Read, search, export, create, update, monitor, query, inspect, batch-edit, and explicitly archive Notion pages and databases. Use when the user requests Notion content or database operations and a host secret manager can supply NOTION_API_KEY.
Replace the global unsafe-path bypass with exact canonical read/write path authorizations, preventing sibling, child, symlink, and cross-mode access.