Notion MCP Server
Notion databases and pages integration for AI models using TypeScript-based MCP tools.
Data last scanned today · Reviewed yesterday
Overview
This repository provides a local MCP server that interfaces with the Notion API, allowing AI agents to interact with pages and data sources. Version 2.0.0 represents a significant migration to the 2025-09-03 API, shifting database management tasks toward a new data source abstraction. Users can query, retrieve, and update data sources, as well as move pages within their Notion workspace. Note that this local implementation is currently being deprioritized by the maintainer in favor of a newer remote Notion MCP solution that supports OAuth. The developer team has explicitly stated that issues and pull requests in this repository are not actively monitored, and the project may be sunset in the future.
Our verdict
With a security score of 53/100, this server carries a high risk level. The primary concern is the complete lack of an authentication method, meaning anyone with access to the server configuration gains full control over the connected Notion data. Given that the maintainers are actively discouraging use of this local version in favor of their remote, OAuth-supported alternative, most users should avoid this repository.
- Maintained by the official Notion organization.
- Small footprint with only 12 direct dependencies.
- Comprehensive migration guide provided for v2.0.0 tools.
- High security risk due to no authentication method.
- Repository is no longer actively monitored for issues.
- Project may be sunset in favor of remote alternatives.
Setup
{
"mcpServers": {
"notion-mcp-server": {
"args": [
"-y",
"@notionhq/notion-mcp-server"
],
"command": "npx"
}
}
}Paste into ~/Library/Application Support/Claude/claude_desktop_config.json (macOS) or %APPDATA%\Claude\claude_desktop_config.json (Windows), then restart Claude Desktop. Some servers require API keys or tokens as environment variables — check the project's README and add an "env" object if needed.
- No read-only mode — running this grants full read/write access.
- No built-in authentication — anyone with access to this config can invoke every tool it exposes.
Tools
| Tool | Description | Risk |
|---|---|---|
| query-data-source | Query a data source (database) with filters and sorts | low |
| retrieve-a-data-source | Get metadata and schema for a data source | low |
| update-a-data-source | Update data source properties | medium |
| create-a-data-source | Create a new data source | medium |
| list-data-source-templates | List available templates in a data source | low |
| move-page | Move a page to a different parent location | medium |
| retrieve-a-database | Get database metadata including its data source IDs | low |
| retrieve-page-markdown | Read a page's full content as Markdown | low |
| update-page-markdown | Edit a page's content with Markdown | medium |
Compatibility
| Client | Local | Docker | Remote | Read-only |
|---|---|---|---|---|
| Claude Desktop | ||||
| Cursor | ||||
| VS Code | ||||
| Windsurf | ||||
| ChatGPT |
Alternatives
Badge
Maintain this server? Add the live badge to your README.