Notion MCP Server: Tools, Setup and Security

The Notion MCP server lets an AI app search your Notion workspace, read pages and databases, and create or update content you can already reach. Notion publishes and hosts it, and you sign in with OAuth. It works on every Notion plan, though some tools need Business or Enterprise.

Checked against: Notion's MCP developer docs on 28 October 2026. eSEOspace did not install or test this server.

At a glance

What it can do

Notion's supported tools page groups the tools by job. The main groups are:

• Search and lookup: notion-search, notion-connector-search (Slack, Google Drive, GitHub and other connected sources), notion-fetch, notion-get-self and notion-get-tool-access.
• Pages and databases: notion-create-pages, notion-update-page, notion-move-pages, notion-duplicate-page, notion-create-database and notion-update-data-source.
• Deleting and restoring: notion-delete-pages and notion-delete-databases move up to 20 items to Trash; notion-restore-pages brings them back.
• Views and queries: notion-create-view, notion-query-data-sources and notion-query-multiple-data-sources, which runs one read-only SQL query across 2 to 100 data sources.
• Comments and suggested edits: tools to add, list, resolve and react to comments, plus notion-create-suggested-edit.
• Other groups: files and attachments, sidebar lists, Notion Skills, Custom Agent sessions and Notion Calendar (notion-calendar-create-events and others).

Use notion-get-tool-access first if you are unsure what your plan allows. Notion says it reports plan status and restricted parameters but does not grant access.

How to connect it

Notion's get started guide gives setup for many clients. For Claude Code:

claude mcp add --transport http notion https://mcp.notion.com/mcp

Then run /mcp in Claude Code and follow the OAuth flow. For Cursor, add this to .cursor/mcp.json:

{
  "mcpServers": {
    "notion": {
      "url": "https://mcp.notion.com/mcp"
    }
  }
}

For VS Code with GitHub Copilot, Notion's example .vscode/mcp.json is:

{
  "servers": {
    "notion": {
      "type": "http",
      "url": "https://mcp.notion.com/mcp"
    }
  }
}

VS Code's MCP server docs still support .vscode/mcp.json "for compatibility" but label it deprecated in the guided setup flow, as of October 2026. Servers that prompt for values with ${input:...} aren't forwarded to Copilot harness sessions.

Clients without remote HTTP support can use the mcp-remote bridge with npx -y mcp-remote https://mcp.notion.com/mcp. Guests cannot connect; only workspace members can.

Security notes

After you authorize, the AI app can read and update anything your Notion account can reach. That is broad, so think about which account you connect. Our guide to excessive permissions explains why that matters.

• Destructive tools exist. The delete tools move content to Trash, and notion-update-page can overwrite content. Keep human approval on for write calls.
• Admin controls. Workspace owners manage client access in Notion settings. Limiting which clients members can connect requires the Enterprise plan. Organization owners can list and revoke MCP connections through the Admin API.
• Connected sources widen the reach. notion-connector-search can return content from Slack, Google Drive, GitHub and Jira, so a single prompt can touch several systems.
• Prompt injection. Shared pages and comments can contain text written to steer the AI. Read our page on prompt injection before you let an agent act on pages other people edit.
• Rate limits. Every tool call counts toward Notion's standard API limits. Notion says limits are higher on Business and Enterprise.

For a wider checklist, see the MCP security hub.

Alternatives

• Google Workspace MCP servers if your documents live in Google Docs and Drive.
• Box MCP server for content stored in Box, with admin-level tool switches.
• ClickUp MCP server if your team keeps docs and tasks in ClickUp.

Next step

Notion MCP is one of the easier servers to start with because it is hosted and uses OAuth. The harder part is deciding which accounts and clients should have write access. Browse more profiles in the MCP server directory, or ask eSEOspace for an MCP readiness audit before you roll it out to a team.

Frequently asked questions