Atlas / MCP servers / ejb503 / SystemPrompt Notion

SystemPrompt NotionCAUTION

Name: SystemPrompt Notion
Author: ejb503

mcp/ejb503/systemprompt-notion

MCP server by ejb503 · ai · mcp · mcp server · Audited 2026-10-08

This an Model Context Protocol (MCP) server that integrates Notion into your AI workflows. This server enables seamless access to Notion through MCP, allowing AI agents to interact with pages, databases, and comments.

Verdict

CAUTION

Grade

Trust score

89 /100

Exposed tools

23 19r · 3w · 1d

Transport

stdio

License

NOASSERTION

Stars

Overview

From the repository's own README, as read at the audited commit. Badges and raw HTML are left out.

[](https://www.npmjs.com/package/systemprompt-mcp-notion) [](https://coveralls.io/github/Ejb503/systemprompt-mcp-notion?branch=main) [](https://twitter.com/tyingshoelaces_) [](https://discord.com/invite/wkAbSuPWpr) [](https://smithery.ai/server/systemprompt-mcp-notion)

Website | Documentation

SystemPrompt MCP Notion Server

A high-performance Model Context Protocol (MCP) server that seamlessly integrates Notion into your AI workflows. This server enables AI agents to interact with Notion pages and databases through a standardized protocol. This server supports and requires MCP Sampling, which is required to the MCP to create and update Notion pages.

A compatible MCP client is available here.

Server Capabilities

const serverCapabilities: { capabilities: ServerCapabilities } = {
capabilities: {
resources: {
listChanged: true,
},
tools: {},
prompts: {
listChanged: true,
},
sampling: {},
},
};

Key Features

📝 Comprehensive Content Management

Create and update pages with rich text formatting
Search across your Notion workspace

🛠 Developer-Friendly
Extensive test coverage with Jest
TypeScript support
Comprehensive error handling

Read from source at commit 8bd57a56b28aOBSERVED · 2026-10-08

Connect

Built from this server's own package name, version and transport as found in its source — not copied from anyone's documentation, so it cannot drift against a page we do not control. Replace the environment placeholders with a token scoped to the least it needs.

claude-code

claude mcp add systemprompt-mcp-notion --env NOTION_API_KEY=${NOTION_API_KEY} --env SYSTEMPROMPT_API_KEY=${SYSTEMPROMPT_API_KEY} -- npx -y [email protected]

claude-desktop

{
  "mcpServers": {
    "systemprompt-mcp-notion": {
      "command": "npx",
      "args": [
        "-y",
        "[email protected]"
      ],
      "env": {
        "NOTION_API_KEY": "${NOTION_API_KEY}",
        "SYSTEMPROMPT_API_KEY": "${SYSTEMPROMPT_API_KEY}"
      }
    }
  }
}

Exposed tools (23)

19 read · 3 write · 1 destructive. Blast radius: 1 tool can delete or overwrite — an agent that can be talked into calling a tool can be talked into calling this one.

Tool	Risk	Description
`contact`	read	The contact information
`databaseId`	write	The ID of the database to create the page in
`formatted_contact`	read	The formatted contact information
`items`	read	List of todo items
`message`	read	The user
`organized_todos`	read	The organized todo list
`pageId`	write	The ID of the page to edit
`person`	read	Person
`priority`	read	Priority level for the items
`response`	read	The assistant
`systemprompt_create_notion_page`	write	Creates a rich, comprehensive Notion page that expands upon basic user inputs. Takes simple instructions and content, then generates a detailed, well-structured page with appropriate sections, formatting, and supplementary content.
`systemprompt_delete_notion_page`	destructive	Permanently deletes a specified Notion page and all its contents. This action cannot be undone, so use with caution.
`systemprompt_get_notion_page`	read	Retrieves comprehensive details of a specific Notion page, including its content, properties, and metadata. Returns the complete page structure and all nested content blocks.
`systemprompt_list_notion_databases`	read	Lists all accessible Notion databases in your workspace, sorted by last edited time. Returns key metadata including database title, schema, and last edited timestamp.
`systemprompt_list_notion_pages`	read	Lists all accessible Notion pages in your workspace, sorted by last edited time. Returns key metadata including title, URL, and last edited timestamp.
`systemprompt_search_notion_pages`	read	Performs a full-text search across all accessible Notion pages using the provided query. Searches through titles, content, and metadata to find relevant matches.
`systemprompt_search_notion_pages_by_title`	read	Searches specifically for Notion pages with titles matching the provided query. Useful for finding exact or similar title matches when you know the page name.
`tags`	read	Contact tags
`test_input`	read	Test input description
`test_output`	read	Test output description
`test_tool`	read	Test tool
`todos`	read	The user
`userInstructions`	read	Basic instructions or outline for the page content that will be expanded into a comprehensive structure

Trust audit

CAUTIONgrade B · trust 89/100 Install with care. The audit found things worth knowing before you trust its output.

Layer	What it checks	Result
L0	Provenance & inventory	WARN
L1	Static analysis of the code	PASS
L2	Instruction surface (what it tells the agent)	PASS
L3	Class-specific surface	WARN
L4	Behavioural (sandbox)	SKIPPED

What the source does

Filesystem: declared (1 observation(s))
Network: declared (1 observation(s))
Shell: none-observed
Dependencies: not all pinned
Secrets in source: none-found

Findings (10)

MEDIUMInventory / provenance · inv.binary · CWE-1104

credentials/.gitkeep

.gitkeep

Why it matters. a compiled or binary member cannot be reviewed from source

Fix. ship source, or explain the binary in the README

MEDIUMFilesystem / path · mcp.destructive_tools · CWE-22, CWE-59

systemprompt_delete_notion_page

Why it matters. 1 tool(s) can delete or overwrite

Fix. prefer a read-only mode or scoped tokens; the page states the blast radius

LOWInventory / provenance · inv.hidden_file · CWE-1104

.coveralls.yml

.coveralls.yml

Why it matters. hidden member outside the usual dotfiles

Fix. review its purpose