{"article":{"id":57137620216219,"url":"https://notta.zendesk.com/api/v2/help_center/en-us/articles/57137620216219.json","html_url":"https://support.notta.ai/hc/en-us/articles/57137620216219-Notta-Remote-MCP-Integration-Guide","author_id":8818684879515,"comments_disabled":true,"draft":false,"promoted":false,"position":9,"vote_sum":0,"vote_count":0,"upvote_count":0,"downvote_count":0,"section_id":33707959266971,"created_at":"2026-10-13T11:32:05Z","updated_at":"2026-11-11T03:59:24Z","name":"Notta Remote MCP — Integration Guide","title":"Notta Remote MCP — Integration Guide","source_locale":"en-us","locale":"en-us","outdated":false,"outdated_locales":[],"edited_at":"2026-11-11T03:59:24Z","user_segment_id":null,"permission_group_id":1260801533350,"content_tag_ids":[],"label_names":[],"body":"

Connect your MCP-compatible AI client or application directly to Notta’s hosted Remote MCP server. Once you authorize access to your Notta workspace, the client can search meeting records, retrieve completed transcripts and existing summaries, browse folders, export content, and perform permitted record-management actions.

Notta Remote MCP is a cloud-hosted integration accessed over HTTPS using Streamable HTTP and OAuth 2.0. You do not need to download, install, or run a local MCP server or configure a stdio process. This guide explains how developers and technical teams connect an MCP client, authenticate users, and call the available tools.

Connect to Notta Remote MCP

Remote MCP endpoint: https://mcp.notta.io/mcp. Transport: stateless Streamable HTTP over HTTPS (not local stdio). Every /mcp request, including initialization, tool discovery, ping, notifications, and tool calls, requires Authorization: Bearer <access_token>; OPTIONS preflights are exempt. Requests without a Bearer token receive HTTP 401 with a WWW-Authenticate challenge pointing to protected resource metadata.

\n \n \n \n \n \n \n \n \n \n \n \n \n \n \n \n \n \n \n \n \n \n \n \n \n \n \n \n \n \n \n \n \n \n \n \n \n
EndpointURL
MCP / resource / issuer\n https://mcp.notta.io/mcp\n
Protected resource metadata\n https://mcp.notta.io/.well-known/oauth-protected-resource/mcp\n
Authorization server metadata\n https://mcp.notta.io/.well-known/oauth-authorization-server/mcp\n
Authorization\n https://mcp.notta.io/mcp/oauth/authorize\n
Token\n https://mcp.notta.io/mcp/oauth/token\n
Revocation\n https://mcp.notta.io/mcp/oauth/revoke\n
\n \n \n \n \n \n \n \n \n \n \n \n \n \n \n \n \n \n \n \n \n \n \n \n \n \n \n \n \n
OAuth settingValue
public client ID\n c_j7uksddnma8z61b7\n
FlowAuthorization Code with PKCE S256
Token / revocation client authentication\n none or client_secret_post; the\n public client above does not require client_secret.\n
Scopes\n Controlled by Notta authorization; MCP metadata does not\n publish scope names.\n

For the public OAuth client listed above, select token endpoint authentication method none and omit client_secret. This public client ID is an OAuth client identifier, not a secret or a Notta user access token.

To authorize a remote MCP client, open the authorization endpoint in the user’s browser (GET). It redirects (HTTP 302) to the Notta sign-in and consent flow, preserving the authorization request parameters.

Use the same actual redirect_uri in the authorization request and authorization-code exchange. The URI must be absolute and must not contain whitespace, embedded credentials, or a fragment; HTTP callbacks are restricted to loopback addresses.

    \n
  1. Open the authorization endpoint with response_type=code, client_id, redirect_uri, state, code_challenge, and code_challenge_method=S256. Validate state on callback.
    2. \n
  2. Exchange the code using the form below. Retain the returned tokens and refresh them when needed; revoke on disconnect.
    3. \n
  3. Initialize the MCP connection, send notifications/initialized, then use tools/list and tools/call. Send Content-Type: application/json, Accept: application/json, text/event-stream, and the negotiated MCP-Protocol-Version on subsequent requests.
    4. \n

Token and revocation endpoints accept POST forms with Content-Type: application/x-www-form-urlencoded:

\n \n \n \n \n \n \n \n \n \n \n \n \n \n \n \n \n \n \n \n \n \n \n \n \n \n \n \n \n \n
OperationRequired fieldsOptional fields
Code exchange\n grant_type=authorization_code, client_id,\n code, code_verifier,\n redirect_uri\n \n resource, client_secret\n
Refresh\n grant_type=refresh_token, client_id,\n refresh_token\n \n resource, scope,\n client_secret\n
Revoke\n client_id, token\n \n client_secret; token_type_hint:\n access_token or refresh_token\n

client_secret is an optional form field of up to 128 characters. When supplied, it is forwarded unchanged to Notta. The client's registration determines whether it is required and how it is validated.

