n8n-MCP
Provides AI assistants with comprehensive access to n8n node documentation, properties, and workflow templates. It enables models to search, understand, and manage n8n automation workflows through structured access to over 1,000 node types.
Caution. Specific findings reduced this grade. They are listed on the page. Grades reflect the full trust pyramid: code, verification depth, and reputation. New projects cap at C until adoption is earned.
How we verified
Verified is a snapshot. Live keeps it current, and builds your track record.
⚡ Connect GitHub → continuous verification on every pushwhy connect →Who stands behind it
Tako3832
Source: Glama
Claim it to get a verified publisher badge, a free copy of our full audit findings, and direct contact for any high-priority issues we find. Or connect your repo for our deepest verification, Live Monitored: read-only, revoke anytime. What we access →
Install from
The grade above is for the source repository. Registries can serve a different version, so we mark the ones we were not able to read.
These names and descriptions are the publisher's own, read from the source code. We print them as written. Our assessment is the findings above, not this list.
n8n_create_workflowCreate workflow. Requires: name, nodes[], connections{}. Created inactive. Returns workflow with ID.
n8n_get_workflowGet workflow by ID with different detail levels. Use mode='full' for complete workflow, 'details' for metadata+stats, 'structure' for nodes/connections only, 'minimal' for id/name/active/tags.
n8n_update_full_workflowFull workflow update. Requires complete nodes[] and connections{}. For incremental use n8n_update_partial_workflow.
n8n_update_partial_workflowUpdate workflow incrementally with diff operations. Types: addNode, removeNode, updateNode, moveNode, enable/disableNode, addConnection, removeConnection, updateSettings, updateName, add/removeTag. See tools_documentation("n8n_update_partial_workflow", "full") for details.
n8n_delete_workflowPermanently delete a workflow. This action cannot be undone.
n8n_list_workflowsList workflows (minimal metadata only). Returns id/name/active/dates/tags. Check hasMore/nextCursor for pagination.
n8n_validate_workflowValidate workflow by ID. Checks nodes, connections, expressions. Returns errors/warnings/suggestions.
n8n_autofix_workflowAutomatically fix common workflow validation errors. Preview fixes or apply them. Fixes expression format, typeVersion, error output config, webhook paths.
n8n_test_workflowTest/trigger workflow execution. Auto-detects trigger type (webhook/form/chat). Supports: webhook (HTTP), form (fields), chat (message). Note: Only workflows with these trigger types can be executed externally.
n8n_executionsManage workflow executions: get details, list, or delete. Use action='get' with id for execution details, action='list' for listing executions, action='delete' to remove execution record.
n8n_health_checkCheck n8n instance health and API connectivity. Use mode='diagnostic' for detailed troubleshooting with env vars and tool status.
n8n_workflow_versionsManage workflow version history, rollback, and cleanup. Six modes: - list: Show version history for a workflow - get: Get details of specific version - rollback: Restore workflow to previous version (creates backup first) - delete: Delete specific version or all versions for a workflow - prune: Manu…
n8n_deploy_templateDeploy a workflow template from n8n.io directly to your n8n instance. Deploys first, then auto-fixes common issues (expression format, typeVersions). Returns workflow ID, required credentials, and fixes applied.
tools_documentationGet documentation for n8n MCP tools. Call without parameters for quick start guide. Use topic parameter to get documentation for specific tools. Use depth='full' for comprehensive documentation.
search_nodesSearch n8n nodes by keyword with optional real-world examples. Pass query as string. Example: query="webhook" or query="database". Returns max 20 results. Use includeExamples=true to get top 2 template configs per node.
get_nodeGet node info with progressive detail levels and multiple modes. Detail: minimal (~200 tokens), standard (~1-2K, default), full (~3-8K). Modes: info (default), docs (markdown documentation), search_properties (find properties), versions/compare/breaking/migrations (version info). Use format='docs' f…
validate_nodeValidate n8n node configuration. Use mode='full' for comprehensive validation with errors/warnings/suggestions, mode='minimal' for quick required fields check. Example: nodeType="nodes-base.slack", config={resource:"channel",operation:"create"}
get_templateGet template by ID. Use mode to control response size: nodes_only (minimal), structure (nodes+connections), full (complete workflow).
search_templatesSearch templates with multiple modes. Use searchMode='keyword' for text search, 'by_nodes' to find templates using specific nodes, 'by_task' for curated task-based templates, 'by_metadata' for filtering by complexity/setup time/services.
validate_workflowFull workflow validation: structure, connections, expressions, AI tools. Returns errors/warnings/fixes. Essential before deploy.
Disclosed vulnerabilities in this server's declared npm dependencies (via OSV). Whether each is reachable depends on the installed versions.
form-data uses unsafe random function in form-data for choosing boundary
n8n Has an Arbitrary File Read via Git Node
n8n has Multiple Remote Code Execution Vulnerabilities in Merge Node AlaSQL SQL Mode
n8n has Unauthenticated Expression Evaluation via Form Node
n8n: HTTP Request Node Pagination Prototype Pollution to RCE
AUTH_RATE_LIMIT_MAXAUTH_RATE_LIMIT_WINDOWAUTH_TOKENAUTH_TOKEN_FILECORS_ORIGINCOVERAGE_DIRCOVERAGE_REPORTERDISABLED_TOOLSDISABLE_CONSOLE_OUTPUTENABLE_MULTI_TENANTFEATURE_TEST_COVERAGEGIT_COMMITHOSTIS_CONTAINERIS_DOCKERLOG_LEVELMCP_AUTH_TOKENMCP_MODEMCP_PORTMULTI_TENANT_SESSION_STRATEGYN8N_API_URL💡 Tip: If you're running n8n locally on the same machine (e.g., via Docker), use http://host.docker.internal:5678 as the .N8N_MCP_LLM_API_KEYN8N_MCP_LLM_BASE_URLN8N_MCP_LLM_MODELN8N_MCP_LLM_TIMEOUTN8N_MCP_MAX_SESSIONSOPENAI_API_KEYSESSION_TIMEOUT_MINUTESSKIP_WORKFLOW_VALIDATIONSQLJS_SAVE_INTERVAL_MSTEST_MAX_WORKERSTEST_PARALLELTEST_RETRY_ATTEMPTSTRUST_PROXYPORTAll four hints declared on every tool
17/20 tools missing one or more hints — n8n_create_workflow (missing: idempotentHint); n8n_get_workflow (missing: destructiveHint); n8n_delete_workflow (missing: idempotentHint), +14 more. OpenAI's directory rejects tools where any of the four hints are missing or non-boolean.
For every tool, set all four hints (readOnlyHint, destructiveHint, idempotentHint, openWorldHint) to explicit true/false values that match the handler’s actual behaviour.
Production dependencies are patched
10 critical, 44 high severity in production deps — form-data@4.0.0 (critical), n8n@2.8.3 (critical)
Run npm audit fix, or upgrade the affected packages to a non-vulnerable version.
Dev dependencies
13 critical/high in dev-only deps (does not ship to users)
Upgrade dev dependencies when convenient.
Claim the listing to review these findings one by one and send us a correction where you disagree, straight to the team. Claiming also means we tell you when the grade moves, and reach you first if we find anything urgent.
[](https://m8ven.ai/mcp/tako3832/n8n-mcp-main)?variant=verified from the URL.Vetting this one by hand? Tool Check is an MCP that scores other MCPs. Add it once and ask Claude, ChatGPT, or any MCP client to grade a server, surface CVEs, check the publisher, and suggest safer alternatives — before you install.
https://m8ven.ai/api/mcp/tool-check