mcp-notion-server
A Model Context Protocol server for connecting Notion to MCP-compatible clients
No outside reports on file
This connector gives AI full read-write access to your Notion workspace, so protect your API token carefully and only share it with trusted AI systems.
Based on public adoption and transparency signals as of Oct 23, 2026. Our opinion, not a code audit or security guarantee.
What it can access
- Local filesReads local filesNOTED
- Command executionNo shell command runner notedLOW
- Network reachConnects to outside service APINOTED
- CredentialsRequires API key or tokenREVIEW
- Package sourceGitHub (suekou/mcp-notion-server)PUBLIC
Inferred from this listing’s public package details and description. Check the project’s source before installing.
Install
No npm or PyPI package is listed. Install from source: github.com/suekou/mcp-notion-server ↗
Everything known
We found nothing about this project in the sources we read (last checked 2026-10-30). That does not mean it has no problems.
0 incidents · 0 advisories · 0 news articles · 0 community threads · checked 2026-10-30
Popularity grade: C (from public signals such as stars and downloads, not a code review). Graded 2026-10-23.
Sources we read: OSV, GitHub Advisory Database, CISA Known Exploited Vulnerabilities, 44 security news feeds and our incident library. Last checked 2026-10-30.
About MCP Notion Server
This tool connects Notion (a popular note-taking and workspace app) to MCP-compatible AI clients like Claude. It lets AI systems read and write pages, databases, and other Notion content directly through a standard protocol.
Who it’s for
Developers building AI applications that need to access Notion workspaces. Users who want Claude or similar AI tools to help manage Notion content automatically.
Alternatives
- Zapier + Notion: Official integration platform; more limited but widely audited.
- Claude's native Notion integration (if available): Built-in support may have different security properties.
- Custom Python/Node scripts: Direct Notion API calls without MCP; gives you more control over permissions.
- Other MCP connectors: Alternative MCP servers for different apps (Google Docs, Obsidian, etc.).
Setup
Check these steps against the project’s own instructions before running anything.
Follow the project's README for installation and configuration steps. Typically involves cloning the repository, installing dependencies, and setting up a Notion API token and integration.
Why this grade
Signal-based grade (3/7 points): well starred on GitHub, public source code. This reflects adoption and transparency, not a code review.
Popularity and upkeep
- GitHub stars
- 925
- Listing last refreshed
- 2026-10-30
These are public popularity signals, not a maintenance check. Look at the repository’s commit history and open issues.
Risks to watch for
- Full Notion access: The tool needs a Notion API token that can read and modify any pages or databases your Notion workspace contains, so a compromised token exposes all that data.
- AI sees everything: Any Notion content the server can access becomes visible to the AI model, including private notes, passwords, or sensitive information you didn't intend to share.
- Prompt injection in Notion: An attacker could add hidden instructions or malicious text inside Notion pages; when the AI reads them, it might follow those instructions instead of yours.
- Token leakage: If the server logs requests or crashes, your Notion API token could be exposed in error messages or log files.
- Unvalidated operations: The AI might create, edit, or delete Notion content based on misunderstandings or tricks in your prompts.
How to lower the risk
Least-privilege permissions
- Create a dedicated Notion integration with access only to databases and pages you actually need.
- Use Notion's granular permissions to limit what the API token can modify.
Network isolation
- Run the server on a private network or localhost if possible.
- Restrict which clients can connect to the MCP server.
Monitoring
- Log all operations the server performs in Notion (reads and writes).
- Review Notion's integration audit log regularly for unexpected activity.
Red flags to watch for
- Unexplained changes to Notion pages or databases you didn't request.
- Errors containing your Notion API token in logs or terminal output.
- Slow performance suggesting the AI is accessing far more content than expected.
Questions
How do I install MCP Notion Server?
MCP Notion Server does not publish a standalone npm or PyPI package. Clone or follow the setup instructions in its source repository at github.com/suekou/mcp-notion-server.
Are there security reports about MCP Notion Server?
No reports found for this package in our research (last checked 2026-10-30). MCP Notion Server currently holds Grade C (Moderate risk signals) based on public adoption and transparency signals. Key risk areas to watch include full notion access, ai sees everything, prompt injection in notion.
Is MCP Notion Server actively maintained?
MCP Notion Server has 925 GitHub stars. Our directory data was last refreshed on 2026-10-30. Check recent commit activity, release tags, and open issues at github.com/suekou/mcp-notion-server before pinning it in production.
What are alternatives to MCP Notion Server?
Notable alternatives to MCP Notion Server include Zapier + Notion (Official integration platform), Claude's native Notion integration, Custom Python/Node scripts (Direct Notion API calls without MCP), Other MCP connectors (Alternative MCP servers for different apps (Google Docs, Obsidian, etc.)). You can also compare MCP Notion Server side by side with other MCP servers in the Related tools section on this page.
README badge and team notes
Maintain or use MCP Notion Server? Show its live grade in your GitHub README, docs site, or run a check from the terminal before you install.
GitHub README Markdown:
[](https://agentarmorhq.com/skills/suekou-mcp-notion-server)HTML embed:
<a href="https://agentarmorhq.com/skills/suekou-mcp-notion-server"><img src="https://agentarmorhq.com/api/badge/suekou-mcp-notion-server" alt="AgentArmorHQ Risk Grade for MCP Notion Server" height="20" /></a>Terminal check:
curl -fsSL https://agentarmorhq.com/api/cli | node --input-type=module - check "suekou-mcp-notion-server"Share with your security lead
Need sign-off to use mcp-notion-server? Copy this note for Slack, a ticket or a pull request.
### AgentArmorHQ Security Review Memo: mcp-notion-server
- **Listing URL:** https://agentarmorhq.com/skills/suekou-mcp-notion-server
- **Type:** App connector
- **Risk Grade:** Grade C (Moderate risk signals)
- **Outside Security Advisories on File:** 0
- **Public Adoption:** 925 GitHub stars
#### Permission & Blast-Radius Signals
- **Local files:** Reads local files
- **Command execution:** No shell command runner noted
- **Network reach:** Connects to outside service API
- **Credentials:** Requires API key or token
- **Package source:** GitHub (suekou/mcp-notion-server)
#### Recommended Hardened Setup
- **Source Repo:** https://github.com/suekou/mcp-notion-server
- **Controls:** Pin an exact version in `.mcp.json`, scope access to a single workspace folder, and use a least-privilege read-only token where supported.
_Based on public adoption and transparency signals as of Oct 23, 2026. Our opinion, not a code audit or security guarantee._Key facts
- Type
- App connector
- Publisher
- suekou
- Source code
- github.com/suekou/mcp-notion-server
- Est. context load
- ~1.2k tokens / turn (~7 tool schemas, 0.6% of 200k context)
- Popularity
- 925 GitHub stars
- Last updated
- 2026-10-30
- Last graded
- 2026-10-23
Community
Discussions for MCP Notion Server
Ask questions or share configuration tips. Governed by our Community Rules & Terms.
No posts match this filter yet.
Be the first to ask a question or share a working tip.
Check before you install, in Claude
Your assistant answers Block, Review or No known issues for any package before it installs it.
Get this check inside Claude