Enterprise organization APIs using a separate organization bot token. Workspace OAuth tokens cannot authorize this service. One request per invocation; mutations require an interactive human decision. Existing Notion workspace grants do not enable these operations.
What you can do (40)
What you can do
Available commands: 40 (17 read, 23 write). Enable only the commands your application needs.
| Command | Effect |
|---|---|
Add users to a legal hold — notion-admin.api.add-legal-hold-users |
Write |
Add a group member — notion-admin.api.add-permission-group-member |
Write |
Create a legal hold — notion-admin.api.create-legal-hold |
Write |
Create a group — notion-admin.api.create-permission-group |
Write |
Delete an agent in a space — notion-admin.api.delete-agent |
Write |
Delete a group — notion-admin.api.delete-permission-group |
Write |
Enqueue a workspace export — notion-admin.api.enqueue-space-export |
Write |
Export a legal hold — notion-admin.api.export-legal-hold |
Write |
Get credit usage for an agent in a space — notion-admin.api.get-agent-credit-usage |
Read |
Get a custom agent's sharing permissions — notion-admin.api.get-agent-permissions |
Read |
Get credit usage for agents in a space — notion-admin.api.get-agents-credit-usage |
Read |
Retrieve a legal hold — notion-admin.api.get-legal-hold |
Read |
Get workspace export status — notion-admin.api.get-space-export-status |
Read |
Get agents in a space — notion-admin.api.get-workflows-metadata-for-space |
Read |
List pages on a legal hold — notion-admin.api.list-legal-hold-pages |
Read |
List users on a legal hold — notion-admin.api.list-legal-hold-users |
Read |
List workspaces on a legal hold — notion-admin.api.list-legal-hold-workspaces |
Read |
List legal holds — notion-admin.api.list-legal-holds |
Read |
List MCP client connections in an organization — notion-admin.api.list-mcp-client-connections |
Read |
List group members — notion-admin.api.list-permission-group-members |
Read |
List groups — notion-admin.api.list-permission-groups |
Read |
List personal access tokens in a workspace — notion-admin.api.list-personal-access-tokens |
Read |
List workspaces in the organization — notion-admin.api.list-spaces |
Read |
List users — notion-admin.api.list-users |
Read |
Release a legal hold — notion-admin.api.release-legal-hold |
Write |
Remove a user from a legal hold — notion-admin.api.remove-legal-hold-user |
Write |
Remove a group member — notion-admin.api.remove-permission-group-member |
Write |
Retrieve a group — notion-admin.api.retrieve-permission-group |
Read |
Revoke an MCP client connection — notion-admin.api.revoke-mcp-client-connection |
Write |
Revoke a personal access token in a workspace — notion-admin.api.revoke-personal-access-token |
Write |
Revoke a managed user's sessions — notion-admin.api.revoke-user-session |
Write |
Update who can create agents in a space — notion-admin.api.update-agent-creation-policy |
Write |
Update credit limit for an agent in a space — notion-admin.api.update-agent-credit-limit |
Write |
Update a custom agent's sharing permissions — notion-admin.api.update-agent-permissions |
Write |
Disable or re-enable an agent in a space — notion-admin.api.update-agent-status |
Write |
Update a legal hold — notion-admin.api.update-legal-hold |
Write |
Deny or restore enterprise-managed MCP client access — notion-admin.api.update-mcp-client-connection-enterprise-managed-access |
Write |
Update a group — notion-admin.api.update-permission-group |
Write |
Update a group member — notion-admin.api.update-permission-group-member |
Write |
Update the default agent credit limit for a workspace — notion-admin.api.update-workspace-credit-limit |
Write |
Connect and use
Open the integration's connection form to check the available credential source. The source has not been resolved for this documentation export. The instructions below apply when using your own provider account.
Get your provider credentials
Follow these steps for Notion Admin, then enter the issued values in the connection form below.
- Ask a Notion organization owner to provision its organization/admin API credential under a supported plan. Enter Organization token and the appropriate read-only/read-write mode. A page integration token is not an organization administration credential.
Where to enter credentials
In the integration page, sign in, choose your workspace and open Connect. If a Credentials choice is shown, select Use my credentials. Fill the following connection fields and save. Provider credentials belong in this form, never in an MCP configuration or tool input.
| Connection field | Requirement |
|---|---|
| Organization bot token | Required |
| Connection permissions | Optional |
Open API keys and create a Tooluse.net key for the enabled commands.
Set TOOLUSE_API_KEY in your client and use the shared MCP configuration.
Configure Claude Code, Codex or Cursor once
Permissions and results
If you have more than one workspace, check the selected workspace in the connection or API-key dialog before saving. Roles, enabled commands, expiry and revocation use Tooluse.net's existing permissions. Disabling a connection or revoking a key immediately prevents new calls.
Send one Claude tool_use block per request. Keep the same Idempotency-Key when retrying the same request; use a new key for a new call. The response includes the shared Tooluse.net receipt and Claude tool_result. Check both HTTP status and the returned tool result before treating a call as successful.
Your connection's daily allowance and key permissions also apply. Adding a connection does not make a provider request.
Calls return the shared execution receipt and a Claude tool_result. Provider output varies by operation; consult the provider documentation for its response fields. Unconfirmed calls should be checked before retrying.
Call from your client
Use the shared MCP configuration. Refresh your client's tool list after saving the connection or changing key permissions, then call the returned tool name with the example input below.
Configure Claude Code, Codex or Cursor once
Discover your enabled tools
List permitted tools in Claude format. Read every page using page and size (maximum 100) until all results have been received. Use the returned name, not a catalog capability identifier, in the tool_use block.
curl 'https://api.tooluse.net/v1/tools' \
-H "Authorization: Bearer $TOOLUSE_API_KEY"
Find this command in the tool list permitted by your key. Replace svc_FROM_YOUR_TOOL_LIST with its returned name. Use a new Idempotency-Key for each new call and retain it when retrying that same call.
HTTP call
curl 'https://api.tooluse.net/v1/tool-calls' \
-H "Authorization: Bearer $TOOLUSE_API_KEY" \
-H 'Content-Type: application/json' \
-H 'Idempotency-Key: replace-with-a-new-call-id' \
--data '{
"type": "tool_use",
"id": "toolu_example",
"name": "svc_FROM_YOUR_TOOL_LIST",
"input": {
"path": {
"agent_id": "00000000-0000-0000-0000-000000000001",
"space_id": "00000000-0000-0000-0000-000000000001"
}
}
}'
Send one Claude tool_use block per request. Keep the same Idempotency-Key when retrying the same request; use a new key for a new call. The response includes the shared Tooluse.net receipt and Claude tool_result. Check both HTTP status and the returned tool result before treating a call as successful.
Commands
Add users to a legal hold — notion-admin.api.add-legal-hold-users
Run Add users to a legal hold with Notion Admin. This command can change provider data. Review the target and input before invoking it.
This operation can change provider data. Review the input before allowing an agent to call it.
