Skip to content

Notion API Key

Service Name: Notion

Service Description: Notion is an all-in-one workspace application that combines note-taking, knowledge bases, project management, and collaboration tools in a customizable platform.

Service Address: https://www.notion.so

Validation Type: API Auth

IP Allow list: Does not exist

Secret Access Scope: Grants access to Notion workspaces, pages, databases, and other content through the Notion API.

Secret Revokement URL: https://www.notion.so/my-integrations

Secret Example: secret_A1b2C3d4E5f6G7h8I9j0K1l2M3n4O5p6Q7r8S9t0

Suspicious Activity Investigation Instructions:

  • Check Notion workspace audit logs for unauthorized access or changes
  • Review API usage logs for unusual patterns or high volume requests
  • Verify if sensitive content has been accessed or modified
  • Check for new integrations that may have been added without authorization

Mitigation Instructions:

  • Immediately revoke the compromised API key in the Notion integrations dashboard
  • Generate a new API key with appropriate permissions
  • Update all applications and services using the old key
  • Review and adjust integration permissions to follow the principle of least privilege
  • Enable workspace audit logs to monitor future activity