If supplied, resource must equal https://mcp.notta.io/mcp. Token responses contain access_token, refresh_token, token_type, expires_in (seconds), workspace_id, and optional scope. Revocation succeeds with HTTP 200 and {}.

Available Remote MCP tools

The following tools are exposed by Notta Remote MCP to an authenticated client. All operations are constrained by the connected Notta account’s workspace permissions. Required arguments appear first; optional arguments follow “optional”. Outputs summarize key fields within data. The integration does not grant a client permissions beyond those the account has in Notta.

\n \n \n \n \n \n \n \n \n \n \n \n \n \n \n \n \n \n \n \n \n \n \n \n \n \n \n \n \n \n \n \n \n \n \n \n \n \n \n \n \n \n \n \n \n \n \n \n \n \n \n \n \n \n \n \n \n \n \n \n \n \n \n \n \n \n \n \n \n \n \n \n \n \n \n \n \n \n \n \n \n \n \n \n \n \n \n \n \n \n \n \n \n \n \n \n \n \n \n \n \n
ToolClassArgumentsOutput, permission or effect
\n auth_user_info\n Read\n {}\n \n Account uid and nickname.\n
\n record_list\n Read\n Optional folder_id, cursor,\n page_size\n \n Visible record_list, page_size,\n next_cursor. Omit folder for all visible folders;\n \"0\" selects root.\n
\n record_search\n Read\n keyword; optional cursor,\n page_size\n \n Indexed name/transcript matches with record_id,\n record_name, next_cursor. An unavailable\n index can yield no matches.\n
\n record_status\n Read\n record_id\n Transcription status.
\n record_view\n Read\n record_id\n \n Transcript content: text,\n attr.speaker_name, attr.start_time,\n attr.stop_time (seconds). speaker_name\n is the speaker display name, or an empty string when unavailable.\n Requires completed transcription.\n
\n record_access\n Read\n record_ids\n \n access_result: sharing settings for records\n the user can manage. Omitted records may still be readable.\n
\n folder_list\n Read\n Optional folder_id, cursor,\n page_size\n \n folder_list with IDs, names and parent IDs;\n page_size, next_cursor. Omit parent\n for visible folders; \"0\" selects root; other\n IDs select children.\n
\n summary_batch\n Read\n record_ids\n \n summary_result: record_id and Markdown\n result. Reads existing summaries; empty means none available.\n
\n export_status\n Read\n task_id\n \n Task status; Success can include\n download_url, download_url_expire_time,\n file_name.\n
\n export_status_list\n Read\n Optional page_size, cursor,\n status\n \n User's workspace exports: task_list with\n task_id, record_id, status;\n next_cursor.\n
\n record_trash\n Write\n record_id\n \n Moves the record to trash; requires trash permission. Reversible\n with record_restore.\n
\n record_restore\n Write\n record_id; optional folder_id\n \n Restores the record; requires restore/destination permissions.\n Omitted folder or \"0\" restores to root.\n
\n export_create\n Write\n record_id, file_type; optional\n export_options, extra_info\n \n Creates an export task and returns task_id;\n requires export permission.\n
\n record_delete\n \n Sensitive write\n \n record_id, confirm: true\n \n Permanently deletes an already-trashed record; requires deletion\n permission. Irreversible.\n

Arguments: IDs are strings; folder_id is decimal. keyword is a nonempty string. record_access.record_ids must contain 1–10 unique nonempty IDs after empty strings and exact duplicates are removed. summary_batch.record_ids accepts 1–10 nonempty input entries, which may contain comma-separated IDs; duplicates count toward this limit. page_size is an integer from 1–100, default 20. Pass next_cursor unchanged as cursor with the same filters. Omit unused optional fields; unknown fields and null are rejected. Full input schemas are available through tools/list.

Results: Successful tools return {error_code: 0, message: string, data: JSON value} in both structuredContent and JSON-encoded content[].text. Trash, restore and delete return operation results without a guaranteed success field. Check JSON-RPC error and tool isError, not HTTP status alone.

Export arguments

file_type: txt, docx, pdf, srt, excel, or media (original audio/video). For media, omit export_options and extra_info.

