Notion

Overview

From the repository's own README, as read at the audited commit.

# Notion MCP Server> [!NOTE]>> We’ve introduced **Notion MCP**, a remote MCP server with the following improvements:>> - Easy installation via standard OAuth. No need to fiddle with JSON or API tokens anymore.> - Powerful tools tailored to AI agents, including editing pages in Markdown. These tools are designed with optimized token consumption in mind.>> Learn more and get started at [Notion MCP documentation](https://developers.notion.com/docs/mcp).>> We are prioritizing, and only providing active support for, **Notion MCP** (remote). As a result:>> - We may sunset this local MCP server repository in the future.> - Issues and pull requests here are not actively monitored.> - Please do not file issues relating to the remote MCP here; instead, contact Notion support.![notion-mcp-sm](https://github.com/user-attachments/assets/6c07003c-8455-4636-b298-d60ffdf46cd8)This project implements an [MCP server](https://spec.modelcontextprotocol.io/) for the [Notion API](https://developers.notion.com/reference/intro).![mcp-demo](https://github.com/user-attachments/assets/e3ff90a7-7801-48a9-b807-f7dd47f0d3d6)---## ⚠️ Version 2.0.0 breaking changes**Version 2.0.0 migrates to the Notion API 2025-09-03** which introduces data sources as the primary abstraction for databases.### What changed**Removed tools (3):**- `post-database-query` - replaced by `query-data-source`- `update-a-database` - replaced by `update-a-data-source`- `create-a-database` - replaced by `create-a-data-source`**New tools (7):**- `query-data-source` - Query a data source (database) with filters and sorts- `retrieve-a-data-source` - Get metadata and schema for a data source- `update-a-data-source` - Update data source properties- `create-a-data-source` - Create a new data source- `list-data-source-templates` - List available templates in a data source- `move-page` - Move a page to a different parent location- `retrieve-a-database` - Get database metadata including its data source IDs**Parameter changes:**- All da

Connect

Built from this server's own package name, version and transport as found in its source — not copied from anyone's documentation, so it cannot drift against a page we do not control. Replace the environment placeholders with a token scoped to the least it needs.

claude mcp add notion-mcp-server --env AUTH_TOKEN=${AUTH_TOKEN} --env ENABLE_TOKEN_PASSTHROUGH=${ENABLE_TOKEN_PASSTHROUGH} --env NOTION_TOKEN=${NOTION_TOKEN} -- npx -y @notionhq/[email protected]

{
  "mcpServers": {
    "notion-mcp-server": {
      "command": "npx",
      "args": [
        "-y",
        "@notionhq/[email protected]"
      ],
      "env": {
        "AUTH_TOKEN": "${AUTH_TOKEN}",
        "ENABLE_TOKEN_PASSTHROUGH": "${ENABLE_TOKEN_PASSTHROUGH}",
        "NOTION_TOKEN": "${NOTION_TOKEN}"
      }
    }
  }
}

Exposed tools (3) 2 read · 1 write · 0 destructive

Details

Source

makenotion/notion-mcp-server

npm

@notionhq/notion-mcp-server@2.5.1

Transports

stdio · streamable-http

Credentials it reads

AUTH_TOKENENABLE_TOKEN_PASSTHROUGHNOTION_TOKEN

License

MIT

Stars

4,632 · pushed 1d ago

Trust audit

Install with care. The audit found things worth knowing before you trust its output.

What the source does

Filesystem

none-observed

Network

declared (1 observation(s))

Shell

none-observed

Dependencies

not all pinned

Secrets in source

none-found

Findings (12)

console.log(`Generated auth token written to: ${authTokenFilePath}`)

console.log(`Initializing session with per-request Notion token ${redactToken(resolution.token)}`)

console.log(`Authentication: Bearer token required`)

console.log(`Read your auth token from: ${authTokenFilePath}`)

import { HttpClient } from '../../client/http-client'

vi.mock('../../client/http-client')

When using Streamable HTTP transport, the server will be available at `http://127.0.0.1:<port>/mcp` by default.

expect(getHttpServerDisplayUrl(options)).toBe('http://127.0.0.1:3000')

expect(getHttpServerDisplayUrl(options)).toBe('http://127.0.0.1:8080')

expect(dnsOptions.allowedOrigins).toContain('http://127.0.0.1:4321')

resolve({ server, baseUrl: `http://127.0.0.1:${port}` })

@modelcontextprotocol/sdk, axios, express, form-data, mustache, node-fetch, openapi-client-axios, openapi-schema-validator

Gates applied: no_behavioural_pass.

Audited 2026-09-14 · audit v0.4.0 · source sha fda23548d239 · full audit: observations/trust-audit/mcp-server/makenotion__notion-12.json · Report an issue or request a re-scan

Audit history

Also audited

Servers with a similar trust profile.

Questions