n8n-mcp
Verified Safeby czlonkowski
Overview
The n8n-MCP server enhances n8n's workflow automation by providing a Model Context Protocol interface, allowing AI agents to discover, validate, and manage n8n nodes and workflows with rich, structured documentation and metadata.
Installation
npm startEnvironment Variables
- AUTH_TOKEN
- AUTH_TOKEN_FILE
- N8N_MCP_LLM_BASE_URL
- N8N_MCP_LLM_MODEL
- N8N_MCP_LLM_TIMEOUT
- OPENAI_API_KEY
- OPENAI_MODEL
- OPENAI_BATCH_SIZE
- PORT
- HOST
- CORS_ORIGIN
- TRUST_PROXY
- N8N_API_URL
- N8N_API_KEY
- N8N_API_TIMEOUT
- N8N_API_MAX_RETRIES
- MCP_MODE
- NODE_ENV
- BUILD_DB_PATH
- N8N_MCP_DB_PATH
- SQLJS_SAVE_INTERVAL_MS
- ENABLE_MULTI_TENANT
- MULTI_TENANT_SESSION_STRATEGY
- N8N_MCP_MAX_SESSIONS
- AUTH_RATE_LIMIT_WINDOW
- AUTH_RATE_LIMIT_MAX
- N8N_MODE
- N8N_MODULES_PATH
- N8N_CUSTOM_PATH
- WEBHOOK_SECURITY_MODE
- SUPABASE_URL
- SUPABASE_ANON_KEY
- SUPABASE_SERVICE_ROLE_KEY
- N8N_MCP_TELEMETRY_DISABLED
- TELEMETRY_DISABLED
- DISABLE_TELEMETRY
- SKIP_WORKFLOW_VALIDATION
- METADATA_LIMIT
Security Notes
The project demonstrates a strong focus on security. It implements robust authentication using bearer tokens with timing-safe comparisons and enforces warnings/errors for default tokens. Rate limiting is present on authentication endpoints. Crucially, it includes explicit Server-Side Request Forgery (SSRF) protection for external URLs (like webhooks), preventing access to internal resources. Input sanitization and parameterized queries are used to prevent various injection attacks (e.g., prompt injection, SQL injection). Workflow sanitization is also applied to remove sensitive data before logging or processing. Dynamic code loading is restricted to internal/core n8n packages.
Similar Servers
n8n
AI-powered workflow automation platform, enabling users to build and run workflows using various integrations, with a focus on AI models and tools for task execution and conversational agents.
mcp-n8n-builder
Programmatic creation and management of n8n workflows by AI assistants via the Model Context Protocol (MCP).
project-nova
Manages Paperless-NGX documents by providing an MCP server that exposes an SSE endpoint for integration with n8n, enabling AI agents to search, upload, and manage documents, tags, correspondents, and document types.
n8n-workflows
A fast, modern documentation system for N8N workflows, providing search, categorization, visualization, and a RESTful API for workflow management and analysis.