n8n-mcp-server

The server retrieves the N8N_API_KEY from environment variables, preventing hardcoding of secrets. It uses httpx for network requests, and includes robust error handling that returns structured error dictionaries, avoiding raw exception exposure. Credential data is explicitly redacted when listed via the `list_credentials` tool. The default `verify_ssl=False` in the `N8nClient` for homelab environments is a noted security consideration, though justified for its intended use case. Broad exception catching in the `@handle_errors` decorator is present, but it consistently returns an error dictionary.