
n8n-mcp by czlonkowski, a community n8n MCP server
Lets Claude, Cursor or Codex look up n8n nodes and templates, then build and edit workflows on your own n8n. You run it yourself.
n8n-mcp is a community project that lets your AI assistant look up n8n nodes and templates, then build, fix and roll back workflows on your own n8n. It adds template search, community nodes, auto-fix, version rollback and credential management. Start with n8n's built-in MCP server, which every n8n plan includes, and add n8n-mcp only for those extras. With your n8n API key it can delete and run workflows, so use a key with only the access you need.
Good for
- n8n users who want template search, auto-fix, rollback or credential management that n8n's own MCP server lacks
- Developers who build and debug n8n workflows from Claude Code, Cursor or Codex
- Anyone who wants an assistant to look up n8n nodes and docs without connecting an n8n instance
- Not for you if you only need to build, edit and run workflows: try n8n's built-in server first
Works in
6 supported · 1 with issues · 7 should work
Tap an app to see how to set it up and any known problems.
Add the npx config to the config file and set MCP_MODE to stdio, or the app shows JSON parsing errors.
Known problems
- Fixed
Workflow edits could hang and block every later call until restart
Workaround: Turn telemetry off with N8N_MCP_TELEMETRY_DISABLED=true.
Reported Jul 2026 · GitHub
The repo guide puts the config in .cursor/mcp.json in your project. GitHub
The repo guide adds it in .vscode/mcp.json and uses Copilot in Agent mode. GitHub
The repo guide adds the config under Settings, MCP Servers, View Raw Config. GitHub
The repo guide adds an [mcp_servers.n8n] entry to ~/.codex/config.toml.
Known problems
- Closed
A self-hosted HTTP server sent plain JSON replies that Codex refused to use
Workaround: Set USE_FIXED_HTTP=false on the HTTP server.
Reported Jan 2026 · GitHub
The repo guide gives a claude mcp add command. Add your n8n URL and API key for workflow tools.
Known problems
- Open
Connection can drop mid-session when several node lookups run at the same time
Workaround: Reconnect with /mcp reconnect; the reporter says it came back each time.
Since Sep 2026 · GitHub
- Fixed
Crashed on startup for a few releases, so the client only showed Connection closed
Reported Jun 2026 · GitHub
Supports local MCP servers.
Supports local MCP servers.
The hosted service lists ChatGPT and connects by sign-in, but no step-by-step guide is published. n8n-mcp.com
Supports local MCP servers.
Supports local MCP servers.
Supports local MCP servers.
Supports local MCP servers.
Install n8n MCP
Claude Code
- 1
Copy this prompt.
Add the n8n MCP server to Claude Code. Run this command: claude mcp add n8n-mcp -e MCP_MODE=stdio -e LOG_LEVEL=error -e DISABLE_CONSOLE_OUTPUT=true -- npx n8n-mcp Then check that it loaded and tell me if I need to sign in or restart.
- 2
Paste it into Claude Code. It shows the change and asks before running it.
Requires Node.js (^22.23.4 || ^24.22.1 || >=26.12.1).
The basic setup gives node documentation and validation tools only. Add N8N_API_URL and N8N_API_KEY to also let the assistant create and edit workflows in your n8n. Replace the placeholder URL and key with your own. The README warns never to edit production workflows directly with AI: copy the workflow first, test in a development instance, and keep backups. If two clients start n8n-mcp through npx at the same time, give each its own npm_config_cache folder to avoid cache lock errors. A hosted option exists at dashboard.n8n-mcp.com (free tier of 100 tool calls a day); the README does not list a server address for it, so use the dashboard's own instructions.
From the project README. Source.
Tools
Finds n8n nodes by keyword
Searches all nodes, including community and verified ones, and can include example configs.
Try: “Find the n8n node for sending Slack messages”
Read ·
search_nodesShows details and docs for one n8n node
Returns node info at different detail levels, readable docs, property search and version comparison.
Try: “Show me the settings for the HTTP Request node”
Read ·
get_nodeFinds ready-made n8n workflow templates
Searches templates by keyword, by the nodes used, by task or by metadata like complexity.
Try: “Find templates that send Gmail summaries to Slack”
Read ·
search_templatesFetches the full workflow of a template
Returns a template's workflow JSON as nodes only, structure only or in full.
Try: “Get the full workflow for that template”
Read ·
get_templateLists the workflows in your n8n
Lists workflows with filtering and paging. Needs the n8n API URL and key.
