Notion MCP Server

Integration Overview

Notion is a workspace platform used by security teams to maintain runbooks, incident timelines, and internal knowledge bases. With the Notion MCP server, Panther AI can search pages and databases, create new pages, update existing content, and add comments — all from within the Panther AI chat experience.

Admins configure which MCP servers are available to the organization. Each analyst then connects individually via OAuth and controls which tools Panther AI is allowed to use, with the option to require approval before any action is taken.

Use Cases for the Notion MCP Server

• Ask Panther AI to search your Notion knowledge base for context on a threat or attacker technique

• Have Panther AI create an incident page in Notion and populate it with alert details

• Pull up relevant response procedures from a Notion runbook database during triage

• Log investigation notes to an existing Notion page without switching context

Connecting the Notion MCP Server

Navigate to Settings > Panther AI > MCP Servers and select Notion from the catalog. The server URL is pre-configured and Panther handles OAuth registration automatically. During the OAuth flow, you'll select which pages and databases to share with the integration.

For full setup instructions, view the Notion MCP server documentation here.