How is this different from connecting Notion MCP directly?

Connected directly, an agent sees every tool the server exposes and holds the credential itself. Through TrustGate you choose which tools each agent gets, and every call is logged against the agent that made it.

What if the Notion MCP API changes?

We track the Notion MCP schema, so the tool catalogue stays current. Tools you have already allowed keep working, and anything new stays denied until you enable it.

Can I give different agents different Notion tools?

Yes. Access is set per agent: one can get a handful of read tools, another the full set. You grant the whole MCP or single tools within it.

Where can I see what my agents did in Notion?

Every call is logged against the agent that made it, with the tool it used. Activity can be sent on to your own monitoring.

Do I need to run the Notion MCP server myself?

No. TrustGate connects to the Notion MCP server and sits in front of it. Your agent only talks to your TrustGate URL, never to Notion directly.

Connect Notion MCP to your AI agents, securely.

Q: Is Notion MCP secure?

The server itself exposes 65 tools, and some of them can write to your Notion account. Behind TrustGate an agent only sees the tools you allow, requests and responses are inspected, and every call is logged. Anything outside the allowlist is denied before it reaches Notion.

One secured endpoint for every Notion call your AI agents make, scoped per user, inspected, and logged.

Get started for free

Get a demo

Try Notion MCP now

What your agents can ask once Notion MCP is connected.

Select the tools your AI agents can call

65 tools from the Notion MCP schema.

Showing 65 tools

notion-searchreadSearch across pages and databases in the workspace, or look up a user by name.
notion-ai-searchreadRun an AI-powered search across workspace content.
notion-search-agentsreadSearch agents by name or description, or browse favourites.
notion-search-sessionsreadSearch past agent sessions by topic.
notion-connector-searchreadSearches connected sources linked to the workspace, when the session lists it, alongside notion-search.
notion-fetchreadRetrieve details about a Notion page, database, data source or other entity.
notion-list-favorite-pagesreadList the current user's favourite pages and databases in sidebar order.
notion-list-private-pagesreadList the current user's top-level pages and databases in their private section.
notion-list-recent-pagesreadList pages and databases the current user recently viewed.
notion-list-shared-pagesreadList pages and databases in the current user's shared sidebar section.
notion-create-pageswriteCreate one or more Notion pages with properties and content.
notion-update-pagewriteUpdate a Notion page's properties or content.
notion-duplicate-pagewriteDuplicate a Notion page.
notion-move-pageswriteMove one or more pages or databases to a new parent.
notion-restore-pageswriteRestore pages or databases from Trash to their previous location.
notion-list-page-backlinksreadLists the pages that link to or mention a page or database, returning IDs, titles and URLs.
notion-delete-pageshigh riskMoves up to 20 pages to Trash after explicit user confirmation; they can be restored.
notion-query-data-sourcesreadQuery Notion data sources using structured rows, SQL, or a sample.
notion-query-multiple-data-sourcesreadQuery data across multiple data sources with read-only SQL.
notion-query-meeting-notesreadQuery the current user's meeting notes data source.
notion-create-databasewriteCreate a new Notion database using SQL DDL syntax or a canonical type.
notion-update-data-sourcewriteUpdate a data source's schema, title, attributes, or page layout.
notion-create-viewwriteCreate a new view on a Notion database.
notion-update-viewwriteUpdate a view's name, filters, sorts, or display configuration.
notion-delete-databaseshigh riskMoves whole databases to Trash after explicit user confirmation; they can be restored.
notion-create-commentwriteAdd a comment to a page or specific content.
notion-get-commentsreadGet comments and discussions from a Notion page.
notion-update-commentwriteReplaces the text of a comment the user wrote.
notion-delete-commenthigh riskDeletes a comment the user wrote, removing the discussion if it was the last comment.
notion-set-discussion-resolvedwriteResolves or reopens a discussion.
notion-set-comment-reactionwriteAdds or removes the user's emoji reaction on a comment.
notion-get-teamsreadRetrieve the list of teamspaces in the current workspace.
notion-get-usersreadRetrieve the list of users in the current workspace.
notion-get-selfreadGet the current connection's workspace and authenticated user.
notion-get-groupsreadLists the permission groups in the workspace that the user can see, with their IDs and names.
notion-create-folderwriteCreate an empty Notion folder.
notion-update-folderwriteUpdate an existing Notion folder.
notion-create-attachmentwriteCreate an attachment and upload it to Notion.
notion-create-file-uploadwriteCreate a short-lived URL for uploading a local file to Notion.
notion-download-attachmentreadDownload the contents of a small text attachment.
notion-get-file-download-urlsreadGet signed download URLs for files cited by a fetch result.
notion-convert-page-to-skillwriteMark an existing page as a skill without changing its content.
notion-upload-skillwriteImport a skills directory into a page in a skills database.
notion-update-enabled-skillswriteEnable or disable Notion skills for external MCP clients.
notion-download-skillreadDownload a Notion skill as a complete archive.
notion-get-enabled-skillsreadView the Notion skills the user has enabled.
notion-spawn-sessionwriteStart a session with a published custom agent.
notion-stop-sessionwriteStop a running custom agent session.
notion-send-message-to-sessionwriteSend a follow-up message to a custom agent session.
notion-get-session-statusreadGet the latest turn's status for a custom agent session.
notion-list-session-eventsreadList short summaries of saved events in a session.
notion-read-session-eventreadRead the full visible content of one saved session event.
notion-query-sessionsreadList agent sessions available to the integration.
notion-wait-sessionreadWait for the latest turn in a session to stop running.
notion-memory-searchreadSearch memories that connected agents saved in earlier sessions.
notion-get-async-taskreadRetrieve the status of an async task started by another tool.
notion-get-tool-accessreadGet current tool availability, parameter restrictions, and units.
notion-calendar-list-calendarsreadLists calendars grouped by connected account.
notion-calendar-list-eventsreadLists the user's events across connected calendars within a time range.
notion-calendar-list-coworkers-eventsreadReads detailed events of coworkers in the same organization within a time range.
notion-calendar-list-calendar-resourcesreadFinds rooms or other calendar resources for specific times.
notion-calendar-list-contactsreadFinds contacts by name or email across connected calendar accounts.
notion-calendar-create-eventswriteCreates one or more events on writable calendars; may notify attendees.
notion-calendar-update-eventswriteUpdates events, including timing, attendees, recurrence, resources or RSVP status; may notify attendees.
notion-calendar-cancel-eventshigh riskCancels events the user can manage; cancellation may notify attendees.

