notion_file_upload_send · Notion DB MCP Helper MCP

WHAT IT DOES

What notion_file_upload_send does on Notion DB MCP Helper

AI agents use notion_file_upload_send to create or update resources in Notion DB MCP Helper — usually the action step of a workflow, after the agent has gathered context. Every call changes real data in your Notion DB MCP Helper environment.

WHY IT NEEDS A POLICY

Why notion_file_upload_send needs a policy

This tool creates or modifies data reversibly by uploading file bytes to Notion. It is not destructive (the upload can be undone or replaced), not financial, and not a pure read operation. The severity is medium because unauthorized file uploads could bloat storage, introduce malicious content, or modify important Notion documents, but the impact is limited to the specific file_upload_id and is reversible.

From the tool's definition Tool description states 'Upload local file bytes to an existing Notion file_upload_id', using the verb 'Upload' which modifies data in Notion by adding file content to an existing upload resource.

Attacks that exploit this kind of access

Recommended rule Ready

Verdict

notion_file_upload_send Rate-limited

notion_file_upload_send stays usable, but capped — an agent stuck in a loop can't make hundreds of changes a minute. Everything else on the server is denied unless you say otherwise.

View as policy code

policy.json

{
  "version": "1",
  "default": "deny",
  "tools": {
    "notion_file_upload_send": {
      "limits": [
        {
          "counter": "notion_file_upload_send_rate",
          "window": "minute",
          "max": 30,
          "scope": "grant"
        }
      ]
    }
  }
}

LIMIT THIS TOOL →

Instant setup, no code required.

PolicyLayer is an MCP gateway: every tool call is checked against your rule before it reaches Notion DB MCP Helper, so you can run agents against it safely.

FAQ

Questions about notion_file_upload_send

What does the notion_file_upload_send tool do? +

Upload local file bytes to an existing Notion file_upload_id using the multipart /file_uploads/{id}/send endpoint. It is categorised as a Write tool in the Notion DB MCP Helper MCP Server, which means it can create or modify data. Consider rate limits to prevent runaway writes.

How do I enforce a policy on notion_file_upload_send? +

Register the Notion DB MCP Helper MCP server in PolicyLayer and add a rule for notion_file_upload_send: allow, deny, rate-limit, or require approval. Point your MCP client at the PolicyLayer proxy URL and the rule is enforced on every call, before it reaches Notion DB MCP Helper. Nothing to install.

What risk level is notion_file_upload_send? +

notion_file_upload_send is a Write tool with medium risk. Write tools should be rate-limited to prevent accidental bulk modifications.

Can I rate-limit notion_file_upload_send? +

Yes. Add a rate_limit block to the notion_file_upload_send rule in your PolicyLayer policy. For example, setting max: 10 and window: 60 limits the tool to 10 calls per minute. Rate limits are tracked per agent session and reset automatically.

How do I block notion_file_upload_send completely? +

Set action: deny in the PolicyLayer policy for notion_file_upload_send. The AI agent will receive a policy violation error and cannot call the tool. You can also include a reason field to explain why the tool is blocked.

What MCP server provides notion_file_upload_send? +

notion_file_upload_send is provided by the Notion DB MCP Helper MCP server (trisetiohidayat/notion-mcp). PolicyLayer sits as a proxy in front of this server to enforce policies before tool calls reach the server.