Notion

Search, read, create and update Notion pages and databases.

Add to Agentman Studio

Opens Agent Studio, where connecting is one click. The connector URL below works in any MCP client.

Paste it into any MCP client. Setup docs

Resources

What the Notion connector does

The Notion MCP server connects your Notion workspace to Claude, ChatGPT and any MCP-compatible agent. It exposes 13 tools that search, read, create, update, move and duplicate pages and databases, plus comments and a member directory. Sign-in is OAuth, and the grant carries your own full workspace permissions rather than a subset you pick.

Verified connector

Listed by Anthropic as a partner connector in its Connectors Directory.

Connection checked by Agentman on .

Anthropic states this reflects the level of review a connector received, not a security audit.

Notion tools (13)

  • search
  • fetch
  • create-pages
  • update-page
  • move-pages
  • duplicate-page
  • create-database
  • update-database
  • create-comment
  • get-comments
  • get-users
  • get-self
  • get-user

Tool names from Anthropic's directory listing. This server requires sign-in, so we could not read tool descriptions or parameter schemas.

Limits

  • No page-level consent. One scope, default, granting your full workspace permissions. There is no read-only grant and no way to fence off a teamspace.
  • No delete tool, but replace_content overwrites a page's body without touching Trash. The documented guard protects child pages, not the page being written.
  • Version history is plan-gated: 7 days on Free through unlimited on Enterprise, while the overwrite hazard is available on every plan.
  • Restoring a database does not restore its pages' contents — only pages and properties. Body text must be restored page by page, and a restore may alter existing views.
  • Admin controls are Enterprise-only. Tokens issued before a tool leaves the approved list cannot be revoked, per-app disconnection is unsupported, and per-user usage visibility is not yet available.
  • We could not read tool schemas or safety annotations. The endpoint returned 401 to our anonymous probe on 2026-08-18, so tool names come from Anthropic's directory snapshot and behaviour from Notion's documentation. No tool here is annotated read-only by anything we observed.
  • The directory's 13 names understate the documented surface of 22, and Notion says the tool list changes over time. Verify against a live handshake after authorising.
  • Rate limits: 180 requests/min per user across all tool calls, 30/min for search, plus a separate per-workspace limit shared across every connection and scaled to the plan — so you can be limited while under your own ceiling.
  • Attachment size caps: 20 MiB single-part upload, 200 KiB inline text, and URL downloads capped at 5 MiB on free workspaces or 50 MiB on paid ones.
  • Connections lapse by design: ~8-hour access tokens, refresh tokens dead at 180 days absolute or 30 days idle.
  • Notion labels the server Beta in its own OAuth descriptor.

Frequently asked questions

Does connecting Notion MCP let me choose which pages the AI can reach?

No. Notion's help centre states that MCP tools act with your full Notion permissions and can access everything you can access. Notion's page picker, where a user selects individual pages to share, belongs to its public connections OAuth flow rather than to Notion MCP. The MCP server advertises a single scope named default, so there is no read-only half to grant.

Can the Notion MCP server delete my pages?

No tool in the connector deletes a page. The directory lists thirteen tools and none of them removes content, and Notion's underlying update endpoint refuses to delete child pages or databases unless a caller explicitly sets allow_deleting_content to true. Page-level content can still be overwritten in place, which is a different hazard from deletion and is not covered by that guard.

Does update-page replace my existing page content?

It can. Notion documents a replace_content command that replaces the entire page content with new markdown, alongside a targeted update_content search-and-replace command. The connector's documentation shows replace_content in its own async example, so a whole-page overwrite is a normal path rather than an edge case. Nothing in the tool name signals which of the two an agent chose.

Can I restore a Notion page after an agent overwrites it?

Yes, but how far back depends on what you pay. Notion gates version history by plan: seven days on Free, thirty days on Plus, ninety days on Business, and unlimited on Enterprise. The overwrite hazard ships on every plan while the recovery window does not, so Free-plan users carry the same risk with the shortest safety net.

Which Notion plan do I need to use the Notion MCP server?

Any plan can connect, but several tools are gated. Notion states search across connected sources such as Slack and Google Drive requires a Notion AI plan, and that meeting-notes queries need Business or higher with Notion AI. Rather than guessing, fetch the special id self, whose current_tool_access map marks each tool available, available_with_limit, upgrade_required or not_enabled.

