Back to Home
miriamtoca-ui icon

notion-mcp-server

by miriamtoca-ui

Overview

This server acts as a Model Context Protocol (MCP) endpoint, enabling agents to interact with Notion for document management, including creating, retrieving, and updating entries, and provides a direct `/ingest` endpoint for data entry.

Installation

Run Command
node server-http.js

Environment Variables

  • NOTION_TOKEN
  • NOTION_DATABASE_ID
  • PORT

Security Notes

No 'eval' or obfuscation was found. Secrets (NOTION_TOKEN) are intended to be loaded from environment variables. However, a critical flaw exists in `tools.js`: `NOTION_DATABASE_ID` has a hardcoded default value ('2b704d5815c48030bf12f039d1a06893') which will be used if the environment variable is not explicitly set. Although `server-http.js` logs a warning, the server will proceed to operate on this potentially unintended or public database. This poses a significant risk of data exposure or accidental writes to the wrong database. The `/mcp/call_tool` endpoint dynamically executes handlers, relying on input schema validation and Notion's API to prevent misuse, but still represents a broad attack surface if tool arguments can be crafted maliciously. The `/ingest` endpoint also accepts arbitrary JSON for Notion page creation.

Similar Servers

Stats

Interest Score0
Security Score4
Cost ClassLow
Stars0
Forks0
Last Update2025-12-10

Tags

NotionMCPAPIDocument ManagementIntegration