can be limited while under your own ceiling.
- Attachment size caps: 20 MiB single-part upload, 200 KiB inline text, and URL downloads capped at 5 MiB on free workspaces or 50 MiB on paid ones.
- Connections lapse by design: ~8-hour access tokens, refresh tokens dead at 180 days absolute or 30 days idle.
- Notion labels the server Beta in its own OAuth descriptor.
Frequently asked questions
No. Notion's help centre states that MCP tools act with your full Notion permissions and can access everything you can access. Notion's page picker, where a user selects individual pages to share, belongs to its public connections OAuth flow rather than to Notion MCP. The MCP server advertises a single scope named default, so there is no read-only half to grant.
No tool in the connector deletes a page. The directory lists thirteen tools and none of them removes content, and Notion's underlying update endpoint refuses to delete child pages or databases unless a caller explicitly sets allow_deleting_content to true. Page-level content can still be overwritten in place, which is a different hazard from deletion and is not covered by that guard.
It can. Notion documents a replace_content command that replaces the entire page content with new markdown, alongside a targeted update_content search-and-replace command. The connector's documentation shows replace_content in its own async example, so a whole-page overwrite is a normal path rather than an edge case. Nothing in the tool name signals which of the two an agent chose.
Yes, but how far back depends on what you pay. Notion gates version history by plan: seven days on Free, thirty days on Plus, ninety days on Business, and unlimited on Enterprise. The overwrite hazard ships on every plan while the recovery window does not, so Free-plan users carry the same risk with the shortest safety net.
Any plan can connect, but several tools are gated. Notion states search across connected sources such as Slack and Google Drive requires a Notion AI plan, and that meeting-notes queries need Business or higher with Notion AI. Rather than guessing, fetch the special id self, whose current_tool_access map marks each tool available, available_with_limit, upgrade_required or not_enabled.
Yes, on the Enterprise plan only. Notion documents an approved-list model under Settings then Connections then Permissions, where owners restrict which AI apps members may connect. Notion warns it cannot revoke tokens already issued to a tool later removed from the list, though it blocks those calls, and there is no way to disconnect users from one specific app.
It can. Notion documents that a subpage inherits the permissions of its parent, so relocating a page under a differently shared parent changes its audience. Notion also states that moving a shared page into the Private section removes everyone else's access, but that this override applies only to the moved page and its subpages keep their existing permissions.
Access tokens last roughly eight hours. Refresh tokens expire at whichever comes first: an absolute 180 days from when you first authorised, a cap that does not slide when you refresh, or 30 consecutive days without a successful refresh. Notion tells client builders to treat periodic reconnection as expected, so a lapsed connector is normal rather than a fault.
Sources
- Notion MCP overview — https://developers.notion.com/guides/mcp/overview (fetched 2026-08-18; the directory's
documentationURLhttps://developers.notion.com/docs/mcp307-redirects here) · retrieved 2026-08-18 - Notion MCP supported tools — https://developers.notion.com/guides/mcp/mcp-supported-tools (fetched 2026-08-18) · retrieved 2026-08-18
- Notion MCP security best practices — https://developers.notion.com/guides/mcp/mcp-security-best-practices (fetched 2026-08-18) · retrieved 2026-08-18
- Build an MCP client for Notion (token lifecycle) — https://developers.notion.com/guides/mcp/build-mcp-client (fetched 2026-08-18) · retrieved 2026-08-18
- Connect to Notion MCP (client setup) — https://developers.notion.com/guides/mcp/get-started-with-mcp (fetched 2026-08-18) · retrieved 2026-08-18
- Notion authorization guide (page picker, public connections) — https://developers.notion.com/guides/get-started/authorization (fetched 2026-08-18) · retrieved 2026-08-18
- Working with markdown content (
replace_content,allow_deleting_content) — https://developers.notion.com/guides/data-apis/working-with-markdown-content (fetched 2026-08-18) · retrieved 2026-08-18 - Connection capabilities — https://developers.notion.com/reference/capabilities (fetched 2026-08-18) · retrieved 2026-08-18
- Notion Help Center — Notion MCP (full permissions, Enterprise admin controls) — https://www.notion.com/help/notion-mcp (fetched 2026-08-18) · retrieved 2026-08-18
- Notion Help Center — duplicate, delete and restore content (version history plans, Trash) — https://www.notion.com/help/duplicate-delete-and-restore-content (fetched 2026-08-18) · retrieved 2026-08-18
- Notion Help Center — sharing and permissions (inheritance) — https://www.notion.com/help/sharing-and-permissions (fetched 2026-08-18) · retrieved 2026-08-18
- Live OAuth probe —
GET https://mcp.notion.com/mcp→ 401 withWWW-Authenticatenamingresource_metadata(2026-08-18) · retrieved 2026-08-18 - Server RFC 9728 descriptors —
/.well-known/oauth-protected-resourceand.../oauth-protected-resource/mcp(fetched 2026-08-18) · retrieved 2026-08-18 - Server RFC 8414 descriptor —
https://mcp.notion.com/.well-known/oauth-authorization-server(fetched 2026-08-18) · retrieved 2026-08-18 - Anthropic connector directory — https://claude.ai/directory/69f3a300-cc60-48c4-b237-dfac56530dbf (snapshot 2026-08-16) · retrieved 2026-08-16
Server Info
- Category
- Productivity
- Developer
- Notion
- Tools
- 13
- Domain
- mcp.notion.com
Using Claude Desktop or another MCP client? Setup docs — the connection URL above works anywhere.
Similar MCP Servers for Productivity
Related Resources
Ready to connect Notion?
Connect Notion once and your agents call these tools on their own — on a schedule, in a workflow, with nobody at the keyboard.