OpenAI Codex security directory

Notion

Published by Notion

High risk

Turns Notion workspace context into plans, research and reusable knowledge. Convert specifications into tasks, synthesize sources and prepare meeting materials. Capture decisions or conversations as structured, linked Notion pages.

Security assessment

Plutonium assessed this plugin for permissions, capabilities, and security-relevant behavior.

  • Skills create and update pages, tasks and database properties: Can create or change persistent records, files, projects, permissions, settings, or credentials.
  • Skills search and fetch private workspace content: Can read private account, workspace, repository, message, analytics, or file data.
  • Hosted MCP stores OAuth authorization: Uses credentials, OAuth grants, API keys, or tokens that may remain valid after the current session.
  • Hosted Notion MCP exposes comment creation: Can send messages, comments, invitations, posts, or published content attributed to the connected user.

Available capabilities

This add-on exposes 4 tools or capabilities.

  • notion-knowledge-capture
  • notion-meeting-intelligence
  • notion-research-documentation
  • notion-spec-to-implementation

The interactive security report will load automatically.