Notion MCP Cannot Authenticate

Describe the Bug

When attempting to authenticate Notion MCP, I just see an error.

Steps to Reproduce

Add Notion MCP and hit “Authenticate” in Cursor Settings, then hit “Continue” on Notion’s website

Expected Behavior

Actually authenticate and return to Cursor, authenticated

Screenshots / Screen Recordings

Operating System

MacOS

Version Information

Version: 3.15.8
VS Code Extension API: 1.128.0
Commit: b1559d1f7cfd5d3214b8dc0446e28f71fcf172f0
Date: 2026-08-06T06:41:49.549Z
Layout: IDE
Build Type: Stable
Release Track: Nightly
Electron: 40.10.3
Chromium: 144.0.7559.236
Node.js: 24.15.0
V8: 14.4.258.32-electron.0
xterm.js: 6.1.0-beta.291
OS: Darwin arm64 25.3.0

Does this stop you from using Cursor

Sometimes - I can sometimes use Cursor

Hey, thanks for the detailed report and screenshots. Here’s what’s happening: the error page that says Invalid MCP state. Please enable browser cookies and try again. is coming from Notion’s own server mcp.notion.com, after you click Continue. Part of the flow on Cursor’s side worked fine, the consent page, workspace selection, and the redirect to http://localhost:8787/callback (you can see it in the first screenshot). It fails at the Notion step.

What to try, in order:

  1. In Cursor Settings > MCP > Notion, click Sign out or Clear authentication, then Authenticate again. This forces a fresh OAuth state and client registration.
  2. Check that your default browser allows cookies for notion.com and notion.so (Notion stores its state in a cookie). You can also temporarily switch your default browser and try again there.
  3. If the same error happens in different browsers or on different devices, the stuck state is likely on Notion’s side. In that case, contact Notion support and mention Invalid MCP state on mcp.notion.com. Only they can clear it.

Workaround if OAuth won’t work at all: Notion MCP can take a personal access token via the Authorization: Bearer header in a custom MCP config, which fully bypasses OAuth.

Let me know how it goes. If it still fails after re-auth and checking cookies, share an update and we’ll dig deeper.

That worked – definitely did that before so not sure what changed.

Anyway, thanks Dean!