Scanner

Scanner is a security data lake for logs, and its MCP server gives Notion AI access to the security logs and indexes in your Scanner environment. Ask Notion AI to run queries against your logs, refine the results, and investigate suspicious activity during alert triage or threat hunting without leaving Notion.

With Notion Agent

1. Select Get connection on this page.
2. Enter your Scanner API key and approve access. You'll be asked for your Scanner URL.
3. Ask Notion AI to use Scanner by name.

Try asking:

• "Search Scanner for failed logins in the last 24 hours"
• "Show which log indexes are available in Scanner"
• "Find all activity from this IP address in Scanner"

With Custom Agents

1. Open your agent's Settings → Tools & Access and select Add connection.
2. Choose Scanner, enter your Scanner API key, and pick the tools the agent can use. You'll be asked for your Scanner URL.
3. Select Connect. Each agent has its own connection.

MCP connections are available on Business and Enterprise plans, on web and desktop.