Happy slice of mcp pizzaMCP.pizza

notion-mcp-server

MCP.Pizza Chef: awkoy

Just two commands appear in your assistant's tool list, and they open onto forty-four Notion actions that load only when needed: create and update pages, query databases, add or delete blocks, apply templates, leave comments, upload files and rewrite whole pages as plain text. You sign in with a Notion personal access token, which can reach everything your own account can see. Deleted pages go to Notion's trash rather than vanishing, and you can lock the whole thing to read-only or to a chosen list of actions.

Data
Notes
Writing

Use This MCP server To

Create a Notion page from a rough set of notes Find every task in my database that is overdue Rename or retag a batch of pages in one go Rewrite a messy page and fix its headings Leave a summary comment on yesterday's meeting notes Upload a file or image to the right page Start a new page from one of my Notion templates

README

Notion MCP Server — Connect Claude, Cursor & VS Code to Notion

npm version NPM Downloads License Model Context Protocol notion-mcp-server on Smithery Stars

Give your AI full read/write access to Notion with one token and one paste. This is an agent-first Notion MCP server: your AI client (Claude Code, Claude Desktop, Cursor, VS Code, Cline, Zed — anything that speaks MCP) can create pages, query databases, append blocks, apply templates, comment, and upload files in natural language.

Three reasons it exists when Notion ships its own MCP:

  • Built for agents, not humans-in-the-loop. Notion's hosted MCP is OAuth-only — it cannot run headless. This server authenticates with a token, so it works in CI, cron jobs, background agents, and self-hosted deployments where nobody can click "Authorize".
  • 97% smaller tool footprint at connection. Two MCP tools (422 tokens) instead of one schema per endpoint — the official open-source server loads 17,163 tokens of tool schemas before you do anything. Operation schemas load on demand via notion_describe, so even a typical multi-operation task stays 85–95% lighter. Measured, reproducible →
  • The operational stuff is built in. Batched mutations with atomic rollback, idempotency keys, automatic retry on rate limits, slim token-efficient responses, full markdown round-trip, and self-healing validation errors that let the model fix its own bad payloads in one turn.
Notion MCP Server on Glama

⚡ Quick start

notion-mcp-server FAQ

Do I need a key or a login?
You need a Notion personal access token, which you create in a minute from Notion's developer settings page. There is no sign-in window to click through, which is why it also works for scheduled or unattended jobs.
Can I use this to clean up a messy Notion page?
Yes. It can read a page as plain text, let your assistant rewrite it, and write the tidied version back, so headings, lists and code samples survive the round trip.
Can it delete my work?
It can move pages to Notion's trash and remove blocks, comments and views, with no confirmation step of its own. Trashed pages can be restored from Notion, and there is a restore command too.
Can I stop it changing anything?
Yes. A read-only setting turns off every writing action, and you can also allow or block individual actions by name, which is unusual and genuinely useful here.
How much of my workspace can it see?
Everything your own Notion account can see, because the token inherits your access. There is no per-page sharing step, so treat the token like your password.
Which apps does it work in?
Claude Desktop, Claude Code, Cursor, VS Code, Cline, Zed and other MCP-compatible apps. Claude Desktop also has a double-click extension file that avoids editing settings by hand.
How hard is the setup?
Easy. Copy your token, paste a short block into your assistant's settings, restart it. Docker and a self-hosted web version exist if you want them, but neither is required.
Is this the same as Notion's own connector?
No, it is an independent project. Notion's own hosted version asks a person to approve access in a browser, while this one runs from a token, which is why it suits background use.