Try: “List all my n8n workflows”
Network ·
n8n_list_workflowsOpens one of your workflows
Returns a workflow in full, as details, as structure only or in minimal form.
Try: “Show me my invoice-sync workflow”
Network ·
n8n_get_workflowLists, opens or deletes workflow runs
Manages execution history: list, get and delete.
Try: “Show my last 5 failed runs”
Delete ·
n8n_executionsCreates a new workflow in your n8n
Creates a workflow with nodes and connections.
Try: “Create a workflow that posts new form entries to Slack”
Write ·
n8n_create_workflowEdits part of a workflow
Updates a workflow using diff operations instead of replacing it.
Try: “Add a Slack node to the end of my workflow”
Write ·
n8n_update_partial_workflowReplaces a whole workflow
Replaces the entire workflow.
Try: “Replace my workflow with this new version”
Write ·
n8n_update_full_workflowRuns a workflow to test it
Triggers a workflow over its webhook, form or chat trigger by default. Other methods run workflows with no such trigger through n8n's own MCP server.
Try: “Run my invoice-sync workflow and show the result”
Runs code ·
n8n_test_workflowPermanently deletes a workflow
Deletes a workflow permanently.
Try: “Delete my old test workflow”
Delete ·
n8n_delete_workflowChecks a saved workflow for problems
Validates a workflow that already lives in n8n, by its ID.
Try: “Check my invoice-sync workflow for errors”
Network ·
n8n_validate_workflowChecks a workflow you have drafted for problems
Validates connections, expressions and AI tools in a workflow, including AI Agent checks.
Try: “Check this workflow JSON before I save it”
Read ·
validate_workflowChecks the settings of a single node
Runs a quick required-fields check or a fuller check with different profiles.
Try: “Check that this Slack node is set up correctly”
Read ·
validate_nodeFixes common workflow errors automatically
Automatically fixes common workflow errors.
Try: “Fix the errors in my invoice-sync workflow”
Write ·
n8n_autofix_workflowInstalls an n8n.io template into your n8n
Deploys a template from n8n.io straight to your instance, with auto-fix.
Try: “Deploy that template to my n8n”
Write ·
n8n_deploy_templateShows workflow history, differences and rollbacks
Version history, diff and rollback, from either local snapshots or n8n's own workflow history.
Try: “Roll my workflow back to yesterday's version”
Write ·
n8n_workflow_versionsRuns and reads workflow evaluation tests
Lists evaluation runs, metrics and per-case results, and can trigger and cancel runs on newer n8n versions.
Try: “Show the results of my last evaluation run”
Runs code ·
n8n_evaluationsOrganizes workflows into folders
Creates, lists, gets, renames, moves and deletes workflow folders (n8n 2.19+).
Try: “Create a folder called Billing and move my invoice workflow there”
Delete ·
n8n_manage_foldersManages n8n data tables, rows and columns
Lists, gets, creates, updates and deletes data tables, rows and columns.
Try: “Add a row to my customers data table”
Delete ·
n8n_manage_datatableManages the credentials stored in n8n
Lists, gets, creates, updates and deletes credentials, and returns credential schemas.
Try: “List the credentials in my n8n”
Delete ·
n8n_manage_credentialsManages n8n Agents
Manages persisted n8n Agents through n8n's own MCP server. Needs an access token and n8n 2.34 or newer with the agents module.
Try: “List my n8n agents”
Delete ·
n8n_manage_agentsRuns a security audit of your n8n
Combines n8n's built-in audit with a deep scan of your workflows.
Try: “Audit my n8n for security problems”
Network ·
n8n_audit_instanceLists your n8n projects or tags
Lists instance-level projects or tags.
Try: “List the projects in my n8n”
Network ·
n8n_list_catalogUsed by the assistant behind the scenes
Looks up real choices like Slack channels or Sheets tabs
Resolves a node's dropdown values using a real credential. Needs an n8n MCP access token.
Try: “List the Slack channels my credential can see”
Network ·
n8n_explore_node_resourcesChecks the connection to your n8n
Checks n8n API connectivity and features.
Try: “Is my n8n connection working?”
Network ·
n8n_health_checkExplains how to use the other tools
Returns documentation for any tool in this server.
Try: “How do I use the n8n tools?”