Parameters
Requiredness is local to the containing object. A required child is required only when its parent object or array item is provided. Alternative schemas are identified in the Constraints column; the linked full JSON Schema is authoritative.
| Parameter | Type | Required in parent | Description | Constraints |
|---|---|---|---|---|
path |
object | Required | additionalProperties: false |
|
path.legal_hold_id |
string | Required | minLength: 1; maxLength: 2000 |
|
data |
object | Required | maxProperties: 100 |
|
data.user_ids |
array | Required | maxItems: 100 |
|
data.user_ids[] |
string | Optional | maxLength: 64000 |
Full JSON Schema
Example input
{
"path": {
"legal_hold_id": "00000000-0000-0000-0000-000000000001"
},
"data": {
"user_ids": []
}
}
At most 1 provider requests per invocation; timeout: 30 seconds.
Add a group member — notion-admin.api.add-permission-group-member
Run Add a group member with Notion Admin. This command can change provider data. Review the target and input before invoking it.
This operation can change provider data. Review the input before allowing an agent to call it.
Parameters
Requiredness is local to the containing object. A required child is required only when its parent object or array item is provided. Alternative schemas are identified in the Constraints column; the linked full JSON Schema is authoritative.
| Parameter | Type | Required in parent | Description | Constraints |
|---|---|---|---|---|
path |
object | Required | additionalProperties: false |
|
path.group_id |
string | Required | minLength: 1; maxLength: 2000 |
|
path.space_id |
string | Required | minLength: 1; maxLength: 2000 |
|
data |
object | Required | maxProperties: 100 |
|
data.member |
object | Required | maxProperties: 100 |
|
data.member.type |
string | Required | const: "user"; maxLength: 64000 |
|
data.member.user_id |
— | Required | $ref: "#/$defs/idRequest" |
|
data.role |
string | Required | enum: ["owner","member"]; maxLength: 64000 |
Full JSON Schema
Example input
{
"path": {
"group_id": "00000000-0000-0000-0000-000000000001",
"space_id": "00000000-0000-0000-0000-000000000001"
},
"data": {
"member": {
"type": "user",
"user_id": "fixture"
},
"role": "owner"
}
}
At most 1 provider requests per invocation; timeout: 30 seconds.
Create a legal hold — notion-admin.api.create-legal-hold
Run Create a legal hold with Notion Admin. This command can change provider data. Review the target and input before invoking it.
This operation can change provider data. Review the input before allowing an agent to call it.
Parameters
Requiredness is local to the containing object. A required child is required only when its parent object or array item is provided. Alternative schemas are identified in the Constraints column; the linked full JSON Schema is authoritative.
| Parameter | Type | Required in parent | Description | Constraints |
|---|---|---|---|---|
data |
object | Required | maxProperties: 100 |
|
data.name |
string | Required | maxLength: 64000 |
|
data.start_date |
number | Required | ||
data.user_ids |
array | Required | maxItems: 100 |
|
data.user_ids[] |
string | Optional | maxLength: 64000 |
|
data.user_interaction_type |
array | Required | maxItems: 100 |
|
data.user_interaction_type[] |
string | Optional | enum: ["page.created","page.edited","page.viewed"]; maxLength: 64000 |
|
data.description |
string | Optional | maxLength: 64000 |
|
data.end_date |
number | Optional | ||
data.icon |
string | Optional | maxLength: 64000 |
Full JSON Schema
Example input
{
"data": {
"name": "fixture",
"start_date": 0,
"user_ids": [],
"user_interaction_type": []
}
}
At most 1 provider requests per invocation; timeout: 30 seconds.
Create a group — notion-admin.api.create-permission-group
Run Create a group with Notion Admin. This command can change provider data. Review the target and input before invoking it.
This operation can change provider data. Review the input before allowing an agent to call it.
Parameters
Requiredness is local to the containing object. A required child is required only when its parent object or array item is provided. Alternative schemas are identified in the Constraints column; the linked full JSON Schema is authoritative.
| Parameter | Type | Required in parent | Description | Constraints |
|---|---|---|---|---|
path |
object | Required | additionalProperties: false |
|
path.space_id |
string | Required | minLength: 1; maxLength: 2000 |
|
data |
object | Required | maxProperties: 100 |
|
data.name |
string | Required | minLength: 1; maxLength: 200; pattern: "\\S" |
Full JSON Schema
Example input
{
"path": {
"space_id": "00000000-0000-0000-0000-000000000001"
},
"data": {
"name": "fixture"
}
}
At most 1 provider requests per invocation; timeout: 30 seconds.
Delete an agent in a space — notion-admin.api.delete-agent
Run Delete an agent in a space with Notion Admin. This command can change provider data. Review the target and input before invoking it.
This operation can change provider data. Review the input before allowing an agent to call it.
Parameters
Requiredness is local to the containing object. A required child is required only when its parent object or array item is provided. Alternative schemas are identified in the Constraints column; the linked full JSON Schema is authoritative.
| Parameter | Type | Required in parent | Description | Constraints |
|---|---|---|---|---|
path |
object | Required | additionalProperties: false |
|
path.agent_id |
string | Required | minLength: 1; maxLength: 2000 |
|
path.space_id |
string | Required | minLength: 1; maxLength: 2000 |
Full JSON Schema
Example input
{
"path": {
"agent_id": "00000000-0000-0000-0000-000000000001",
"space_id": "00000000-0000-0000-0000-000000000001"
}
}
At most 1 provider requests per invocation; timeout: 30 seconds.
Delete a group — notion-admin.api.delete-permission-group
Run Delete a group with Notion Admin. This command can change provider data. Review the target and input before invoking it.
This operation can change provider data. Review the input before allowing an agent to call it.
Parameters
Requiredness is local to the containing object. A required child is required only when its parent object or array item is provided. Alternative schemas are identified in the Constraints column; the linked full JSON Schema is authoritative.
| Parameter | Type | Required in parent | Description | Constraints |
|---|---|---|---|---|
path |
object | Required | additionalProperties: false |
|
path.group_id |
string | Required | minLength: 1; maxLength: 2000 |
|
path.space_id |
string | Required | minLength: 1; maxLength: 2000 |
|
query |
object | Optional | additionalProperties: false |
|
query.transfer_to_owner_id |
— | Optional | $ref: "#/$defs/idRequest" |
Full JSON Schema
Example input
{
"path": {
"group_id": "00000000-0000-0000-0000-000000000001",
"space_id": "00000000-0000-0000-0000-000000000001"
}
}
At most 1 provider requests per invocation; timeout: 30 seconds.
Enqueue a workspace export — notion-admin.api.enqueue-space-export
Run Enqueue a workspace export with Notion Admin. This command can change provider data. Review the target and input before invoking it.
This operation can change provider data. Review the input before allowing an agent to call it.
