How installation normally works
What a forward deployed engineer does by hand today.
An OAuth redirect that ends in Notion's own page picker. The customer selects which pages and databases the integration may reach.
IntegrationsNotion
Notion is the destination that breaks the scope model, which is exactly why it is worth having: it proves the deployment unit survives a provider whose permission system is a page picker rather than a scope list.
Your AI, MCP server or API

Their workspace and approved access
Their entitled capabilities and version
Validation, health and the next action
Available today
Ready for customer deployments with customer-scoped authorization, validation and lifecycle management.
What a forward deployed engineer does by hand today.
An OAuth redirect that ends in Notion's own page picker. The customer selects which pages and databases the integration may reach.
The person whose calendar decides your go-live date.
Any workspace member who can add integrations, though what they can share is limited to what they can see.
Whose identity the product acts as, and where that grant lives.
A bearer token for the workspace, issued against HTTP Basic credentials because Notion refuses them in the request body.
The repeatable half, turned into software.
The OAuth exchange, the workspace and bot identity recorded from the token response, per-workspace credential storage, and revocation.
The half that is theirs and should stay theirs.
Their workspace, and the selection itself. Sharing can be withdrawn inside Notion at any time without touching the grant.
How capabilities map onto what the platform will let you do.
There are none in the OAuth sense. What is shown is what the integration will be able to do with whatever the customer picks, in Notion's own words, so the page and the consent screen say the same thing.
What has to execute before anyone is told it works.
A real search. An integration can authorize perfectly and have nothing shared with it, which reads as green everywhere else and returns nothing to every capability. That is reported as a failure with the fix.
Rotation, expiry, revocation, and who notices first.
The token does not expire and cannot be refreshed. Stated as an answer rather than left as a missing renewal path.
What happens to this customer when you ship version four.
Per customer. The API version is pinned by Meetext so an account created next year behaves like one created last year.
What actually goes wrong, named rather than generalised.
The quiet one: somebody removes the integration from the pages it was connected to. No OAuth event fires, the token stays valid, and everything returns nothing. Health checks for it.
How you learn it broke without the customer telling you.
Token validity, and whether the integration still reaches any shared content at all.
Ready for customer deployments with customer-scoped authorization, validation and lifecycle management.
Available for customer deployments, with customer-scoped authorization, validation and lifecycle management.
Connect a source, approve what ships and send your customer an install link. 2 customer environments free. No card required.