N8n MCP
A MCP for Claude Desktop / Claude Code / Windsurf / Cursor to build n8n workflows for you
N8n MCP is an open-source mcp server by czlonkowski, written mainly in TypeScript, with 23,187 GitHub stars and the MIT license. Its code was last updated Oct 27, 2026.
Scan summary: scanned Nov 5, 2026 at commit 1c755c5. Seen able to run shell commands. Scan policy
1c755c5 · Nov 5, 2026Findings (104)
- highHigh. Something risky that needs a close look before you install.secrets issueDetails are available to the maintainer after claiming this listing.
- highHigh. Something risky that needs a close look before you install.secrets issueDetails are available to the maintainer after claiming this listing.
- highHigh. Something risky that needs a close look before you install.secrets issueDetails are available to the maintainer after claiming this listing.
- highHigh. Something risky that needs a close look before you install.secrets issueDetails are available to the maintainer after claiming this listing.
- highHigh. Something risky that needs a close look before you install.secrets issueDetails are available to the maintainer after claiming this listing.
- highHigh. Something risky that needs a close look before you install.secrets issueDetails are available to the maintainer after claiming this listing.
- highHigh. Something risky that needs a close look before you install.secrets issueDetails are available to the maintainer after claiming this listing.
- highHigh. Something risky that needs a close look before you install.dependencies issueDetails are available to the maintainer after claiming this listing.
- highHigh. Something risky that needs a close look before you install.dependencies issueDetails are available to the maintainer after claiming this listing.
- highHigh. Something risky that needs a close look before you install.dependencies issueDetails are available to the maintainer after claiming this listing.
- highHigh. Something risky that needs a close look before you install.dependencies issueDetails are available to the maintainer after claiming this listing.
- highHigh. Something risky that needs a close look before you install.dependencies issueDetails are available to the maintainer after claiming this listing.
- mediumMedium. Worth checking, often a vulnerable dependency or a setup problem.Runs shell commands. Fine for some tools, but it means the agent can run anything your user can.
scripts/check-settings-drift.ts:357 - mediumMedium. Worth checking, often a vulnerable dependency or a setup problem.Runs shell commands. Fine for some tools, but it means the agent can run anything your user can.
scripts/generate-initial-release-notes.js:13 - mediumMedium. Worth checking, often a vulnerable dependency or a setup problem.Runs shell commands. Fine for some tools, but it means the agent can run anything your user can.
scripts/generate-release-notes.js:18 - mediumMedium. Worth checking, often a vulnerable dependency or a setup problem.Runs shell commands. Fine for some tools, but it means the agent can run anything your user can.
scripts/prepare-release.js:127 - mediumMedium. Worth checking, often a vulnerable dependency or a setup problem.Runs shell commands. Fine for some tools, but it means the agent can run anything your user can.
scripts/prepare-release.js:226 - mediumMedium. Worth checking, often a vulnerable dependency or a setup problem.Runs shell commands. Fine for some tools, but it means the agent can run anything your user can.
scripts/prepare-release.js:231 - mediumMedium. Worth checking, often a vulnerable dependency or a setup problem.Runs shell commands. Fine for some tools, but it means the agent can run anything your user can.
scripts/prepare-release.js:236 - mediumMedium. Worth checking, often a vulnerable dependency or a setup problem.Runs shell commands. Fine for some tools, but it means the agent can run anything your user can.
scripts/prepare-release.js:241 - mediumMedium. Worth checking, often a vulnerable dependency or a setup problem.Runs shell commands. Fine for some tools, but it means the agent can run anything your user can.
scripts/prepare-release.js:258 - mediumMedium. Worth checking, often a vulnerable dependency or a setup problem.Runs shell commands. Fine for some tools, but it means the agent can run anything your user can.
scripts/prepare-release.js:270 - mediumMedium. Worth checking, often a vulnerable dependency or a setup problem.Runs shell commands. Fine for some tools, but it means the agent can run anything your user can.
scripts/prepare-release.js:276 - mediumMedium. Worth checking, often a vulnerable dependency or a setup problem.Runs shell commands. Fine for some tools, but it means the agent can run anything your user can.