Parameters
Requiredness is local to the containing object. A required child is required only when its parent object or array item is provided. Alternative schemas are identified in the Constraints column; the linked full JSON Schema is authoritative.
| Parameter | Type | Required in parent | Description | Constraints |
|---|---|---|---|---|
path |
object | Required | additionalProperties: false |
|
path.space_id |
string | Required | minLength: 1; maxLength: 2000 |
|
data |
object | Required | maxProperties: 100 |
|
data.export_type |
string | Required | enum: ["html","markdown"]; maxLength: 64000 |
|
data.on_behalf_of_user_email |
string | Required | maxLength: 64000 |
|
data.collection_view_export_type |
string | Optional | enum: ["all","currentView"]; maxLength: 64000 |
|
data.flatten_export_filetree |
boolean | Optional | ||
data.include_comments |
boolean | Optional | ||
data.include_contents |
string | Optional | enum: ["everything","no_files"]; maxLength: 64000 |
|
data.locale |
string | Optional | maxLength: 64000 |
|
data.teamspace_ids |
array | Optional | maxItems: 100 |
|
data.teamspace_ids[] |
string | Optional | maxLength: 64000 |
|
data.time_zone |
string | Optional | maxLength: 64000 |
Full JSON Schema
Example input
{
"path": {
"space_id": "00000000-0000-0000-0000-000000000001"
},
"data": {
"export_type": "html",
"on_behalf_of_user_email": "fixture"
}
}
At most 1 provider requests per invocation; timeout: 30 seconds.
Export a legal hold — notion-admin.api.export-legal-hold
Run Export a legal hold with Notion Admin. This command can change provider data. Review the target and input before invoking it.
This operation can change provider data. Review the input before allowing an agent to call it.
Parameters
Requiredness is local to the containing object. A required child is required only when its parent object or array item is provided. Alternative schemas are identified in the Constraints column; the linked full JSON Schema is authoritative.
| Parameter | Type | Required in parent | Description | Constraints |
|---|---|---|---|---|
path |
object | Required | additionalProperties: false |
|
path.legal_hold_id |
string | Required | minLength: 1; maxLength: 2000 |
|
data |
— | Required | ||
data |
object | Required | anyOf[1]; maxProperties: 100 |
|
data.legal_hold_export_id |
string | Required | anyOf[1]; maxLength: 64000 |
|
data.requesting_user_id |
string | Required | anyOf[1]; maxLength: 64000 |
|
data |
object | Required | anyOf[2]; maxProperties: 100 |
|
data.requesting_user_id |
string | Required | anyOf[2]; maxLength: 64000 |
|
data.space_id |
string | Required | anyOf[2]; maxLength: 64000 |
Full JSON Schema
Example input
{
"path": {
"legal_hold_id": "00000000-0000-0000-0000-000000000001"
},
"data": {
"legal_hold_export_id": "fixture",
"requesting_user_id": "fixture"
}
}
At most 1 provider requests per invocation; timeout: 30 seconds.
Get credit usage for an agent in a space — notion-admin.api.get-agent-credit-usage
Run Get credit usage for an agent in a space with Notion Admin. This is a read command; it does not grant access beyond the connected account's permissions.
This is a read operation. Provider rate limits and data access rules still apply.
Parameters
Requiredness is local to the containing object. A required child is required only when its parent object or array item is provided. Alternative schemas are identified in the Constraints column; the linked full JSON Schema is authoritative.
| Parameter | Type | Required in parent | Description | Constraints |
|---|---|---|---|---|
path |
object | Required | additionalProperties: false |
|
path.agent_id |
string | Required | minLength: 1; maxLength: 2000 |
|
path.space_id |
string | Required | minLength: 1; maxLength: 2000 |
|
query |
object | Optional | additionalProperties: false |
|
query.start_cursor |
string | Optional | maxLength: 64000 |
Full JSON Schema
Example input
{
"path": {
"agent_id": "00000000-0000-0000-0000-000000000001",
"space_id": "00000000-0000-0000-0000-000000000001"
}
}
At most 1 provider requests per invocation; timeout: 30 seconds.
Get a custom agent's sharing permissions — notion-admin.api.get-agent-permissions
Run Get a custom agent's sharing permissions with Notion Admin. This is a read command; it does not grant access beyond the connected account's permissions.
This is a read operation. Provider rate limits and data access rules still apply.
Parameters
Requiredness is local to the containing object. A required child is required only when its parent object or array item is provided. Alternative schemas are identified in the Constraints column; the linked full JSON Schema is authoritative.
| Parameter | Type | Required in parent | Description | Constraints |
|---|---|---|---|---|
path |
object | Required | additionalProperties: false |
|
path.agent_id |
string | Required | minLength: 1; maxLength: 2000 |
|
path.space_id |
string | Required | minLength: 1; maxLength: 2000 |
|
query |
object | Optional | additionalProperties: false |
|
query.cursor |
string | Optional | maxLength: 64000 |
Full JSON Schema
Example input
{
"path": {
"agent_id": "00000000-0000-0000-0000-000000000001",
"space_id": "00000000-0000-0000-0000-000000000001"
}
}
At most 1 provider requests per invocation; timeout: 30 seconds.
Get credit usage for agents in a space — notion-admin.api.get-agents-credit-usage
Run Get credit usage for agents in a space with Notion Admin. This is a read command; it does not grant access beyond the connected account's permissions.
This is a read operation. Provider rate limits and data access rules still apply.
Parameters
Requiredness is local to the containing object. A required child is required only when its parent object or array item is provided. Alternative schemas are identified in the Constraints column; the linked full JSON Schema is authoritative.
| Parameter | Type | Required in parent | Description | Constraints |
|---|---|---|---|---|
path |
object | Required | additionalProperties: false |
|
path.space_id |
string | Required | minLength: 1; maxLength: 2000 |
|
query |
object | Optional | additionalProperties: false |
|
query.cursor |
string | Optional | maxLength: 64000 |
|
query.page_size |
integer | Optional | minimum: 1; maximum: 100 |
|
query.include_deleted |
string | Optional | enum: ["false","true"]; maxLength: 64000 |
|
query.credit_usage_time_from |
string | Optional | maxLength: 64000 |
|
query.credit_usage_time_to |
string | Optional | maxLength: 64000 |
Full JSON Schema
Example input
{
"path": {
"space_id": "00000000-0000-0000-0000-000000000001"
}
}
At most 1 provider requests per invocation; timeout: 30 seconds.
Retrieve a legal hold — notion-admin.api.get-legal-hold
Run Retrieve a legal hold with Notion Admin. This is a read command; it does not grant access beyond the connected account's permissions.
This is a read operation. Provider rate limits and data access rules still apply.
Parameters
Requiredness is local to the containing object. A required child is required only when its parent object or array item is provided. Alternative schemas are identified in the Constraints column; the linked full JSON Schema is authoritative.
| Parameter | Type | Required in parent | Description | Constraints |
|---|---|---|---|---|
path |
object | Required | additionalProperties: false |
|
path.legal_hold_id |
string | Required | minLength: 1; maxLength: 2000 |
Full JSON Schema
Example input
{
"path": {
"legal_hold_id": "00000000-0000-0000-0000-000000000001"
}
}
At most 1 provider requests per invocation; timeout: 30 seconds.
