n8n-mcp
Enables AI models to manage workflows, credentials, nodes, templates, and monitor executions on the n8n automation platform through a standardized MCP interface.
Caution. Specific findings reduced this grade. They are listed on the page. Grades reflect the full trust pyramid: code, verification depth, and reputation. New projects cap at C until adoption is earned.
How we verified
Verified is a snapshot. Live keeps it current, and builds your track record.
⚡ Connect GitHub → continuous verification on every pushwhy connect →Who stands behind it
SocietyCamarai
Source: Glama
Claim it to get a verified publisher badge, a free copy of our full audit findings, and direct contact for any high-priority issues we find. Or connect your repo for our deepest verification, Live Monitored: read-only, revoke anytime. What we access →
Install from
The grade above is for the source repository. Registries can serve a different version, so we mark the ones we were not able to read.
These names and descriptions are the publisher's own, read from the source code. We print them as written. Our assessment is the findings above, not this list.
n8n_generate_auditn8n_generate_audit: Generate security and risk audit report for n8n instance. Why: External data source; provides security insights, credential risks, and compliance information. Use when: "audit n8n"; "security report"; "check credentials"; "risk assessment"; "security scan"; compliance check. Avoi…
n8n_create_credentialn8n_create_credential: Create a new credential for external services (API keys, OAuth, etc.). Why: Side-effect; stores auth credentials securely in n8n for use in workflows. Use when: "create credential"; "add API key"; "setup auth"; "new credential for X"; configuring node authentication. Avoid: cr…
n8n_update_credentialn8n_update_credential: Update an existing credential's name, type, or data. Why: Side-effect; modifies stored credentials without recreating workflows. Use when: "update credential"; "change API key"; "rotate credentials"; "edit credential X"; updating expired tokens. Avoid: changing credential type…
n8n_delete_credentialn8n_delete_credential: Permanently delete a credential by ID. Why: Side-effect; removes stored credentials and breaks workflows using them. Use when: "delete credential"; "remove credential"; "cleanup old credentials"; rotating credentials (delete old after creating new). Avoid: deleting credentials…
n8n_get_credential_scheman8n_get_credential_schema: Get required fields and schema for a credential type. Why: External data; tells you exactly what fields to provide when creating credentials. Use when: "what fields for credential"; "credential schema"; "how to create X credential"; before n8n_create_credential. Avoid: aft…
n8n_transfer_credentialn8n_transfer_credential: Move a credential to a different project. Why: Side-effect; reorganizes credentials for access control and team management. Use when: "transfer credential"; "move credential to project"; "share credential with team"; reorganizing access. Avoid: transferring to same project; …
tools_documentationGet documentation for n8n MCP tools. Call without parameters for quick start guide. Use topic parameter to get documentation for specific tools. Use depth='full' for comprehensive documentation.
search_nodessearch_nodes: Search for nodes within existing workflows by type or name. Why: External data; finds nodes in your workflows without external API dependency. Use when: "find webhook nodes"; "search for slack nodes"; "which workflows use X"; "find all trigger nodes"; node inventory. Avoid: creating no…
get_nodeget_node: Get detailed information about a specific node from a workflow. Why: External data; retrieves node configuration from existing workflows. Use when: "get node details"; "show node config"; "what parameters does node X have"; "inspect node". Avoid: creating nodes; validating new configuratio…
validate_nodevalidate_node: Basic validation of node configuration structure. Why: Deterministic check; validates node has required fields before creation. Use when: "validate node config"; "check node structure"; "is this node valid"; pre-creation validation. Avoid: detailed parameter validation; runtime valida…
n8n_list_tagsn8n_list_tags: Retrieve all tags from n8n instance. Why: External data source; provides tag inventory for workflow organization and filtering. Use when: "show tags"; "list all tags"; "what tags exist"; "get tags"; organizing workflows by tags. Avoid: creating new tags; modifying tags; when tag list …
n8n_create_tagn8n_create_tag: Create a new tag in n8n. Why: Side-effect operation; creates persistent tag for workflow organization. Use when: "create tag"; "add new tag"; "make a tag called"; organizing workflows; categorizing. Avoid: creating duplicate tags; creating tags without purpose; simulation/dry-run. In…
n8n_delete_tagn8n_delete_tag: Delete a tag from n8n instance. Why: Side-effect operation; removes tag permanently from the system. Use when: "delete tag"; "remove tag"; "eliminate tag"; cleaning up unused tags. Avoid: deleting tags still in use; deleting without confirmation; simulation/dry-run. Inputs: id(string…
n8n_update_tagn8n_update_tag: Update an existing tag's name. Why: Side-effect operation; modifies tag name for better organization. Use when: "rename tag"; "update tag name"; "change tag to"; correcting tag names. Avoid: renaming to existing tag name; simulation/dry-run. Inputs: id(string, req)=tag ID to update; …
get_templateGet template by ID. Use mode to control response size: nodes_only (minimal), structure (nodes+connections), full (complete workflow).
