n8n-mcp-tools-expert Skill for Claude Code: What It Does and How to Install It

• search_nodes then get_node to find a node and read its operations and settings

  Works with no n8n API. The guide says to ask for standard detail first and use full detail sparingly.

  Try: “Find the Slack node and show me what it can do”

  Read · Node discovery

• validate_node in minimal or full mode, with four profiles, then fix and repeat

  Profiles are minimal, runtime (default), ai-friendly and strict.

  Read · Configuration validation

• n8n_create_workflow, n8n_update_partial_workflow and n8n_validate_workflow, built in steps

  Needs an n8n API URL and key. The guide tells Claude to build iteratively, include an intent on edits and activate last.

  Try: “Create a workflow that posts new form entries to Slack”

  Write · Workflow management

• search_templates, get_template and n8n_deploy_template for 2,700+ templates

  Deploying puts a template workflow on your n8n instance and returns the credentials it still needs.

  Write · Template library

• Runs a workflow: auto, prepare, pinned or direct

  The last three methods go through n8n's MCP server and need N8N_MCP_ACCESS_TOKEN.

  Runs code · n8n_test_workflow

• n8n_manage_datatable creates tables and edits rows and columns

  deleteRows needs a filter, and the guide says to use dryRun before bulk changes.

  Delete · Data tables

• n8n_manage_folders creates, renames, moves and deletes folders

  Deleting a folder without a transfer target archives its workflows.

  Delete · Workflow folders

• n8n_manage_credentials lists, creates, updates and deletes; secrets are not returned

  SKILL.md says get, create and update strip the data field. It says never to put a placeholder credential ID in a node.

  Delete · Credentials

• n8n_audit_instance runs the built-in audit plus a custom scan for secrets and webhooks

  Detected secrets are masked in the report. Output is a markdown report with a remediation playbook.

  Read · Security audit

• n8n_manage_agents creates, validates, runs and publishes n8n Agents

  Needs N8N_MCP_ACCESS_TOKEN and n8n 2.34 or newer. Publish only on explicit request; call runs the agent with real credentials and tools.

  Delete · Persisted agents

Watch out for

• It guides tools that delete and overwrite

  The tools it teaches include n8n_delete_workflow, deleteRows, folder delete and credential delete. Use a test instance or a limited API key, and confirm deletes yourself. github.com

• Running a workflow can have real effects

  n8n_test_workflow with direct runs every node, and SKILL.md says an exposeToMcp retry changes a persistent workflow setting and can overwrite a concurrent UI edit. Ask for approval first. github.com

• The plugin route adds hooks

  hooks.json registers 9 shell-script commands: SessionStart (startup, resume, clear, compact), PreToolUse on get_node, n8n_create_workflow, n8n_update_partial_workflow, n8n_update_full_workflow, validate_workflow, n8n_validate_workflow, n8n_test_workflow, n8n_instances and n8n_manage_credentials, and PostToolUse on validate_workflow. They read the hook JSON from Claude Code (session id and the tool input, including workflow JSON) with jq or python3 and inject reminders as extra context. session-start.sh creates ~/.cache/n8n-mcp-skills, injects the router skill into the session and deletes some marker files on clear and compact; the other scripts keep marker files under $TMPDIR/n8n-mcp-skills-state. The README says every hook fails open. github.com

• The plugin installs 15 skill folders

  The marketplace entry lists 14 expert skills plus a router skill that a hook loads into every session. It bundles no MCP server; .mcp.json.example is only an example. github.com

Security advisories