n8n MCP Server (verzth/mcp-n8n) is an MCP server listed on the M8ven Trust Index. It scores 56 out of 100, grade D. It declares 39 tools. No publisher has claimed this listing.
Wraps the n8n self-hosted REST API to let Claude and MCP-compatible LLMs manage workflows, executions, credentials, and more via natural language.
Caution. Specific findings reduced this grade. They are listed on the page. Grades reflect the full trust pyramid: code, verification depth, and reputation. New projects cap at C until adoption is earned.
How we verified
Verified is a snapshot. Live keeps it current, and builds your track record.
⚡ Connect GitHub → continuous verification on every pushwhy connect →Who stands behind it
verzth
Source: Glama
Claim it to get a verified publisher badge, a free copy of our full audit findings, and direct contact for any high-priority issues we find. Or connect your repo for our deepest verification, Live Monitored: read-only, revoke anytime. What we access →
Install from
The grade above is for the source repository. Registries can serve a different version, so we mark the ones we were not able to read.
These names and descriptions are the publisher's own, read from the source code. We print them as written. Our assessment is the findings above, not this list.
n8n_list_credentialsList all credentials. Requires owner/admin role. Credential data (secrets) are NOT returned — only metadata. Args: - name (string?): Filter by credential name - limit (number): Max results (1-250, default 20) - cursor (string?): Pagination cursor
n8n_get_credentialRetrieve credential metadata by ID. Secret data is NOT returned. Args: - id (string): Credential ID
n8n_get_credential_schemaGet the schema/field definitions for a credential type. Use this to know which fields are required when creating credentials. Args: - credentialTypeName (string): Credential type name (e.g., 'githubApi', 'slackApi', 'telegramApi')
n8n_create_credentialCreate a new credential. Use n8n_get_credential_schema first to know required fields. Args: - name (string): Credential display name - type (string): Credential type (e.g., 'githubApi', 'slackApi') - data (object): Credential data/secrets (specific to the credential type) - projectId (strin…
n8n_update_credentialUpdate an existing credential's name or data. Args: - id (string): Credential ID to update - name (string?): New display name - data (object?): Updated credential data/secrets (merged with existing)
n8n_delete_credentialPermanently delete a credential. Workflows using it will break. Args: - id (string): Credential ID to delete
n8n_test_credentialTest whether a credential is valid by making a test request to the service. Args: - id (string): Credential ID to test
n8n_list_executionsList workflow executions with optional filtering. Args: - workflowId (string?): Filter by specific workflow ID - status ('new'|'running'|'success'|'failed'|'waiting'|'canceled'?): Filter by status - includeData (boolean): Include execution data/output (default false, increases response size) …
n8n_get_executionRetrieve full details of a specific execution by ID, including output data. Args: - id (string): Execution ID - includeData (boolean): Include execution data/output (default true) - response_format ('markdown' | 'json'): Output format (default 'json')
n8n_delete_executionPermanently delete a specific execution and its data. Args: - id (string): Execution ID to delete
n8n_retry_executionRetry a failed execution. Creates a new execution from the point of failure. Args: - id (string): Failed execution ID to retry - loadWorkflowData (boolean): Reload workflow from current saved version (default false — uses original execution data)
n8n_stop_executionStop a currently running execution. Args: - id (string): Running execution ID to stop
n8n_list_projectsList all projects in the n8n instance. Args: - limit (number): Max results (1-250, default 20) - cursor (string?): Pagination cursor
n8n_create_projectCreate a new project for organizing workflows and credentials. Args: - name (string): Project name
n8n_list_usersList all users in the n8n instance. Requires owner role. Args: - limit (number): Max results (1-250, default 20) - cursor (string?): Pagination cursor
n8n_generate_auditGenerate a security audit report for the n8n instance. Checks for security misconfigurations, abandoned workflows, credential exposure risks, etc. Args: - categories (array?): Audit categories to run. Options: 'credentials', 'database', 'filesystem', 'instance', 'nodes' - daysAbandonedWorkflow …
n8n_discoverGet the capability map for the current API key — shows which API endpoints/scopes are accessible. Useful for debugging permission issues.
n8n_list_community_packagesList all installed community node packages in the n8n instance.