search_templatesSearch templates with multiple modes. Use searchMode='keyword' for text search, 'by_nodes' to find templates using specific nodes, 'by_task' for curated task-based templates, 'by_metadata' for filtering by complexity/setup time/services.
n8n_deploy_templateDeploy a workflow template from n8n.io directly to your n8n instance. Deploys first, then auto-fixes common issues (expression format, typeVersions). Returns workflow ID, required credentials, and fixes applied.
n8n_list_usersn8n_list_users: Retrieve all users from n8n instance. Why: External data source; provides user inventory for access management and collaboration. Use when: "show users"; "list all users"; "who has access"; "get users"; managing permissions. Avoid: creating users; modifying users; when user list is a…
n8n_get_usern8n_get_user: Get detailed information about a specific user. Why: External data source; retrieves user details for management and verification. Use when: "get user details"; "user info"; "who is user"; "check user"; verifying user access. Avoid: listing all users; creating users; when user ID is un…
n8n_create_workflown8n_create_workflow: Create a new workflow in n8n instance. Why: External API call required; cannot create workflows via text alone. Use when: "create workflow"; "new automation"; "build n8n flow"; "add workflow"; "deploy workflow". Avoid: updating existing workflows (use n8n_update_* instead); part…
n8n_get_workflown8n_get_workflow: Retrieve workflow by ID with configurable detail level. Why: External API required to fetch workflow data; cannot guess workflow content. Use when: "get workflow"; "show workflow"; "fetch workflow"; "view workflow details"; "check workflow structure". Avoid: listing all workflows (…
n8n_update_full_workflown8n_update_full_workflow: Replace entire workflow with new complete definition. Why: External API call required; full replacement ensures consistency. Use when: "update workflow completely"; "replace workflow"; "overwrite workflow"; "full workflow update". Avoid: partial updates (use n8n_update_part…
n8n_update_partial_workflown8n_update_partial_workflow: Apply incremental changes to existing workflow using diff operations. Why: External API required; enables surgical updates without full workflow replacement. Use when: "add node to workflow"; "remove node"; "update workflow partially"; "modify workflow"; "enable/disable …
n8n_delete_workflown8n_delete_workflow: Permanently delete a workflow from n8n instance. Why: External API call required for destructive operation; irreversible action. Use when: "delete workflow"; "remove workflow"; "destroy workflow"; "cleanup old workflows". Avoid: deleting active workflows (deactivate first); dele…
n8n_list_workflowsn8n_list_workflows: List all workflows with minimal metadata for pagination. Why: External API required to enumerate workflows; cannot list without API access. Use when: "list workflows"; "show all workflows"; "get workflows"; "browse workflows"; "find workflows". Avoid: getting full workflow detail…
n8n_validate_workflown8n_validate_workflow: Validate workflow structure, nodes, connections, and expressions for errors. Why: External validation required; cannot detect workflow issues by inspection alone. Use when: "validate workflow"; "check workflow"; "verify workflow"; "find workflow errors"; "debug workflow". Avoi…
n8n_autofix_workflown8n_autofix_workflow: Automatically detect and fix common workflow validation errors. Why: External API processing required; applies automated corrections to workflow structure. Use when: "fix workflow"; "autofix workflow"; "repair workflow"; "correct workflow errors"; "auto-correct workflow". Avoid…
