n8n MCP Server (verzth/mcp-n8n) is an MCP server listed on the M8ven Trust Index. It scores 56 out of 100, grade D. It declares 39 tools. No publisher has claimed this listing.

D
Caution
56/100

n8n MCP Server

Wraps the n8n self-hosted REST API to let Claude and MCP-compatible LLMs manage workflows, executions, credentials, and more via natural language.

Caution. Specific findings reduced this grade. They are listed on the page. Grades reflect the full trust pyramid: code, verification depth, and reputation. New projects cap at C until adoption is earned.

How we verified

Code Verified⚡ Live Monitored: not connected

Verified is a snapshot. Live keeps it current, and builds your track record.

⚡ Connect GitHub → continuous verification on every pushwhy connect →

Who stands behind it

verzth

Source: Glama

Is this your MCP?

Claim it to get a verified publisher badge, a free copy of our full audit findings, and direct contact for any high-priority issues we find. Or connect your repo for our deepest verification, Live Monitored: read-only, revoke anytime. What we access →

Install from

The grade above is for the source repository. Registries can serve a different version, so we mark the ones we were not able to read.

// key findings
⚠️
Known vulnerabilities in dependencies: 15 high
Affects packages this MCP installs at runtime. Upgrade or remove the affected dependency.
39 tools verified — handlers match their declared behaviour
14 read-only tools verified — handlers contain no write/delete/exec
No credential exfiltration, no sensitive file access, no obfuscation
Static analysis found nothing flowing your secrets to unexpected places.
🔐
You'll be asked for 1 credential: N8N_API_KEY
These are read from process.env at runtime. Make sure you trust where they’ll be sent.
// tools this server exposes39 tools

These names and descriptions are the publisher's own, read from the source code. We print them as written. Our assessment is the findings above, not this list.

n8n_list_credentials

List all credentials. Requires owner/admin role. Credential data (secrets) are NOT returned — only metadata. Args: - name (string?): Filter by credential name - limit (number): Max results (1-250, default 20) - cursor (string?): Pagination cursor

n8n_get_credential

Retrieve credential metadata by ID. Secret data is NOT returned. Args: - id (string): Credential ID

n8n_get_credential_schema

Get the schema/field definitions for a credential type. Use this to know which fields are required when creating credentials. Args: - credentialTypeName (string): Credential type name (e.g., 'githubApi', 'slackApi', 'telegramApi')

n8n_create_credential

Create a new credential. Use n8n_get_credential_schema first to know required fields. Args: - name (string): Credential display name - type (string): Credential type (e.g., 'githubApi', 'slackApi') - data (object): Credential data/secrets (specific to the credential type) - projectId (strin

n8n_update_credential

Update an existing credential's name or data. Args: - id (string): Credential ID to update - name (string?): New display name - data (object?): Updated credential data/secrets (merged with existing)

n8n_delete_credential

Permanently delete a credential. Workflows using it will break. Args: - id (string): Credential ID to delete

n8n_test_credential

Test whether a credential is valid by making a test request to the service. Args: - id (string): Credential ID to test

n8n_list_executions

List workflow executions with optional filtering. Args: - workflowId (string?): Filter by specific workflow ID - status ('new'|'running'|'success'|'failed'|'waiting'|'canceled'?): Filter by status - includeData (boolean): Include execution data/output (default false, increases response size)

n8n_get_execution

Retrieve full details of a specific execution by ID, including output data. Args: - id (string): Execution ID - includeData (boolean): Include execution data/output (default true) - response_format ('markdown' | 'json'): Output format (default 'json')

n8n_delete_execution

Permanently delete a specific execution and its data. Args: - id (string): Execution ID to delete

n8n_retry_execution

Retry a failed execution. Creates a new execution from the point of failure. Args: - id (string): Failed execution ID to retry - loadWorkflowData (boolean): Reload workflow from current saved version (default false — uses original execution data)

n8n_stop_execution

Stop a currently running execution. Args: - id (string): Running execution ID to stop