Read ·
tools_documentation
Read from the source code
Pros and cons
Good
- Adds template search over 2,352 n8n workflow templates, which n8n's own server lacks
- Auto-fix and version rollback help you recover from a bad edit
- Partial edits change one node without rebuilding the whole workflow
- Knows 3,143 n8n nodes, including 2,302 community nodes
- Docs-only mode needs no n8n instance or API key
- Free and MIT licensed to self-host, with a hosted option
- Setup guides for Claude Code, Claude Desktop, Cursor, VS Code, Windsurf and Codex
Watch out
- With an API key it can delete and run workflows and manage credentials
- Telemetry is on by default
- Many security advisories in 2026, mostly for HTTP mode
- Runs on your machine, with Node.js or Docker
- Generated workflows can still break on import and need fixing
- Node data tracks n8n 2.44.3, while n8n 3.0 is out
- Adds a lot of context to every chat
Permissions
high risk · 5 things to watch · 22 advisories
High risk
With an n8n API key it can create, change, delete and run workflows and manage credentials. Use the latest version, a key with only the access you need, and keep HTTP mode off shared networks.
What it can do
- Read your data
- Create and change things
- Delete things
- Read-only modeHow to turn it on
Watch out for
It has the same power as your n8n API key
It can create, change, delete and run workflows, including Code nodes, and manage credentials. Use a key with the least access you need, or none for docs-only mode. github.com
Telemetry is on by default
It sends tool usage, sanitized workflow structures and your edit intent text to the maintainer's EU-hosted service. Set N8N_MCP_TELEMETRY_DISABLED=true to turn it off. github.com
Update often and keep HTTP mode private
Most published advisories hit shared HTTP deployments. Update to the latest version, and do not expose HTTP mode to a shared network. github.com
Workflow text reaches your assistant
Workflow names, descriptions and run results go to the model. On a shared n8n, someone who can edit workflows could plant instructions, so review changes before you approve them. github.com
It keeps local workflow backups
Full workflow JSON, including node settings, is saved before each update and kept 30 days by default. github.com
Security advisories
22 known advisories, all fixed in a newer version.
- n8n-MCP: Cross-tenant access to workflow version backups in multi-tenant HTTP deploymentscritical · Fixed in 2.56.1 · GHSA-j6r7-6fhx-77wx
- n8n-MCP: Multi-tenant MCP requests fall back to process-level n8n credentials when tenant headers are absent or incompletehigh · Fixed in 2.51.2 · GHSA-jxx9-px88-pj69
- n8n-mcp affected by path traversal, redirect-following SSRF, and telemetry payload exposurehigh · Fixed in 2.50.1 · GHSA-8g7g-hmwm-6rv2
- n8n-mcp webhook and API client paths has an authenticated SSRFhigh · Fixed in 2.50.2 · GHSA-cmrh-wvq6-wm9r
- n8n-mcp's IPv4-mapped IPv6 addresses bypass SSRF protection in validateUrlSync(), enabling full SSRF for SDK embeddershigh · Fixed in 2.47.14 · GHSA-56c3-vfp2-5qqj
Show all 22Show fewer
- n8n-mcp has unauthenticated session termination and information disclosure in HTTP transporthigh · Fixed in 2.47.6 · GHSA-75hx-xj24-mqrw
- n8n-mcp has authenticated SSRF via instance-URL header in multi-tenant HTTP modehigh · Fixed in 2.47.4 · GHSA-4ggg-h7ph-26qr
- Session isolation and trigger path issues in HTTP modemedium · Fixed in 2.99.2 · GHSA-q7jr-6fm4-vvhg
- Prototype pollution in the workflow auto-fixer and partial workflow updatesmedium · Fixed in 2.98.1 · GHSA-ppgm-m8rg-4wqv
- Denial of service in shared HTTP deployments through crafted tool input or n8n responsesmedium · Fixed in 2.99.1 · GHSA-xvxq-x6hr-xc2c
- Credentials and personal data could reach telemetry and server logsmedium · Fixed in 2.99.0 · GHSA-rqgx-cvr7-hc6x
- Tool calls can run against another instance's configuration when requests overlap on a shared multi-tenant sessionmedium · Fixed in 2.92.1 · GHSA-74jq-crxq-6x63
- Cloud metadata endpoints reachable over IPv6 in permissive modemedium · Fixed in 2.94.1 · GHSA-xf82-4743-c4gm
- Workflow telemetry could include unsanitized free-text fieldsmedium · Fixed in 2.94.2 · GHSA-gg57-wj7g-vfrv
- n8n-MCP: Incorrect authorization can expose default-scope workflow version backups in multi-tenant HTTP modemedium · Fixed in 2.57.4 · GHSA-2cf7-hpwf-47h9
