N8n MCP

by czlonkowski• 23k•• Scanned•Claim this listing•Request removal
Productivity & Workflowmcpmcp servern8nworkflows

A MCP for Claude Desktop / Claude Code / Windsurf / Cursor to build n8n workflows for you

N8n MCP is an open-source mcp server by czlonkowski, written mainly in TypeScript, with 23,187 GitHub stars and the MIT license. Its code was last updated Oct 27, 2026.

Scan summary: scanned Nov 5, 2026 at commit 1c755c5. Seen able to run shell commands. Scan policy

Scanned
Full scan at 1c755c5 · Nov 5, 2026
Scanned Builds Boots No undeclared egress Reproducible
Static code scanwarn
Secrets scanfail
Dependency audit150 known vulnerabilitiesfail
Manifestnonewarn
Buildpass
Boot & handshake7 toolspass
Network egresspass
Reproducible (×3)pass

Findings (104)

  • high
    secrets issue
    Details are available to the maintainer after claiming this listing.
  • high
    secrets issue
    Details are available to the maintainer after claiming this listing.
  • high
    secrets issue
    Details are available to the maintainer after claiming this listing.
  • high
    secrets issue
    Details are available to the maintainer after claiming this listing.
  • high
    secrets issue
    Details are available to the maintainer after claiming this listing.
  • high
    secrets issue
    Details are available to the maintainer after claiming this listing.
  • high
    secrets issue
    Details are available to the maintainer after claiming this listing.
  • high
    dependencies issue
    Details are available to the maintainer after claiming this listing.
  • high
    dependencies issue
    Details are available to the maintainer after claiming this listing.
  • high
    dependencies issue
    Details are available to the maintainer after claiming this listing.
  • high
    dependencies issue
    Details are available to the maintainer after claiming this listing.
  • high
    dependencies issue
    Details are available to the maintainer after claiming this listing.
  • medium
    Runs shell commands. Fine for some tools, but it means the agent can run anything your user can.
    scripts/check-settings-drift.ts:357
  • medium
    Runs shell commands. Fine for some tools, but it means the agent can run anything your user can.
    scripts/generate-initial-release-notes.js:13
  • medium
    Runs shell commands. Fine for some tools, but it means the agent can run anything your user can.
    scripts/generate-release-notes.js:18
  • medium
    Runs shell commands. Fine for some tools, but it means the agent can run anything your user can.
    scripts/prepare-release.js:127
  • medium
    Runs shell commands. Fine for some tools, but it means the agent can run anything your user can.
    scripts/prepare-release.js:226
  • medium
    Runs shell commands. Fine for some tools, but it means the agent can run anything your user can.
    scripts/prepare-release.js:231
  • medium
    Runs shell commands. Fine for some tools, but it means the agent can run anything your user can.
    scripts/prepare-release.js:236
  • medium
    Runs shell commands. Fine for some tools, but it means the agent can run anything your user can.
    scripts/prepare-release.js:241
  • medium
    Runs shell commands. Fine for some tools, but it means the agent can run anything your user can.
    scripts/prepare-release.js:258
  • medium
    Runs shell commands. Fine for some tools, but it means the agent can run anything your user can.
    scripts/prepare-release.js:270
  • medium
    Runs shell commands. Fine for some tools, but it means the agent can run anything your user can.
