← Back to Skills Marketplace
Notion
by
Otman Heddouch
· GitHub ↗
· v1.0.0
· MIT-0
89
Downloads
0
Stars
0
Active Installs
1
Versions
Install in OpenClaw
/install notion-maton
Description
Access and manage Notion workspaces via OAuth to search pages, create and update databases, pages, blocks, and retrieve user info.
Usage Guidance
This skill routes Notion API calls through a third party (maton.ai). Before installing, verify maton.ai's identity and trustworthiness — read its privacy/security docs and confirm where and how it stores OAuth tokens. The SKILL.md requires you to set MATON_API_KEY, but the registry metadata does not declare this credential; ask the publisher to correct the metadata (declare MATON_API_KEY as primaryEnv) and to provide a homepage and privacy policy. If you must proceed, prefer using a separate Notion account with limited data, or create a Notion integration with narrowly scoped permissions. Consider using an official Notion integration or a skill that talks directly to api.notion.com instead of a proxy service.
Capability Analysis
Type: OpenClaw Skill
Name: notion-maton
Version: 1.0.0
The skill routes all Notion API traffic and OAuth authentication through a third-party gateway (gateway.maton.ai and ctrl.maton.ai). This architecture functions as a man-in-the-middle by design, allowing the external service to intercept sensitive workspace data and manage user access tokens. While this is presented as a 'managed' authentication feature in SKILL.md, the reliance on an unverified third-party proxy for sensitive API interactions represents a significant security risk.
Capability Tags
Capability Assessment
Purpose & Capability
The skill claims to access Notion via OAuth, but all runtime examples and the gateway described use a third‑party service (maton.ai) and an API key (MATON_API_KEY). The registry metadata lists no required env vars or primary credential even though the SKILL.md explicitly tells users to export MATON_API_KEY. Requiring an API key for a proxy service is coherent only if the skill is transparently a Maton proxy; the metadata does not reflect that.
Instruction Scope
SKILL.md instructs the agent (and user) to: set MATON_API_KEY, call gateway.maton.ai and ctrl.maton.ai endpoints, create/manage OAuth connections via ctrl.maton.ai, and open returned OAuth URLs in a browser. These instructions send Notion data and OAuth flows through maton.ai rather than directly to api.notion.com. The instructions do not request unrelated filesystem or system access, but they do direct sensitive credentials and workspace data to a third party.
Install Mechanism
This is an instruction‑only skill with no install spec and no code files, so nothing is written to disk by the skill package itself. That reduces one class of risk.
Credentials
The SKILL.md requires an environment variable named MATON_API_KEY (used as Authorization: Bearer $MATON_API_KEY), but the skill metadata declares no required env vars or primary credential. Asking for an API key that grants proxy access to a user's Notion workspace is a high‑impact secret — its absence from the declared requirements is a notable inconsistency. The MATON key likely grants broad access to workspace contents via maton.ai's OAuth connections.
Persistence & Privilege
The skill does not request always:true or any system config paths; autonomous invocation is allowed (platform default) but the skill does not request elevated persistence or system modifications.
How to Use
- Make sure OpenClaw is installed (local or Docker)
- Run the install command in chat:
/install notion-maton - After installation, invoke the skill by name or use
/notion-maton - Provide required inputs per the skill's parameter spec and get structured output
Version History
v1.0.0
Initial release of notion-maton, offering managed OAuth Notion API access via Maton.
- Securely access the Notion API using Maton-managed OAuth connections.
- Perform key operations: search, query databases and data sources, manage pages and blocks.
- Supports API key authentication and simple connection management.
- Includes cURL examples for searching, data source/database operations, page/block management, and user endpoints.
- Full troubleshooting and error handling guidance provided for easy setup.
Metadata
Frequently Asked Questions
What is Notion?
Access and manage Notion workspaces via OAuth to search pages, create and update databases, pages, blocks, and retrieve user info. It is an AI Agent Skill for Claude Code / OpenClaw, with 89 downloads so far.
How do I install Notion?
Run "/install notion-maton" in the OpenClaw or Claude Code chat to install it in one step — no extra setup required.
Is Notion free?
Yes, Notion is completely free, licensed under MIT-0. You can download, install and use it at no cost.
Which platforms does Notion support?
Notion is cross-platform and runs anywhere OpenClaw / Claude Code is available (cross-platform).
Who created Notion?
It is built and maintained by Otman Heddouch (@otman-ai); the current version is v1.0.0.
More Skills