--- title: "Notion Admin" description: "Enterprise organization APIs using a separate organization bot token. Workspace OAuth tokens cannot authorize this service. One request per invocation; mutations require an interactive human decision. Existing Notion wor" --- > Documentation Index > Fetch the complete documentation index at: https://help.tooluse.net/llms.txt > Use this file to discover all available pages before exploring further. # Notion Admin

Enterprise organization APIs using a separate organization bot token. Workspace OAuth tokens cannot authorize this service. One request per invocation; mutations require an interactive human decision. Existing Notion workspace grants do not enable these operations.

What you can do (40)

What you can do

Available commands: 40 (17 read, 23 write). Enable only the commands your application needs.

Command Effect
Add users to a legal hold — notion-admin.api.add-legal-hold-users Write
Add a group member — notion-admin.api.add-permission-group-member Write
Create a legal hold — notion-admin.api.create-legal-hold Write
Create a group — notion-admin.api.create-permission-group Write
Delete an agent in a space — notion-admin.api.delete-agent Write
Delete a group — notion-admin.api.delete-permission-group Write
Enqueue a workspace export — notion-admin.api.enqueue-space-export Write
Export a legal hold — notion-admin.api.export-legal-hold Write
Get credit usage for an agent in a space — notion-admin.api.get-agent-credit-usage Read
Get a custom agent's sharing permissions — notion-admin.api.get-agent-permissions Read
Get credit usage for agents in a space — notion-admin.api.get-agents-credit-usage Read
Retrieve a legal hold — notion-admin.api.get-legal-hold Read
Get workspace export status — notion-admin.api.get-space-export-status Read
Get agents in a space — notion-admin.api.get-workflows-metadata-for-space Read
List pages on a legal hold — notion-admin.api.list-legal-hold-pages Read
List users on a legal hold — notion-admin.api.list-legal-hold-users Read
List workspaces on a legal hold — notion-admin.api.list-legal-hold-workspaces Read
List legal holds — notion-admin.api.list-legal-holds Read
List MCP client connections in an organization — notion-admin.api.list-mcp-client-connections Read
List group members — notion-admin.api.list-permission-group-members Read
List groups — notion-admin.api.list-permission-groups Read
List personal access tokens in a workspace — notion-admin.api.list-personal-access-tokens Read
List workspaces in the organization — notion-admin.api.list-spaces Read
List users — notion-admin.api.list-users Read
Release a legal hold — notion-admin.api.release-legal-hold Write
Remove a user from a legal hold — notion-admin.api.remove-legal-hold-user Write
Remove a group member — notion-admin.api.remove-permission-group-member Write
Retrieve a group — notion-admin.api.retrieve-permission-group Read
Revoke an MCP client connection — notion-admin.api.revoke-mcp-client-connection Write
Revoke a personal access token in a workspace — notion-admin.api.revoke-personal-access-token Write
Revoke a managed user's sessions — notion-admin.api.revoke-user-session Write
Update who can create agents in a space — notion-admin.api.update-agent-creation-policy Write
Update credit limit for an agent in a space — notion-admin.api.update-agent-credit-limit Write
Update a custom agent's sharing permissions — notion-admin.api.update-agent-permissions Write
Disable or re-enable an agent in a space — notion-admin.api.update-agent-status Write
Update a legal hold — notion-admin.api.update-legal-hold Write
Deny or restore enterprise-managed MCP client access — notion-admin.api.update-mcp-client-connection-enterprise-managed-access Write
Update a group — notion-admin.api.update-permission-group Write
Update a group member — notion-admin.api.update-permission-group-member Write
Update the default agent credit limit for a workspace — notion-admin.api.update-workspace-credit-limit Write

Connect and use

Connect and use

Open the integration's connection form to check the available credential source. The source has not been resolved for this documentation export. The instructions below apply when using your own provider account.

Get your provider credentials

Follow these steps for Notion Admin, then enter the issued values in the connection form below.

  1. Ask a Notion organization owner to provision its organization/admin API credential under a supported plan. Enter Organization token and the appropriate read-only/read-write mode. A page integration token is not an organization administration credential.

Official credential setup

Where to enter credentials

In the integration page, sign in, choose your workspace and open Connect. If a Credentials choice is shown, select Use my credentials. Fill the following connection fields and save. Provider credentials belong in this form, never in an MCP configuration or tool input.

Connection field Requirement
Organization bot token Required
Connection permissions Optional

Open API keys and create a Tooluse.net key for the enabled commands.

Set TOOLUSE_API_KEY in your client and use the shared MCP configuration.

Configure Claude Code, Codex or Cursor once

Permissions and results

If you have more than one workspace, check the selected workspace in the connection or API-key dialog before saving. Roles, enabled commands, expiry and revocation use Tooluse.net's existing permissions. Disabling a connection or revoking a key immediately prevents new calls.

Send one Claude tool_use block per request. Keep the same Idempotency-Key when retrying the same request; use a new key for a new call. The response includes the shared Tooluse.net receipt and Claude tool_result. Check both HTTP status and the returned tool result before treating a call as successful.

Your connection's daily allowance and key permissions also apply. Adding a connection does not make a provider request.

