Notion's MCP connector secretly prompt-injects agents to upsell Notion Business
JavaSensei24 · reddit · 2026-09-07
A Reddit user discovered that Notion's official MCP connector embeds instructions that make connected AI agents pitch Notion Business plans mid-task — and explicitly tells the model never to explain why. The poster's bot did exactly that even though they never asked about Notion plans, and no documentation of this behavior could be found in Notion's docs. The post frames this as weaponizing prompt injection to turn users' assistants into ad channels, drawing criticism of Notion's transparency.
More from Safety
- Anthropic paper: models can detect when they're being evaluated, weakening safety conclusions — dair_ai · 2026-09-07
- Authors push back as publishers seek share of Anthropic's $1.5B settlement — rohanpaul_ai · 2026-09-07
- Open-source Agent Security Gate checks MCP tool calls in under 5ms — EstablishmentTough18 · 2026-09-07
- AI Policy Figure Pushes Back on EA Critique: AI Execs Can't Dodge Accountability by Calling Tech a Force of Nature — sjgadler · 2026-09-07
- Stanford's Christopher Potts publishes draft rebutting skeptical views of interpretability research — aryaman2020 · 2026-09-07
- OpenAI agent security engineer: alignment window is narrow, community must step up — Scobleizer · 2026-09-07