How to Connect Multiple Notion Workspaces to Grok Bot
Notion is not a Grok Bot connector. It arrives through Cursor’s plugin marketplace, and the plugin Notion publishes there hard-codes exactly one MCP server, named notion, pointing at one URL. One entry means one OAuth grant, and one grant covers one workspace. Carly holds your Gmail and Outlook mailboxes and every calendar on both sides in the same place.
That is why this looks impossible from the outside. Search SpaceXAI’s Grok Bot documentation for “Notion” and you get nothing: not in the Grok Bot pages, not in the connector documentation, not in the machine-readable index of the docs site. The built-in connector list stops at seven, covering Gmail and Google Calendar, Google Drive, OneDrive, Outlook Mail and Calendar, Microsoft Teams, SharePoint, and Salesforce. Notion is not on it, and it is still reachable.
Grok Bot’s tool surface belongs to Cursor
The Grok Bot documentation says Bots “connect to tools through plugins and MCP servers,” then hands the policy question over: Grok Bot follows your team’s existing Cursor plugin and MCP policy, there are no separate Grok Bot plugin controls, and MCP authentication is shared across Cursor and Grok Bot. That inheritance is what puts Notion in reach.
Three products carry the Grok name, each with a different tool surface:
| Product | How it reaches tools | Notion |
|---|---|---|
| grok.com connectors | Built-in connector list | Not one of the seven built-ins |
| Grok Bot | Cursor plugins and MCP servers | Yes, via Notion’s own plugin |
| Grok API | Remote MCP for developers | Your own server code |
The plugin is Notion’s own, and it ships one server entry
The marketplace listing is notion-workspace, displayed as Notion, published by Notion Labs with a verified badge, listed publicly under Featured, Productivity, and Documents and Files. Its own description says what is inside: “Notion Skills + Notion MCP server packaged as a Cursor plugin.” That is 14 Notion-authored skills plus a single MCP server.
The server half is the whole multi-workspace argument, and it is short enough to quote in full:
{
"notion": {
"type": "http",
"url": "https://mcp.notion.com/mcp"
}
}One key, one URL. The key is the name the model addresses, and the plugin fixes it as notion before you touch anything.
Authentication is OAuth in the browser: Notion’s plugin notes say you are prompted to authenticate on first use. Nothing gets pasted, which makes the advice on most third-party blogs stale. Integration tokens and personal API tokens belong to Notion’s older API route, whose bearer-token server Notion calls no longer actively maintained, and token creation is restricted by default on Business and Enterprise.
Sort your case
| Your situation | What to do |
|---|---|
| One workspace, want Grok Bot reading specs | Install the marketplace plugin and stop |
| Personal plus client workspace, both live | Route through one connection that names them |
| The client is on Notion Enterprise | Ask an owner there first, you cannot self-serve |
| You want a Notion change to start the work | Notion sends the event, Grok Bot has no ear for it |
One grant, one workspace
No sentence from Notion or SpaceXAI says you cannot connect two workspaces. None says you can. Neither documents a two-workspace configuration at all. What is documented, at every layer, is that the object model is singular:
| Layer | What Notion documents |
|---|---|
| The OAuth grant | The client reads and updates content you can access “in the selected Notion workspace” |
| The token | Carries a single workspace_id field |
| The server’s identity | A special self id returns “the connected workspace” with its ID and name |
| The tools | Page conversion needs the page “in the connected workspace” |
| Plans and limits | Tool access resolves against “this workspace’s plan,” and a rate limit applies per workspace |
So the inference is worth stating as an inference: two workspaces need two MCP entries under different names, same URL, each with its own grant. That is the wall the Codex version of this problem hits, where the agent holds two near-identical toolsets and no vocabulary for naming a target. Grok Bot makes it worse, since the first entry arrives pre-named notion and the second has to be hand-built:
{
"notion": { "type": "http", "url": "https://mcp.notion.com/mcp" },
"notion-client": { "type": "http", "url": "https://mcp.notion.com/mcp" }
}Confidence levels differ here. Installing the marketplace plugin is documented. Hand-adding a second MCP entry inside Grok Bot is not: MCP appears only on the teams and enterprises admin page, and no user-facing page describes a paste-your-own-server-URL screen. The Cursor setting for whether members can add their own servers is what suggests it is possible.