Calls return the shared execution receipt and a Claude tool_result. Provider output varies by operation; consult the provider documentation for its response fields. Unconfirmed calls should be checked before retrying.

Call from your client

Use the shared MCP configuration. Refresh your client's tool list after saving the connection or changing key permissions, then call the returned tool name with the example input below.

Configure Claude Code, Codex or Cursor once

Discover your enabled tools

List permitted tools in Claude format. Read every page using page and size (maximum 100) until all results have been received. Use the returned name, not a catalog capability identifier, in the tool_use block.

curl 'https://api.tooluse.net/v1/tools' \
  -H "Authorization: Bearer $TOOLUSE_API_KEY"

Find this command in the tool list permitted by your key. Replace svc_FROM_YOUR_TOOL_LIST with its returned name. Use a new Idempotency-Key for each new call and retain it when retrying that same call.

HTTP call

curl 'https://api.tooluse.net/v1/tool-calls' \
  -H "Authorization: Bearer $TOOLUSE_API_KEY" \
  -H 'Content-Type: application/json' \
  -H 'Idempotency-Key: replace-with-a-new-call-id' \
  --data '{
  "type": "tool_use",
  "id": "toolu_example",
  "name": "svc_FROM_YOUR_TOOL_LIST",
  "input": {
    "path": {
      "agent_id": "00000000-0000-0000-0000-000000000001",
      "space_id": "00000000-0000-0000-0000-000000000001"
    }
  }
}'

Send one Claude tool_use block per request. Keep the same Idempotency-Key when retrying the same request; use a new key for a new call. The response includes the shared Tooluse.net receipt and Claude tool_result. Check both HTTP status and the returned tool result before treating a call as successful.

Commands

Add a group member — notion-admin.api.add-permission-group-member

Run Add a group member with Notion Admin. This command can change provider data. Review the target and input before invoking it.

This operation can change provider data. Review the input before allowing an agent to call it.

Connect and use

Parameters

Requiredness is local to the containing object. A required child is required only when its parent object or array item is provided. Alternative schemas are identified in the Constraints column; the linked full JSON Schema is authoritative.

Parameter Type Required in parent Description Constraints
path object Required additionalProperties: false
path.group_id string Required minLength: 1; maxLength: 2000
path.space_id string Required minLength: 1; maxLength: 2000
data object Required maxProperties: 100
data.member object Required maxProperties: 100
data.member.type string Required const: "user"; maxLength: 64000
data.member.user_id — Required $ref: "#/$defs/idRequest"
data.role string Required enum: ["owner","member"]; maxLength: 64000

Full JSON Schema

Full JSON Schema

Example input

{
  "path": {
    "group_id": "00000000-0000-0000-0000-000000000001",
    "space_id": "00000000-0000-0000-0000-000000000001"
  },
  "data": {
    "member": {
      "type": "user",
      "user_id": "fixture"
    },
    "role": "owner"
  }
}

At most 1 provider requests per invocation; timeout: 30 seconds.

Create a group — notion-admin.api.create-permission-group

Run Create a group with Notion Admin. This command can change provider data. Review the target and input before invoking it.

This operation can change provider data. Review the input before allowing an agent to call it.

Connect and use

Parameters

Requiredness is local to the containing object. A required child is required only when its parent object or array item is provided. Alternative schemas are identified in the Constraints column; the linked full JSON Schema is authoritative.

Parameter Type Required in parent Description Constraints
path object Required additionalProperties: false
path.space_id string Required minLength: 1; maxLength: 2000
data object Required maxProperties: 100
data.name string Required minLength: 1; maxLength: 200; pattern: "\\S"

Full JSON Schema

Full JSON Schema

Example input

{
  "path": {
    "space_id": "00000000-0000-0000-0000-000000000001"
  },
  "data": {
    "name": "fixture"
  }
}

At most 1 provider requests per invocation; timeout: 30 seconds.

Delete an agent in a space — notion-admin.api.delete-agent

Run Delete an agent in a space with Notion Admin. This command can change provider data. Review the target and input before invoking it.

This operation can change provider data. Review the input before allowing an agent to call it.

Connect and use

Parameters

Requiredness is local to the containing object. A required child is required only when its parent object or array item is provided. Alternative schemas are identified in the Constraints column; the linked full JSON Schema is authoritative.

Parameter Type Required in parent Description Constraints
path object Required additionalProperties: false
path.agent_id string Required minLength: 1; maxLength: 2000
path.space_id string Required minLength: 1; maxLength: 2000

Full JSON Schema

Full JSON Schema

Example input

{
  "path": {
    "agent_id": "00000000-0000-0000-0000-000000000001",
    "space_id": "00000000-0000-0000-0000-000000000001"
  }
}

At most 1 provider requests per invocation; timeout: 30 seconds.

Delete a group — notion-admin.api.delete-permission-group

Run Delete a group with Notion Admin. This command can change provider data. Review the target and input before invoking it.

This operation can change provider data. Review the input before allowing an agent to call it.

Connect and use

Parameters

Requiredness is local to the containing object. A required child is required only when its parent object or array item is provided. Alternative schemas are identified in the Constraints column; the linked full JSON Schema is authoritative.

