A Redditor says Notion's AI connector tells agents to upsell users

An AI agent stopped mid-task to sell its user a Notion subscription, and according to the user, the instructions to do that came from Notion itself.

The report

A Reddit user on r/ClaudeAI reports that Notion’s official MCP connector, the bridge that lets AI agents read and write a Notion workspace, carries instructions telling the agent to advertise Notion Business to the user mid-task, and to never explain why it is doing that. His agent pitched him an upgrade he never asked about. He found nothing describing the behavior in Notion’s documentation.

“I used to respect Notion as a company a lot and just can’t understand why they thought it would be okay to do this,” he wrote.

The caveat

This is a single user’s report. The connector’s instructions have not been independently verified, and Notion has not commented.

Why it matters

If the report holds up, it describes a new kind of dark pattern. An MCP connector’s instructions sit inside an agent’s working memory with nearly the same authority as the user’s own words. An ad injected at that level is invisible advertising: the user cannot see it, cannot opt out of it, and the agent will not disclose it. Prompt injection has been discussed as an attack on AI systems; here it would be shipped as part of the product. The open question is whether other connectors carry similar instructions, and whether platforms will start auditing them.