What it is
Notion MCP is a remote server hosted by Notion at https://mcp.notion.com/mcp (an SSE endpoint at /sse is still offered). You add the URL to a client such as Claude Code, Cursor or Codex and sign in with OAuth, and the client can then read and change only what you already have access to in Notion. It is available on every plan.
The tool list is long, more than 50 tools on the supported-tools page. notion-search and notion-fetch find and read content; notion-create-pages, notion-update-page, notion-move-pages and notion-duplicate-page edit it; notion-create-database, notion-create-view and notion-query-data-sources work with databases, including SQL-style queries. There are also tools for comments, files, users, calendars, Notion Skills, agent memories and Custom Agent sessions, and notion-connector-search for Slack, Google Drive, GitHub and Jira on plans with Notion AI.
The older open-source server (@notionhq/notion-mcp-server, run with an integration token) still works, at v2.1.0 from January 2026, but its README says it is no longer actively maintained and Notion may sunset the repository.
Install
https://mcp.notion.com/mcpOur review
Notion's hosted server is where its effort has gone, and it shows in the details. Access follows each user's own permissions, so there is no integration to share pages with by hand, and deletes are handled with unusual care: notion-delete-pages moves at most 20 pages to Trash, refuses to act unless the call sets user_confirmed, and is marked destructive so clients that honour annotations ask first. notion-restore-pages can bring them back.
Plan gating decides how good it feels. On Business and Enterprise with Notion AI, search can reach Slack, Google Drive, GitHub and Jira, SQL across several data sources is unlimited, and filters by editor, date or several teamspaces work. Other plans get keyword search, one data source at a time against a shared workspace allowance whose size is not published, and calls that quietly drop unsupported filters and return a notice. Agents need to read those notices, or they will treat broader results as precise ones.
Rate limits are generous enough for interactive use and tight for bulk jobs. Notion gives each connection 180 requests a minute on most plans and 600 on Business and Enterprise, data-source queries are held to about three a second, and some MCP tools have their own short limits. An agent migrating a few thousand rows will hit 429s and needs to respect Retry-After.
Governance is thinner than Atlassian's. Workspace owners can see connected clients and the Admin API can list and revoke connections, but restricting which clients members may connect is Enterprise only, and Notion's help centre says per-user tool-level visibility is not yet available. Removing an app from the allowlist blocks its calls but cannot revoke tokens it already holds.
Where it earns its place
An engineer who keeps specs and ADRs in Notion and codes in Claude Code
Pull the current spec into the coding session and update its status when the work ships
notion-fetch reads the page as Markdown and notion-update-page changes properties. It costs nothing extra on any plan, and a handful of calls per task sits far below 180 requests a minute.
A product ops lead running a 2,000-row feature-request database
Have an agent group and tag new requests every week
notion-query-data-sources pulls the rows and notion-update-page tags them. On Business and Enterprise with Notion AI the SQL is unlimited; on Plus it draws from a shared, unpublished allowance and bulk updates must stay under the rate limit.
An IT admin at a 300-person company on Notion Enterprise
Allow Claude and ChatGPT but block unvetted MCP clients
Set AI apps to "Only approved list" under Connections; existing connections are added automatically. Use the Admin API to list and revoke connections, and accept that per-user tool usage is not yet visible.
Before you commit
- Setup
- Add https://mcp.notion.com/mcp to Claude Code, Cursor, Codex or another client and complete OAuth in the browser; first tool call in a couple of minutes. Okta customers can use enterprise-managed authorisation so members need not approve each client.
- Integrations
- More than 50 tools: read (search, fetch, get-comments, query-data-sources), write (create-pages, update-page, move-pages, create-view, create-comment) and destructive (delete-pages, delete-databases, both confirmation-gated). Admin-owned connections can expose a chosen subset of 24 tools.
- Data and privacy
- The hosted server reads and writes anything the signed-in user can, and Notion warns that page content, comments and connected-app results can carry prompt-injection instructions that lead a client to leak or change data. No GitHub security advisories are published for the open-source server.
- Cost at scale
- No charge for the server. The cost is the plan: full search and unlimited SQL need Business at $20 a member a month yearly, so 50 people is $12,000 a year. Whether MCP searches draw on Notion AI credits is not published.
- Limits
- 180 requests a minute per connection on Free and Plus, 600 on Business and Enterprise, about three data-source queries a second, plus per-tool limits; top-level private pages cannot be restored through MCP.
What's good
- OAuth sign-in; access follows each user's Notion permissions
- More than 50 tools, including database views and SQL-style queries
- Deletes go to Trash, need user_confirmed and can be restored
- Available on every Notion plan
What's not
- Connected-app search and multi-source SQL need Business or Enterprise with Notion AI
- Client allowlists are Enterprise only; no per-user tool visibility yet
- 180 requests a minute per connection below Business
- Self-hosted open-source server is unmaintained
Best for
Teams that keep their docs, wikis and project databases in Notion and want an assistant to read and update them.
Alternatives
Notion MCP: common questions
- Is Notion MCP worth it?
- Notion has put real work into its hosted server, and the result is a capable agent interface to a workspace, with the useful search and query tools reserved for Business plans. We rate it 4.5 out of 5.
- How much does Notion MCP cost?
- Free on every plan. Connected-app search, unlimited SQL queries and advanced search filters need Business ($20/member/month yearly) or Enterprise.
- What are the downsides of Notion MCP?
- Connected-app search and multi-source SQL need Business or Enterprise with Notion AI; client allowlists are Enterprise only; no per-user tool visibility yet; 180 requests a minute per connection below Business; self-hosted open-source server is unmaintained.
- Who is Notion MCP best for?
- Teams that keep their docs, wikis and project databases in Notion and want an assistant to read and update them.
- How much does Notion MCP cost for a team or in production?
- No charge for the server. The cost is the plan: full search and unlimited SQL need Business at $20 a member a month yearly, so 50 people is $12,000 a year. Whether MCP searches draw on Notion AI credits is not published.
- Is Notion MCP safe for company data?
- The hosted server reads and writes anything the signed-in user can, and Notion warns that page content, comments and connected-app results can carry prompt-injection instructions that lead a client to leak or change data. No GitHub security advisories are published for the open-source server.
- What are the best Notion MCP alternatives?
- The closest alternatives we have reviewed are Atlassian Rovo MCP Server, Google Workspace MCP servers and Linear MCP.
Answers checked Oct 22, 2026.