- n8n-MCP: Workflow telemetry sanitizer could retain partial values from URL-shaped node parametersmedium · Fixed in 2.51.3 · GHSA-f3rg-xqjj-cj9w
- n8n-MCP: Sensitive MCP tool-call arguments logged on authenticated requests in HTTP modemedium · Fixed in 2.47.13 · GHSA-wg4g-395p-mqv3
- n8n-MCP Logs Sensitive Request Data on Unauthorized /mcp Requestsmedium · Fixed in 2.47.11 · GHSA-pfm2-2mhg-8wpx
- Hostname checks in SSRF protection skipped trailing-dot and *.localhost nameslow · Fixed in 2.99.2 · GHSA-qm7x-j9xp-x3gv
- Legacy HTTP server accepts the placeholder AUTH_TOKEN in productionlow · Fixed in 2.99.0 · GHSA-7mg3-m9wx-m555
- Stored workflow backups stay accessible after the n8n API key is revokedlow · Fixed in 2.99.0 · GHSA-74hp-7jv7-vx4j
- Incomplete IPv6 link-local address filtering in outbound URL validationlow · Fixed in 2.69.0 · GHSA-2x5j-hrmv-ccrq
Technical details
| Turning on read-only | Leave out N8N_API_URL and N8N_API_KEY for docs-only mode. Or set DISABLED_TOOLS and DISABLED_TOOL_OPERATIONS as in the README recipe and use a read-only n8n API key. |
|---|---|
| Talks to | Your n8n instance, at the URL you set. The maintainer's EU-hosted telemetry service, unless you turn it off |
| Sign-in and keys | Your n8n API key sits in the server's environment or config file on your machine. |
| Data retention | Full workflow JSON is saved before each update and kept 30 days by default. |
| Scopes |
|
Alternatives
Use n8n's built-in server unless you need template search, auto-fix, rollback or credential management. Pick n8n-mcp for those, or to run it next to the built-in one.
| Server | Official | Runs | Sign-in | Can change things | Tools | Stars |
|---|---|---|---|---|---|---|
| For n8n | ||||||
| n8n-mcpThis page | Community | HostedLocal | API key | Yes | 28 | 23.2K |
| Other tools for the same job | ||||||
| n8n built-in MCP server | Official | Hosted | Account | Yes | – | – |
| n8n-mcp-server (leonardsellem) | Community | Local | API key | Yes | – | 1.6K |
What people say
People who use it daily rate it highly for editing and debugging workflows, and complain about setup weight and workflows that need fixing.
What people like
- A months-long user calls it very good and prefers it for debugging and iterating on workflows
- Partial edits change one part of a workflow instead of rebuilding it, which saves tokens over several fix cycles
- Users run it next to n8n's own server for template search, auto-fix, rollback and credentials
Common complaints
- It runs locally, one user needed Docker for full features, and it loads a lot of context
- Generated workflows can look right but break on import or mismatch node schemas
- Node search can return only community nodes and miss core ones such as Webhook
- Telemetry is on by default and includes sanitized workflow structures
In their words
“I have been using Czlonkowski's unofficial n8n-MCP for months. It's very good. The biggest downside is it being local, needing Docker for full functionality, AND the "context bloat" from the way its built, run, and his included skills.”u/trynagrubRedditMay 2026
“Czlonkowski's version has `update_partial_workflow`, which makes surgical edits within your canvas (obviously missing the TypeScript build and validation step, but that's not necessary for every tweak).”u/trynagrubVendorMay 2026
“The official handles new workflow creation via the TypeScript SDK (type-checking before deployment is genuinely great). czlonkowski fills the gaps: partial workflow edits, template search, auto-fix, version rollback, and credential management.”SarimRedditApr 2026
“The problem: Claude generates workflows that look correct but break on import or have node schema mismatches. I end up spending more time fixing them than if I’d just built manually.”u/Single-Yesterday9010
2 more quotesFewer quotes
“During a Claude Code session driving n8n-mcp over stdio, the connection died mid-session three separate times with a bare client-side "Connection closed" and no diagnostic — no stderr, no distinguishing error body.”artifex223GitHub issueJul 2026
“Setting `N8N_MCP_TELEMETRY_DISABLED=true` immediately and completely resolved the hang”ParkerBoynton01
Questions
n8n-mcp vs n8n's built-in MCP server: which should I use?