    scripts/prepare-release.js:276
  • medium
    Runs shell commands. Fine for some tools, but it means the agent can run anything your user can.
    scripts/prepare-release.js:315
  • medium
    Runs shell commands. Fine for some tools, but it means the agent can run anything your user can.
    scripts/test-release-automation.js:476
  • medium
    Runs shell commands. Fine for some tools, but it means the agent can run anything your user can.
    scripts/test-release-automation.js:485
  • medium
    Runs shell commands. Fine for some tools, but it means the agent can run anything your user can.
    scripts/test-release-automation.js:494
  • medium
    Runs shell commands. Fine for some tools, but it means the agent can run anything your user can.
    scripts/test-release-automation.js:499
  • medium
    Runs shell commands. Fine for some tools, but it means the agent can run anything your user can.
    scripts/update-n8n-deps.js:47
  • medium
    Runs shell commands. Fine for some tools, but it means the agent can run anything your user can.
    scripts/update-n8n-deps.js:173
  • medium
    Runs shell commands. Fine for some tools, but it means the agent can run anything your user can.
    scripts/update-n8n-deps.js:257
  • medium
    Runs shell commands. Fine for some tools, but it means the agent can run anything your user can.
    scripts/update-n8n-deps.js:276
  • medium
    Runs shell commands. Fine for some tools, but it means the agent can run anything your user can.
    scripts/update-n8n-deps.js:294
  • medium
    Runs shell commands. Fine for some tools, but it means the agent can run anything your user can.
    scripts/update-n8n-deps.js:311
  • medium
    @azure/msal-node@5.1.5: 1 known vulnerability
    GHSA-xcx6-jx8p-x3h5
    package-lock.json
  • medium
    @faker-js/faker@9.9.0: 1 known vulnerability
    GHSA-qxc2-j82w-r537
    package-lock.json
  • medium
    @modelcontextprotocol/sdk@1.30.0: 6 known vulnerabilities
    GHSA-22jm-h49p-29qw, GHSA-46jr-4wx8-v453, GHSA-6prh-2h8m-c8cw, GHSA-6qxp-vccf-f47h, GHSA-f897-62hf-6gxq +1 more
    package-lock.json
  • medium
    @modelcontextprotocol/sdk@1.31.0: 4 known vulnerabilities
    GHSA-22jm-h49p-29qw, GHSA-46jr-4wx8-v453, GHSA-6prh-2h8m-c8cw, GHSA-rvq5-wwqv-78pq
    package-lock.json
  • medium
    @opentelemetry/exporter-prometheus@0.213.0: 1 known vulnerability
    GHSA-q7rr-3cgh-j5r3
    package-lock.json
  • medium
    @opentelemetry/propagator-jaeger@2.6.0: 1 known vulnerability
    GHSA-45rx-2jwx-cxfr
    package-lock.json
  • medium
    @opentelemetry/sdk-node@0.213.0: 1 known vulnerability
    GHSA-q7rr-3cgh-j5r3
    package-lock.json
  • medium
    adm-zip@0.5.18: 8 known vulnerabilities
    GHSA-7q85-xj36-vmfc, GHSA-8238-w5pm-2374, GHSA-c6fg-446q-cg94, GHSA-j5f4-cc29-5x44, GHSA-p634-w6r4-rjp2 +3 more
    package-lock.json
  • medium
    form-data@2.5.5: 1 known vulnerability
    GHSA-hmw2-7cc7-3qxx
    package-lock.json
  • medium
    linkify-it@5.0.0: 2 known vulnerabilities
    GHSA-22p9-wv53-3rq4, GHSA-v245-v573-v5vm
    package-lock.json
  • medium
    nodemailer@7.0.13: 20 known vulnerabilities
    GHSA-268h-hp4c-crq3, GHSA-2x7j-588g-ccc2, GHSA-39m8-27wv-hr27, GHSA-4ffr-jq9g-5ffx, GHSA-4g23-2xm8-66gc +15 more
    package-lock.json
  • medium
    toml@3.0.0: 6 known vulnerabilities
    GHSA-4qx8-w7c3-pj3p, GHSA-82x6-q7mm-w9cf, GHSA-9j65-hcg3-gc64, GHSA-9qmh-m7c6-f92p, GHSA-h895-cgqg-jf52 +1 more
    package-lock.json
  • medium
    undici@6.29.0: 5 known vulnerabilities
