// SCAN REPORT

Notion Direct MCP Server

10 tools. 6 can modify or destroy data without limits.

3 write tools that can modify data. Rate limits recommended.

Last updated: 4 Jul 2026

6 can modify or destroy data

4 read-only

10 tools total

Community server · catalogue entry verified 04/07/2026

How to control Notion Direct MCP Server ↓

TOOL MAP

What Notion Direct MCP Server exposes to your agents

Read (4) Write / Execute (3) Destructive / Financial (0)

Running more than one server? Check your whole stack →

MOST DANGEROUS TOOLS

High Risk

The most dangerous Notion Direct MCP Server tools

Write · Medium create_page Creating a new page in Notion is a Write operation—it creates data that can be modified or deleted later. Write · Medium update_page Updating a page modifies data but does not permanently delete or destroy it—changes can be reverted or overwritten. Write · Medium append_blocks Appending blocks creates new content within Notion pages or blocks.

6 of Notion Direct MCP Server's 10 tools can modify, destroy, or commit something on every call — and an agent calls them with no built-in limits.

POLICY

How to control Notion Direct MCP Server

PolicyLayer is an MCP gateway — it sits between your AI agents and Notion Direct MCP Server, and nothing reaches the server without passing your rules. These are the rules we recommend:

Rate limit write operations

{
  "append_blocks": {
    "limits": [
      {
        "counter": "append_blocks_per_hour",
        "window": "hour",
        "max": 30,
        "scope": "grant"
      }
    ]
  }
}

Prevents bulk unintended modifications from agents caught in loops.

Cap read operations

{
  "get_block_children": {
    "limits": [
      {
        "counter": "get_block_children_per_minute",
        "window": "minute",
        "max": 60,
        "scope": "grant"
      }
    ]
  }
}

Controls API costs and prevents retry loops from exhausting upstream rate limits.

Create a free account and register Notion Direct MCP Server — nothing to install.
Add these rules — paste them, or build them visually. Tune the limits to your setup.
Point your MCP client (Claude, Cursor, anything) at your gateway URL.

ENFORCE POLICY ON NOTION DIRECT →

Instant setup, no code required.

FULL CATALOGUE

All 10 Notion Direct MCP Server tools

WRITE 3 tools

Write append_blocks Append blocks to a page or block Write create_page Create a new Notion page Write update_page Update a Notion page

READ 4 tools

Read get_block_children Get children blocks of a page or block Read get_page Get a Notion page by ID Read query_database Query a Notion database Read search_notion Search Notion workspace for pages and databases

OTHER 3 tools

Other async_tool async_tool Other my_tool my_tool Other tool_with_context tool_with_context

FAQ

Questions about Notion Direct MCP Server

How do I prevent bulk modifications through Notion Direct MCP Server? +

The Notion Direct MCP Server server has 3 write tools including append_blocks, create_page, update_page. Set a rate limit in your policy -- for example, 10 calls per hour prevents an agent from making more than 10 modifications per hour. PolicyLayer enforces this at the gateway, before calls reach Notion Direct MCP Server.

How many tools does the Notion Direct MCP Server MCP server expose? +

10 tools across 2 categories: Read, Write. 4 are read-only. 6 can modify, create, or delete data.

How do I enforce a policy on Notion Direct MCP Server? +

Register the Notion Direct MCP Server MCP server in PolicyLayer, apply the suggested rules above (adjust the limits to your use case), and point your AI client at the PolicyLayer proxy URL instead of the server directly. Your agents keep the same tools; PolicyLayer evaluates every call against policy before it executes. Nothing to install, live in minutes.

Enforce policy on every Notion Direct MCP Server tool call.

Deterministic rules across all 10 Notion Direct MCP Server tools. Per-identity grants. Full audit log. Live in minutes. Nothing to install.

ENFORCE POLICY ON NOTION DIRECT →

Instant setup, no code required.

10 Notion Direct MCP Server tools catalogued and risk-classified — across an index of 43,000+ MCP servers.