Get workspace export status — notion-admin.api.get-space-export-status
Run Get workspace export status with Notion Admin. This is a read command; it does not grant access beyond the connected account's permissions.
This is a read operation. Provider rate limits and data access rules still apply.
Parameters
Requiredness is local to the containing object. A required child is required only when its parent object or array item is provided. Alternative schemas are identified in the Constraints column; the linked full JSON Schema is authoritative.
| Parameter | Type | Required in parent | Description | Constraints |
|---|---|---|---|---|
path |
object | Required | additionalProperties: false |
|
path.export_job_id |
string | Required | minLength: 1; maxLength: 2000 |
|
path.space_id |
string | Required | minLength: 1; maxLength: 2000 |
Full JSON Schema
Example input
{
"path": {
"export_job_id": "00000000-0000-0000-0000-000000000001",
"space_id": "00000000-0000-0000-0000-000000000001"
}
}
At most 1 provider requests per invocation; timeout: 30 seconds.
Get agents in a space — notion-admin.api.get-workflows-metadata-for-space
Run Get agents in a space with Notion Admin. This is a read command; it does not grant access beyond the connected account's permissions.
This is a read operation. Provider rate limits and data access rules still apply.
Parameters
Requiredness is local to the containing object. A required child is required only when its parent object or array item is provided. Alternative schemas are identified in the Constraints column; the linked full JSON Schema is authoritative.
| Parameter | Type | Required in parent | Description | Constraints |
|---|---|---|---|---|
path |
object | Required | additionalProperties: false |
|
path.space_id |
string | Required | minLength: 1; maxLength: 2000 |
|
query |
object | Optional | additionalProperties: false |
|
query.name |
string | Optional | maxLength: 64000 |
|
query.created_by_ids |
array | Optional | maxItems: 100 |
|
query.created_by_ids[] |
string | Optional | maxLength: 64000 |
|
query.created_time_from |
string | Optional | maxLength: 64000 |
|
query.created_time_to |
string | Optional | maxLength: 64000 |
|
query.last_edited_time_from |
string | Optional | maxLength: 64000 |
|
query.last_edited_time_to |
string | Optional | maxLength: 64000 |
|
query.credit_usage_time_from |
string | Optional | maxLength: 64000 |
|
query.credit_usage_time_to |
string | Optional | maxLength: 64000 |
|
query.status |
array | Optional | maxItems: 100 |
|
query.status[] |
string | Optional | enum: ["active","credit_limit","deleted","disabled","disabled_by_notion","disabled_due_to_lack_of_editors","disabled_due_to_lack_of_full_access_members","disabled_from_agent_settings","disabled_from_api","disabled_from_workspace_settings","disabled_from_workspace_settings_but_resumable","failure_limit","internal_error","mark_session_failed_autopause","needs_review","run_limit","runaway_credit_usage","tool_unavailable","workspace_credit_limit"]; maxLength: 64000 |
|
query.integration_types |
array | Optional | maxItems: 100 |
|
query.integration_types[] |
string | Optional | maxLength: 64000 |
|
query.mcp_server_names |
array | Optional | maxItems: 100 |
|
query.mcp_server_names[] |
string | Optional | maxLength: 64000 |
|
query.models |
array | Optional | maxItems: 100 |
|
query.models[] |
string | Optional | maxLength: 64000 |
|
query.shared_with_user_ids |
array | Optional | maxItems: 100 |
|
query.shared_with_user_ids[] |
string | Optional | maxLength: 64000 |
|
query.shared_with_group_ids |
array | Optional | maxItems: 100 |
|
query.shared_with_group_ids[] |
string | Optional | maxLength: 64000 |
|
query.cursor |
string | Optional | maxLength: 64000 |
|
query.page_size |
integer | Optional | minimum: 1; maximum: 100 |
Full JSON Schema
Example input
{
"path": {
"space_id": "00000000-0000-0000-0000-000000000001"
}
}
At most 1 provider requests per invocation; timeout: 30 seconds.
List pages on a legal hold — notion-admin.api.list-legal-hold-pages
Run List pages on a legal hold with Notion Admin. This is a read command; it does not grant access beyond the connected account's permissions.
This is a read operation. Provider rate limits and data access rules still apply.
Parameters
Requiredness is local to the containing object. A required child is required only when its parent object or array item is provided. Alternative schemas are identified in the Constraints column; the linked full JSON Schema is authoritative.
| Parameter | Type | Required in parent | Description | Constraints |
|---|---|---|---|---|
path |
object | Required | additionalProperties: false |
|
path.legal_hold_id |
string | Required | minLength: 1; maxLength: 2000 |
|
path.space_id |
string | Required | minLength: 1; maxLength: 2000 |
|
query |
object | Optional | additionalProperties: false |
|
query.start_cursor |
string | Optional | maxLength: 64000 |
Full JSON Schema
Example input
{
"path": {
"legal_hold_id": "00000000-0000-0000-0000-000000000001",
"space_id": "00000000-0000-0000-0000-000000000001"
}
}
At most 1 provider requests per invocation; timeout: 30 seconds.
List users on a legal hold — notion-admin.api.list-legal-hold-users
Run List users on a legal hold with Notion Admin. This is a read command; it does not grant access beyond the connected account's permissions.
This is a read operation. Provider rate limits and data access rules still apply.
Parameters
Requiredness is local to the containing object. A required child is required only when its parent object or array item is provided. Alternative schemas are identified in the Constraints column; the linked full JSON Schema is authoritative.
| Parameter | Type | Required in parent | Description | Constraints |
|---|---|---|---|---|
path |
object | Required | additionalProperties: false |
|
path.legal_hold_id |
string | Required | minLength: 1; maxLength: 2000 |
|
query |
object | Optional | additionalProperties: false |
|
query.start_cursor |
string | Optional | maxLength: 64000 |
Full JSON Schema
Example input
{
"path": {
"legal_hold_id": "00000000-0000-0000-0000-000000000001"
}
}
At most 1 provider requests per invocation; timeout: 30 seconds.
List workspaces on a legal hold — notion-admin.api.list-legal-hold-workspaces
Run List workspaces on a legal hold with Notion Admin. This is a read command; it does not grant access beyond the connected account's permissions.
This is a read operation. Provider rate limits and data access rules still apply.
Parameters
Requiredness is local to the containing object. A required child is required only when its parent object or array item is provided. Alternative schemas are identified in the Constraints column; the linked full JSON Schema is authoritative.
| Parameter | Type | Required in parent | Description | Constraints |
|---|---|---|---|---|
path |
object | Required | additionalProperties: false |
|
path.legal_hold_id |
string | Required | minLength: 1; maxLength: 2000 |
|
query |
object | Optional | additionalProperties: false |
|
query.start_cursor |
string | Optional | maxLength: 64000 |
Full JSON Schema
Example input
{
"path": {
"legal_hold_id": "00000000-0000-0000-0000-000000000001"
}
}
At most 1 provider requests per invocation; timeout: 30 seconds.