n8n_list_projects

List all projects in the n8n instance. Args: - limit (number): Max results (1-250, default 20) - cursor (string?): Pagination cursor

n8n_create_project

Create a new project for organizing workflows and credentials. Args: - name (string): Project name

n8n_list_users

List all users in the n8n instance. Requires owner role. Args: - limit (number): Max results (1-250, default 20) - cursor (string?): Pagination cursor

n8n_generate_audit

Generate a security audit report for the n8n instance. Checks for security misconfigurations, abandoned workflows, credential exposure risks, etc. Args: - categories (array?): Audit categories to run. Options: 'credentials', 'database', 'filesystem', 'instance', 'nodes' - daysAbandonedWorkflow

n8n_discover

Get the capability map for the current API key — shows which API endpoints/scopes are accessible. Useful for debugging permission issues.

n8n_list_community_packages

List all installed community node packages in the n8n instance.

n8n_install_community_package

Install a community node package from npm. Args: - packageName (string): npm package name (e.g., 'n8n-nodes-evolution-api') - version (string?): Specific version to install (default: latest)

n8n_uninstall_community_package

Uninstall a community node package. Workflows using its nodes will break. Args: - packageName (string): npm package name to uninstall

n8n_list_tags

List all annotation tags available in the n8n instance. Args: - limit (number): Max results (1-250, default 20) - cursor (string?): Pagination cursor

n8n_create_tag

Create a new annotation tag for organizing workflows. Args: - name (string): Tag name (must be unique)

n8n_update_tag

Rename an existing tag. Args: - id (string): Tag ID - name (string): New tag name

n8n_delete_tag

Delete a tag. Removes it from all workflows that use it. Args: - id (string): Tag ID to delete

n8n_list_variables

List all workflow variables (global key-value pairs available in all workflows). Args: - limit (number): Max results (1-250, default 20) - cursor (string?): Pagination cursor

n8n_create_variable

Create a new global workflow variable accessible in all workflows via $vars.key. Args: - key (string): Variable key/name - value (string): Variable value - type (string?): Variable type (default 'string')

n8n_update_variable

Update a workflow variable's value. Args: - id (string): Variable ID - key (string): Variable key/name - value (string): New variable value

n8n_delete_variable

Delete a workflow variable. Workflows referencing it will get undefined. Args: - id (string): Variable ID to delete

n8n_list_workflows

List workflows from the n8n instance with optional filtering. Args: - active (boolean?): Filter by active/inactive status - name (string?): Filter by workflow name (partial match) - tags (string?): Comma-separated tag names to filter by - projectId (string?): Filter by project ID - limit

n8n_get_workflow

Retrieve full details of a specific workflow by ID, including its nodes and connections. Args: - id (string): Workflow ID - response_format ('markdown' | 'json'): Output format (default 'json' for full detail)

n8n_create_workflow

Create a new workflow in n8n. Args: - name (string): Workflow name - nodes (array): Array of node objects (n8n node definitions) - connections (object): Node connection map - settings (object?): Workflow settings - active (boolean): Whether to activate immediately (default false) Returns

n8n_update_workflow

Update an existing workflow. Replaces the full workflow definition. If the workflow is active, it will be republished automatically. Args: - id (string): Workflow ID to update - name (string): New workflow name - nodes (array): Full array of node objects - connections (object): Full node co

n8n_delete_workflow

Permanently delete a workflow by ID. This action is irreversible. Consider using n8n_archive_workflow for soft-delete instead. Args: - id (string): Workflow ID to delete

n8n_activate_workflow

Activate (publish) a workflow so it runs automatically on triggers/schedules. Args: - id (string): Workflow ID to activate

n8n_deactivate_workflow

Deactivate a workflow so it stops running automatically. Manual executions are still possible. Args: - id (string): Workflow ID to deactivate

n8n_archive_workflow

Soft-delete a workflow by archiving it. Can be restored with n8n_unarchive_workflow. Args: - id (string): Workflow ID to archive

n8n_unarchive_workflow

Restore an archived workflow back to normal state. Args: - id (string): Workflow ID to unarchive

n8n_get_workflow_tags

Get the tags associated with a specific workflow. Args: - id (string): Workflow ID

n8n_set_workflow_tags

Replace all tags on a workflow. Pass an empty array to remove all tags. Args: - id (string): Workflow ID - tagIds (array of string): Tag IDs to assign (replaces existing tags)