    GHSA-2m5v-pch6-74hx, GHSA-4qv8-2p9j-2685, GHSA-9fm3-97px-rjf6, GHSA-qrxm-fqhp-jwvm, GHSA-xjj6-f33q-929c
    package-lock.json
  • medium
    undici@7.29.1: 8 known vulnerabilities
    GHSA-2m5v-pch6-74hx, GHSA-4qv8-2p9j-2685, GHSA-4w7w-5xrc-9h26, GHSA-55wc-3pg8-jfw6, GHSA-9fm3-97px-rjf6 +3 more
    package-lock.json
  • medium
    uuid@10.0.0: 1 known vulnerability
    GHSA-w5hq-g745-h8pq
    package-lock.json
  • medium
    uuid@8.3.2: 1 known vulnerability
    GHSA-w5hq-g745-h8pq
    package-lock.json
  • medium
    uuid@9.0.1: 1 known vulnerability
    GHSA-w5hq-g745-h8pq
    package-lock.json
  • medium
    vite@7.3.5: 5 known vulnerabilities
    GHSA-587h-7wmj-h5pm, GHSA-698v-4r3x-3vcv, GHSA-9jrq-w75r-8gcw, GHSA-r825-w8mm-5pxw, GHSA-rq7h-c2jc-7f22
    package-lock.json
  • medium
    ws@8.20.1: 1 known vulnerability
    GHSA-96hv-2xvq-fx4p
    package-lock.json
  • medium
    zod@3.25.75: 1 known vulnerability
    GHSA-mrhx-c7xc-m3w5
    package-lock.json
  • medium
    zod@3.25.76: 1 known vulnerability
    GHSA-mrhx-c7xc-m3w5
    package-lock.json
  • medium
    @modelcontextprotocol/sdk@1.29.0: 6 known vulnerabilities
    GHSA-22jm-h49p-29qw, GHSA-46jr-4wx8-v453, GHSA-6prh-2h8m-c8cw, GHSA-6qxp-vccf-f47h, GHSA-f897-62hf-6gxq +1 more
    ui-apps/package-lock.json
  • medium
    body-parser@2.3.0: 1 known vulnerability
    GHSA-27r3-jxmh-p828
    ui-apps/package-lock.json
  • medium
    zod@4.4.3: 1 known vulnerability
    GHSA-mrhx-c7xc-m3w5
    ui-apps/package-lock.json
  • low
    Possible example credential in docs/tests: generic-api-key
    2 matches in this file
    data/skills/n8n-binary-and-data/AGENT_TOOL_BINARY.md:51
  • low
    Possible example credential in docs/tests: curl-auth-header
    N8N_HTTP_STREAMABLE_SETUP.md:111
  • low
    Possible example credential in docs/tests: generic-api-key
    docs/competitive-analysis-july-2026.md:127
  • low
    Possible example credential in docs/tests: curl-auth-header
    docs/HTTP_DEPLOYMENT.md:734
  • low
    Possible example credential in docs/tests: curl-auth-header
    2 matches in this file
    docs/N8N_DEPLOYMENT.md:652
  • low
    Possible example credential in docs/tests: generic-api-key
    tests/setup/integration-global-setup.ts:39
  • low
    Possible example credential in docs/tests: generic-api-key
    tests/setup/test-env.ts:75
  • low
    Possible example credential in docs/tests: stripe-access-token
    tests/unit/flexible-instance-security.test.ts:105
  • low
    Possible example credential in docs/tests: generic-api-key
    tests/unit/http-server/multi-tenant-support.test.ts:184
  • low
    Possible example credential in docs/tests: generic-api-key
    tests/unit/http-server/pre-auth-log-redaction.test.ts:123
  • low
    Possible example credential in docs/tests: generic-api-key
    tests/unit/multi-tenant-integration.test.ts:77
  • low
    Possible example credential in docs/tests: stripe-access-token
    tests/unit/multi-tenant-integration.test.ts:145
  • low
    Possible example credential in docs/tests: stripe-access-token
    tests/unit/types/instance-context-coverage.test.ts:313
  • low
    Possible example credential in docs/tests: generic-api-key
    tests/unit/types/instance-context-multi-tenant.test.ts:560
  • low
    Possible example credential in docs/tests: generic-api-key
    tests/unit/services/config-validator-security.test.ts:18
  • low
    Possible example credential in docs/tests: generic-api-key
    fetch_log.txt:4149
  • low
    Possible example credential in docs/tests: generic-api-key
    4 matches in this file
