Security-focused MCP server for self-hosted n8n Community Edition with 44 bounded tools and read-only defaults.
Copy the AI prompt to install this server into Claude Code, Cursor, or another agent β or use 1-click editor setup below.
We haven't yet run this listing's install command through our automated sandbox check. This isn't a red flag β we're steadily working through the catalog.
π‘ Paste the JSON block into your client's configuration file under mcpServers, then restart the application.
Inspect callable tools, capabilities, and parameters exposed to AI agents by N8n MCP Community.
Give your AI client 44 tools for self-hosted n8n Community Edition. Manage workflows, nodes, runs, credentials, tags, users, and diagnostics. No paid n8n features. The server makes no external AI calls.
You need Node.js 22 or 24, your n8n URL, and an n8n API key.
--global installs the command once. Use npx below if you do not want a
global install.
Restart your client. You should see 44 tools, 5 resources, and 4 prompts.
If the client cannot find the command, run command -v n8n-mcp-community on
macOS/Linux or where n8n-mcp-community on Windows. Put that full path in
"command".
Want no global install? Copy this command into the client configuration shown in the full guide:
Want the Claude Desktop app flow? Use the MCPB below. See the full installation guide for updates, rollback, and checks.
.mcpb.Anthropic's MCPB guide explains the same steps. Our installation guide explains how to check the download.
Install public builds only from npm or the latest GitHub release.
n8n_introspect runs a local 23-rule engine;
it does not execute workflows, call an agent, or contact an external model.n8n_update_node changes one validated node path
while preserving the rest of the workflow and disclosing the Public API's
non-atomic limitation.n8n_list_node_types reports only types observed in
accessible workflows. It does not claim to be a complete installed catalog.The current source candidate has been verified with:
npm audit runs; all three source scanners are reproduced in
CI, with immutable scanner/action identities;@hono/node-server 2.x line, requires a zero-finding production audit, and
proves the stdio runtime and exact 44/5/4 inventory;Publication proceeds only through the reviewed release procedure: the repository-pinned MCPB signing identity, a human artifact-baseline receipt, tag-scoped protected-environment approval, and an externally signed MCPB handoff verified byte for byte against the reviewed unsigned candidate.
| Mode | What it allows | Required configuration |
|---|---|---|
| Read-only | Read-only tools only | Default, or N8N_MCP_MODE=read-only |
| Write | Read-only and ordinary mutation tools | N8N_MCP_MODE=write |
| Unsafe | All tools, including destructive or external-contact operations | N8N_MCP_MODE=unsafe |
Selecting unsafe mode is the complete server-side authorization gate for unsafe tools. MCP safety annotations remain accurate so compatible clients can apply their native approval UX, and the n8n API key remains the final upstream permission boundary.
Plain HTTP is accepted automatically only for loopback URLs. A non-loopback
HTTP instance additionally requires N8N_ALLOW_INSECURE_HTTP=1, which accepts
the risk of exposing the API key and data in transit.
Every entry links to its complete input, output, endpoint, compatibility, failure, and security reference.
| Tool | Mode | Purpose |
|---|---|---|
n8n_workflows_list | Read-only | List accessible workflows with bounded filters and pagination. |
n8n_workflows_get | Read-only | Read one workflow while withholding pin and static data values. |
n8n_workflows_create | Write | Create a validated workflow through the Public API. |
n8n_workflows_update | Write | Guard and update selected fields while preserving omitted fields. |
n8n_update_node | Write | Change one validated node property with non-atomic concurrency guards. |
n8n_workflows_delete | Unsafe | Permanently delete one workflow. |
n8n_workflows_activate | Unsafe | Activate one workflow. |
n8n_workflows_deactivate | Unsafe | Deactivate one workflow. |
n8n_workflows_get_version | Read-only | Retrieve one retained historical workflow version. |
n8n_workflows_get_tags | Read-only | List tags assigned to a workflow. |
n8n_workflows_update_tags | Write | Replace a workflow's complete tag assignment. |
n8n_workflows_archive | Unsafe | Archive one workflow. |
n8n_workflows_unarchive | Unsafe | Restore one archived workflow. |
n8n_workflows_diff | Read-only | Compare nodes and connections without returning raw values. |
Factual signals from GitHub, npm, and our automated checks β not a rating.
No reviews yet β be the first to share how this listing worked for you.
Showcase your server listing on GitHub or your project documentation. Embed this dynamic SVG badge to highlight official listing status and live engagement.
[](https://allmcps.com/mcp/drzamarian-n8n-mcp-community)<a href="https://allmcps.com/mcp/drzamarian-n8n-mcp-community"><img src="https://allmcps.com/api/badge/drzamarian-n8n-mcp-community?style=directory" alt="N8n MCP Community on AllMCPs" /></a>