Notion MCP Server
by lyoung991
Server Configuration
Describes the environment variables required to run the server.
| Name | Required | Description | Default |
|---|---|---|---|
| HOST | No | Host/interface the HTTP transport binds to. | |
| PORT | No | Port the HTTP transport listens on. | |
| HTTP_PROXY | No | Route all outbound HTTP traffic (Notion API calls and downloads in get_image / upload_file) through an HTTP(S) proxy. | |
| HTTPS_PROXY | No | Route all outbound HTTPS traffic (Notion API calls and downloads in get_image / upload_file) through an HTTP(S) proxy. | |
| NOTION_TOKEN | Yes | Personal Access Token (ntn_…, recommended) or Internal Integration secret (secret_… / ntn_…) used to authenticate with Notion. | |
| MCP_TRANSPORT | No | Selects the transport for running the server as a long-running remote/HTTP service. | |
| MCP_AUTH_TOKEN | No | Authentication token required by the remote/HTTP transport. | |
| NOTION_PAGE_ID | No | Default parent for create_page / create_database when no parent is passed (page → Share → Copy link; the whole URL or the bare 32-char id both work). | |
| NOTION_FILE_URLS | No | ref replaces Notion's signed file URLs in slim responses with short notion-file: refs. | full |
| NOTION_READ_ONLY | No | true/1/yes disables every write operation in one switch. | |
| NOTION_RATE_LIMIT | No | Requests/second for the shared limiter (Notion's documented per-integration limit). | 3 |
| NOTION_UPLOAD_ROOT | No | Confine upload_file's path source to one directory. | |
| MCP_PROTOCOL_NEGOTIATION | No | Set to auto so the client probes for MCP 2026-07-28 (stateless requests, cache hints on every list); otherwise the server speaks the 2025-era protocol over stdio. | |
| NOTION_DAILY_LOG_PAGE_ID | No | Only used by the daily-log MCP prompt. | |
| NOTION_ALLOWED_OPERATIONS | No | Comma-separated allowlist of operations or group presets (read, write, destructive, pages, blocks, databases, data_sources, views, comments, users, files). | |
| NOTION_BLOCKED_OPERATIONS | No | Comma-separated blocklist (same vocabulary as the allowlist); wins over the allowlist. | |
| NOTION_CONFIRM_DESTRUCTIVE | No | true/1 keeps destructive operations enabled but asks you first via MCP elicitation. |
Instructions
Guidance the server publishes about itself, which clients place ahead of the tool catalog so the model reads it before choosing anything.
This server publishes no instructions, or was last inspected before Glama recorded them.
Capabilities
Server capabilities have not been inspected yet.
Tools
Functions exposed to the LLM to take actions
| Name | Description |
|---|---|
No tools | |
Prompts
Interactive templates invoked by user choice
| Name | Description |
|---|---|
No prompts | |
Resources
Contextual data attached and managed by the client
| Name | Description |
|---|---|
No resources | |
This server cannot be deployed
Maintenance
ActivityActive
ResponsivenessNo issues