Parameter Type Required in parent Description Constraints
path object Required additionalProperties: false
path.group_id string Required minLength: 1; maxLength: 2000
path.space_id string Required minLength: 1; maxLength: 2000
query object Optional additionalProperties: false
query.transfer_to_owner_id — Optional $ref: "#/$defs/idRequest"

Full JSON Schema

Full JSON Schema

Example input

{
  "path": {
    "group_id": "00000000-0000-0000-0000-000000000001",
    "space_id": "00000000-0000-0000-0000-000000000001"
  }
}

At most 1 provider requests per invocation; timeout: 30 seconds.

Enqueue a workspace export — notion-admin.api.enqueue-space-export

Run Enqueue a workspace export with Notion Admin. This command can change provider data. Review the target and input before invoking it.

This operation can change provider data. Review the input before allowing an agent to call it.

Connect and use

Parameters

Requiredness is local to the containing object. A required child is required only when its parent object or array item is provided. Alternative schemas are identified in the Constraints column; the linked full JSON Schema is authoritative.

Parameter Type Required in parent Description Constraints
path object Required additionalProperties: false
path.space_id string Required minLength: 1; maxLength: 2000
data object Required maxProperties: 100
data.export_type string Required enum: ["html","markdown"]; maxLength: 64000
data.on_behalf_of_user_email string Required maxLength: 64000
data.collection_view_export_type string Optional enum: ["all","currentView"]; maxLength: 64000
data.flatten_export_filetree boolean Optional
data.include_comments boolean Optional
data.include_contents string Optional enum: ["everything","no_files"]; maxLength: 64000
data.locale string Optional maxLength: 64000
data.teamspace_ids array Optional maxItems: 100
data.teamspace_ids[] string Optional maxLength: 64000
data.time_zone string Optional maxLength: 64000

Full JSON Schema

Full JSON Schema

Example input

{
  "path": {
    "space_id": "00000000-0000-0000-0000-000000000001"
  },
  "data": {
    "export_type": "html",
    "on_behalf_of_user_email": "fixture"
  }
}

At most 1 provider requests per invocation; timeout: 30 seconds.

Get credit usage for an agent in a space — notion-admin.api.get-agent-credit-usage

Run Get credit usage for an agent in a space with Notion Admin. This is a read command; it does not grant access beyond the connected account's permissions.

This is a read operation. Provider rate limits and data access rules still apply.

Connect and use

Parameters

Requiredness is local to the containing object. A required child is required only when its parent object or array item is provided. Alternative schemas are identified in the Constraints column; the linked full JSON Schema is authoritative.

Parameter Type Required in parent Description Constraints
path object Required additionalProperties: false
path.agent_id string Required minLength: 1; maxLength: 2000
path.space_id string Required minLength: 1; maxLength: 2000
query object Optional additionalProperties: false
query.start_cursor string Optional maxLength: 64000

Full JSON Schema

Full JSON Schema

Example input

{
  "path": {
    "agent_id": "00000000-0000-0000-0000-000000000001",
    "space_id": "00000000-0000-0000-0000-000000000001"
  }
}

At most 1 provider requests per invocation; timeout: 30 seconds.

Get a custom agent's sharing permissions — notion-admin.api.get-agent-permissions

Run Get a custom agent's sharing permissions with Notion Admin. This is a read command; it does not grant access beyond the connected account's permissions.

This is a read operation. Provider rate limits and data access rules still apply.

Connect and use

Parameters

Requiredness is local to the containing object. A required child is required only when its parent object or array item is provided. Alternative schemas are identified in the Constraints column; the linked full JSON Schema is authoritative.

Parameter Type Required in parent Description Constraints
path object Required additionalProperties: false
path.agent_id string Required minLength: 1; maxLength: 2000
path.space_id string Required minLength: 1; maxLength: 2000
query object Optional additionalProperties: false
query.cursor string Optional maxLength: 64000

Full JSON Schema

Full JSON Schema

Example input

{
  "path": {
    "agent_id": "00000000-0000-0000-0000-000000000001",
    "space_id": "00000000-0000-0000-0000-000000000001"
  }
}

At most 1 provider requests per invocation; timeout: 30 seconds.

Get credit usage for agents in a space — notion-admin.api.get-agents-credit-usage

Run Get credit usage for agents in a space with Notion Admin. This is a read command; it does not grant access beyond the connected account's permissions.

This is a read operation. Provider rate limits and data access rules still apply.

Connect and use

Parameters

Requiredness is local to the containing object. A required child is required only when its parent object or array item is provided. Alternative schemas are identified in the Constraints column; the linked full JSON Schema is authoritative.

Parameter Type Required in parent Description Constraints
path object Required additionalProperties: false
path.space_id string Required minLength: 1; maxLength: 2000
query object Optional additionalProperties: false
query.cursor string Optional maxLength: 64000
query.page_size integer Optional minimum: 1; maximum: 100
query.include_deleted string Optional enum: ["false","true"]; maxLength: 64000
query.credit_usage_time_from string Optional maxLength: 64000
query.credit_usage_time_to string Optional maxLength: 64000

Full JSON Schema

Full JSON Schema

Example input

{
  "path": {
    "space_id": "00000000-0000-0000-0000-000000000001"
  }
}

At most 1 provider requests per invocation; timeout: 30 seconds.