List legal holds — notion-admin.api.list-legal-holds
Run List legal holds with Notion Admin. This is a read command; it does not grant access beyond the connected account's permissions.
This is a read operation. Provider rate limits and data access rules still apply.
Parameters
Requiredness is local to the containing object. A required child is required only when its parent object or array item is provided. Alternative schemas are identified in the Constraints column; the linked full JSON Schema is authoritative.
| Parameter | Type | Required in parent | Description | Constraints |
|---|---|---|---|---|
query |
object | Optional | additionalProperties: false |
|
query.start_cursor |
string | Optional | maxLength: 64000 |
|
query.user_id |
string | Optional | maxLength: 64000 |
Full JSON Schema
Example input
{}
At most 1 provider requests per invocation; timeout: 30 seconds.
List MCP client connections in an organization — notion-admin.api.list-mcp-client-connections
Run List MCP client connections in an organization with Notion Admin. This is a read command; it does not grant access beyond the connected account's permissions.
This is a read operation. Provider rate limits and data access rules still apply.
Parameters
Requiredness is local to the containing object. A required child is required only when its parent object or array item is provided. Alternative schemas are identified in the Constraints column; the linked full JSON Schema is authoritative.
| Parameter | Type | Required in parent | Description | Constraints |
|---|---|---|---|---|
query |
object | Optional | additionalProperties: false |
|
query.start_cursor |
string | Optional | maxLength: 64000 |
|
query.cursor |
string | Optional | maxLength: 64000 |
|
query.page_size |
string | Optional | maxLength: 64000 |
|
query.user_ids |
— | Optional | ||
query.user_ids |
array | Optional | anyOf[1]; maxItems: 100 |
|
query.user_ids[] |
string | Optional | anyOf[1]; maxLength: 64000 |
|
query.user_ids |
string | Optional | anyOf[2]; maxLength: 64000 |
|
query.workspace_ids |
— | Optional | ||
query.workspace_ids |
array | Optional | anyOf[1]; maxItems: 100 |
|
query.workspace_ids[] |
string | Optional | anyOf[1]; maxLength: 64000 |
|
query.workspace_ids |
string | Optional | anyOf[2]; maxLength: 64000 |
Full JSON Schema
Example input
{}
At most 1 provider requests per invocation; timeout: 30 seconds.
List group members — notion-admin.api.list-permission-group-members
Run List group members with Notion Admin. This is a read command; it does not grant access beyond the connected account's permissions.
This is a read operation. Provider rate limits and data access rules still apply.
Parameters
Requiredness is local to the containing object. A required child is required only when its parent object or array item is provided. Alternative schemas are identified in the Constraints column; the linked full JSON Schema is authoritative.
| Parameter | Type | Required in parent | Description | Constraints |
|---|---|---|---|---|
path |
object | Required | additionalProperties: false |
|
path.group_id |
string | Required | minLength: 1; maxLength: 2000 |
|
path.space_id |
string | Required | minLength: 1; maxLength: 2000 |
|
query |
object | Optional | additionalProperties: false |
|
query.page_size |
integer | Optional | minimum: 1; maximum: 100 |
|
query.start_cursor |
string | Optional | maxLength: 64000 |
Full JSON Schema
Example input
{
"path": {
"group_id": "00000000-0000-0000-0000-000000000001",
"space_id": "00000000-0000-0000-0000-000000000001"
}
}
At most 1 provider requests per invocation; timeout: 30 seconds.
List groups — notion-admin.api.list-permission-groups
Run List groups with Notion Admin. This is a read command; it does not grant access beyond the connected account's permissions.
This is a read operation. Provider rate limits and data access rules still apply.
Parameters
Requiredness is local to the containing object. A required child is required only when its parent object or array item is provided. Alternative schemas are identified in the Constraints column; the linked full JSON Schema is authoritative.
| Parameter | Type | Required in parent | Description | Constraints |
|---|---|---|---|---|
path |
object | Required | additionalProperties: false |
|
path.space_id |
string | Required | minLength: 1; maxLength: 2000 |
|
query |
object | Optional | additionalProperties: false |
|
query.page_size |
integer | Optional | minimum: 1; maximum: 100 |
|
query.start_cursor |
string | Optional | maxLength: 64000 |
Full JSON Schema
Example input
{
"path": {
"space_id": "00000000-0000-0000-0000-000000000001"
}
}
At most 1 provider requests per invocation; timeout: 30 seconds.
List personal access tokens in a workspace — notion-admin.api.list-personal-access-tokens
Run List personal access tokens in a workspace with Notion Admin. This is a read command; it does not grant access beyond the connected account's permissions.
This is a read operation. Provider rate limits and data access rules still apply.
Parameters
Requiredness is local to the containing object. A required child is required only when its parent object or array item is provided. Alternative schemas are identified in the Constraints column; the linked full JSON Schema is authoritative.
| Parameter | Type | Required in parent | Description | Constraints |
|---|---|---|---|---|
path |
object | Required | additionalProperties: false |
|
path.space_id |
string | Required | minLength: 1; maxLength: 2000 |
|
query |
object | Optional | additionalProperties: false |
|
query.start_cursor |
string | Optional | maxLength: 64000 |
|
query.cursor |
string | Optional | maxLength: 64000 |
|
query.page_size |
string | Optional | maxLength: 64000 |
|
query.status |
— | Optional | ||
query.status |
array | Optional | oneOf[1]; maxItems: 100 |
|
query.status[] |
string | Optional | oneOf[1]; enum: ["active","expired","revoked"]; maxLength: 64000 |
|
query.status |
string | Optional | oneOf[2]; const: "active"; maxLength: 64000 |
|
query.status |
string | Optional | oneOf[3]; const: "expired"; maxLength: 64000 |
|
query.status |
string | Optional | oneOf[4]; const: "revoked"; maxLength: 64000 |
|
query.creator_ids |
— | Optional | ||
query.creator_ids |
array | Optional | oneOf[1]; maxItems: 100 |
|
query.creator_ids[] |
string | Optional | oneOf[1]; maxLength: 64000 |
|
query.creator_ids |
string | Optional | oneOf[2]; maxLength: 64000 |
|
query.search |
string | Optional | maxLength: 64000 |
Full JSON Schema
Example input
{
"path": {
"space_id": "00000000-0000-0000-0000-000000000001"
}
}
At most 1 provider requests per invocation; timeout: 30 seconds.
List workspaces in the organization — notion-admin.api.list-spaces
Run List workspaces in the organization with Notion Admin. This is a read command; it does not grant access beyond the connected account's permissions.
This is a read operation. Provider rate limits and data access rules still apply.
Parameters
Requiredness is local to the containing object. A required child is required only when its parent object or array item is provided. Alternative schemas are identified in the Constraints column; the linked full JSON Schema is authoritative.
| Parameter | Type | Required in parent | Description | Constraints |
|---|---|---|---|---|
query |
object | Optional | additionalProperties: false |
|
query.start_cursor |
string | Optional | minLength: 1; maxLength: 64000 |
|
query.page_size |
integer | Optional | minimum: 1; maximum: 100 |
Full JSON Schema
Example input
{}
At most 1 provider requests per invocation; timeout: 30 seconds.
