Notion MCP Server
Notion's official server — your agent reads, searches, and writes pages and databases with an integration token you scope. The wiki becomes writable by software; decide how you feel about that first.
What it actually does
The official bridge to the Notion API, maintained by Notion itself. Connect it with an internal integration token and the agent can search the workspace, read pages and databases, create and update content — bounded by which pages you've explicitly shared with the integration. That sharing model is the real security control and it's a good one: an integration sees nothing by default, and every page it can touch is a deliberate grant. The practical uses are immediate (meeting notes in, project databases updated, documentation drafted where the team already reads it); the failure mode is equally immediate, because an agent that can write to the team wiki can also confidently reorganize it.
Install
Read the source before you run this. Yes, actually.
From the desk
The Sunnyvale take
Official, maintained, and built on Notion's genuinely sane permission model. The engineering is trustworthy; the judgment call is yours — a wiki is a shared brain, and you're giving software a pen.
Why it matters
Team knowledge lives in Notion at a huge share of companies. An official, permission-scoped path for agents to read and write it is infrastructure, not novelty.
In practice
Share one 'Agent Inbox' database with the integration and let the agent file research summaries there — useful output, zero access to the rest of the workspace.
The skeptic's note
The Notion API's block model is verbose, and complex page edits can come out mangled. Trust it with databases and simple pages before you trust it with your beautifully formatted docs.
Use cases
- Filing meeting notes and summaries where the team reads them
- Querying project databases in plain language
- Drafting docs directly into the wiki for human review
Risks & caveats
Acts with the integration token's access. Share only the specific pages and databases the agent needs — a workspace-wide grant turns any prompt injection in page content into workspace-wide write access.
Related tools
Full indexSame shelf, different trade-offs.
GitHub MCP Server
GitHub's official MCP server — lets an agent read repos, file issues, and push code with your credentials, which is exactly as useful and as dangerous as it sounds.
Memory MCP Server
The reference memory server — a local knowledge graph where your agent files entities, relations, and observations between sessions. Simple, inspectable, and exactly as smart as what gets put in it.