scripts/prepare-release.js:315 - mediumMedium. Worth checking, often a vulnerable dependency or a setup problem.Runs shell commands. Fine for some tools, but it means the agent can run anything your user can.
scripts/test-release-automation.js:476 - mediumMedium. Worth checking, often a vulnerable dependency or a setup problem.Runs shell commands. Fine for some tools, but it means the agent can run anything your user can.
scripts/test-release-automation.js:485 - mediumMedium. Worth checking, often a vulnerable dependency or a setup problem.Runs shell commands. Fine for some tools, but it means the agent can run anything your user can.
scripts/test-release-automation.js:494 - mediumMedium. Worth checking, often a vulnerable dependency or a setup problem.Runs shell commands. Fine for some tools, but it means the agent can run anything your user can.
scripts/test-release-automation.js:499 - mediumMedium. Worth checking, often a vulnerable dependency or a setup problem.Runs shell commands. Fine for some tools, but it means the agent can run anything your user can.
scripts/update-n8n-deps.js:47 - mediumMedium. Worth checking, often a vulnerable dependency or a setup problem.Runs shell commands. Fine for some tools, but it means the agent can run anything your user can.
scripts/update-n8n-deps.js:173 - mediumMedium. Worth checking, often a vulnerable dependency or a setup problem.Runs shell commands. Fine for some tools, but it means the agent can run anything your user can.
scripts/update-n8n-deps.js:257 - mediumMedium. Worth checking, often a vulnerable dependency or a setup problem.Runs shell commands. Fine for some tools, but it means the agent can run anything your user can.
scripts/update-n8n-deps.js:276 - mediumMedium. Worth checking, often a vulnerable dependency or a setup problem.Runs shell commands. Fine for some tools, but it means the agent can run anything your user can.
scripts/update-n8n-deps.js:294 - mediumMedium. Worth checking, often a vulnerable dependency or a setup problem.Runs shell commands. Fine for some tools, but it means the agent can run anything your user can.
scripts/update-n8n-deps.js:311 - mediumMedium. Worth checking, often a vulnerable dependency or a setup problem.@azure/msal-node@5.1.5: 1 known vulnerabilityGHSA-xcx6-jx8p-x3h5
package-lock.json - mediumMedium. Worth checking, often a vulnerable dependency or a setup problem.@faker-js/faker@9.9.0: 1 known vulnerabilityGHSA-qxc2-j82w-r537
package-lock.json - mediumMedium. Worth checking, often a vulnerable dependency or a setup problem.@modelcontextprotocol/sdk@1.30.0: 6 known vulnerabilitiesGHSA-22jm-h49p-29qw, GHSA-46jr-4wx8-v453, GHSA-6prh-2h8m-c8cw, GHSA-6qxp-vccf-f47h, GHSA-f897-62hf-6gxq +1 more
package-lock.json - mediumMedium. Worth checking, often a vulnerable dependency or a setup problem.@modelcontextprotocol/sdk@1.31.0: 4 known vulnerabilitiesGHSA-22jm-h49p-29qw, GHSA-46jr-4wx8-v453, GHSA-6prh-2h8m-c8cw, GHSA-rvq5-wwqv-78pq
package-lock.json - mediumMedium. Worth checking, often a vulnerable dependency or a setup problem.@opentelemetry/exporter-prometheus@0.213.0: 1 known vulnerabilityGHSA-q7rr-3cgh-j5r3
package-lock.json - mediumMedium. Worth checking, often a vulnerable dependency or a setup problem.@opentelemetry/propagator-jaeger@2.6.0: 1 known vulnerabilityGHSA-45rx-2jwx-cxfr
package-lock.json - mediumMedium. Worth checking, often a vulnerable dependency or a setup problem.@opentelemetry/sdk-node@0.213.0: 1 known vulnerabilityGHSA-q7rr-3cgh-j5r3