All export_options fields are optional numeric 0/1 flags:

\n \n \n \n \n \n \n \n \n \n \n \n \n \n \n \n \n \n \n \n \n \n \n \n \n \n \n \n \n \n \n \n \n
FieldContent included when 1
\n show_time\n Timestamps
\n include_transcription\n Transcript
\n include_notes\n Existing AI summary
\n show_original\n Original-language text
\n show_translation\n Existing translation

Original and translation cannot both be disabled; validation defaults are 1/0. SRT applies these defaults; other omitted settings use Notta defaults. Optional extra_info fields: language (string, e.g. en-US) and timezone (IANA time zone, e.g. Asia/Tokyo).

Status and write handling

Permanent deletion requires explicit user approval for each record before setting confirm: true. Other writes must follow the user's authorized request.

\n \n \n \n \n \n \n \n \n \n \n \n \n \n \n \n \n \n \n \n \n
OperationStatus handling
Transcription\n NotStart / Transcribing: pending.\n Transcribed: ready to read. Failed:\n report failure.\n
Export\n NotStart / Processing: retain\n task_id; recommended polling interval ≥2 seconds.\n Success: use the returned link and expiry.\n Failed / Expired / NotExist:\n stop polling.\n

Export-list status accepts the export states above except NotExist. Lists may be stale; use export_status for current status or a refreshed signed link. After a write timeout, check the record or task before retrying. Repeating export_create can create duplicate tasks; failed calls are not automatically retried.

Errors

Tool failures set isError: true; content[].text may contain error_code, message, and data with request_id, required_scope, or retry_after (seconds). Validation errors may be plain text. OAuth errors use error and error_description.

\n \n \n \n \n \n \n \n \n \n \n \n \n \n \n \n \n \n \n \n \n \n \n \n \n \n \n \n \n
HTTP statusAction
\n 400 / 404 / 405 /\n 413 / 415\n \n Correct the parameters, route, method, body size or content\n type.\n
\n 401 / 403\n Refresh or reconnect, or resolve missing scope/access.
\n 429\n \n Honor Retry-After and back off.\n
\n 500 / 502 / 503 /\n 504\n \n Service failure or timeout; check write outcomes before retrying.\n

Common business codes: 100001 authorization, 100002 scope, 100003 / 120001 rate limit, 100013 parameters, 110002 incomplete transcription, 130001–130003 record/folder access or existence. Preserve the message and request ID for other errors.

Limits

Rate limits are enforced by the upstream OpenAPI. The size and timeout defaults below may be overridden by deployment settings.

\n \n \n \n \n \n \n \n \n \n \n \n \n \n \n \n \n \n \n \n \n \n \n \n \n
LimitDefault
Request bodyMCP: 64 KiB; OAuth form: 16 KiB, at most 16 parameters
Single upstream response8 MiB; oversized responses fail
Upstream timeout15 seconds per call; a tool request can make multiple calls

Respect Retry-After or tool retry_after when provided. Transcript retrieval has no chunking option.

Remote MCP request examples

These are JSON-RPC request bodies sent to https://mcp.notta.io/mcp after the remote client has completed OAuth authentication and MCP initialization. Replace RECORD_ID and TASK_ID with IDs returned from the authorized workspace. Include the HTTP headers described in “Connect to Notta Remote MCP”. These examples are illustrative; they contain no actual customer meeting data.

Search records

{\n  \"jsonrpc\": \"2.0\",\n  \"id\": 1,\n  \"method\": \"tools/call\",\n  \"params\": {\n    \"name\": \"record_search\",\n    \"arguments\": {\n      \"keyword\": \"project review\",\n      \"page_size\": 20\n    }\n  }\n}

Use a returned record_id with record_status. Call record_view once transcription is Transcribed; use summary_batch to read an existing summary. This workflow does not create a new summary.

Export a record

Run this write only for an export the user has authorized.

{\n  \"jsonrpc\": \"2.0\",\n  \"id\": 2,\n  \"method\": \"tools/call\",\n  \"params\": {\n    \"name\": \"export_create\",\n    \"arguments\": {\n      \"record_id\": \"RECORD_ID\",\n      \"file_type\": \"pdf\"\n    }\n  }\n}

Save the returned task_id, then check its status:

{\n  \"jsonrpc\": \"2.0\",\n  \"id\": 3,\n  \"method\": \"tools/call\",\n  \"params\": {\n    \"name\": \"export_status\",\n    \"arguments\": {\n      \"task_id\": \"TASK_ID\"\n    }\n  }\n}

While the task is pending, wait at least 2 seconds between status checks. On Success, use the returned download link and expiry. Stop polling on Failed, Expired, or NotExist.

Privacy and support for remote clients

Notta Remote MCP returns requested meeting data and time-limited export links to the authenticated third-party MCP client. Review that client’s data-handling practices before authorizing it. See the Notta Privacy Policy, Terms of Service, and Help Center. When contacting support, include the request ID but never include Bearer tokens, refresh tokens, or private meeting content.

"}}