Back to Home
Spartantechcompany icon

n8n-mcp

Verified Safe

by Spartantechcompany

Overview

Provides an AI-friendly interface (via Model Context Protocol) for N8n workflow documentation, node configuration, validation, and management. Enables AI agents to discover, build, and maintain automation workflows.

Installation

Run Command
npm start

Environment Variables

  • MCP_MODE
  • USE_FIXED_HTTP
  • AUTH_TOKEN
  • PORT
  • LOG_LEVEL
  • CORS_ORIGIN
  • SSE_ENABLED
  • N8N_API_URL
  • N8N_API_KEY
  • BUILD_DB_PATH
  • N8N_MODULES_PATH
  • N8N_CUSTOM_PATH

Security Notes

The server correctly enforces an `AUTH_TOKEN` for HTTP/SSE modes, which must be securely generated and configured as an environment variable. `CORS_ORIGIN` is configurable. The codebase uses `axios` for external API calls to n8n.io and a configured n8n instance, which should be secured. A debug script (`src/scripts/debug-n8n-auth.ts`) contains a hardcoded `N8N_API_KEY` example, which is a minor risk if accidentally used in production. The internal `WorkflowValidator` and `NodeSpecificValidators` include warnings for potential SQL injection vulnerabilities in user-provided queries, indicating a proactive approach to security within the code's own validation logic. File system access is for local data (database, node sources) and build processes.

Similar Servers

Stats

Interest Score0
Security Score8
Cost ClassMedium
Avg Tokens1500
Stars0
Forks0
Last Update2025-11-25

Tags

n8nworkflow automationAI agent toolsdocumentationvalidationlow-codeMCP