    tests/unit/telemetry/telemetry-events.test.ts:265
  • low
    Possible example credential in docs/tests: stripe-access-token
    2 matches in this file
    tests/unit/telemetry/telemetry-events.test.ts:250
  • low
    Possible example credential in docs/tests: jwt
    2 matches in this file
    tests/unit/services/credential-scanner.test.ts:86
  • low
    Possible example credential in docs/tests: stripe-access-token
    3 matches in this file
    tests/unit/services/credential-scanner.test.ts:79
  • low
    Possible example credential in docs/tests: generic-api-key
    8 matches in this file
    tests/unit/services/credential-scanner.test.ts:55
  • low
    Possible example credential in docs/tests: gcp-api-key
    tests/unit/telemetry/workflow-sanitizer.test.ts:1558
  • low
    Possible example credential in docs/tests: generic-api-key
    17 matches in this file
    tests/unit/telemetry/workflow-sanitizer.test.ts:16
  • low
    Possible example credential in docs/tests: gitlab-pat
    tests/unit/telemetry/workflow-sanitizer.test.ts:911
  • low
    @hono/node-server@1.19.17: 2 known vulnerabilities
    GHSA-rmxm-3fg6-px4f, GHSA-rmxm-3fg6-px4f
    package-lock.json
  • low
    @opentelemetry/core@2.6.0: 1 known vulnerability
    GHSA-8988-4f7v-96qf
    package-lock.json
  • low
    @tootallnate/once@1.1.2: 1 known vulnerability
    GHSA-vpq2-c234-7xj6
    package-lock.json
  • low
    @vitest/mocker@3.2.6: 2 known vulnerabilities
    GHSA-82fw-gwwq-j7x9, GHSA-qxg6-89mg-rqv8
    package-lock.json
  • low
    ajv@7.2.4: 1 known vulnerability
    GHSA-2g4f-4pwh-qvx6
    package-lock.json
  • low
    deepmerge@4.3.1: 1 known vulnerability
    GHSA-gcqx-w48m-w2h4
    package-lock.json
  • low
    esbuild@0.27.7: 1 known vulnerability
    GHSA-g7r4-m6w7-qqqr
    package-lock.json
  • low
    glob@10.5.0: 1 known vulnerability
    GHSA-3g3m-2fjr-6pw4
    package-lock.json
  • low
    minimatch@10.2.5: 1 known vulnerability
    GHSA-g3hv-75wg-m249
    package-lock.json
  • low
    minimatch@9.0.9: 1 known vulnerability
    GHSA-g3hv-75wg-m249
    package-lock.json
  • low
    nodemailer@10.0.14: 3 known vulnerabilities
    GHSA-85x2-q946-cp5h, GHSA-8c8m-p3m8-cjg8, GHSA-m943-m63m-w62w
    package-lock.json
  • low
    qs@6.11.2: 5 known vulnerabilities
    GHSA-4mjr-xmp4-gh2g, GHSA-6pq8-jhm2-2vcw, GHSA-6rw7-vpxm-498p, GHSA-q8mj-m7cp-5q26, GHSA-w7fw-mjwx-w883
    package-lock.json
  • low
    qs@6.16.0: 2 known vulnerabilities
    GHSA-6pq8-jhm2-2vcw, GHSA-6pq8-jhm2-2vcw
    package-lock.json
  • low
    sanitize-html@2.18.0: 1 known vulnerability
    GHSA-c9rx-x947-fp3h
    package-lock.json
  • low
    showdown@2.1.0: 3 known vulnerabilities
    GHSA-22g5-r2x5-97cx, GHSA-cr32-g25g-vxjj, GHSA-rmmh-p597-ppvv
    package-lock.json
  • low
    stream-json@1.9.1: 3 known vulnerabilities
    GHSA-528h-pc64-c93x, GHSA-hqr4-qq8f-hg3x, GHSA-mjw6-4jj6-33hc
    package-lock.json
  • low
    vitest@3.2.6: 1 known vulnerability
    GHSA-82fw-gwwq-j7x9
    package-lock.json
  • low
    @vitest/mocker@4.1.11: 2 known vulnerabilities
    GHSA-qxg6-89mg-rqv8, GHSA-xp26-3454-mjgp
    ui-apps/package-lock.json
  • low
    fast-uri@3.1.8: 4 known vulnerabilities
    GHSA-333x-w4r6-6crp, GHSA-w74x-v6f9-j3xg, GHSA-wjr9-j795-jxcr, GHSA-xhq7-xmqj-769h
    ui-apps/package-lock.json
  • low
    hono@4.13.7: 1 known vulnerability
    GHSA-5r4p-p66f-jhc7
    ui-apps/package-lock.json
  • low
    package.json has a prepare script
    husky
    package.json
  • low
    No manifest declaring network access and environment variables (agent.json)