Get workspace export status — notion-admin.api.get-space-export-status

Run Get workspace export status with Notion Admin. This is a read command; it does not grant access beyond the connected account's permissions.

This is a read operation. Provider rate limits and data access rules still apply.

Connect and use

Parameters

Requiredness is local to the containing object. A required child is required only when its parent object or array item is provided. Alternative schemas are identified in the Constraints column; the linked full JSON Schema is authoritative.

Parameter Type Required in parent Description Constraints
path object Required additionalProperties: false
path.export_job_id string Required minLength: 1; maxLength: 2000
path.space_id string Required minLength: 1; maxLength: 2000

Full JSON Schema

Full JSON Schema

Example input

{
  "path": {
    "export_job_id": "00000000-0000-0000-0000-000000000001",
    "space_id": "00000000-0000-0000-0000-000000000001"
  }
}

At most 1 provider requests per invocation; timeout: 30 seconds.

Get agents in a space — notion-admin.api.get-workflows-metadata-for-space

Run Get agents in a space with Notion Admin. This is a read command; it does not grant access beyond the connected account's permissions.

This is a read operation. Provider rate limits and data access rules still apply.

Connect and use

Parameters

Requiredness is local to the containing object. A required child is required only when its parent object or array item is provided. Alternative schemas are identified in the Constraints column; the linked full JSON Schema is authoritative.

Parameter Type Required in parent Description Constraints
path object Required additionalProperties: false
path.space_id string Required minLength: 1; maxLength: 2000
query object Optional additionalProperties: false
query.name string Optional maxLength: 64000
query.created_by_ids array Optional maxItems: 100
query.created_by_ids[] string Optional maxLength: 64000
query.created_time_from string Optional maxLength: 64000
query.created_time_to string Optional maxLength: 64000
query.last_edited_time_from string Optional maxLength: 64000
query.last_edited_time_to string Optional maxLength: 64000
query.credit_usage_time_from string Optional maxLength: 64000
query.credit_usage_time_to string Optional maxLength: 64000
query.status array Optional maxItems: 100
query.status[] string Optional enum: ["active","credit_limit","deleted","disabled","disabled_by_notion","disabled_due_to_lack_of_editors","disabled_due_to_lack_of_full_access_members","disabled_from_agent_settings","disabled_from_api","disabled_from_workspace_settings","disabled_from_workspace_settings_but_resumable","failure_limit","internal_error","mark_session_failed_autopause","needs_review","run_limit","runaway_credit_usage","tool_unavailable","workspace_credit_limit"]; maxLength: 64000
query.integration_types array Optional maxItems: 100
query.integration_types[] string Optional maxLength: 64000
query.mcp_server_names array Optional maxItems: 100
query.mcp_server_names[] string Optional maxLength: 64000
query.models array Optional maxItems: 100
query.models[] string Optional maxLength: 64000
query.shared_with_user_ids array Optional maxItems: 100
query.shared_with_user_ids[] string Optional maxLength: 64000
query.shared_with_group_ids array Optional maxItems: 100
query.shared_with_group_ids[] string Optional maxLength: 64000
query.cursor string Optional maxLength: 64000
query.page_size integer Optional minimum: 1; maximum: 100

Full JSON Schema

Full JSON Schema

Example input

{
  "path": {
    "space_id": "00000000-0000-0000-0000-000000000001"
  }
}

At most 1 provider requests per invocation; timeout: 30 seconds.

List MCP client connections in an organization — notion-admin.api.list-mcp-client-connections

Run List MCP client connections in an organization with Notion Admin. This is a read command; it does not grant access beyond the connected account's permissions.

This is a read operation. Provider rate limits and data access rules still apply.

Connect and use

Parameters

Requiredness is local to the containing object. A required child is required only when its parent object or array item is provided. Alternative schemas are identified in the Constraints column; the linked full JSON Schema is authoritative.

Parameter Type Required in parent Description Constraints
query object Optional additionalProperties: false
query.start_cursor string Optional maxLength: 64000
query.cursor string Optional maxLength: 64000
query.page_size string Optional maxLength: 64000
query.user_ids — Optional
query.user_ids array Optional anyOf[1]; maxItems: 100
query.user_ids[] string Optional anyOf[1]; maxLength: 64000
query.user_ids string Optional anyOf[2]; maxLength: 64000
query.workspace_ids — Optional
query.workspace_ids array Optional anyOf[1]; maxItems: 100
query.workspace_ids[] string Optional anyOf[1]; maxLength: 64000
query.workspace_ids string Optional anyOf[2]; maxLength: 64000

Full JSON Schema

Full JSON Schema

Example input

{}

At most 1 provider requests per invocation; timeout: 30 seconds.

List group members — notion-admin.api.list-permission-group-members

Run List group members with Notion Admin. This is a read command; it does not grant access beyond the connected account's permissions.

This is a read operation. Provider rate limits and data access rules still apply.

Connect and use

Parameters

Requiredness is local to the containing object. A required child is required only when its parent object or array item is provided. Alternative schemas are identified in the Constraints column; the linked full JSON Schema is authoritative.