List users — notion-admin.api.list-users
Run List users with Notion Admin. This is a read command; it does not grant access beyond the connected account's permissions.
This is a read operation. Provider rate limits and data access rules still apply.
Parameters
Requiredness is local to the containing object. A required child is required only when its parent object or array item is provided. Alternative schemas are identified in the Constraints column; the linked full JSON Schema is authoritative.
| Parameter | Type | Required in parent | Description | Constraints |
|---|---|---|---|---|
path |
object | Required | additionalProperties: false |
|
path.space_id |
string | Required | minLength: 1; maxLength: 2000 |
|
query |
object | Optional | additionalProperties: false |
|
query.start_cursor |
string | Optional | minLength: 1; maxLength: 64000 |
|
query.page_size |
integer | Optional | minimum: 1; maximum: 100 |
Full JSON Schema
Example input
{
"path": {
"space_id": "00000000-0000-0000-0000-000000000001"
}
}
At most 1 provider requests per invocation; timeout: 30 seconds.
Release a legal hold — notion-admin.api.release-legal-hold
Run Release a legal hold with Notion Admin. This command can change provider data. Review the target and input before invoking it.
This operation can change provider data. Review the input before allowing an agent to call it.
Parameters
Requiredness is local to the containing object. A required child is required only when its parent object or array item is provided. Alternative schemas are identified in the Constraints column; the linked full JSON Schema is authoritative.
| Parameter | Type | Required in parent | Description | Constraints |
|---|---|---|---|---|
path |
object | Required | additionalProperties: false |
|
path.legal_hold_id |
string | Required | minLength: 1; maxLength: 2000 |
Full JSON Schema
Example input
{
"path": {
"legal_hold_id": "00000000-0000-0000-0000-000000000001"
}
}
At most 1 provider requests per invocation; timeout: 30 seconds.
Remove a user from a legal hold — notion-admin.api.remove-legal-hold-user
Run Remove a user from a legal hold with Notion Admin. This command can change provider data. Review the target and input before invoking it.
This operation can change provider data. Review the input before allowing an agent to call it.
Parameters
Requiredness is local to the containing object. A required child is required only when its parent object or array item is provided. Alternative schemas are identified in the Constraints column; the linked full JSON Schema is authoritative.
| Parameter | Type | Required in parent | Description | Constraints |
|---|---|---|---|---|
path |
object | Required | additionalProperties: false |
|
path.legal_hold_id |
string | Required | minLength: 1; maxLength: 2000 |
|
path.user_id |
string | Required | minLength: 1; maxLength: 2000 |
Full JSON Schema
Example input
{
"path": {
"legal_hold_id": "00000000-0000-0000-0000-000000000001",
"user_id": "00000000-0000-0000-0000-000000000001"
}
}
At most 1 provider requests per invocation; timeout: 30 seconds.
Remove a group member — notion-admin.api.remove-permission-group-member
Run Remove a group member with Notion Admin. This command can change provider data. Review the target and input before invoking it.
This operation can change provider data. Review the input before allowing an agent to call it.
Parameters
Requiredness is local to the containing object. A required child is required only when its parent object or array item is provided. Alternative schemas are identified in the Constraints column; the linked full JSON Schema is authoritative.
| Parameter | Type | Required in parent | Description | Constraints |
|---|---|---|---|---|
path |
object | Required | additionalProperties: false |
|
path.group_id |
string | Required | minLength: 1; maxLength: 2000 |
|
path.user_id |
string | Required | minLength: 1; maxLength: 2000 |
|
path.space_id |
string | Required | minLength: 1; maxLength: 2000 |
Full JSON Schema
Example input
{
"path": {
"group_id": "00000000-0000-0000-0000-000000000001",
"user_id": "00000000-0000-0000-0000-000000000001",
"space_id": "00000000-0000-0000-0000-000000000001"
}
}
At most 1 provider requests per invocation; timeout: 30 seconds.
Retrieve a group — notion-admin.api.retrieve-permission-group
Run Retrieve a group with Notion Admin. This is a read command; it does not grant access beyond the connected account's permissions.
This is a read operation. Provider rate limits and data access rules still apply.
Parameters
Requiredness is local to the containing object. A required child is required only when its parent object or array item is provided. Alternative schemas are identified in the Constraints column; the linked full JSON Schema is authoritative.
| Parameter | Type | Required in parent | Description | Constraints |
|---|---|---|---|---|
path |
object | Required | additionalProperties: false |
|
path.group_id |
string | Required | minLength: 1; maxLength: 2000 |
|
path.space_id |
string | Required | minLength: 1; maxLength: 2000 |
Full JSON Schema
Example input
{
"path": {
"group_id": "00000000-0000-0000-0000-000000000001",
"space_id": "00000000-0000-0000-0000-000000000001"
}
}
At most 1 provider requests per invocation; timeout: 30 seconds.
Revoke an MCP client connection — notion-admin.api.revoke-mcp-client-connection
Run Revoke an MCP client connection with Notion Admin. This command can change provider data. Review the target and input before invoking it.
This operation can change provider data. Review the input before allowing an agent to call it.
Parameters
Requiredness is local to the containing object. A required child is required only when its parent object or array item is provided. Alternative schemas are identified in the Constraints column; the linked full JSON Schema is authoritative.
| Parameter | Type | Required in parent | Description | Constraints |
|---|---|---|---|---|
data |
object | Required | maxProperties: 100 |
|
data.client_key |
string | Required | maxLength: 64000 |
|
data.user_id |
string | Required | maxLength: 64000 |
|
data.workspace_id |
string | Required | maxLength: 64000 |
Full JSON Schema
Example input
{
"data": {
"client_key": "fixture",
"user_id": "fixture",
"workspace_id": "fixture"
}
}
At most 1 provider requests per invocation; timeout: 30 seconds.
Revoke a personal access token in a workspace — notion-admin.api.revoke-personal-access-token
Run Revoke a personal access token in a workspace with Notion Admin. This command can change provider data. Review the target and input before invoking it.
This operation can change provider data. Review the input before allowing an agent to call it.
Parameters
Requiredness is local to the containing object. A required child is required only when its parent object or array item is provided. Alternative schemas are identified in the Constraints column; the linked full JSON Schema is authoritative.
| Parameter | Type | Required in parent | Description | Constraints |
|---|---|---|---|---|
path |
object | Required | additionalProperties: false |
|
path.bot_id |
string | Required | minLength: 1; maxLength: 2000 |
|
path.space_id |
string | Required | minLength: 1; maxLength: 2000 |
Full JSON Schema
Example input
{
"path": {
"bot_id": "00000000-0000-0000-0000-000000000001",
"space_id": "00000000-0000-0000-0000-000000000001"
}
}
At most 1 provider requests per invocation; timeout: 30 seconds.