package-lock.json - mediumMedium. Worth checking, often a vulnerable dependency or a setup problem.adm-zip@0.5.18: 8 known vulnerabilitiesGHSA-7q85-xj36-vmfc, GHSA-8238-w5pm-2374, GHSA-c6fg-446q-cg94, GHSA-j5f4-cc29-5x44, GHSA-p634-w6r4-rjp2 +3 more
package-lock.json - mediumMedium. Worth checking, often a vulnerable dependency or a setup problem.form-data@2.5.5: 1 known vulnerabilityGHSA-hmw2-7cc7-3qxx
package-lock.json - mediumMedium. Worth checking, often a vulnerable dependency or a setup problem.linkify-it@5.0.0: 2 known vulnerabilitiesGHSA-22p9-wv53-3rq4, GHSA-v245-v573-v5vm
package-lock.json - mediumMedium. Worth checking, often a vulnerable dependency or a setup problem.nodemailer@7.0.13: 20 known vulnerabilitiesGHSA-268h-hp4c-crq3, GHSA-2x7j-588g-ccc2, GHSA-39m8-27wv-hr27, GHSA-4ffr-jq9g-5ffx, GHSA-4g23-2xm8-66gc +15 more
package-lock.json - mediumMedium. Worth checking, often a vulnerable dependency or a setup problem.toml@3.0.0: 6 known vulnerabilitiesGHSA-4qx8-w7c3-pj3p, GHSA-82x6-q7mm-w9cf, GHSA-9j65-hcg3-gc64, GHSA-9qmh-m7c6-f92p, GHSA-h895-cgqg-jf52 +1 more
package-lock.json - mediumMedium. Worth checking, often a vulnerable dependency or a setup problem.undici@6.29.0: 5 known vulnerabilitiesGHSA-2m5v-pch6-74hx, GHSA-4qv8-2p9j-2685, GHSA-9fm3-97px-rjf6, GHSA-qrxm-fqhp-jwvm, GHSA-xjj6-f33q-929c
package-lock.json - mediumMedium. Worth checking, often a vulnerable dependency or a setup problem.undici@7.29.1: 8 known vulnerabilitiesGHSA-2m5v-pch6-74hx, GHSA-4qv8-2p9j-2685, GHSA-4w7w-5xrc-9h26, GHSA-55wc-3pg8-jfw6, GHSA-9fm3-97px-rjf6 +3 more
package-lock.json - mediumMedium. Worth checking, often a vulnerable dependency or a setup problem.uuid@10.0.0: 1 known vulnerabilityGHSA-w5hq-g745-h8pq
package-lock.json - mediumMedium. Worth checking, often a vulnerable dependency or a setup problem.uuid@8.3.2: 1 known vulnerabilityGHSA-w5hq-g745-h8pq
package-lock.json - mediumMedium. Worth checking, often a vulnerable dependency or a setup problem.uuid@9.0.1: 1 known vulnerabilityGHSA-w5hq-g745-h8pq
package-lock.json - mediumMedium. Worth checking, often a vulnerable dependency or a setup problem.vite@7.3.5: 5 known vulnerabilitiesGHSA-587h-7wmj-h5pm, GHSA-698v-4r3x-3vcv, GHSA-9jrq-w75r-8gcw, GHSA-r825-w8mm-5pxw, GHSA-rq7h-c2jc-7f22
package-lock.json - mediumMedium. Worth checking, often a vulnerable dependency or a setup problem.ws@8.20.1: 1 known vulnerabilityGHSA-96hv-2xvq-fx4p
package-lock.json - mediumMedium. Worth checking, often a vulnerable dependency or a setup problem.zod@3.25.75: 1 known vulnerabilityGHSA-mrhx-c7xc-m3w5
package-lock.json - mediumMedium. Worth checking, often a vulnerable dependency or a setup problem.zod@3.25.76: 1 known vulnerabilityGHSA-mrhx-c7xc-m3w5
package-lock.json - mediumMedium. Worth checking, often a vulnerable dependency or a setup problem.@modelcontextprotocol/sdk@1.29.0: 6 known vulnerabilitiesGHSA-22jm-h49p-29qw, GHSA-46jr-4wx8-v453, GHSA-6prh-2h8m-c8cw, GHSA-6qxp-vccf-f47h, GHSA-f897-62hf-6gxq +1 more
ui-apps/package-lock.json - mediumMedium. Worth checking, often a vulnerable dependency or a setup problem.body-parser@2.3.0: 1 known vulnerabilityGHSA-27r3-jxmh-p828
ui-apps/package-lock.json - mediumMedium. Worth checking, often a vulnerable dependency or a setup problem.zod@4.4.3: 1 known vulnerabilityGHSA-mrhx-c7xc-m3w5