Parameter Type Required in parent Description Constraints
path object Required additionalProperties: false
path.group_id string Required minLength: 1; maxLength: 2000
path.space_id string Required minLength: 1; maxLength: 2000
query object Optional additionalProperties: false
query.page_size integer Optional minimum: 1; maximum: 100
query.start_cursor string Optional maxLength: 64000

Full JSON Schema

Full JSON Schema

Example input

{
  "path": {
    "group_id": "00000000-0000-0000-0000-000000000001",
    "space_id": "00000000-0000-0000-0000-000000000001"
  }
}

At most 1 provider requests per invocation; timeout: 30 seconds.

List groups — notion-admin.api.list-permission-groups

Run List groups with Notion Admin. This is a read command; it does not grant access beyond the connected account's permissions.

This is a read operation. Provider rate limits and data access rules still apply.

Connect and use

Parameters

Requiredness is local to the containing object. A required child is required only when its parent object or array item is provided. Alternative schemas are identified in the Constraints column; the linked full JSON Schema is authoritative.

Parameter Type Required in parent Description Constraints
path object Required additionalProperties: false
path.space_id string Required minLength: 1; maxLength: 2000
query object Optional additionalProperties: false
query.page_size integer Optional minimum: 1; maximum: 100
query.start_cursor string Optional maxLength: 64000

Full JSON Schema

Full JSON Schema

Example input

{
  "path": {
    "space_id": "00000000-0000-0000-0000-000000000001"
  }
}

At most 1 provider requests per invocation; timeout: 30 seconds.

List personal access tokens in a workspace — notion-admin.api.list-personal-access-tokens

Run List personal access tokens in a workspace with Notion Admin. This is a read command; it does not grant access beyond the connected account's permissions.

This is a read operation. Provider rate limits and data access rules still apply.

Connect and use

Parameters

Requiredness is local to the containing object. A required child is required only when its parent object or array item is provided. Alternative schemas are identified in the Constraints column; the linked full JSON Schema is authoritative.

Parameter Type Required in parent Description Constraints
path object Required additionalProperties: false
path.space_id string Required minLength: 1; maxLength: 2000
query object Optional additionalProperties: false
query.start_cursor string Optional maxLength: 64000
query.cursor string Optional maxLength: 64000
query.page_size string Optional maxLength: 64000
query.status — Optional
query.status array Optional oneOf[1]; maxItems: 100
query.status[] string Optional oneOf[1]; enum: ["active","expired","revoked"]; maxLength: 64000
query.status string Optional oneOf[2]; const: "active"; maxLength: 64000
query.status string Optional oneOf[3]; const: "expired"; maxLength: 64000
query.status string Optional oneOf[4]; const: "revoked"; maxLength: 64000
query.creator_ids — Optional
query.creator_ids array Optional oneOf[1]; maxItems: 100
query.creator_ids[] string Optional oneOf[1]; maxLength: 64000
query.creator_ids string Optional oneOf[2]; maxLength: 64000
query.search string Optional maxLength: 64000

Full JSON Schema

Full JSON Schema

Example input

{
  "path": {
    "space_id": "00000000-0000-0000-0000-000000000001"
  }
}

At most 1 provider requests per invocation; timeout: 30 seconds.

List workspaces in the organization — notion-admin.api.list-spaces

Run List workspaces in the organization with Notion Admin. This is a read command; it does not grant access beyond the connected account's permissions.

This is a read operation. Provider rate limits and data access rules still apply.

Connect and use

Parameters

Requiredness is local to the containing object. A required child is required only when its parent object or array item is provided. Alternative schemas are identified in the Constraints column; the linked full JSON Schema is authoritative.

Parameter Type Required in parent Description Constraints
query object Optional additionalProperties: false
query.start_cursor string Optional minLength: 1; maxLength: 64000
query.page_size integer Optional minimum: 1; maximum: 100

Full JSON Schema

Full JSON Schema

Example input

{}

At most 1 provider requests per invocation; timeout: 30 seconds.

List users — notion-admin.api.list-users

Run List users with Notion Admin. This is a read command; it does not grant access beyond the connected account's permissions.

This is a read operation. Provider rate limits and data access rules still apply.

Connect and use

Parameters

Requiredness is local to the containing object. A required child is required only when its parent object or array item is provided. Alternative schemas are identified in the Constraints column; the linked full JSON Schema is authoritative.

Parameter Type Required in parent Description Constraints
path object Required additionalProperties: false
path.space_id string Required minLength: 1; maxLength: 2000
query object Optional additionalProperties: false
query.start_cursor string Optional minLength: 1; maxLength: 64000
query.page_size integer Optional minimum: 1; maximum: 100

Full JSON Schema

Full JSON Schema

Example input

{
  "path": {
    "space_id": "00000000-0000-0000-0000-000000000001"
  }
}

At most 1 provider requests per invocation; timeout: 30 seconds.

Remove a group member — notion-admin.api.remove-permission-group-member

Run Remove a group member with Notion Admin. This command can change provider data. Review the target and input before invoking it.

This operation can change provider data. Review the input before allowing an agent to call it.