n8n_workflow_versionsn8n_workflow_versions: Manage workflow version history with list/get/rollback/delete/prune/truncate operations. Why: External API required for version control operations; manages workflow history. Use when: "list workflow versions"; "rollback workflow"; "restore previous version"; "delete versions";…
n8n_test_workflown8n_test_workflow: Test or trigger workflow execution via webhook, form, or chat trigger. Why: External API call required to execute workflows; validates trigger configuration. Use when: "test workflow"; "trigger workflow"; "execute workflow"; "run workflow"; "debug workflow execution". Avoid: testi…
n8n_executionsn8n_executions: Manage workflow executions with get/list/delete actions and multiple detail modes. Why: External API required to access execution history and data; cannot retrieve without API. Use when: "get execution"; "list executions"; "view execution details"; "delete execution"; "check executio…
n8n_health_checkn8n_health_check: Check n8n instance health, API connectivity, and system status. Why: External API call required; verifies n8n instance availability and configuration. Use when: "check health"; "health check"; "verify connection"; "test n8n connection"; "diagnose issues". Avoid: assuming connection…
Disclosed vulnerabilities in this server's declared npm dependencies (via OSV). Whether each is reachable depends on the installed versions.
@modelcontextprotocol/sdk has cross-client data leak via shared server/transport instance reuse
Anthropic's MCP TypeScript SDK has a ReDoS vulnerability
Model Context Protocol (MCP) TypeScript SDK does not enable DNS rebinding protection by default
axios Vulnerable to Full Man-in-the-Middle via Prototype Pollution Gadget in `config.proxy`
axios Vulnerable to Credential Theft and Response Hijacking via Prototype Pollution Gadget in Config Merge
API_KEYMCP_API_KEYMCP_TRANSPORT=http =your-secret-key npm run start:httpMCP_TRANSPORThttp MCP_API_KEY=your-secret-key npm run start:httpN8N_API_KEYn8n_api_xxxxxxxxxxxxxxxxN8N_API_URLe =https://your-n8n.com \N8N_BASE_URLN8N_HOSTe =http://n8n:5678 \N8N_KEYNo - Deprecated: Use N8N_API_KEYN8N_URLPORTAll four hints declared on every tool
28/31 tools missing one or more hints — n8n_generate_audit (missing: destructiveHint); n8n_create_credential (missing: idempotentHint); n8n_update_credential (missing: idempotentHint), +25 more. OpenAI's directory rejects tools where any of the four hints are missing or non-boolean.
For every tool, set all four hints (readOnlyHint, destructiveHint, idempotentHint, openWorldHint) to explicit true/false values that match the handler’s actual behaviour.
Tests exist
No test files found
Add tests that exercise each declared tool.
Production dependencies are patched
0 critical, 14 high severity in production deps — @modelcontextprotocol/sdk@1.20.1 (high), @modelcontextprotocol/sdk@1.20.1 (high)
Run npm audit fix, or upgrade the affected packages to a non-vulnerable version.
Claim the listing to review these findings one by one and send us a correction where you disagree, straight to the team. Claiming also means we tell you when the grade moves, and reach you first if we find anything urgent.
[](https://m8ven.ai/mcp/societycamarai/n8n-mcp)?variant=verified from the URL.Vetting this one by hand? Tool Check is an MCP that scores other MCPs. Add it once and ask Claude, ChatGPT, or any MCP client to grade a server, surface CVEs, check the publisher, and suggest safer alternatives — before you install.
https://m8ven.ai/api/mcp/tool-check