Notion MCP server for Claude, ChatGPT and other clients: what it does, access, how to connect

Notion hosts an official read-and-write MCP server at mcp.notion.com, with OAuth sign-in; its open-source local server is no longer maintained. Verified 21 Oct 2026.

Official MCP server (hosted; local legacy) · read & write
Claude connector · read & write

Hosting: Remote Streamable HTTP at https://mcp.notion.com/mcp, hosted by Notion. The open-source local server (@notionhq/notion-mcp-server, MIT) is no longer actively maintained.
Auth: Hosted: OAuth sign-in, or MCP bearer tokens on Business and Enterprise. Local: a Notion integration token.
Read / write: Read and write. Notion's tool reference lists 64 tools by our count on 21 Oct 2026, including create, update, move, duplicate and trash tools. No tool moves money.
Works with: Claude.ai, Claude Desktop, Claude Code, ChatGPT (developer mode), Codex, Cursor, VS Code and other MCP clients.
Plan requirement: Notion says MCP works on every plan and states no price. Some tools, MCP tokens and higher request limits need Business or Enterprise; limiting which AI apps members connect is Enterprise-only.
Last changed: 2026-09-20 (open-source README now steers users to the hosted server and says the local server is unmaintained)
Verification: Verified 21 Oct 2026 by theFinanceStack · confidence: medium

What can an agent do with Notion through MCP?

It can search and read pages, databases, comments and meeting notes, and create, edit, move, duplicate or trash them. Notion's tool reference lists 64 tools by our count on 21 Oct 2026.

Where it runs

Option	Tools
Notion's tool reference	Not documented. One more search tool, `notion-ai-search`, is callable by name but left out of the tool list.
Claude directory	13 tools, so your client's set can differ from Notion's reference.
Legacy local server	22 tools, per its README.

How actions behave

Action	What happens
Creates, updates, moves, duplicates, comments and calendar changes	Take effect at once. They don't wait for approval.
Trash (two tools)	Nothing moves until the call sets `user_confirmed` to true, so the client has to check with the user first. Notion marks both as destructive. Each call moves up to 20 pages or databases.
Trash a locked page or database	Can't be trashed until someone removes the lock in Notion.
Restore	Reverses trashing. A parent still in Trash must be restored first. Top-level private pages can only be restored in Notion.
Create a page in draft mode	Makes a private page at workspace level.
Calendar tools	Can notify attendees.
Custom Agent tools	Send requests to Notion agents.

Good to know

Comments are visible to anyone who can see the page.
Members can delete their own comments. Notion doesn't say whether that can be undone.
No tool moves money.

Can

Search the workspace and, on Business or Enterprise with Notion AI, connected sources such as Slack, Google Drive and GitHub (remote)
Read pages, databases, views, comments, backlinks and meeting notes; meeting notes need Business or higher with Notion AI (remote)
Query databases: saved views on every plan; SQL-style queries are metered below Business or Enterprise with Notion AI, and cross-database queries need those plans (remote)
Create and update pages, databases, views and folders, including pages created as private drafts; move and duplicate pages (remote)
Move pages and databases to Trash once the user confirms, and restore them (remote)
Post comments on any plan; edit, delete, resolve and react to comments on Business or Enterprise; create, update or cancel calendar events (remote)
Local only: limit the integration to the pages you share with it and to read-only capabilities

Cannot

Exceed the signed-in user's Notion permissions (per Notion)
Be used by workspace guests; only members can connect (per Notion)
Delete a database permanently: deletes go to Trash on the hosted server (per Notion), and the local server has no database deletion (per its README)
Return more than 50 search results or 100 query rows per call (per Notion)

What access does it get?

The hosted server acts with the signed-in member's full Notion permissions. Only the local server can be narrowed to chosen pages.

Where	Scopes and permissions (as documented)	Admin requirement
Hosted server and Claude connector (OAuth)	Not documented by the vendor as scopes. Notion says MCP tools can access anything the authorising user can, and respect existing page permissions.	No admin step is documented for connecting. Workspace owners manage client access in Settings › Notion MCP › Manage workspace clients, and organization owners can list and revoke members' connections through the Admin API (per Notion's overview). Enterprise owners can limit AI apps to an approved list (Settings › Connections › Permissions › AI apps, per Notion's help center) and disconnect all users. Enterprise workspaces with SAML SSO can use enterprise-managed authorization, where the identity provider grants access without a consent screen.
Hosted server (MCP token)	Not documented by the vendor, and Notion doesn't say whose permissions the token carries. It is sent as a bearer header instead of a browser sign-in.	Business and Enterprise only: a workspace owner creates the token with New MCP token in Notion's developer portal.
Local server (integration token)	The integration sees only pages and databases you connect to it. Capabilities set in its Configuration tab, e.g. Read content only, give a read-only token.	Notion's README doesn't document an admin step; the integration is created at notion.so/profile/integrations.