Connect and use

Parameters

Requiredness is local to the containing object. A required child is required only when its parent object or array item is provided. Alternative schemas are identified in the Constraints column; the linked full JSON Schema is authoritative.

Parameter Type Required in parent Description Constraints
path object Required additionalProperties: false
path.group_id string Required minLength: 1; maxLength: 2000
path.user_id string Required minLength: 1; maxLength: 2000
path.space_id string Required minLength: 1; maxLength: 2000

Full JSON Schema

Full JSON Schema

Example input

{
  "path": {
    "group_id": "00000000-0000-0000-0000-000000000001",
    "user_id": "00000000-0000-0000-0000-000000000001",
    "space_id": "00000000-0000-0000-0000-000000000001"
  }
}

At most 1 provider requests per invocation; timeout: 30 seconds.

Retrieve a group — notion-admin.api.retrieve-permission-group

Run Retrieve a group with Notion Admin. This is a read command; it does not grant access beyond the connected account's permissions.

This is a read operation. Provider rate limits and data access rules still apply.

Connect and use

Parameters

Requiredness is local to the containing object. A required child is required only when its parent object or array item is provided. Alternative schemas are identified in the Constraints column; the linked full JSON Schema is authoritative.

Parameter Type Required in parent Description Constraints
path object Required additionalProperties: false
path.group_id string Required minLength: 1; maxLength: 2000
path.space_id string Required minLength: 1; maxLength: 2000

Full JSON Schema

Full JSON Schema

Example input

{
  "path": {
    "group_id": "00000000-0000-0000-0000-000000000001",
    "space_id": "00000000-0000-0000-0000-000000000001"
  }
}

At most 1 provider requests per invocation; timeout: 30 seconds.

Revoke an MCP client connection — notion-admin.api.revoke-mcp-client-connection

Run Revoke an MCP client connection with Notion Admin. This command can change provider data. Review the target and input before invoking it.

This operation can change provider data. Review the input before allowing an agent to call it.

Connect and use

Parameters

Requiredness is local to the containing object. A required child is required only when its parent object or array item is provided. Alternative schemas are identified in the Constraints column; the linked full JSON Schema is authoritative.

Parameter Type Required in parent Description Constraints
data object Required maxProperties: 100
data.client_key string Required maxLength: 64000
data.user_id string Required maxLength: 64000
data.workspace_id string Required maxLength: 64000

Full JSON Schema

Full JSON Schema

Example input

{
  "data": {
    "client_key": "fixture",
    "user_id": "fixture",
    "workspace_id": "fixture"
  }
}

At most 1 provider requests per invocation; timeout: 30 seconds.

Revoke a personal access token in a workspace — notion-admin.api.revoke-personal-access-token

Run Revoke a personal access token in a workspace with Notion Admin. This command can change provider data. Review the target and input before invoking it.

This operation can change provider data. Review the input before allowing an agent to call it.

Connect and use

Parameters

Requiredness is local to the containing object. A required child is required only when its parent object or array item is provided. Alternative schemas are identified in the Constraints column; the linked full JSON Schema is authoritative.

Parameter Type Required in parent Description Constraints
path object Required additionalProperties: false
path.bot_id string Required minLength: 1; maxLength: 2000
path.space_id string Required minLength: 1; maxLength: 2000

Full JSON Schema

Full JSON Schema

Example input

{
  "path": {
    "bot_id": "00000000-0000-0000-0000-000000000001",
    "space_id": "00000000-0000-0000-0000-000000000001"
  }
}

At most 1 provider requests per invocation; timeout: 30 seconds.

Revoke a managed user's sessions — notion-admin.api.revoke-user-session

Run Revoke a managed user's sessions with Notion Admin. This command can change provider data. Review the target and input before invoking it.

This operation can change provider data. Review the input before allowing an agent to call it.

Connect and use

Parameters

Requiredness is local to the containing object. A required child is required only when its parent object or array item is provided. Alternative schemas are identified in the Constraints column; the linked full JSON Schema is authoritative.

Parameter Type Required in parent Description Constraints
data object Required maxProperties: 100
data.user — Required
data.user object Required oneOf[1]; maxProperties: 100; additionalProperties: false
data.user.type string Required oneOf[1]; const: "email"; maxLength: 64000
data.user.email string Required oneOf[1]; maxLength: 64000
data.user object Required oneOf[2]; maxProperties: 100; additionalProperties: false
data.user.type string Required oneOf[2]; const: "id"; maxLength: 64000
data.user.id string Required oneOf[2]; maxLength: 64000

Full JSON Schema

Full JSON Schema

Example input

{
  "data": {
    "user": {
      "type": "email",
      "email": "fixture"
    }
  }
}

At most 1 provider requests per invocation; timeout: 30 seconds.

Update who can create agents in a space — notion-admin.api.update-agent-creation-policy

Run Update who can create agents in a space with Notion Admin. This command can change provider data. Review the target and input before invoking it.

This operation can change provider data. Review the input before allowing an agent to call it.

Connect and use

Parameters

Requiredness is local to the containing object. A required child is required only when its parent object or array item is provided. Alternative schemas are identified in the Constraints column; the linked full JSON Schema is authoritative.

