52
/ 100
2 days ago
glama

HRJ n8n MCP

Local stdio MCP bridge for managing n8n from HRJ Agent, providing read and write tools for workflows, executions, and Docker status with strong security protections.

Is this your MCP?

Claim it to get a verified publisher badge, a free copy of our full audit findings, and direct contact for any high-priority issues we find.

Install from

M8ven verifies MCPs across every public registry — install directly from whichever one you prefer.

// key findings
⚠️
Tool descriptions don’t match what handlers do
2 tools describe read intent but their handlers mutate — health (line 306: ps = subprocess.run(); container_status (line 655: ps = subprocess.run()
No credential exfiltration, no sensitive file access, no obfuscation
Static analysis found nothing flowing your secrets to unexpected places.
Open source with a license and README
Anyone can audit the code, the license is declared, and the publisher documents what it does.
🔐
You'll be asked for 1 credential: N8N_API_KEY
These are read from process.env at runtime. Make sure you trust where they’ll be sent.
// required environment variables
This server reads these from process.env. You'll be asked to provide them before it can run.
configN8N_MCP_ENV"/absolute/path/to/.config/n8n-mcp/env"
configN8N_BASE_URL
🔐 secretN8N_API_KEYREPLAC...hmod 600 ~/.config/n8n-mcp/env
configN8N_MCP_TIMEOUT30 HTTP request timeout in seconds
configN8N_CONTAINER_NAMEn8n Docker container name for n8n
configN8N_MCP_ALLOW_DOCKER_LOGStrue Enable Docker log features
configN8N_MCP_MAX_RETRIES2 Max retries on transient errors
configN8N_MCP_RETRY_DELAY1.0 Base delay between retries (seconds)
configN8N_MCP_ALLOW_DELETEexport =true
configN8N_MCP_ALLOW_ACTIVATEfalse Enable activate/deactivate (requires human token)
configN8N_MCP_TOKEN_DIR~/.config/n8n-mcp/tokens/ Token directory for human confirmation
configN8N_MCP_TOKEN_TTL120 Token time-to-live in seconds
configN8N_MCP_LOG_DIR~/.config/n8n-mcp/logs/ Audit log directory
// full audit trail
The full breakdown of what we checked, the deductions that landed, the network hosts, the dependency advisories, and concrete fix guidance is available to verified publishers.
// improvement guidance — verified publishers only
We have 7 concrete improvements we can share with the publisher of this MCP. Each comes with specific guidance to raise the trust score.
// embed badge in your README
[![M8ven Score](https://m8ven.ai/badge/mcp/hrjapp-hrj-n8n-mcp-12pxw9)](https://m8ven.ai/mcp/hrjapp-hrj-n8n-mcp-12pxw9)
commit: 9298d43cf449fa4310221c4e000cd65af1cd7fd1
code hash: 0c52240fe98ddcc6fac7572aad23594f59a7346798df601a62da75a95d368920
verified: 7/29/2026, 9:32:37 AM
view raw JSON →