// known CVEs in dependencies15 high5 medium10 low

Disclosed vulnerabilities in this server's declared npm dependencies (via OSV). Whether each is reachable depends on the installed versions.

high@modelcontextprotocol/sdk@1.6.1GHSA-8r9q-7v3j-jr4g

Anthropic's MCP TypeScript SDK has a ReDoS vulnerability

high@modelcontextprotocol/sdk@1.6.1GHSA-w48q-cv73-mx4w

Model Context Protocol (MCP) TypeScript SDK does not enable DNS rebinding protection by default

highaxios@1.7.9GHSA-35jp-ww65-95wh

axios Vulnerable to Full Man-in-the-Middle via Prototype Pollution Gadget in `config.proxy`

highaxios@1.7.9GHSA-3g43-6gmg-66jw

axios Vulnerable to Credential Theft and Response Hijacking via Prototype Pollution Gadget in Config Merge

highaxios@1.7.9GHSA-43fc-jf86-j433

Axios is Vulnerable to Denial of Service via __proto__ Key in mergeConfig

Depend on this server? Get alerted when its CVEs change.Watch this server free →
// environment variables
To run this server yourself, you supply these values. They go in your own MCP client configuration and stay on your machine. The secret label means the value is sensitive, not that the server mishandles it.
🔐 secretN8N_API_KEY"": "your-api-key-here"
configN8N_BASE_URL"": "https://your-n8n-instance.example.com",
// quality suggestions

License file

No license file

Add a LICENSE file (MIT, Apache-2.0, etc.).

Tests exist

No test files found

Add tests that exercise each declared tool.

Production dependencies are patched

0 critical, 15 high severity in production deps — @modelcontextprotocol/sdk@1.6.1 (high), @modelcontextprotocol/sdk@1.6.1 (high)

Run npm audit fix, or upgrade the affected packages to a non-vulnerable version.

Claim the listing to review these findings one by one and send us a correction where you disagree, straight to the team. Claiming also means we tell you when the grade moves, and reach you first if we find anything urgent.

// full audit trail
The findings above are the summary. The full trail, every check we ran, each deduction, the network hosts observed and the dependency advisories, goes to verified publishers, along with an alert whenever a new one lands. Verified publishers can also review each finding and dispute it in one click. Publisher corrections have sharpened several of our checks this month, because the maintainer knows the codebase better than any scanner.
// improvement guidance — verified publishers only
We have 3 concrete improvements we can share with the publisher of this MCP. Each comes with specific guidance to raise the trust score.
// embed badge in your README
[![M8ven Verified](https://m8ven.ai/badge/mcp/verzth/mcp-n8n?variant=verified)](https://m8ven.ai/mcp/verzth/mcp-n8n)
Shows verification status without the grade. Want the grade badge instead? Remove ?variant=verified from the URL.
commit: 1e6394f93deb0dd5a82ac3b0f2aaf8491fc6ecc8
code hash: 01313e6e1b0d8dc8717a2f0c5b914d4ae992b995192910e5aa4f49ab996edeff
view raw JSON →
Check MCPs from inside your assistant
Tool Check · MCP

Vetting this one by hand? Tool Check is an MCP that scores other MCPs. Add it once and ask Claude, ChatGPT, or any MCP client to grade a server, surface CVEs, check the publisher, and suggest safer alternatives — before you install.

https://m8ven.ai/api/mcp/tool-check
check_toolsearch_toolscompare_toolsrecommend_alternativescheck_publisherreport_concern
How to add it →Free · no account needed · works in any MCP client