Can a workspace admin block Notion MCP?

Yes, on the Enterprise plan only. Notion documents an approved-list model under Settings then Connections then Permissions, where owners restrict which AI apps members may connect. Notion warns it cannot revoke tokens already issued to a tool later removed from the list, though it blocks those calls, and there is no way to disconnect users from one specific app.

Does moving a Notion page with an agent change who can see it?

It can. Notion documents that a subpage inherits the permissions of its parent, so relocating a page under a differently shared parent changes its audience. Notion also states that moving a shared page into the Private section removes everyone else's access, but that this override applies only to the moved page and its subpages keep their existing permissions.

How long does a Notion MCP connection last before I must sign in again?

Access tokens last roughly eight hours. Refresh tokens expire at whichever comes first: an absolute 180 days from when you first authorised, a cap that does not slide when you refresh, or 30 consecutive days without a successful refresh. Notion tells client builders to treat periodic reconnection as expected, so a lapsed connector is normal rather than a fault.

Sources

  • Notion MCP overview — https://developers.notion.com/guides/mcp/overview (fetched 2026-08-18; the directory's documentation URL https://developers.notion.com/docs/mcp 307-redirects here) · retrieved 2026-08-18
  • Notion MCP supported tools — https://developers.notion.com/guides/mcp/mcp-supported-tools (fetched 2026-08-18) · retrieved 2026-08-18
  • Notion MCP security best practices — https://developers.notion.com/guides/mcp/mcp-security-best-practices (fetched 2026-08-18) · retrieved 2026-08-18
  • Build an MCP client for Notion (token lifecycle) — https://developers.notion.com/guides/mcp/build-mcp-client (fetched 2026-08-18) · retrieved 2026-08-18
  • Connect to Notion MCP (client setup) — https://developers.notion.com/guides/mcp/get-started-with-mcp (fetched 2026-08-18) · retrieved 2026-08-18
  • Notion authorization guide (page picker, public connections) — https://developers.notion.com/guides/get-started/authorization (fetched 2026-08-18) · retrieved 2026-08-18
  • Working with markdown content (replace_content, allow_deleting_content) — https://developers.notion.com/guides/data-apis/working-with-markdown-content (fetched 2026-08-18) · retrieved 2026-08-18
  • Connection capabilities — https://developers.notion.com/reference/capabilities (fetched 2026-08-18) · retrieved 2026-08-18
  • Notion Help Center — Notion MCP (full permissions, Enterprise admin controls) — https://www.notion.com/help/notion-mcp (fetched 2026-08-18) · retrieved 2026-08-18
  • Notion Help Center — duplicate, delete and restore content (version history plans, Trash) — https://www.notion.com/help/duplicate-delete-and-restore-content (fetched 2026-08-18) · retrieved 2026-08-18
  • Notion Help Center — sharing and permissions (inheritance) — https://www.notion.com/help/sharing-and-permissions (fetched 2026-08-18) · retrieved 2026-08-18
  • Live OAuth probe — GET https://mcp.notion.com/mcp → 401 with WWW-Authenticate naming resource_metadata (2026-08-18) · retrieved 2026-08-18
  • Server RFC 9728 descriptors — /.well-known/oauth-protected-resource and .../oauth-protected-resource/mcp (fetched 2026-08-18) · retrieved 2026-08-18
  • Server RFC 8414 descriptor — https://mcp.notion.com/.well-known/oauth-authorization-server (fetched 2026-08-18) · retrieved 2026-08-18
  • Anthropic connector directory — https://claude.ai/directory/69f3a300-cc60-48c4-b237-dfac56530dbf (snapshot 2026-08-16) · retrieved 2026-08-16

More Productivity connectors

  • 6sense

    Ask an AI agent about 6sense account insights, buying signals and keyword trends.

  • Adobe Workfront

    Find, create, update and delete Workfront work items from an AI agent.

Browse all MCP connectorsClaude and ChatGPT setup guideBrowse AI skills

Product names and logos belong to their owners. Agentman is not affiliated with a connector's maker unless the page says the connector is built and run by Agentman.

Use it in an agent

Put Notion to work.

Connect Notion once and your agents call these tools on their own: on a schedule, in a workflow, with nobody at the keyboard.

Open in Agentman Studio
Call (650) 285-1019Our AI receptionist answers.