ui-apps/package-lock.json - lowLow. Minor, or common in normal tools. Shown for information.Possible example credential in docs/tests: generic-api-key2 matches in this file
data/skills/n8n-binary-and-data/AGENT_TOOL_BINARY.md:51 - lowLow. Minor, or common in normal tools. Shown for information.Possible example credential in docs/tests: curl-auth-header
N8N_HTTP_STREAMABLE_SETUP.md:111 - lowLow. Minor, or common in normal tools. Shown for information.Possible example credential in docs/tests: generic-api-key
docs/competitive-analysis-july-2026.md:127 - lowLow. Minor, or common in normal tools. Shown for information.Possible example credential in docs/tests: curl-auth-header
docs/HTTP_DEPLOYMENT.md:734 - lowLow. Minor, or common in normal tools. Shown for information.Possible example credential in docs/tests: curl-auth-header2 matches in this file
docs/N8N_DEPLOYMENT.md:652 - lowLow. Minor, or common in normal tools. Shown for information.Possible example credential in docs/tests: generic-api-key
tests/setup/integration-global-setup.ts:39 - lowLow. Minor, or common in normal tools. Shown for information.Possible example credential in docs/tests: generic-api-key
tests/setup/test-env.ts:75 - lowLow. Minor, or common in normal tools. Shown for information.Possible example credential in docs/tests: stripe-access-token
tests/unit/flexible-instance-security.test.ts:105 - lowLow. Minor, or common in normal tools. Shown for information.Possible example credential in docs/tests: generic-api-key
tests/unit/http-server/multi-tenant-support.test.ts:184 - lowLow. Minor, or common in normal tools. Shown for information.Possible example credential in docs/tests: generic-api-key
tests/unit/http-server/pre-auth-log-redaction.test.ts:123 - lowLow. Minor, or common in normal tools. Shown for information.Possible example credential in docs/tests: generic-api-key
tests/unit/multi-tenant-integration.test.ts:77 - lowLow. Minor, or common in normal tools. Shown for information.Possible example credential in docs/tests: stripe-access-token
tests/unit/multi-tenant-integration.test.ts:145 - lowLow. Minor, or common in normal tools. Shown for information.Possible example credential in docs/tests: stripe-access-token
tests/unit/types/instance-context-coverage.test.ts:313 - lowLow. Minor, or common in normal tools. Shown for information.Possible example credential in docs/tests: generic-api-key
tests/unit/types/instance-context-multi-tenant.test.ts:560 - lowLow. Minor, or common in normal tools. Shown for information.Possible example credential in docs/tests: generic-api-key
tests/unit/services/config-validator-security.test.ts:18 - lowLow. Minor, or common in normal tools. Shown for information.Possible example credential in docs/tests: generic-api-key
fetch_log.txt:4149 - lowLow. Minor, or common in normal tools. Shown for information.Possible example credential in docs/tests: generic-api-key4 matches in this file
tests/unit/telemetry/telemetry-events.test.ts:265 - lowLow. Minor, or common in normal tools. Shown for information.Possible example credential in docs/tests: stripe-access-token2 matches in this file
tests/unit/telemetry/telemetry-events.test.ts:250 - lowLow. Minor, or common in normal tools. Shown for information.Possible example credential in docs/tests: jwt2 matches in this file
tests/unit/services/credential-scanner.test.ts:86 - lowLow. Minor, or common in normal tools. Shown for information.Possible example credential in docs/tests: stripe-access-token3 matches in this file