How do I connect it?

Add https://mcp.notion.com/mcp in your client, or use the Claude directory listing, and complete Notion's OAuth sign-in. Test with a read-only prompt first.

Open https://claude.com/connectors/notion and click Connect, or go to Customize › Connectors › Add custom connector and enter https://mcp.notion.com/mcp.
Sign in to Notion and approve access for your workspace.
Test with a read-only prompt, such as finding a page, before asking for edits.
Team/Enterprise: an Owner adds the connector before members connect; each member then authorises their own Notion account.

The Claude directory lists Notion as Anthropic verified, added November 2025, with 13 tools shown.

What should a finance team watch for?

Most edits, moves and comments take effect at once with the user's full permissions. Trashing waits for the user to confirm.

Request limits: Notion's general API limits are 180 requests a minute per connection (600 on Business and Enterprise) plus a shared workspace limit. Notion's tool reference says every MCP call counts toward them, and individual MCP tools can also hit their own limits.
Creates, updates, moves, comments and calendar changes act immediately. Keep your client's per-call approval on.
Trash tools need user_confirmed set to true and are marked destructive, so the client should ask before anything goes to Trash. Read the item list before you confirm.
Least privilege: the hosted server can't be limited to chosen pages. Use a member with narrow page access, or the local server with a read-only integration.
MCP tokens are bearer secrets that work without a browser sign-in. Keep them in the client's secret storage and out of shared or committed config files.
Page text, comments and connected sources are untrusted input: an injected instruction could push the agent to edit, trash or comment. Don't approve calls you didn't ask for.
Removing an app from the Enterprise approved list blocks its calls but can't revoke its tokens, per Notion's help center.
Notion's MCP pages don't address data retention or model training; check Notion's terms and your AI provider's terms.

How could finance teams and accounting firms use it?

Read access fits questions about checklists, policies and client notes. Write access fits drafting pages and comments that a person checks.

Inside a company

Ask which close checklist tasks in a Notion database are open, who owns them and what is due this week.
Find the current version of an expense or approval policy and summarise what changed.
Draft a month-end commentary page from notes and query results for a person to edit.

At an accounting firm

List client onboarding or engagement pages missing information across a shared database.
Draft meeting notes and follow-up comments on a client page for a manager to review before posting.
Summarise open comments and unresolved discussions on a client's engagement pages before a review meeting.

Keep a person approving anything that changes Notion or another system of record, and treat AI summaries as drafts until someone checks them.

Want Notion connected to Claude for your team?

We set up least-privilege connections and a review step before anything changes your workspace. Fixed fee.

Book a 30-minute setup call

Change log

Date	Change	Source
2026-10-21	Notion's tool reference lists 64 tools by our count; MCP tokens available on Business and Enterprise	developers.notion.com/guides/mcp/mcp-supported-tools
2026-09-20	Open-source README strengthens the hosted-server recommendation; it now says the local server is no longer actively maintained	github.com/makenotion/notion-mcp-server
2026-06-17	Open-source server adds page-as-Markdown tools and per-request token passthrough over HTTP	github.com/makenotion/notion-mcp-server
2025-11	Notion connector listed in the Claude directory (Anthropic verified), using https://mcp.notion.com/mcp	claude.com/connectors/notion
2025-04-11	Open-source Notion MCP server released, per PulseMCP	pulsemcp.com/servers/notion

FAQ

Is this official?

Yes. Notion hosts the server at mcp.notion.com and documents it; the Claude directory lists it as Anthropic verified. Notion's open-source local server is no longer actively maintained.

Is it free?

Notion says MCP works on every plan and doesn't state a price. Some tools, MCP tokens and higher request limits need Business or Enterprise, and app allowlists need Enterprise. Claude and ChatGPT plan rules apply separately.

Does it change data in Notion?

Yes. Creates, edits, moves, comments and calendar changes happen immediately as the signed-in member. Trash calls move nothing until the user confirms, and pages can be created as private drafts.

Is my data used to train models?

Notion's MCP documentation doesn't say. Check Notion's terms and your AI provider's terms for how workspace content passed to the model is handled.

Can my accountant use it on my behalf?

Notion doesn't document delegation. Guests can't connect, so an accountant would need to be a workspace member and would connect with their own login and permissions. Check your Notion plan's member pricing.

Something wrong or out of date? Tell us and we'll email you when it's fixed.

Sources

Verified by theFinanceStack, 21 Oct 2026. Vendor list on the CFO Software Market Map courtesy of Jason Staats; AI connectivity data by theFinanceStack. Not tax, compliance or financial advice.