Network activity

During install
github.comnodejs.orgregistry.npmjs.orgrelease-assets.githubusercontent.com
While running
No connections

Tools exposed (7)

  • tools_documentation

    Get documentation for n8n MCP tools. Call without parameters for quick start guide. Use topic parameter to get documentation for specific tools. Use depth='full' for comprehensive documentation.

  • search_nodes

    Search n8n nodes by keyword with optional real-world examples. Pass query as string. Example: query="webhook" or query="database". Returns max 20 results. Use includeExamples=true to get top 2 template configs per node.

  • get_node

    Get node info with progressive detail levels and multiple modes. Detail: minimal (~200 tokens), standard (~1-2K, default), full (~3-8K). Modes: info (default), docs (markdown documentation), search_properties (find properties), versions/compare/breaking/migrations (version info). Use format='docs' f

  • validate_node

    Validate n8n node configuration. Use mode='full' for comprehensive validation with errors/warnings/suggestions, mode='minimal' for quick required fields check. Example: nodeType="nodes-base.slack", config={resource:"channel",operation:"create"}

  • get_template

    Get template by ID. Use mode to control response size: nodes_only (minimal), structure (nodes+connections), full (complete workflow).

  • search_templates

    Search templates with multiple modes. Use searchMode='keyword' for text search, 'by_nodes' to find templates using specific nodes, 'by_task' for curated task-based templates, 'by_metadata' for filtering by complexity/setup time/services, 'patterns' for lightweight workflow pattern summaries mined fr

  • validate_workflow

    Full workflow validation: structure, connections, expressions, AI tools. Returns errors/warnings/fixes. Essential before deploy.

Automated result for the commit shown. See our scan policy. View the scan log

Maintainers can claim the listing to rescan, or dispute a result.

N8n MCP alternatives

View more →

Similar mcp servers in Productivity & Workflow, ranked by GitHub stars. Compare licence, recent activity and scan status before you choose.

NameStarsLicenceLast updatedScan
N8n MCP (this page)
czlonkowski
23kMITOct 27, 2026Scanned, no flagged issues
Trigger Dev
triggerdotdev
17kApache-2.0Oct 31, 2026Scanned, no flagged issues
Skill Seekers
yusufkaraaslan
15kMITSep 30, 2026Scanned, no flagged issues
Windows MCP
CursorTouch
11kMITNov 1, 2026Scanned, no flagged issues
Mobile MCP
mobile-next
10kApache-2.0Oct 30, 2026Scanned, no flagged issues
MCP Agent
lastmile-ai
8.6kApache-2.0Jan 25, 2026Scanned, no flagged issues