Start with n8n's built-in server. It is on every plan, including the free Community edition, and it can search, build, validate and run workflows. It is off by default, so an owner or admin turns it on under Settings. Add n8n-mcp if you want template search, community nodes, auto-fix, version rollback or credential management. Many people run both.
Does n8n's own MCP server rebuild the whole workflow on every edit?
No. A tester said so in May 2026, but n8n staff say its update tool has made partial updates since n8n 2.22.0.
Is n8n-mcp free?
Yes. Self-hosting is free under the MIT license. The hosted service has a free tier of 100 tool calls a day, and the Supporter plan is €19 a month with a fair-use cap of 5,000 calls a day.
Does n8n-mcp send my data anywhere?
Yes, by default. It sends tool usage, sanitized workflow structures and your edit intent text to the maintainer's service, but not credentials or run data, per its privacy policy. Set N8N_MCP_TELEMETRY_DISABLED=true to stop it.
Is it safe? Can it delete my workflows?
Yes, it can delete and run workflows and manage credentials when you give it an n8n API key. It has the same access as that key. Use a limited key, update to the latest version, and do not expose HTTP mode to a shared network.
How do I make n8n-mcp read-only?
Use a read-only n8n API key, and turn off the tools that make changes with the DISABLED_TOOLS and DISABLED_TOOL_OPERATIONS settings from the README recipe. Or leave out the API key and URL to run docs-only mode.
Can I use n8n-mcp without connecting an n8n instance?
Yes. Without the n8n URL and API key it runs only the documentation, search, validation and template tools.
Does n8n-mcp work with n8n 3.0?
Maybe not fully. n8n 3.0 came out on 2026-10-27 with breaking changes, and the n8n-mcp README says its node data tracks n8n 2.44.3. Validate generated workflows before you deploy them.
Why does Claude Desktop show "Unexpected token" errors with n8n-mcp?
Add MCP_MODE set to stdio in the server's env. Without it, log output mixes with the messages Claude Desktop expects.
Why does n8n-mcp refuse to connect to n8n on localhost?
Its protection against requests to internal addresses is strict by default and blocks localhost. Set WEBHOOK_SECURITY_MODE=moderate to allow it.
Examples
Build a new workflow starting from an n8n.io template and deploy it to your instance
Find a template that posts new Typeform responses to Slack, adapt it, validate it and deploy it to my n8n.
Searches templates, adapts one, checks it and creates it on your instance.
Find why a workflow keeps failing by reading its recent executions
My invoice workflow failed overnight. Look at its latest failed executions and fix the broken node.
Reads recent runs, finds the failing node and edits it.
Change one node in an existing workflow without rebuilding it
In workflow 'Lead intake', change the Slack channel to #sales and add a retry on the HTTP Request node.
Makes two targeted edits and leaves the rest of the workflow alone.
Run a security audit of your n8n instance
Audit my n8n instance and list workflows with hardcoded secrets or risky Code nodes.
Lists workflows that need attention.
Information
updated Nov 2, 2026
- Publisher
- Community
- Package
n8n-mcp- Registry
- npm
- Transport
- stdio, Streamable HTTP
- Auth
- token in env
- License
- MIT
- Last commit
- Oct 27, 2026
- Open issues
- 27
WebsiteDocsGitHubnpmDocker MCP CatalogSelf-Hosting GuideChangelogIssuesTelemetry privacy policyHosted dashboard
Other n8n MCP servers
Sources
Docs, issue trackers and discussions this page is built from. Issues, quotes and findings above link to their own source.
Show all 23Hide
- n8n-MCP README · github.com
- github.com · github.com
- github.com · github.com
- CURSOR_SETUP.md · github.com
- WINDSURF_SETUP.md · github.com
- docs.n8n.io · docs.n8n.io
- community.n8n.io · community.n8n.io
- github.com · github.com
- n8n.io · n8n.io
- github.com · github.com
- github.com · github.com
- github.com · github.com
- n8n-mcp.com · n8n-mcp.com
- docs.n8n.io · docs.n8n.io
- github.com · github.com
- github.com · github.com
- github.com · github.com
- github.com · github.com
- www.reddit.com · reddit.com
- www.reddit.com · reddit.com
- github.com · github.com
- docs.n8n.io · docs.n8n.io
- n8n-mcp-server README · github.com