MCP server
Notion
Broad read and write access to Notion that should use a restricted member and one disposable page.
Published by the company that makes the product.
What it can access
OAuth gives the AI client the connected user's effective Notion access. The official hosted server supports broad read and write actions.
Security note
Use a restricted workshop member and one test page. Notion warns that the AI can access whatever the authenticated user can access.
Do you need it?
Connect only when a repeated workflow must search or update Notion. For one page, copy public text manually.
Capability and permissions
Notion’s official hosted MCP can search, read, create, and update pages and databases. OAuth gives the client the connected user’s effective access, which can be the whole workspace.
Least-privilege setup
As of 2026-09-01, use Notion’s official hosted OAuth server, not an old token-based community configuration. Create a restricted workshop member that can access one test page only. Review the permission screen before approval.
Harmless success test
Create a page called MCP TEST with invented content. Ask the client to append one labelled checklist. Confirm it cannot find a private page outside the test area.
Disable, revoke, remove
Disconnect in the AI client, revoke the connection in Notion’s connected-app settings, remove the workshop member, and delete the test page.
When not to connect
Do not connect an owner or administrator account, or a workspace containing personnel, legal, safeguarding, source, or beneficiary records.