N8n Workflow Builder MCP Server

Findings (33)

• highHigh. Something risky that needs a close look before you install.
  secrets issue

  Details are available to the maintainer after claiming this listing.
• highHigh. Something risky that needs a close look before you install.
  dependencies issue

  Details are available to the maintainer after claiming this listing.
• mediumMedium. Worth checking, often a vulnerable dependency or a setup problem.
  Runs shell commands. Fine for some tools, but it means the agent can run anything your user can.

  scripts/verify-package.js:43
• mediumMedium. Worth checking, often a vulnerable dependency or a setup problem.
  @modelcontextprotocol/sdk@1.17.0: 8 known vulnerabilities

  GHSA-345p-7cg4-v4c7, GHSA-46jr-4wx8-v453, GHSA-6prh-2h8m-c8cw, GHSA-6qxp-vccf-f47h, GHSA-8r9q-7v3j-jr4g +3 more

  package-lock.json
• mediumMedium. Worth checking, often a vulnerable dependency or a setup problem.
  axios@1.11.0: 32 known vulnerabilities

  GHSA-35jp-ww65-95wh, GHSA-3g43-6gmg-66jw, GHSA-3p68-rc4w-qgx5, GHSA-3w6x-2g7m-8v23, GHSA-42h9-826w-cgv3 +27 more

  package-lock.json
• mediumMedium. Worth checking, often a vulnerable dependency or a setup problem.
  body-parser@2.2.0: 3 known vulnerabilities

  GHSA-27r3-jxmh-p828, GHSA-v422-hmwv-36x6, GHSA-wqch-xfxh-vrr4

  package-lock.json
• mediumMedium. Worth checking, often a vulnerable dependency or a setup problem.
  brace-expansion@1.1.12: 7 known vulnerabilities

  GHSA-3jxr-9vmj-r5cp, GHSA-6j4f-fj2g-mc7p, GHSA-f886-m6hf-6m8v, GHSA-mh99-v99m-4gvg, GHSA-q2hr-2g5m-vwhr +2 more

  package-lock.json
• mediumMedium. Worth checking, often a vulnerable dependency or a setup problem.
  brace-expansion@2.0.2: 7 known vulnerabilities

  GHSA-3jxr-9vmj-r5cp, GHSA-6j4f-fj2g-mc7p, GHSA-f886-m6hf-6m8v, GHSA-mh99-v99m-4gvg, GHSA-q2hr-2g5m-vwhr +2 more

  package-lock.json
• mediumMedium. Worth checking, often a vulnerable dependency or a setup problem.
  browserslist@4.25.1: 2 known vulnerabilities

  GHSA-73wf-gq98-2v4g, GHSA-c83g-rgw3-j3cx

  package-lock.json
• mediumMedium. Worth checking, often a vulnerable dependency or a setup problem.
  form-data@4.0.4: 1 known vulnerability

  GHSA-hmw2-7cc7-3qxx

  package-lock.json
• mediumMedium. Worth checking, often a vulnerable dependency or a setup problem.
  js-yaml@3.14.1: 5 known vulnerabilities

  GHSA-2883-xcg3-v3hh, GHSA-52cp-r559-cp3m, GHSA-5p4m-2wfm-xmqj, GHSA-h67p-54hq-rp68, GHSA-mh29-5h37-fv8m

  package-lock.json
• mediumMedium. Worth checking, often a vulnerable dependency or a setup problem.
  minimatch@3.1.2: 3 known vulnerabilities

  GHSA-23c5-xmqv-rm74, GHSA-3ppc-4f35-3m26, GHSA-7r86-cg39-jmmj

  package-lock.json
• mediumMedium. Worth checking, often a vulnerable dependency or a setup problem.
  minimatch@5.1.6: 3 known vulnerabilities

  GHSA-23c5-xmqv-rm74, GHSA-3ppc-4f35-3m26, GHSA-7r86-cg39-jmmj

  package-lock.json
• mediumMedium. Worth checking, often a vulnerable dependency or a setup problem.
  path-to-regexp@8.2.0: 2 known vulnerabilities

  GHSA-27v5-c462-wpq7, GHSA-j3q9-mxjg-w52f

  package-lock.json
• mediumMedium. Worth checking, often a vulnerable dependency or a setup problem.
  picomatch@2.3.1: 2 known vulnerabilities

  GHSA-3v7f-55p6-f55p, GHSA-c2c7-rcm5-vvqj

  package-lock.json
• mediumMedium. Worth checking, often a vulnerable dependency or a setup problem.
  uuid@8.3.2: 1 known vulnerability

  GHSA-w5hq-g745-h8pq

  package-lock.json
• mediumMedium. Worth checking, often a vulnerable dependency or a setup problem.
  zod@3.25.76: 1 known vulnerability

