Notion Integration Token

Description

General

• Documentation: https://developers.notion.com/reference/authentication
• Summary: Notion is a project management and note-taking software. Bearer tokens are provided when creating an integration. They can then be used to call the Notion API.

Details for Notion Integration Token

• Family: token

• Category: collaboration_tool

• Company: Notion

• High recall: True

• Validity check available: True

• Analyzer available: True

• Revoker available: True

• On-premise instances exist: False

• Only valid secrets raise an alert: False

• Occurrences found for one million commits: 6.57

• Prefixed: True

Details for Notion Integration Token v2

• Family: token

• Category: collaboration_tool

• Company: Notion

• High recall: True

• Validity check available: True

• Analyzer available: True

• Revoker available: True

• On-premise instances exist: False

• Only valid secrets raise an alert: False

• Occurrences found for one million commits: 16.42

• Prefixed: True

Secret Analyzer

Analysis Method

• Provider allows scopes enumeration: False
• Total network call count: 7
• Total call count may vary: True

HTTP Calls

Requests are designed to capture metadata and not to function effectively.

• GET: https://api.notion.com/v1/comments
• GET: https://api.notion.com/v1/users/me
• GET: https://api.notion.com/v1/users
• GET: https://api.notion.com/v1/views
• PATCH: https://api.notion.com/v1/blocks/*/children
• PATCH: https://api.notion.com/v1/pages/*
• POST: https://api.notion.com/v1/comments

Other Calls

Non-HTTP queries or HTTP calls made through a third-party app (e.g., Python package). No other calls for this analyzer.

Revoker

Auth Credentials

Valid credentials needed to authenticate the request.

• client_id: The OAuth client ID of the Notion public connection that issued the token

• client_secret: The OAuth client secret of the Notion public connection, used to authenticate the revocation

HTTP Calls

List of calls performed by the revoker.

• POST: /v1/oauth/revoke

Revocation Mode

Revocation is synchronous.