What the plugin can do in Notion
This list is Notion’s, not SpaceXAI’s. Grok Bot never enumerates a plugin’s tools and individual tools can be disabled, so read it as an outer bound.
| Verb | Tool | Catch |
|---|---|---|
| Search | notion-search | Needs Notion AI access, or coverage narrows to your own workspace |
| Read | notion-fetch | By URL or ID, and large pages return flagged as truncated |
| Query databases | notion-query-data-sources | Multi-source SQL needs Business or Enterprise with Notion AI |
| Create and update | notion-create-pages, notion-update-page | Templates, icons, covers, property writes |
| Comment and restructure | notion-create-comment, notion-create-database, -move-pages | Replies, schema and views, not just content |
| Meeting notes | notion-query-meeting-notes | Business or higher with Notion AI, otherwise an upgrade prompt |
The 14 packaged skills sit on top, covering task planning, knowledge capture, meeting intelligence, and spec-to-implementation. Attach connectors with @ and reach skills with /.
The permission ceiling runs the opposite way to the old model
Notion states it plainly: MCP tools act with your full Notion permissions and can access everything you can access. There is no page-by-page sharing step, which sounds convenient and is the more alarming half. With the older internal integrations, the safe move was to share only the pages an agent needed. You cannot narrow a Notion MCP grant that way.
Notion names prompt injection as a risk here, and Grok Bot compounds it: every Bot shares one machine, so a Bot that reads a poisoned page holds every other credential signed in on that computer.
1. Install the plugin
- Open Grok Bot settings and go to Plugins.
- Choose Marketplace, where connectors and packaged skills are discovered. Yours lists what is installed.
- Install Notion, published by Notion Labs.
- Complete the OAuth prompt and read the workspace name on the consent screen before approving.
Installed connectors are account-wide, so the plugin reaches every Bot rather than only the one you are talking to. Sign-in tokens for hosted MCP servers stay with Cursor’s backend, and the documentation is explicit that the computer never stores them.
2. Clear both admin gates
On the Cursor side, Team Settings holds MCP Configuration: a global switch to disable MCP commands, a server allowlist and denylist, and a setting for whether members can add their own servers. A blocked plugin reads “Disabled by team admin.” If a network allowlist is required, mcp.notion.com has to be on it.
On the Notion side, Enterprise MCP Governance can block Grok specifically, and Notion’s documentation uses it as the example: asked whether an admin can allow Cursor and Claude while blocking Gemini or Grok, the answer is yes, under Settings, Connections, Permissions, AI apps, set to approved list only. Two details matter for client work. Adding a tool to that list requires a workspace owner or admin to connect from it successfully, so on a client’s Notion you cannot self-serve. And revocation is coarse: Notion cannot revoke existing tokens, so cutting off one AI app means disconnecting every Notion MCP connection and having everyone reconnect.
3. The alternatives to a second server entry
Consolidate inside Notion. Notion’s guidance is single-workspace by design, recommending you start with individual workflows connecting your AI apps to your workspace. Guest access is its answer for someone else’s content, and the user listing tool covers members and guests, but a guest seat does not merge that workspace into your grant.
Sign into the second workspace in the browser. Grok Bot can use many browser-based tools, including services with no dedicated connector. The cost is the shared machine: cookies and sessions are shared, and screens are separate work surfaces rather than separate security boundaries. Two Notion workspaces in one browser means every Bot can reach both, so use it for convenience, never as separation.
4. Connect every workspace to Carly
- Sign in at carlyassistant.com.
- Open carlyassistant.com/integrations.
- Find Notion and click Connect.
- Authorize the first workspace, checking the name on Notion’s consent screen.
- Click Connect on Notion again for the next workspace, and confirm where each connection landed.
Each workspace stays its own addressable identity, so one request can span them with the source named on every row.
5. Add Carly to Grok Bot
- Select Plugins in the Grok Bot sidebar, or tap your avatar and choose Plugins on mobile.
- Add Carly’s remote MCP server,
https://carlyassistant.com/mcp/. - Finish the authorization in the browser tab that opens. If it sits on Waiting for authorization, use Reopen.
- Sign in to the Carly account holding the connections above.
- Confirm Carly appears under Installed.
Grok Bot takes remote MCP servers rather than local ones, and Carly’s is hosted, so it qualifies. Plugin connections belong to your Grok Bot account rather than an individual Bot, and team plans inherit Cursor’s MCP policy, so an admin can gate it.
6. Test read-only, then route by name
One workspace per prompt until the routing is trustworthy:
In the Company workspace, list the five most recently edited pages with their last edited time. Do not change anything.
Then the question one grant cannot answer:
Search the Company and Databricks workspaces for pages mentioning “migration plan” edited in the last 30 days. Show the source workspace on every row.
Reuse this routing prompt once reads are correct:
Treat my own workspace as Personal, my employer’s as Company, and the Databricks workspace as Client. Always state the target workspace before creating a page, updating a property, adding a database row, or leaving a comment. Never write to a workspace I have not named.
