A Notion skill written by individual developer intellectronica: It bypasses MCP, allowing agents to directly call the Notion REST API using curl and jq to search content, read and write pages and blocks, query and create databases and data sources, and read and write comments. The SKILL.md file provides request examples for every endpoint.
skills.sh Installations 98110 (+518 / 24h)
Security Audit: Not Audited
- Not yet scanned
Rationale
- Credential handling is clearly defined: First, look for the environment variable NOTION_API_TOKEN; second, use the token provided by the user in the conversation; if neither is available, ask the user. It requires that the Token be placed only in the Authorization request header, not displayed or logged.
- Confirmation before changes: Updating pages or blocks, archiving or deleting, modifying database structures, and batch page creation all require asking the user first; a single confirmation covers a group of related operations.
- Written according to Notion-Version 2025-09-03, covering the new data source interface; includes pagination syntax, 429 rate limit backoff, and request size limits.
- The repository is licensed under CC0; skills.sh shows 518 installations in the last 24 hours, with a cumulative total of 98110. Weekly installations over the last 8 weeks have risen from 2335 to 5232 (indicating attention only).
Usage
- The installation command will be displayed after the audit passes; it triggers when the agent is asked to "read / modify Notion pages" or "query Notion databases".
- Requires an API Token for Notion integration (set as the environment variable NOTION_API_TOKEN); the local machine needs curl and jq.
Risks
- Not audited in this period; fixed at Grade C, and the installation command is not displayed. SKILL.md instructs the agent to execute curl to access api.notion.com and read NOTION_API_TOKEN, which aligns with its purpose. The Gen Agent Trust Hub audit on skills.sh is marked as Pass.
- Not an official Notion product; if the Token is pasted into the conversation, it will remain in the conversation history. Using environment variables is more secure.
- The agent has the ability to archive pages and delete blocks; pre-execution confirmation relies on the agent's compliance. Examples may become outdated after Notion API version updates.