What Notion MCP exposes

Notion MCP groups its 65 tools into 10 categories, each with a suggested starting policy.

All 65 tools as JSON, ready to paste.

Category	Covers	Access	Suggested policy
Search	Workspace search, AI search, agents and past sessions	Read	Limit access to intended spaces
Pages	Page retrieval, creation, updates, duplication, moves and restores	Read / Write	Audit changes and restores
Databases	Data source queries, database creation, schema and views	Read / Write	Require approval for schema changes
Comments	Comments and discussions on pages	Read / Write	Audit publishing
People & Teams	Workspace users, teamspaces and the authenticated connection	Read	Limit organization access
Files & Folders	Folders, attachments and file uploads	Read / Write	Review content before uploading
Skills	Notion skills: convert, import, download and enable	Read / Write	Approve skill imports
Agent sessions	Custom agent sessions: start, stop, message and read events	Read / Write	Approve agent task execution
System	Memory search, async tasks, tool access and follow-up steps	Read	Allow system lookups
Calendar	Connected calendars, events, coworkers' events, rooms and contacts, and event creation, updates and cancellation	Read / Write	Allow reads; require approval for creating, updating or cancelling events, which may notify attendees

Connect Notion MCP to your AI agent

Four steps, under ten minutes.

01
Sign in to NeuralTrust
Open the NeuralTrust platform, sign in and go to Getting started, then Connect your tools.
02
Choose your agent
When asked which agent you use, pick Claude Code, Codex, Cursor, Windsurf, Copilot or your own code.
03
Connect Notion
Find Notion in the tool list and connect it.
04
Connect your agent
Follow the steps on screen to add the config to your agent, then send the test prompt.

Permissions down to the single tool

You do not allow Notion MCP or block it. You allow the exact tools each agent can call, one by one.

Notion MCP	65 TOOLS AVAILABLE
Code review agent	4 tools, read only
Issue triage bot	9 tools
Platform team assistant	all 65 tools

Tool by toolConnecting the server is not the unit of access. Each tool is granted on its own.
Default denyA tool you have not enabled is never exposed to the agent.
Approval on writesTools that change or delete things can require a human to confirm.

Is Notion MCP secure?

One endpoint instead of raw credentials. Every call is checked against policy and logged.

AI agentsConnect through your MCP client configuration.	NeuralTrustApply controls based on your configuration.	Notion MCP65 documented tools.
Coding assistants	Connection & credentialsper user	Pages12 tools
Internal copilots	Tool access policiesdeny by default	Agent sessions8 tools
Workflow automations	Request & response inspectioninline	Databases8 tools
Compatible MCP clients	Activity monitoringalerts and logs	All other tools37 tools