Revoke a managed user's sessions — notion-admin.api.revoke-user-session
Run Revoke a managed user's sessions with Notion Admin. This command can change provider data. Review the target and input before invoking it.
This operation can change provider data. Review the input before allowing an agent to call it.
Parameters
Requiredness is local to the containing object. A required child is required only when its parent object or array item is provided. Alternative schemas are identified in the Constraints column; the linked full JSON Schema is authoritative.
| Parameter | Type | Required in parent | Description | Constraints |
|---|---|---|---|---|
data |
object | Required | maxProperties: 100 |
|
data.user |
— | Required | ||
data.user |
object | Required | oneOf[1]; maxProperties: 100; additionalProperties: false |
|
data.user.type |
string | Required | oneOf[1]; const: "email"; maxLength: 64000 |
|
data.user.email |
string | Required | oneOf[1]; maxLength: 64000 |
|
data.user |
object | Required | oneOf[2]; maxProperties: 100; additionalProperties: false |
|
data.user.type |
string | Required | oneOf[2]; const: "id"; maxLength: 64000 |
|
data.user.id |
string | Required | oneOf[2]; maxLength: 64000 |
Full JSON Schema
Example input
{
"data": {
"user": {
"type": "email",
"email": "fixture"
}
}
}
At most 1 provider requests per invocation; timeout: 30 seconds.
Update who can create agents in a space — notion-admin.api.update-agent-creation-policy
Run Update who can create agents in a space with Notion Admin. This command can change provider data. Review the target and input before invoking it.
This operation can change provider data. Review the input before allowing an agent to call it.
Parameters
Requiredness is local to the containing object. A required child is required only when its parent object or array item is provided. Alternative schemas are identified in the Constraints column; the linked full JSON Schema is authoritative.
| Parameter | Type | Required in parent | Description | Constraints |
|---|---|---|---|---|
path |
object | Required | additionalProperties: false |
|
path.space_id |
string | Required | minLength: 1; maxLength: 2000 |
|
data |
object | Required | maxProperties: 100 |
|
data.policy |
string | Required | enum: ["all_workspace_members","disabled","workspace_owners_only"]; maxLength: 64000 |
|
data.disable_existing_agents |
boolean | Optional |
Full JSON Schema
Example input
{
"path": {
"space_id": "00000000-0000-0000-0000-000000000001"
},
"data": {
"policy": "all_workspace_members"
}
}
At most 1 provider requests per invocation; timeout: 30 seconds.
Update credit limit for an agent in a space — notion-admin.api.update-agent-credit-limit
Run Update credit limit for an agent in a space with Notion Admin. This command can change provider data. Review the target and input before invoking it.
This operation can change provider data. Review the input before allowing an agent to call it.
Parameters
Requiredness is local to the containing object. A required child is required only when its parent object or array item is provided. Alternative schemas are identified in the Constraints column; the linked full JSON Schema is authoritative.
| Parameter | Type | Required in parent | Description | Constraints |
|---|---|---|---|---|
path |
object | Required | additionalProperties: false |
|
path.agent_id |
string | Required | minLength: 1; maxLength: 2000 |
|
path.space_id |
string | Required | minLength: 1; maxLength: 2000 |
|
data |
object | Required | maxProperties: 100 |
|
data.credit_limit |
— | Required | ||
data.credit_limit |
number | Required | oneOf[1] |
|
data.credit_limit |
null | Required | oneOf[2] |
Full JSON Schema
Example input
{
"path": {
"agent_id": "00000000-0000-0000-0000-000000000001",
"space_id": "00000000-0000-0000-0000-000000000001"
},
"data": {
"credit_limit": 0
}
}
At most 1 provider requests per invocation; timeout: 30 seconds.
Update a custom agent's sharing permissions — notion-admin.api.update-agent-permissions
Run Update a custom agent's sharing permissions with Notion Admin. This command can change provider data. Review the target and input before invoking it.
This operation can change provider data. Review the input before allowing an agent to call it.
Parameters
Requiredness is local to the containing object. A required child is required only when its parent object or array item is provided. Alternative schemas are identified in the Constraints column; the linked full JSON Schema is authoritative.
| Parameter | Type | Required in parent | Description | Constraints |
|---|---|---|---|---|
path |
object | Required | additionalProperties: false |
|
path.agent_id |
string | Required | minLength: 1; maxLength: 2000 |
|
path.space_id |
string | Required | minLength: 1; maxLength: 2000 |
|
data |
object | Required | maxProperties: 100; additionalProperties: false |
|
data.set |
array | Optional | maxItems: 100 |
|
data.set[] |
object | Optional | maxProperties: 100; additionalProperties: false |
|
data.set[].principal |
— | Required | ||
data.set[].principal |
object | Required | oneOf[1]; maxProperties: 100; additionalProperties: false |
|
data.set[].principal.group_id |
string | Required | oneOf[1]; maxLength: 64000 |
|
data.set[].principal.type |
string | Required | oneOf[1]; const: "group"; maxLength: 64000 |
|
data.set[].principal |
object | Required | oneOf[2]; maxProperties: 100; additionalProperties: false |
|
data.set[].principal.type |
string | Required | oneOf[2]; const: "user"; maxLength: 64000 |
|
data.set[].principal.user_id |
string | Required | oneOf[2]; maxLength: 64000 |
|
data.set[].principal |
object | Required | oneOf[3]; maxProperties: 100; additionalProperties: false |
|
data.set[].principal.type |
string | Required | oneOf[3]; const: "workspace"; maxLength: 64000 |
|
data.set[].role |
string | Required | enum: ["edit","full_access","view_and_interact"]; maxLength: 64000 |
|
data.remove |
array | Optional | maxItems: 100 |
|
data.remove[] |
— | Optional | ||
data.remove[] |
object | Optional | oneOf[1]; maxProperties: 100; additionalProperties: false |
|
data.remove[].group_id |
string | Required | oneOf[1]; maxLength: 64000 |
|
data.remove[].type |
string | Required | oneOf[1]; const: "group"; maxLength: 64000 |
|
data.remove[] |
object | Optional | oneOf[2]; maxProperties: 100; additionalProperties: false |
|
data.remove[].type |
string | Required | oneOf[2]; const: "user"; maxLength: 64000 |
|
data.remove[].user_id |
string | Required | oneOf[2]; maxLength: 64000 |
|
data.remove[] |
object | Optional | oneOf[3]; maxProperties: 100; additionalProperties: false |
|
data.remove[].type |
string | Required | oneOf[3]; const: "workspace"; maxLength: 64000 |
Full JSON Schema
Example input
{
"path": {
"agent_id": "00000000-0000-0000-0000-000000000001",
"space_id": "00000000-0000-0000-0000-000000000001"
},
"data": {}
}
At most 1 provider requests per invocation; timeout: 30 seconds.
Disable or re-enable an agent in a space — notion-admin.api.update-agent-status
Run Disable or re-enable an agent in a space with Notion Admin. This command can change provider data. Review the target and input before invoking it.
