N8n

Overview

From the repository's own README, as read at the audited commit.

# n8n-MCP[![License: MIT](https://img.shields.io/badge/License-MIT-yellow.svg)](https://opensource.org/licenses/MIT)[![GitHub stars](https://img.shields.io/github/stars/czlonkowski/n8n-mcp?style=social)](https://github.com/czlonkowski/n8n-mcp)[![npm version](https://img.shields.io/npm/v/n8n-mcp.svg)](https://www.npmjs.com/package/n8n-mcp)[![codecov](https://codecov.io/gh/czlonkowski/n8n-mcp/graph/badge.svg?token=YOUR_TOKEN)](https://codecov.io/gh/czlonkowski/n8n-mcp)[![Tests](https://img.shields.io/badge/tests-6524%20passing-brightgreen.svg)](https://github.com/czlonkowski/n8n-mcp/actions)[![n8n version](https://img.shields.io/badge/n8n-2.39.4-orange.svg)](https://github.com/n8n-io/n8n)[![Docker](https://img.shields.io/badge/docker-ghcr.io%2Fczlonkowski%2Fn8n--mcp-green.svg)](https://github.com/czlonkowski/n8n-mcp/pkgs/container/n8n-mcp)[![Deploy on Railway](https://railway.com/button.svg)](https://railway.com/deploy/n8n-mcp?referralCode=n8n-mcp)A Model Context Protocol (MCP) server that provides AI assistants with comprehensive access to n8n node documentation, properties, and operations. Deploy in minutes to give Claude and other AI assistants deep knowledge about n8n's 2,791 workflow automation nodes (833 core + 1,958 community).## Overviewn8n-MCP serves as a bridge between n8n's workflow automation platform and AI models, enabling them to understand and work with n8n nodes effectively. It provides structured access to:- **2,791 n8n nodes** - 833 core nodes + 1,958 community nodes (1,619 verified)- **Node properties** - 99% coverage with detailed schemas- **Node operations** - 66.5% coverage of available actions- **Documentation** - 86% coverage from official n8n docs (including AI nodes)- **AI tools** - 267 AI-capable tool variants detected with full documentation- **Real-world examples** - 156 ranked configurations extracted from popular templates- **Template library** - 2,352 workflow templates with 99.96% AI metadata coverage- **Community nodes** - Search ver

Connect

Built from this server's own package name, version and transport as found in its source — not copied from anyone's documentation, so it cannot drift against a page we do not control. Replace the environment placeholders with a token scoped to the least it needs.

claude mcp add n8n-mcp-ui-apps --env AUTH_RATE_LIMIT_MAX=${AUTH_RATE_LIMIT_MAX} --env AUTH_RATE_LIMIT_WINDOW=${AUTH_RATE_LIMIT_WINDOW} --env AUTH_TOKEN=${AUTH_TOKEN} --env AUTH_TOKEN_FILE=${AUTH_TOKEN_FILE} -- npx -y [email protected]

{
  "mcpServers": {
    "n8n-mcp-ui-apps": {
      "command": "npx",
      "args": [
        "-y",
        "[email protected]"
      ],
      "env": {
        "AUTH_RATE_LIMIT_MAX": "${AUTH_RATE_LIMIT_MAX}",
        "AUTH_RATE_LIMIT_WINDOW": "${AUTH_RATE_LIMIT_WINDOW}",
        "AUTH_TOKEN": "${AUTH_TOKEN}",
        "AUTH_TOKEN_FILE": "${AUTH_TOKEN_FILE}"
      }
    }
  }
}

Exposed tools (57) 47 read · 7 write · 3 destructive

Blast radius: 3 tools can delete or overwrite. An agent that can be talked into calling a tool can be talked into calling this one.

Details

Source

czlonkowski/n8n-mcp

npm

n8n-mcp-ui-apps@1.0.0

Transports

sse · stdio · streamable-http

Credentials it reads

AUTH_RATE_LIMIT_MAXAUTH_RATE_LIMIT_WINDOWAUTH_TOKENAUTH_TOKEN_FILEDATABASE_PASSWORDMCP_AUTH_TOKENN8N_API_KEYN8N_MCP_ACCESS_TOKENN8N_MCP_LLM_API_KEYOPENAI_API_KEYSECRET_API_KEYSUPABASE_ANON_KEY

License

MIT

Stars

22,905 · pushed 0d ago

Trust audit

Do not install this without reading the findings. The audit found something that could harm you or your machine.

What the source does

Filesystem

declared (9 observation(s))

Network

declared (11 observation(s))

Shell

declared (10 observation(s))

Dependencies

not all pinned

Secrets in source

found

Findings (25)

jsCode: 'const result = eval(item.json.code);\nreturn [{json: {result}}];'

exec(sql: string): void;

exec(sql: string): void {

exec(sql: string): void {

if (language !== 'python' && (code?.includes('eval(') || code?.includes('exec('))) {

'169.254.169.254', // AWS/Azure metadata

Access environment variables:

1. switch → A;  read the source (n8n_manage_credentials get / n8n_get_workflow)

nodes.db-shm

console.log(`   - Found: ${token.substring(0, 20)}...`);

logger.info(`Added problematic token to sanitizer: ${token.substring(0, 10)}...`);

CMD sh -c 'curl -f http://127.0.0.1:${PORT:-3000}/health || exit 1'

CMD curl -f http://127.0.0.1:${PORT:-3000}/health || exit 1

const wf = makeWorkflow({ apiKey: 'sk-ant-abcdefghijklmnopqrstuvwxyz1234' });

const wf = makeWorkflow({ accessKeyId: 'AKIA1234567890ABCDEF' });

id: 'AKIA1234567890ABCDEF',

const wf = makeWorkflow({ key: 'AKIA1234567890ABCDEF' });

parameters: { key: 'AKIA1234567890ABCDEF' },

const jsCode = 'const base = "https://host:"; notify("[email protected]"); const db = "postgres://u:p@h/db";';

apiKey: 'sk_live_SUPER_SECRET_API_KEY_123456789',

const wf = makeWorkflow({ apiKey: 'sk-proj-abc123def456ghi789jkl0' });

const wf = makeWorkflow({ apiKey: 'sk-abcdefghij1234567890abcdefghij' });

const wf = makeWorkflow({ token: 'ghp_1234567890abcdefghijklmnopqrstuvwxyz' });

const wf = makeWorkflow({ token: 'xoxb-1234567890-abcdefghij' });

const wf = makeWorkflow({ token: 'ghp_1234567890abcdefghijklmnopqrstuvwxyz' });

Gates applied: no_behavioural_pass.

Audited 2026-09-17 · audit v0.4.0 · source sha 38edc3a55958 · full audit: observations/trust-audit/mcp-server/czlonkowski__n8n-9.json · Report an issue or request a re-scan

Audit history

Alternatives

Other servers in the same categories, safer ones first.

Questions