tests/unit/services/credential-scanner.test.ts:79 - lowLow. Minor, or common in normal tools. Shown for information.Possible example credential in docs/tests: generic-api-key8 matches in this file
tests/unit/services/credential-scanner.test.ts:55 - lowLow. Minor, or common in normal tools. Shown for information.Possible example credential in docs/tests: gcp-api-key
tests/unit/telemetry/workflow-sanitizer.test.ts:1558 - lowLow. Minor, or common in normal tools. Shown for information.Possible example credential in docs/tests: generic-api-key17 matches in this file
tests/unit/telemetry/workflow-sanitizer.test.ts:16 - lowLow. Minor, or common in normal tools. Shown for information.Possible example credential in docs/tests: gitlab-pat
tests/unit/telemetry/workflow-sanitizer.test.ts:911 - lowLow. Minor, or common in normal tools. Shown for information.@hono/node-server@1.19.17: 2 known vulnerabilitiesGHSA-rmxm-3fg6-px4f, GHSA-rmxm-3fg6-px4f
package-lock.json - lowLow. Minor, or common in normal tools. Shown for information.@opentelemetry/core@2.6.0: 1 known vulnerabilityGHSA-8988-4f7v-96qf
package-lock.json - lowLow. Minor, or common in normal tools. Shown for information.@tootallnate/once@1.1.2: 1 known vulnerabilityGHSA-vpq2-c234-7xj6
package-lock.json - lowLow. Minor, or common in normal tools. Shown for information.@vitest/mocker@3.2.6: 2 known vulnerabilitiesGHSA-82fw-gwwq-j7x9, GHSA-qxg6-89mg-rqv8
package-lock.json - lowLow. Minor, or common in normal tools. Shown for information.ajv@7.2.4: 1 known vulnerabilityGHSA-2g4f-4pwh-qvx6
package-lock.json - lowLow. Minor, or common in normal tools. Shown for information.deepmerge@4.3.1: 1 known vulnerabilityGHSA-gcqx-w48m-w2h4
package-lock.json - lowLow. Minor, or common in normal tools. Shown for information.esbuild@0.27.7: 1 known vulnerabilityGHSA-g7r4-m6w7-qqqr
package-lock.json - lowLow. Minor, or common in normal tools. Shown for information.glob@10.5.0: 1 known vulnerabilityGHSA-3g3m-2fjr-6pw4
package-lock.json - lowLow. Minor, or common in normal tools. Shown for information.minimatch@10.2.5: 1 known vulnerabilityGHSA-g3hv-75wg-m249
package-lock.json - lowLow. Minor, or common in normal tools. Shown for information.minimatch@9.0.9: 1 known vulnerabilityGHSA-g3hv-75wg-m249
package-lock.json - lowLow. Minor, or common in normal tools. Shown for information.nodemailer@10.0.14: 3 known vulnerabilitiesGHSA-85x2-q946-cp5h, GHSA-8c8m-p3m8-cjg8, GHSA-m943-m63m-w62w
package-lock.json - lowLow. Minor, or common in normal tools. Shown for information.qs@6.11.2: 5 known vulnerabilitiesGHSA-4mjr-xmp4-gh2g, GHSA-6pq8-jhm2-2vcw, GHSA-6rw7-vpxm-498p, GHSA-q8mj-m7cp-5q26, GHSA-w7fw-mjwx-w883
package-lock.json - lowLow. Minor, or common in normal tools. Shown for information.qs@6.16.0: 2 known vulnerabilitiesGHSA-6pq8-jhm2-2vcw, GHSA-6pq8-jhm2-2vcw
package-lock.json - lowLow. Minor, or common in normal tools. Shown for information.sanitize-html@2.18.0: 1 known vulnerabilityGHSA-c9rx-x947-fp3h
package-lock.json - lowLow. Minor, or common in normal tools. Shown for information.showdown@2.1.0: 3 known vulnerabilitiesGHSA-22g5-r2x5-97cx, GHSA-cr32-g25g-vxjj, GHSA-rmmh-p597-ppvv
package-lock.json - lowLow. Minor, or common in normal tools. Shown for information.stream-json@1.9.1: 3 known vulnerabilitiesGHSA-528h-pc64-c93x, GHSA-hqr4-qq8f-hg3x, GHSA-mjw6-4jj6-33hc
package-lock.json - lowLow. Minor, or common in normal tools. Shown for information.vitest@3.2.6: 1 known vulnerabilityGHSA-82fw-gwwq-j7x9
