{
  "entry": {
    "kind": "mcp",
    "slug": "notion-mcp-server",
    "name": "Notion MCP Server",
    "vendor": "Notion",
    "description": "Notion's official server lets an agent search a workspace, read and update pages, and query databases. It is one of the most common knowledge-base connectors, because the content an assistant needs is usually already in Notion.\n\nThe risk is less about destructive writes than about reach: a workspace-wide integration can read every page it is shared with, and most workspaces have accumulated more sensitive content than their owners remember — credentials pasted into runbooks, contract terms, HR notes. It declares outbound network and credential access. Share the integration with a specific set of pages rather than the workspace, and assume anything readable will end up in a model's context window.",
    "website": "https://developers.notion.com/docs/mcp",
    "repository": null,
    "documentationUrl": "https://developers.notion.com/docs/mcp",
    "license": null,
    "version": null,
    "trustLevel": "official",
    "capabilities": [
      "network:outbound",
      "credentials:access"
    ],
    "packaging": null,
    "configFiles": null,
    "category": null,
    "updatedAt": "2026-09-02",
    "risk": {
      "score": 20,
      "band": "low",
      "signals": [
        {
          "id": "trust-official",
          "kind": "trust",
          "label": "Published by the vendor",
          "contribution": -40
        },
        {
          "id": "high-risk-capabilities",
          "kind": "capability",
          "label": "1 high-risk capability: credentials:access",
          "contribution": 10
        }
      ],
      "dangerousCombos": []
    },
    "dangerousCombos": []
  }
}