Parameter Type Required in parent Description Constraints
path object Required additionalProperties: false
path.space_id string Required minLength: 1; maxLength: 2000
data object Required maxProperties: 100
data.policy string Required enum: ["all_workspace_members","disabled","workspace_owners_only"]; maxLength: 64000
data.disable_existing_agents boolean Optional

Full JSON Schema

Full JSON Schema

Example input

{
  "path": {
    "space_id": "00000000-0000-0000-0000-000000000001"
  },
  "data": {
    "policy": "all_workspace_members"
  }
}

At most 1 provider requests per invocation; timeout: 30 seconds.

Update credit limit for an agent in a space — notion-admin.api.update-agent-credit-limit

Run Update credit limit for an agent in a space with Notion Admin. This command can change provider data. Review the target and input before invoking it.

This operation can change provider data. Review the input before allowing an agent to call it.

Connect and use

Parameters

Requiredness is local to the containing object. A required child is required only when its parent object or array item is provided. Alternative schemas are identified in the Constraints column; the linked full JSON Schema is authoritative.

Parameter Type Required in parent Description Constraints
path object Required additionalProperties: false
path.agent_id string Required minLength: 1; maxLength: 2000
path.space_id string Required minLength: 1; maxLength: 2000
data object Required maxProperties: 100
data.credit_limit — Required
data.credit_limit number Required oneOf[1]
data.credit_limit null Required oneOf[2]

Full JSON Schema

Full JSON Schema

Example input

{
  "path": {
    "agent_id": "00000000-0000-0000-0000-000000000001",
    "space_id": "00000000-0000-0000-0000-000000000001"
  },
  "data": {
    "credit_limit": 0
  }
}

At most 1 provider requests per invocation; timeout: 30 seconds.

Update a custom agent's sharing permissions — notion-admin.api.update-agent-permissions

Run Update a custom agent's sharing permissions with Notion Admin. This command can change provider data. Review the target and input before invoking it.

This operation can change provider data. Review the input before allowing an agent to call it.

Connect and use

Parameters

Requiredness is local to the containing object. A required child is required only when its parent object or array item is provided. Alternative schemas are identified in the Constraints column; the linked full JSON Schema is authoritative.

Parameter Type Required in parent Description Constraints
path object Required additionalProperties: false
path.agent_id string Required minLength: 1; maxLength: 2000
path.space_id string Required minLength: 1; maxLength: 2000
data object Required maxProperties: 100; additionalProperties: false
data.set array Optional maxItems: 100
data.set[] object Optional maxProperties: 100; additionalProperties: false
data.set[].principal — Required
data.set[].principal object Required oneOf[1]; maxProperties: 100; additionalProperties: false
data.set[].principal.group_id string Required oneOf[1]; maxLength: 64000
data.set[].principal.type string Required oneOf[1]; const: "group"; maxLength: 64000
data.set[].principal object Required oneOf[2]; maxProperties: 100; additionalProperties: false
data.set[].principal.type string Required oneOf[2]; const: "user"; maxLength: 64000
data.set[].principal.user_id string Required oneOf[2]; maxLength: 64000
data.set[].principal object Required oneOf[3]; maxProperties: 100; additionalProperties: false
data.set[].principal.type string Required oneOf[3]; const: "workspace"; maxLength: 64000
data.set[].role string Required enum: ["edit","full_access","view_and_interact"]; maxLength: 64000
data.remove array Optional maxItems: 100
data.remove[] — Optional
data.remove[] object Optional oneOf[1]; maxProperties: 100; additionalProperties: false
data.remove[].group_id string Required oneOf[1]; maxLength: 64000
data.remove[].type string Required oneOf[1]; const: "group"; maxLength: 64000
data.remove[] object Optional oneOf[2]; maxProperties: 100; additionalProperties: false
data.remove[].type string Required oneOf[2]; const: "user"; maxLength: 64000
data.remove[].user_id string Required oneOf[2]; maxLength: 64000
data.remove[] object Optional oneOf[3]; maxProperties: 100; additionalProperties: false
data.remove[].type string Required oneOf[3]; const: "workspace"; maxLength: 64000

Full JSON Schema

Full JSON Schema

Example input

{
  "path": {
    "agent_id": "00000000-0000-0000-0000-000000000001",
    "space_id": "00000000-0000-0000-0000-000000000001"
  },
  "data": {}
}

At most 1 provider requests per invocation; timeout: 30 seconds.

Disable or re-enable an agent in a space — notion-admin.api.update-agent-status

Run Disable or re-enable an agent in a space with Notion Admin. This command can change provider data. Review the target and input before invoking it.

This operation can change provider data. Review the input before allowing an agent to call it.

Connect and use

Parameters

Requiredness is local to the containing object. A required child is required only when its parent object or array item is provided. Alternative schemas are identified in the Constraints column; the linked full JSON Schema is authoritative.