package-lock.json - lowLow. Minor, or common in normal tools. Shown for information.@vitest/mocker@4.1.11: 2 known vulnerabilitiesGHSA-qxg6-89mg-rqv8, GHSA-xp26-3454-mjgp
ui-apps/package-lock.json - lowLow. Minor, or common in normal tools. Shown for information.fast-uri@3.1.8: 4 known vulnerabilitiesGHSA-333x-w4r6-6crp, GHSA-w74x-v6f9-j3xg, GHSA-wjr9-j795-jxcr, GHSA-xhq7-xmqj-769h
ui-apps/package-lock.json - lowLow. Minor, or common in normal tools. Shown for information.hono@4.13.7: 1 known vulnerabilityGHSA-5r4p-p66f-jhc7
ui-apps/package-lock.json - lowLow. Minor, or common in normal tools. Shown for information.package.json has a prepare scripthusky
package.json - lowLow. Minor, or common in normal tools. Shown for information.No manifest declaring network access and environment variables (agent.json)
Network activity
Tools exposed (7)
tools_documentationGet documentation for n8n MCP tools. Call without parameters for quick start guide. Use topic parameter to get documentation for specific tools. Use depth='full' for comprehensive documentation.
search_nodesSearch n8n nodes by keyword with optional real-world examples. Pass query as string. Example: query="webhook" or query="database". Returns max 20 results. Use includeExamples=true to get top 2 template configs per node.
get_nodeGet node info with progressive detail levels and multiple modes. Detail: minimal (~200 tokens), standard (~1-2K, default), full (~3-8K). Modes: info (default), docs (markdown documentation), search_properties (find properties), versions/compare/breaking/migrations (version info). Use format='docs' f
validate_nodeValidate n8n node configuration. Use mode='full' for comprehensive validation with errors/warnings/suggestions, mode='minimal' for quick required fields check. Example: nodeType="nodes-base.slack", config={resource:"channel",operation:"create"}
get_templateGet template by ID. Use mode to control response size: nodes_only (minimal), structure (nodes+connections), full (complete workflow).
search_templatesSearch templates with multiple modes. Use searchMode='keyword' for text search, 'by_nodes' to find templates using specific nodes, 'by_task' for curated task-based templates, 'by_metadata' for filtering by complexity/setup time/services, 'patterns' for lightweight workflow pattern summaries mined fr
validate_workflowFull workflow validation: structure, connections, expressions, AI tools. Returns errors/warnings/fixes. Essential before deploy.
Automated result for the commit shown. See our scan policy. View the scan log
Maintainers can claim the listing to rescan, or dispute a result.
N8n MCP alternatives
View more →Similar mcp servers in Productivity & Workflow, ranked by GitHub stars. Compare licence, recent activity and scan status before you choose.
| Name | Stars | Licence | Last updated | Scan |
|---|---|---|---|---|
| N8n MCP (this page) czlonkowski | 23k | MIT | Oct 27, 2026 | Scanned, no flagged issues |
| Trigger Dev triggerdotdev | 17k | Apache-2.0 | Oct 31, 2026 | Scanned, no flagged issues |
| Skill Seekers yusufkaraaslan | 15k | MIT | Sep 30, 2026 | Scanned, no flagged issues |
| Windows MCP CursorTouch | 11k | MIT | Nov 1, 2026 | Scanned, no flagged issues |
| Mobile MCP mobile-next | 10k | Apache-2.0 | Oct 30, 2026 | Scanned, no flagged issues |
| MCP Agent lastmile-ai | 8.6k | Apache-2.0 | Jan 25, 2026 | Scanned, no flagged issues |