MCP server for n8n workflow management -- view, create, sync and manage workflows via AI.
Copy the AI prompt to install this server into Claude Code, Cursor, or another agent β or use 1-click editor setup below.
We haven't yet run this listing's install command through our automated sandbox check. This isn't a red flag β we're steadily working through the catalog.
π‘ Paste the JSON block into your client's configuration file under mcpServers, then restart the application.
π©πͺ Deutsche Version
Part of the ellmos-ai family and open-bricks umbrella.
[!NOTE] For AI Assistants & LLMs: An
llms.txtindex file is available in the root directory for fast context ingestion, tool catalog references, and directory listings.
MCP (Model Context Protocol) server for managing n8n workflows via AI assistants like Claude, Cursor, and Windsurf.
n8n-manager-mcpellmos-ai/n8n-manager-mcpellmos-ai-n8n-managerserver.json and mcpName metadata for io.github.ellmos-ai/n8n-manager-mcp; some ecosystem directories still expose the legacy io.github.lukisch/n8n-manager-mcp name until their indexes refresh.n8n MCP server, n8n workflow management MCP, AI assistant n8n workflows, and ellmos-ai n8n-manager-mcp.| Capability / Invariant | Technical Guarantee | User Benefit |
|---|---|---|
| 100% Local-First & Zero-Egress | MCP Stdio transport; binds only to 127.0.0.1 by default; no external telemetry | Complete privacy; no workflow logic or credentials ever leave your host |
| Monotonic Read-Only Enforcement | N8N_MANAGER_READ_ONLY=1 establishes a process-level ceiling immune to tool override | Provable air-gapping against accidental workflow deletions or alterations |
| Automated Pre-Mutation Backups | Full workflow JSON snapshots stored under ~/.n8n-manager-mcp/backups/ before mutate/delete | Instant 1-click rollback via n8n_restore_workflow upon unwanted modifications |
| Local Audit Trail | Append-only structured JSON log in ~/.n8n-manager-mcp/audit.log | Complete forensic visibility over all agent actions and execution outcomes |
| Multi-Server & Isolated Credentials | Encrypted/isolated server configs in servers.json; API key whitespace validation | Seamless cross-instance workflow migration between staging and production |
| Strict Input & Path Traversal Guard | Bounded numeric limits (1..1000), connection indices (0..1000), path escape rejection | Immune to directory traversal, prototype pollution, and malformed payload crashes |
| Non-Elevation & User-Space Security | Operates strictly as unprivileged user process | Zero root/administrator privilege requirements for local or CI execution |
| Opt-In Decision History Seam | Clean adapter to n8n-workflow-manager via N8N_MCP_MANAGER_URL; explicit fail-fast | Bridges human decision logs and versioning without corrupting standard MCP mode |
| Built-in Node Catalog & Introspection | Comprehensive offline catalog for triggers, actions, logic, transform, and AI nodes | LLMs formulate valid node connections without trial-and-error network calls |
| Multi-Node & Multi-OS CI Matrix | Automated GitHub Actions CI across Node.js 20, 22 with Concurrency cancellation | Guaranteed cross-platform stability and regression-free distribution |
Add to claude_desktop_config.json:
After installation, use these commands in your AI assistant:
Add your n8n server:
"Add my n8n server at http://localhost:5678 with API key abc123"
List workflows:
"Show me all workflows on my n8n server"
Create a workflow:
"Create an n8n workflow that triggers on a webhook, fetches data from an API, and sends a Slack message"
Check executions:
"Show me the last 10 workflow executions"
| Tool | Description |
|---|---|
n8n_list_workflows | List all workflows on a server |
n8n_get_workflow | Get workflow details (nodes, connections) |
n8n_create_workflow | Create a new workflow from nodes + connections |
n8n_update_workflow | Update an existing workflow |
n8n_delete_workflow | Delete a workflow |
n8n_activate_workflow | Activate or deactivate a workflow |
n8n_list_executions | List recent executions with status |
n8n_export_workflow | Export workflow as importable JSON |
n8n_import_workflow | Import workflow JSON onto a server |
n8n_safety_status | Show local safety settings, backup directory, and audit log path |
n8n_set_safety_mode | Toggle read-only mode, backup-before-mutation, and audit logging |
n8n_list_backups | List local workflow backups created before mutations |
n8n_restore_workflow | Restore a workflow from a local backup |
n8n_add_server | Add/update n8n server connection |
n8n_list_servers | List configured servers |
n8n_ping_server | Test server connection |
n8n_remove_server | Remove a server |
n8n_describe_nodes | Browse available n8n node types |
n8n_manager_history | Read version history, recorded decisions, and sync history from an optional n8n-workflow-manager (opt-in, read-only) |
n8n itself keeps no record of why a workflow changed. The sibling project
n8n-workflow-manager does: it
stores versions, a mandatory decision per mutation, and a sync history in a local
database. n8n_manager_history makes that record readable from this MCP server.
The seam is opt-in and read-only:
N8N_MCP_MANAGER_URL, nothing changes β every tool talks to n8n directly, as before.http://127.0.0.1:8100), n8n_manager_history reads from the
running manager. Omit workflow_id to list the manager's workflows, pass it for full history.n8n_safety_status reports the measured state of the seam (configured, reachable,
manager version), not just the environment variable.Setup: pip install n8n-workflow-manager, then n8n-manager serve (binds 127.0.0.1:8100).
The manager API is unauthenticated and loopback-only by design; a non-loopback URL is
flagged in n8n_safety_status.
No reviews yet β be the first to share how this listing worked for you.
Showcase your server listing on GitHub or your project documentation. Embed this dynamic SVG badge to highlight official listing status and live engagement.
[](https://allmcps.com/mcp/n8n-manager-mcp)<a href="https://allmcps.com/mcp/n8n-manager-mcp"><img src="https://allmcps.com/api/badge/n8n-manager-mcp?style=directory" alt="N8n Manager MCP on AllMCPs" /></a>