composiohq--composio/docs/content/toolkits/faq/notion.md

Why do Notion operations show "Composio" instead of the user's name?

Notion attributes actions to the integration itself, not the individual user. The name and logo shown come from the integration configuration. To use a custom name or logo, create your own Notion integration. See Notion integration docs.

How do I grant access to more Notion pages?

Open Notion, go to Settings & Members, then Connections. Select the integration (Composio or your custom integration), click "Select pages" or "Manage access", and add or remove pages as needed.

Does Notion use OAuth scopes?

No. Notion controls access by granting integrations access to specific pages and databases, not through scopes. You don't need to pass scopes when creating an auth config.

How does Notion's access model work?

It depends on the integration type. OAuth apps (public) let users select which pages to share during authorization. Internal integrations (API key) have page access managed in the integration settings.

Reasons for Notion Connection expiry

• The user disconnects the integration from Notion. Notion documents that OAuth-installed public connections appear under Settings -> Connections and can be disconnected from the workspace. If a user removes the Composio-managed or custom Notion app there, the existing token set should be treated as revoked, and the user should reconnect Notion. See Notion's official guide to adding and managing workspace connections.

• The same Notion user connects again through the same Notion app. When a Notion user connects to a Notion app, Notion issues a new access_token and refresh_token pair for that connection. If the same user connects to the same Notion app again, whether it is Composio-managed or custom, Notion can issue a new token pair and invalidate the older refresh_token. The older access_token may continue working for some time, but once it expires, the older connection can no longer refresh and should be treated as expired. To avoid this, keep one active Notion connection per real user for a given Notion app, reuse that existing connection in your product, and avoid asking users to reconnect repeatedly. For production Notion integrations, we strongly recommend using your own Notion app so your users' tokens are isolated to your product. Follow the Notion OAuth setup guide.

How do I set up the Notion webhook ingress endpoint?

With Composio-managed Notion credentials, the webhook ingress endpoint is already provisioned — just create the trigger. If you bring your own Notion OAuth app, the verification flow runs in reverse from Slack's: Notion sends a verification token to the ingress endpoint, and you paste that token back into Notion to finalize.

1. Create the endpoint.

   curl -X POST "https://backend.composio.dev/api/v3.1/webhook_endpoints" \
     -H "x-api-key: <YOUR_COMPOSIO_API_KEY>" \
     -H "Content-Type: application/json" \
     -d '{"toolkit_slug": "notion", "client_id": "<YOUR_NOTION_OAUTH_CLIENT_ID>"}'
   

   Save the returned id and webhook_url.

2. Paste the webhook_url into Notion under your integration's Webhook settings. Notion will POST a verification token to the URL.

3. Read the token from Composio.

   curl "https://backend.composio.dev/api/v3.1/webhook_endpoints/<ENDPOINT_ID>" \
     -H "x-api-key: <YOUR_COMPOSIO_API_KEY>"
   

   The token is in data.webhook_signing_secret.

4. Paste the token back into Notion's verify field to complete setup. Continue with Creating triggers.

---