This operation can change provider data. Review the input before allowing an agent to call it.
Parameters
Requiredness is local to the containing object. A required child is required only when its parent object or array item is provided. Alternative schemas are identified in the Constraints column; the linked full JSON Schema is authoritative.
| Parameter | Type | Required in parent | Description | Constraints |
|---|---|---|---|---|
path |
object | Required | additionalProperties: false |
|
path.agent_id |
string | Required | minLength: 1; maxLength: 2000 |
|
path.space_id |
string | Required | minLength: 1; maxLength: 2000 |
|
data |
object | Required | maxProperties: 100 |
|
data.admin_status |
string | Required | enum: ["active","disabled"]; maxLength: 64000 |
Full JSON Schema
Example input
{
"path": {
"agent_id": "00000000-0000-0000-0000-000000000001",
"space_id": "00000000-0000-0000-0000-000000000001"
},
"data": {
"admin_status": "active"
}
}
At most 1 provider requests per invocation; timeout: 30 seconds.
Update a legal hold — notion-admin.api.update-legal-hold
Run Update a legal hold with Notion Admin. This command can change provider data. Review the target and input before invoking it.
This operation can change provider data. Review the input before allowing an agent to call it.
Parameters
Requiredness is local to the containing object. A required child is required only when its parent object or array item is provided. Alternative schemas are identified in the Constraints column; the linked full JSON Schema is authoritative.
| Parameter | Type | Required in parent | Description | Constraints |
|---|---|---|---|---|
path |
object | Required | additionalProperties: false |
|
path.legal_hold_id |
string | Required | minLength: 1; maxLength: 2000 |
|
data |
object | Required | maxProperties: 100 |
|
data.description |
string | Optional | maxLength: 64000 |
|
data.icon |
string | Optional | maxLength: 64000 |
|
data.name |
string | Optional | maxLength: 64000 |
Full JSON Schema
Example input
{
"path": {
"legal_hold_id": "00000000-0000-0000-0000-000000000001"
},
"data": {}
}
At most 1 provider requests per invocation; timeout: 30 seconds.
Deny or restore enterprise-managed MCP client access — notion-admin.api.update-mcp-client-connection-enterprise-managed-access
Run Deny or restore enterprise-managed MCP client access with Notion Admin. This command can change provider data. Review the target and input before invoking it.
This operation can change provider data. Review the input before allowing an agent to call it.
Parameters
Requiredness is local to the containing object. A required child is required only when its parent object or array item is provided. Alternative schemas are identified in the Constraints column; the linked full JSON Schema is authoritative.
| Parameter | Type | Required in parent | Description | Constraints |
|---|---|---|---|---|
data |
object | Required | maxProperties: 100 |
|
data.access |
string | Required | enum: ["allowed","denied"]; maxLength: 64000 |
|
data.user_id |
string | Required | maxLength: 64000 |
|
data.workspace_id |
string | Required | maxLength: 64000 |
Full JSON Schema
Example input
{
"data": {
"access": "allowed",
"user_id": "fixture",
"workspace_id": "fixture"
}
}
At most 1 provider requests per invocation; timeout: 30 seconds.
Update a group — notion-admin.api.update-permission-group
Run Update a group with Notion Admin. This command can change provider data. Review the target and input before invoking it.
This operation can change provider data. Review the input before allowing an agent to call it.
Parameters
Requiredness is local to the containing object. A required child is required only when its parent object or array item is provided. Alternative schemas are identified in the Constraints column; the linked full JSON Schema is authoritative.
| Parameter | Type | Required in parent | Description | Constraints |
|---|---|---|---|---|
path |
object | Required | additionalProperties: false |
|
path.group_id |
string | Required | minLength: 1; maxLength: 2000 |
|
path.space_id |
string | Required | minLength: 1; maxLength: 2000 |
|
data |
object | Required | maxProperties: 100 |
|
data.name |
string | Required | minLength: 1; maxLength: 200; pattern: "\\S" |
Full JSON Schema
Example input
{
"path": {
"group_id": "00000000-0000-0000-0000-000000000001",
"space_id": "00000000-0000-0000-0000-000000000001"
},
"data": {
"name": "fixture"
}
}
At most 1 provider requests per invocation; timeout: 30 seconds.
Update a group member — notion-admin.api.update-permission-group-member
Run Update a group member with Notion Admin. This command can change provider data. Review the target and input before invoking it.
This operation can change provider data. Review the input before allowing an agent to call it.
Parameters
Requiredness is local to the containing object. A required child is required only when its parent object or array item is provided. Alternative schemas are identified in the Constraints column; the linked full JSON Schema is authoritative.
| Parameter | Type | Required in parent | Description | Constraints |
|---|---|---|---|---|
path |
object | Required | additionalProperties: false |
|
path.group_id |
string | Required | minLength: 1; maxLength: 2000 |
|
path.user_id |
string | Required | minLength: 1; maxLength: 2000 |
|
path.space_id |
string | Required | minLength: 1; maxLength: 2000 |
|
data |
object | Required | maxProperties: 100 |
|
data.role |
string | Required | enum: ["owner","member"]; maxLength: 64000 |
Full JSON Schema
Example input
{
"path": {
"group_id": "00000000-0000-0000-0000-000000000001",
"user_id": "00000000-0000-0000-0000-000000000001",
"space_id": "00000000-0000-0000-0000-000000000001"
},
"data": {
"role": "owner"
}
}
At most 1 provider requests per invocation; timeout: 30 seconds.
Update the default agent credit limit for a workspace — notion-admin.api.update-workspace-credit-limit
Run Update the default agent credit limit for a workspace with Notion Admin. This command can change provider data. Review the target and input before invoking it.
This operation can change provider data. Review the input before allowing an agent to call it.
Parameters
Requiredness is local to the containing object. A required child is required only when its parent object or array item is provided. Alternative schemas are identified in the Constraints column; the linked full JSON Schema is authoritative.
| Parameter | Type | Required in parent | Description | Constraints |
|---|---|---|---|---|
path |
object | Required | additionalProperties: false |
|
path.space_id |
string | Required | minLength: 1; maxLength: 2000 |
|
data |
object | Required | maxProperties: 100 |
|
data.default_agent_credit_limit |
— | Required | ||
data.default_agent_credit_limit |
number | Required | oneOf[1] |
|
data.default_agent_credit_limit |
null | Required | oneOf[2] |
Full JSON Schema
Example input
{
"path": {
"space_id": "00000000-0000-0000-0000-000000000001"
},
"data": {
"default_agent_credit_limit": 0
}
}
At most 1 provider requests per invocation; timeout: 30 seconds.
Errors
Check the key's expiry, revocation, workspace and allowed operations.
Reuse the same idempotency key only for the same request.
The connection or provider limit has been reached. Check the receipt before retrying.
Test the connection
Open the integration's commands below to inspect parameters and examples. Start with a read command for an account or resource you can access. Refresh your client's tool list, use the returned tool name, and check the execution result and usage. Provider charges and permissions still apply. Never test a write against production data without reviewing it.