N8n MCP ClientSAFE
n8n custom node for MCP
Overview
From the repository's own README, as read at the audited commit. Badges and raw HTML are left out.
[](https://mseep.ai/app/bd76f121-1c8f-4f5d-9c65-1eac5d81b6af)
Important Note: The Server-Sent Events (SSE) transport is deprecated and replaced by the new HTTP Streamable transport. SSE remains available for legacy compatibility, but HTTP Streamable is now the recommended method for all new implementations.
This is an n8n community node that lets you interact with Model Context Protocol (MCP) servers in your n8n workflows.
MCP is a protocol that enables AI models to interact with external tools and data sources in a standardized way. This node allows you to connect to MCP servers, access resources, execute tools, and use prompts.
n8n is a fair-code licensed workflow automation platform.
Installation Credentials Environment Variables Operations Using as a Tool Compatibility Resources
Getting Started
Official Quickstart Video:
[](https://youtu.be/1t8DQL-jUJk)
Community Videos
Shoutout to all the creators of the following n8n community videos that are great resources for learning how to use this node:
- Is MCP the Future of N8N AI Agents? (Fully Tested!)
- Connect N8N AI Agents to EVERYTHING using MCP?
- Build an AI Agent That Can Use Any Tool (MCP in n8n Tutorial)
- The NEW N8N MCP is an Absolute Game-Changer (Brave Search MCP)
- MCP & n8n Automation: The Ultimate Guide for MCP AI Agents (2025)
- REVOLUÇÃO na criação de AGENTES no N8N com o MCP Server!!! (Portuguese)
If you have a great video that you'd
721eed1de0dcOBSERVED · 2026-09-22Connect
Built from this server's own package name, version and transport as found in its source — not copied from anyone's documentation, so it cannot drift against a page we do not control.
claude mcp add n8n-nodes-mcp -- npx -y [email protected]
{
"mcpServers": {
"n8n-nodes-mcp": {
"command": "npx",
"args": [
"-y",
"[email protected]"
]
}
}
}Exposed tools (1)
1 read · 0 write · 0 destructive.
| Tool | Risk | Description |
|---|---|---|
complexTool | read | A tool with a complex nested schema |
Trust audit
SAFEgrade B · trust 89/100 Nothing in the source contradicts what it says it does. Grade A is reserved for packages that have also passed the behavioural sandbox.
| Layer | What it checks | Result |
|---|---|---|
| L0 | Provenance & inventory | PASS |
| L1 | Static analysis of the code | PASS |
| L2 | Instruction surface (what it tells the agent) | PASS |
| L3 | Class-specific surface | WARN |
| L4 | Behavioural (sandbox) | SKIPPED |
What the source does
- Filesystem
- none-observed
- Network
- none-observed
- Shell
- none-observed
- Dependencies
- not all pinned
- Secrets in source
- none-found
Findings (6)
streamable-http
.eslintrc.js
.eslintrc.prepublish.js
.prettierrc.js
@modelcontextprotocol/sdk, zod, zod-to-json-schema, @types/jest, @types/node, @typescript-eslint/parser, eslint, eslint-plugin-n8n-nodes-base
Add to your `~/.zshrc` or `~/.bash_profile`:
Gates applied: no_behavioural_pass.
721eed1de0dcfull audit observations/trust-audit/mcp-server/nerding-io__n8n-mcp-client-1.json · Report an issue / request a re-scanAudit history
Every audit this server has had. A grade with a past is a grade somebody is still checking.
| Date | Source | Verdict | Grade | Score | Change |
|---|---|---|---|---|---|
| 2026-09-22 | 721eed1de0dc | SAFE | B | 89 | source changed, verdict held |
Questions
What is the N8n MCP Client MCP server?
n8n custom node for MCP
What tools does N8n MCP Client expose?
1 in total: 1 read-only, 0 that write, and 0 that can delete or overwrite. Every one is listed on this page with its risk.
Is N8n MCP Client safe to connect to an agent?
The audit found nothing in the source that contradicts what it says it does, and graded it B (89/100). Grade A is held back for packages that have also passed a sandboxed behavioural run, which is why a clean server reads B.
What credentials does N8n MCP Client need?
No credential environment variables were found in its source, so it appears to need none.
How does N8n MCP Client run?
It speaks streamable-http, so it runs as a service you connect to over the network. It is published on npm as n8n-nodes-mcp at 0.1.37.
How current is this page?
The grade is for one exact copy of the source (721eed1de0dc), read on 2026-09-22. The repository is watched and re-audited when it changes.