  GHSA-mrhx-c7xc-m3w5

  package-lock.json
• lowLow. Minor, or common in normal tools. Shown for information.
  Possible example credential in docs/tests: jwt

  tests/activate-workflow.js:22
• lowLow. Minor, or common in normal tools. Shown for information.
  Possible example credential in docs/tests: jwt

  tests/create-support-workflow.js:22
• lowLow. Minor, or common in normal tools. Shown for information.
  Possible example credential in docs/tests: jwt

  tests/check-workflow.js:22
• lowLow. Minor, or common in normal tools. Shown for information.
  Possible example credential in docs/tests: jwt

  tests/test-integration.js:22
• lowLow. Minor, or common in normal tools. Shown for information.
  Possible example credential in docs/tests: jwt

  tests/test-mcp-tools.js:25
• lowLow. Minor, or common in normal tools. Shown for information.
  Possible example credential in docs/tests: jwt

  tests/create-final-workflow.js:22
• lowLow. Minor, or common in normal tools. Shown for information.
  Possible example credential in docs/tests: jwt

  tests/test-simple-workflow.js:22
• lowLow. Minor, or common in normal tools. Shown for information.
  Possible example credential in docs/tests: curl-auth-header

  SMITHERY_DEPLOYMENT.md:117
• lowLow. Minor, or common in normal tools. Shown for information.
  Possible example credential in docs/tests: jwt

  tests/test-all-tools.js:24
• lowLow. Minor, or common in normal tools. Shown for information.
  @babel/core@7.28.0: 1 known vulnerability

  GHSA-4x5r-pxfx-6jf8

  package-lock.json
• lowLow. Minor, or common in normal tools. Shown for information.
  ajv@6.12.6: 1 known vulnerability

  GHSA-2g4f-4pwh-qvx6

  package-lock.json
• lowLow. Minor, or common in normal tools. Shown for information.
  deepmerge@4.3.1: 1 known vulnerability

  GHSA-gcqx-w48m-w2h4

  package-lock.json
• lowLow. Minor, or common in normal tools. Shown for information.
  follow-redirects@1.15.9: 1 known vulnerability

  GHSA-r4q5-vmmm-2653

  package-lock.json
• lowLow. Minor, or common in normal tools. Shown for information.
  qs@6.14.0: 5 known vulnerabilities

  GHSA-4mjr-xmp4-gh2g, GHSA-6pq8-jhm2-2vcw, GHSA-6rw7-vpxm-498p, GHSA-q8mj-m7cp-5q26, GHSA-w7fw-mjwx-w883

  package-lock.json
• lowLow. Minor, or common in normal tools. Shown for information.
  package.json has a prepare script

  npm run build

  package.json
• lowLow. Minor, or common in normal tools. Shown for information.
  No manifest declaring network access and environment variables (agent.json)

Network activity

Tools exposed (34)

• list_workflows

  List all workflows with summary info only (id, name, active, tags, node count). Use get_workflow for full details.

• list_workflows_full

  List all workflows with complete data including nodes and connections. Warning: high token usage.

• create_workflow

  Create a new workflow in n8n

• get_workflow

  Get a workflow by ID. Returns summary by default, pass full=true for complete data (or use download_workflow to save to file)

• download_workflow

  Download a workflow and save it to a local JSON file (avoids dumping to chat)

• upload_workflow

  Upload a workflow from a local JSON file to n8n (creates new workflow)

• update_workflow

  Update an existing workflow by ID

• delete_workflow

  Delete a workflow by ID

• activate_workflow

  Activate a workflow by ID

• deactivate_workflow

  Deactivate a workflow by ID

• execute_workflow

  Execute a workflow manually

• create_workflow_and_activate

  Create a new workflow and immediately activate it

• list_executions

  List workflow executions with filtering and pagination support

• get_execution

  Get detailed information about a specific workflow execution

• delete_execution

  Delete a workflow execution record from the n8n instance

• list_tags

  List all workflow tags with pagination support

• create_tag

  Create a new workflow tag for organization and categorization

• get_tag

  Retrieve individual tag details by ID

• update_tag

  Modify tag names for better organization

• delete_tag

  Remove unused tags from the system

• get_workflow_tags

  Get all tags associated with a specific workflow

• update_workflow_tags

  Assign or remove tags from workflows

• create_credential

  Create a new credential for workflow authentication. Use get_credential_schema first to understand required fields for the credential type.

• get_credential_schema

  Get the schema for a specific credential type to understand what fields are required when creating credentials.

• delete_credential

  Delete a credential by ID. This will remove the credential and make it unavailable for workflows. Use with caution as this action cannot be undone.

• update_workflow_name

  Rename a workflow without sending the full workflow object

• add_node

  Add a single node to an existing workflow

• update_node

  Update a specific node's parameters in a workflow (for small params - use update_node_from_file for large content like SQL)

• update_node_from_file

  Update a node parameter by reading value from a file (ideal for long SQL queries, scripts, templates)

• remove_node

  Remove a node from a workflow (also removes its connections)

• connect_nodes

  Connect two nodes in a workflow

• disconnect_nodes

  Remove a connection between two nodes

• update_workflow_settings

  Update workflow settings without sending full workflow

• generate_audit

  Generate a comprehensive security audit report for the n8n instance