Parameter Type Required in parent Description Constraints
path object Required additionalProperties: false
path.agent_id string Required minLength: 1; maxLength: 2000
path.space_id string Required minLength: 1; maxLength: 2000
data object Required maxProperties: 100
data.admin_status string Required enum: ["active","disabled"]; maxLength: 64000

Full JSON Schema

Full JSON Schema

Example input

{
  "path": {
    "agent_id": "00000000-0000-0000-0000-000000000001",
    "space_id": "00000000-0000-0000-0000-000000000001"
  },
  "data": {
    "admin_status": "active"
  }
}

At most 1 provider requests per invocation; timeout: 30 seconds.

Deny or restore enterprise-managed MCP client access — notion-admin.api.update-mcp-client-connection-enterprise-managed-access

Run Deny or restore enterprise-managed MCP client access with Notion Admin. This command can change provider data. Review the target and input before invoking it.

This operation can change provider data. Review the input before allowing an agent to call it.

Connect and use

Parameters

Requiredness is local to the containing object. A required child is required only when its parent object or array item is provided. Alternative schemas are identified in the Constraints column; the linked full JSON Schema is authoritative.

Parameter Type Required in parent Description Constraints
data object Required maxProperties: 100
data.access string Required enum: ["allowed","denied"]; maxLength: 64000
data.user_id string Required maxLength: 64000
data.workspace_id string Required maxLength: 64000

Full JSON Schema

Full JSON Schema

Example input

{
  "data": {
    "access": "allowed",
    "user_id": "fixture",
    "workspace_id": "fixture"
  }
}

At most 1 provider requests per invocation; timeout: 30 seconds.

Update a group — notion-admin.api.update-permission-group

Run Update a group with Notion Admin. This command can change provider data. Review the target and input before invoking it.

This operation can change provider data. Review the input before allowing an agent to call it.

Connect and use

Parameters

Requiredness is local to the containing object. A required child is required only when its parent object or array item is provided. Alternative schemas are identified in the Constraints column; the linked full JSON Schema is authoritative.

Parameter Type Required in parent Description Constraints
path object Required additionalProperties: false
path.group_id string Required minLength: 1; maxLength: 2000
path.space_id string Required minLength: 1; maxLength: 2000
data object Required maxProperties: 100
data.name string Required minLength: 1; maxLength: 200; pattern: "\\S"

Full JSON Schema

Full JSON Schema

Example input

{
  "path": {
    "group_id": "00000000-0000-0000-0000-000000000001",
    "space_id": "00000000-0000-0000-0000-000000000001"
  },
  "data": {
    "name": "fixture"
  }
}

At most 1 provider requests per invocation; timeout: 30 seconds.

Update a group member — notion-admin.api.update-permission-group-member

Run Update a group member with Notion Admin. This command can change provider data. Review the target and input before invoking it.

This operation can change provider data. Review the input before allowing an agent to call it.

Connect and use

Parameters

Requiredness is local to the containing object. A required child is required only when its parent object or array item is provided. Alternative schemas are identified in the Constraints column; the linked full JSON Schema is authoritative.

Parameter Type Required in parent Description Constraints
path object Required additionalProperties: false
path.group_id string Required minLength: 1; maxLength: 2000
path.user_id string Required minLength: 1; maxLength: 2000
path.space_id string Required minLength: 1; maxLength: 2000
data object Required maxProperties: 100
data.role string Required enum: ["owner","member"]; maxLength: 64000

Full JSON Schema

Full JSON Schema

Example input

{
  "path": {
    "group_id": "00000000-0000-0000-0000-000000000001",
    "user_id": "00000000-0000-0000-0000-000000000001",
    "space_id": "00000000-0000-0000-0000-000000000001"
  },
  "data": {
    "role": "owner"
  }
}

At most 1 provider requests per invocation; timeout: 30 seconds.

Update the default agent credit limit for a workspace — notion-admin.api.update-workspace-credit-limit

Run Update the default agent credit limit for a workspace with Notion Admin. This command can change provider data. Review the target and input before invoking it.

This operation can change provider data. Review the input before allowing an agent to call it.

Connect and use

Parameters

Requiredness is local to the containing object. A required child is required only when its parent object or array item is provided. Alternative schemas are identified in the Constraints column; the linked full JSON Schema is authoritative.

Parameter Type Required in parent Description Constraints
path object Required additionalProperties: false
path.space_id string Required minLength: 1; maxLength: 2000
data object Required maxProperties: 100
data.default_agent_credit_limit — Required
data.default_agent_credit_limit number Required oneOf[1]
data.default_agent_credit_limit null Required oneOf[2]

Full JSON Schema

Full JSON Schema

Example input

{
  "path": {
    "space_id": "00000000-0000-0000-0000-000000000001"
  },
  "data": {
    "default_agent_credit_limit": 0
  }
}

At most 1 provider requests per invocation; timeout: 30 seconds.

Errors

Check the key's expiry, revocation, workspace and allowed operations.

Reuse the same idempotency key only for the same request.

The connection or provider limit has been reached. Check the receipt before retrying.

Test the connection

Open the integration's commands below to inspect parameters and examples. Start with a read command for an account or resource you can access. Refresh your client's tool list, use the returned tool name, and check the execution result and usage. Provider charges and permissions still apply. Never test a write against production data without reviewing it.

Official provider documentation

Source: https://help.tooluse.net/integrations/notion-admin/index.mdx