n8n_install_community_packageInstall a community node package from npm. Args: - packageName (string): npm package name (e.g., 'n8n-nodes-evolution-api') - version (string?): Specific version to install (default: latest)
n8n_uninstall_community_packageUninstall a community node package. Workflows using its nodes will break. Args: - packageName (string): npm package name to uninstall
n8n_list_tagsList all annotation tags available in the n8n instance. Args: - limit (number): Max results (1-250, default 20) - cursor (string?): Pagination cursor
n8n_create_tagCreate a new annotation tag for organizing workflows. Args: - name (string): Tag name (must be unique)
n8n_update_tagRename an existing tag. Args: - id (string): Tag ID - name (string): New tag name
n8n_delete_tagDelete a tag. Removes it from all workflows that use it. Args: - id (string): Tag ID to delete
n8n_list_variablesList all workflow variables (global key-value pairs available in all workflows). Args: - limit (number): Max results (1-250, default 20) - cursor (string?): Pagination cursor
n8n_create_variableCreate a new global workflow variable accessible in all workflows via $vars.key. Args: - key (string): Variable key/name - value (string): Variable value - type (string?): Variable type (default 'string')
n8n_update_variableUpdate a workflow variable's value. Args: - id (string): Variable ID - key (string): Variable key/name - value (string): New variable value
n8n_delete_variableDelete a workflow variable. Workflows referencing it will get undefined. Args: - id (string): Variable ID to delete
n8n_list_workflowsList workflows from the n8n instance with optional filtering. Args: - active (boolean?): Filter by active/inactive status - name (string?): Filter by workflow name (partial match) - tags (string?): Comma-separated tag names to filter by - projectId (string?): Filter by project ID - limit …
n8n_get_workflowRetrieve full details of a specific workflow by ID, including its nodes and connections. Args: - id (string): Workflow ID - response_format ('markdown' | 'json'): Output format (default 'json' for full detail)
n8n_create_workflowCreate a new workflow in n8n. Args: - name (string): Workflow name - nodes (array): Array of node objects (n8n node definitions) - connections (object): Node connection map - settings (object?): Workflow settings - active (boolean): Whether to activate immediately (default false) Returns…
n8n_update_workflowUpdate an existing workflow. Replaces the full workflow definition. If the workflow is active, it will be republished automatically. Args: - id (string): Workflow ID to update - name (string): New workflow name - nodes (array): Full array of node objects - connections (object): Full node co…
n8n_delete_workflowPermanently delete a workflow by ID. This action is irreversible. Consider using n8n_archive_workflow for soft-delete instead. Args: - id (string): Workflow ID to delete
n8n_activate_workflowActivate (publish) a workflow so it runs automatically on triggers/schedules. Args: - id (string): Workflow ID to activate
n8n_deactivate_workflowDeactivate a workflow so it stops running automatically. Manual executions are still possible. Args: - id (string): Workflow ID to deactivate
n8n_archive_workflowSoft-delete a workflow by archiving it. Can be restored with n8n_unarchive_workflow. Args: - id (string): Workflow ID to archive
n8n_unarchive_workflowRestore an archived workflow back to normal state. Args: - id (string): Workflow ID to unarchive
n8n_get_workflow_tagsGet the tags associated with a specific workflow. Args: - id (string): Workflow ID
n8n_set_workflow_tagsReplace all tags on a workflow. Pass an empty array to remove all tags. Args: - id (string): Workflow ID - tagIds (array of string): Tag IDs to assign (replaces existing tags)
Disclosed vulnerabilities in this server's declared npm dependencies (via OSV). Whether each is reachable depends on the installed versions.
Anthropic's MCP TypeScript SDK has a ReDoS vulnerability
Model Context Protocol (MCP) TypeScript SDK does not enable DNS rebinding protection by default
axios Vulnerable to Full Man-in-the-Middle via Prototype Pollution Gadget in `config.proxy`
axios Vulnerable to Credential Theft and Response Hijacking via Prototype Pollution Gadget in Config Merge
Axios is Vulnerable to Denial of Service via __proto__ Key in mergeConfig
N8N_API_KEY"": "your-api-key-here"N8N_BASE_URL"": "https://your-n8n-instance.example.com",License file
No license file
Add a LICENSE file (MIT, Apache-2.0, etc.).
Tests exist
No test files found
Add tests that exercise each declared tool.
Production dependencies are patched
0 critical, 15 high severity in production deps — @modelcontextprotocol/sdk@1.6.1 (high), @modelcontextprotocol/sdk@1.6.1 (high)
Run npm audit fix, or upgrade the affected packages to a non-vulnerable version.
Claim the listing to review these findings one by one and send us a correction where you disagree, straight to the team. Claiming also means we tell you when the grade moves, and reach you first if we find anything urgent.
[](https://m8ven.ai/mcp/verzth/mcp-n8n)?variant=verified from the URL.Vetting this one by hand? Tool Check is an MCP that scores other MCPs. Add it once and ask Claude, ChatGPT, or any MCP client to grade a server, surface CVEs, check the publisher, and suggest safer alternatives — before you install.
https://m8ven.ai/api/mcp/tool-check