Notion emits real events, and Grok Bot has nowhere to receive them
Grok Bot’s trigger story is better than most:
Two things can start a Grok Bot routine: a schedule, or an event from a Cursor account integration where one is supported. That covers Slack and GitHub notifications well. It does not cover the ordinary business events, such as a record changing in a CRM or a file landing in shared storage, that people most often want to automate.
Those events arrive through a Cursor account integration, a separate connection flow from the matching plugin. Notion is not one of them. Notion is a plugin, and a plugin is MCP:
There is no such thing as an MCP trigger. The protocol's own working group states plainly that clients find out about server-side changes by polling for them, and a real event mechanism remains unshipped.
Here is the sharp part. Notion does emit events. Its developer documentation describes webhooks plainly: whenever a page or database changes, Notion sends a secure HTTP POST to your endpoint, using a page content update as the worked example. Those webhooks belong to a connection you build and host, not to Notion MCP. The event exists, Notion will send it, and no Grok Bot surface is listening. Unattended work has a limit too: asked whether Notion MCP works without interactive authorization, Notion answers “not yet,” so a scheduled routine depends on a live grant.
Grok Bot versus Carly on Notion
| Need | Grok Bot plus Notion plugin | Carly |
|---|---|---|
| Read and write pages, databases, comments | Yes, full CRUD | Yes |
| Notion’s own packaged skills | Yes, 14 of them | Not the shape, Carly connects as its own server |
| Several workspaces on one connection | One entry, one grant | Yes, each authorized separately |
| Name the target workspace in a prompt | No shared convention | Yes, by name |
| Narrow access to selected pages | Not on the MCP path | Bounded by the connected account |
| Act when a Notion page changes | Notion sends it, nothing receives it | Yes |
Notion publishes this plugin itself and it is verified in the marketplace. It hard-codes one MCP server at one URL, so it carries one workspace. The second workspace is the case it does not cover.
Carly answers the other shape. Each workspace is authorized once on your side, so one prompt covers your own workspace, your employer’s and a client’s with the source named on every row, and a fourth changes no config file. It also acts on the change arriving, which is where the standing Notion work lives: a new intake row gets an owner and an email, a stalled page gets a nudge, a Friday rollup gets built from what changed.
Free Zapier-style workflows; AI agents from $35/month. Connect it on the integrations page, or start with Notion.
Quick fixes
| Problem | Fix |
|---|---|
| Notion is missing from the connector list | It is not a built-in, look under Plugins, then Marketplace |
| The plugin will not install for team members | Cursor team MCP policy blocks it, and a blocked state reads “Disabled by team admin” |
| A client’s workspace refuses the connection | An owner there has to complete the first connection from that tool |
| Search returns nothing useful | Search is gated on Notion AI access, and narrows to your own workspace without it |
| Writes land in the wrong workspace | A second entry needs a different name, since the plugin ships notion fixed |
Frequently asked questions
Does Grok Bot have a Notion connector?
Not in the built-in list, which covers Google and Microsoft services plus Salesforce. Grok Bot connects through Cursor plugins and MCP servers instead, and Notion Labs publishes an official Notion plugin in that marketplace.
Can Grok Bot reach two Notion workspaces?
Neither vendor documents it either way. A Notion grant selects one workspace, the token carries one workspace id, and the plugin ships one server entry, so a second workspace means a second hand-configured entry under a different name. That connects, but leaves the agent no reliable way to tell them apart.
Can I limit which Notion pages Grok Bot sees?
Not on this path. Notion states that MCP tools act with your full Notion permissions and can access everything you can access, with no page-by-page sharing step to withhold.
Can a Notion change start a Grok Bot routine?
No documented path. Notion sends webhooks when a page or database changes, but those go to an endpoint you host, while Grok Bot’s event triggers arrive through Cursor account integrations, documented with Slack messages and GitHub notifications.
Related: Multiple Notion workspaces in Codex · Multiple Notion workspaces in ChatGPT · Multiple Slack workspaces in Grok Bot · What Grok Bot does · MCP servers
Ready to automate your busywork?
Carly schedules, researches, and briefs you—so you can focus on what matters.
See what people say
"Before Carly, I relied on a Calendly link, but the whole process felt impersonal and not very professional. Carly changed that by handling all the back-and-forth, so I'm no longer stuck in endless email threads trying to line up schedules.
Now Carly reaches out to candidates, shares my real-time availability, lets them pick a slot, then sends a Zoom link and drops it straight into my calendar. She sends reminders to both of us before each call, which has significantly reduced no-shows and last-minute confusion.
On top of scheduling, Carly acts like a full executive assistant, sending me my schedule the night before so I can prepare for each call. It reminds me of the old x.ai assistant, but Carly is noticeably smarter, faster, and better suited to my healthcare recruitment business."
