2.5.1 → 2.5.2
patch release, 20 September 2026No tool definition changed.
MCP servers / @notionhq/notion-mcp-server
No tool definition changed across the 6 releases that started, up to 2.5.2.
npm package · npm page · recorded on 24 October 2026 on a clean machine with placeholder settings; only tools/list was sent. A changed description is not a vulnerability. Method and limits.
No tool definition changed.
No tool definition changed.
No tool definition changed.
No tool definition changed.
No tool definition changed.
Releases tried: 2.3.1 (2026-06-17); 2.4.0 (2026-06-17); 2.4.1 (2026-06-22); 2.5.0 (2026-07-24); 2.5.1 (2026-07-25); 2.5.2 (2026-09-20).
The pin is the SHA-256 of the tool's name, description and input schema, as verfy.lock records it. The same pin in your lock means your agent reads this exact definition.
| Tool | Description | Pin |
|---|---|---|
| API-get-user | Notion | Retrieve a user Error Responses: 400: 400 | 3fbfb4bfce3d |
| API-get-users | Notion | List all users Error Responses: 400: 400 | 684bcb9e5dcb |
| API-get-self | Notion | Retrieve your token's bot user Error Responses: 400: Bad request | d8b034dc7234 |
| API-post-search | Notion | Search by title Error Responses: 400: Bad request | 97667005b47d |
| API-get-block-children | Notion | Retrieve block children Error Responses: 400: Bad request | 8696581b6784 |
| API-patch-block-children | Notion | Append block children Error Responses: 400: Bad request | 3ff2af640d7e |
| API-retrieve-a-block | Notion | Retrieve a block Error Responses: 400: Bad request | 954c91fb0520 |
| API-update-a-block | Notion | Update a block Error Responses: 400: Bad request | e49d14b8deb0 |
| API-delete-a-block | Notion | Delete a block Error Responses: 400: Bad request | 89bd389a9c83 |
| API-retrieve-a-page | Notion | Retrieve a page Error Responses: 400: Bad request | d989fef17a77 |
| API-patch-page | Notion | Update page properties Error Responses: 400: Bad request | 1dffe804c363 |
| API-post-page | Notion | Create a page Error Responses: 400: Bad request | fc8c35ba481d |
| API-retrieve-a-page-property | Notion | Retrieve a page property item Error Responses: 400: Bad request | d49b9a09aa72 |
| API-retrieve-a-comment | Notion | Retrieve comments Error Responses: 400: Bad request | 86e8d4d07f25 |
| API-create-a-comment | Notion | Create comment Error Responses: 400: Bad request | ad6b6159990e |
| API-query-data-source | Notion | Query a data source Error Responses: 400: Bad request | 2c502fa9b76e |
| API-retrieve-a-data-source | Notion | Retrieve a data source Error Responses: 400: Bad request | 820189b6b737 |
| API-update-a-data-source | Notion | Update a data source Error Responses: 400: Bad request | fabf28f47acd |
| API-create-a-data-source | Notion | Create a data source Error Responses: 400: Bad request | b4809ea89e10 |
| API-list-data-source-templates | Notion | List templates in a data source Error Responses: 400: Bad request | 3ca0ceca8064 |
| API-retrieve-a-database | Notion | Retrieve a database Error Responses: 400: Bad request | 1ba6e09b7303 |
| API-move-page | Notion | Move a page Error Responses: 400: Bad request | e3cef1709a55 |
| API-retrieve-page-markdown | Notion | Retrieve a page as Markdown Error Responses: 400: Bad request 403: The integration lacks the read/update content capability required for this page. 404: Page not found or not shared with the integration. 429: Rate limited. | b23669ffea12 |
| API-update-page-markdown | Notion | Update a page's content as Markdown Error Responses: 400: Bad request 403: The integration lacks the read/update content capability required for this page. 404: Page not found or not shared with the integration. 409: Conflict (e.g. row limit exceeded). 429: Rate limited. | 43a9e47ee2b6 |
Pin what @notionhq/notion-mcp-server serves you today, commit the lock, and a pull request fails when a tool changes, with the text before and after. Pin the package version in your MCP config as well.
$ pip install verfy
$ verfy lock check --update # shows each tool, then writes verfy.lock
$ git add verfy.lock# .github/workflows/verfy.yml, after actions/checkout
- uses: anvarbekovjavohir277-dot/verfy-action@v1Maintain this server? Run the same check on your releases and add the Locked by Verfy badge to your README.