n8n MCP Server
NPM · @NEXTOOLSOLUTIONS/MCP-N8N · SCANNED SEP 20
The most complete MCP server for n8n — 43 tools for workflows, data tables, and more.
Available components
How this component scores in each security and reliability category. Every signal is checked automatically from public evidence about the published package, including repeated runs of it in an isolated sandbox, and we only credit what we can confirm. How we score → Why this is hard to score →
Supply Chain Security98
- No malware found by supply-chain analysis.Pass
- No known CVEs affecting this package version or its production dependencies.Pass
- No install/post-install scripts declared.Pass
- 31 of 96 dependencies flagged as unhealthy. View diagnostics → Partial
Provenance & Transparency45
- Source repository is publicly reachable at the declared URL. View diagnostics → Pass
- Provenance check failed: no build-provenance attestation is published. See how to fix → View diagnostics → Fail
- Clear OSI-approved license (MIT).Pass
- Actively maintained (last published 195 days ago).Pass
- Disclosure check failed: no security disclosure policy was found in the source repository. See how to fix → Fail
Schema Quality & AI Usability76
- AI-judged instruction clarity (good).Pass
- Tool/resource definitions use about 2106 tokens (~48/item across 43 items; 43 tools + 0 resources), lean.Pass
- Usage-examples check failed: none of the tools include examples. See how to fix → Fail
Stability & Change Management93
- Stability observed for 28 of 30 days with no destabilising changes; credit accrues until the full window elapses.Partial
Tool Coverage95
- 100% of tools have a non-trivial description (not blank, and not just the tool's name).Pass
- 83% of tool parameters carry a description.Partial
- Structured output schemas are declared (100% of tools); any adoption earns full credit.Pass
Tool Safety75
- No prompt-injection markers were found in the server instructions, tool names or descriptions we captured.Pass
- 0 of 9 tool(s) whose name or description implies an irreversible operation declare an MCP destructiveHint annotation; "n8n_delete_workflow" implies "delete" and declares no destructiveHint at all, which the MCP spec reads as destructive by default. See how to fix → Fail
- An AI judge read all 43 captured unit(s) of tool text and found none that tries to manipulate the model reading it.Pass
Capabilities100
- Implements a supported MCP spec version (2025-11-25); the latest is 2026-07-28.Pass
How do I install the n8n MCP Server server?
n8n MCP Server runs locally as an npm package, launched with npx -y @nextoolsolutions/mcp-n8n. Ready-made configuration for Claude, Cursor, VS Code, Codex and 5 more is on this page, copied from each client's own documentation.
npm · @nextoolsolutions/mcp-n8n
claude mcp add rpgmais-mcp-n8n -- npx -y @nextoolsolutions/mcp-n8n
{
"mcpServers": {
"rpgmais-mcp-n8n": {
"command": "npx",
"args": [
"-y",
"@nextoolsolutions/mcp-n8n"
]
}
}
} {
"servers": {
"rpgmais-mcp-n8n": {
"command": "npx",
"args": [
"-y",
"@nextoolsolutions/mcp-n8n"
]
}
}
} codex mcp add rpgmais-mcp-n8n -- npx -y @nextoolsolutions/mcp-n8n
{
"$schema": "https://opencode.ai/config.json",
"mcp": {
"rpgmais-mcp-n8n": {
"type": "local",
"command": [
"npx",
"-y",
"@nextoolsolutions/mcp-n8n"
],
"enabled": true
}
}
} openclaw mcp add rpgmais-mcp-n8n --command npx --arg -y --arg @nextoolsolutions/mcp-n8n
mcp_servers:
rpgmais-mcp-n8n:
command: "npx"
args: ["-y", "@nextoolsolutions/mcp-n8n"] {
"McpServers": {
"rpgmais-mcp-n8n": {
"Transport": "stdio",
"Command": "npx",
"Arguments": [
"-y",
"@nextoolsolutions/mcp-n8n"
]
}
}
} assistant mcp add rpgmais-mcp-n8n -t stdio -c npx -a -y @nextoolsolutions/mcp-n8n
{
"mcpServers": {
"rpgmais-mcp-n8n": {
"command": "npx",
"args": [
"-y",
"@nextoolsolutions/mcp-n8n"
]
}
}
} Every change we have recorded for this component, newest first. Security-relevant changes are always shown. ▲ marks a change for the better, ▼ a change for the worse; unmarked changes are neutral.
- 19 Sept 26 +1
No change was recorded against any check on this day. Stability & Change Management went from 87 to 90. That category is still filling its 30-day observation window: 26 days of observed history at the previous scan, 27 at this one. The score rises as the window fills, whether or not the server changes.
- 17 Sept 26 +1
No change was recorded against any check on this day. Stability & Change Management went from 80 to 83. That category is still filling its 30-day observation window: 24 days of observed history at the previous scan, 25 at this one. The score rises as the window fills, whether or not the server changes.
- 16 Sept 26 −3
- Stability: pass → 0.80 functional
- 15 Sept 26 0
- Stability: 0.97 → pass security
- 14 Sept 26 +1
No change was recorded against any check on this day. Stability & Change Management went from 93 to 97. That category is still filling its 30-day observation window: 28 days of observed history at the previous scan, 29 at this one. The score rises as the window fills, whether or not the server changes.
- 12 Sept 26 +1
No change was recorded against any check on this day. Stability & Change Management went from 87 to 90. That category is still filling its 30-day observation window: 26 days of observed history at the previous scan, 27 at this one. The score rises as the window fills, whether or not the server changes.
- 10 Sept 26 +1
No change was recorded against any check on this day. Stability & Change Management went from 80 to 83. That category is still filling its 30-day observation window: 24 days of observed history at the previous scan, 25 at this one. The score rises as the window fills, whether or not the server changes.
- 9 Sept 26 −3
- Stability: pass → 0.80 functional
Diagnostic detail from the automated scan of this channel: what the scanner observed at each step, so you can see exactly where a check passed or failed. It is informational only and never changes the trust score.
Captured 20 Sept 2026 · Analysed npm/@nextoolsolutions/mcp-n8n@2.0.2
Provenance No attestation
The registry publishes no build provenance for this version, so there is nothing to verify.
| Result | No attestation |
|---|---|
| Ecosystem | npm |
Background: How many MCP packages publish verified provenance →
Dependencies 96 packages
| Packages resolved | 96 |
|---|---|
| Stale | 31 |
| Tree resolution | Complete |
Background: SBOMs and build attestations, explained →
The tools this component advertises to a client, with an estimated token cost for each. Expand a tool to see its parameters and schema. The per-tool counts are indicative and are not scored directly; the schema's total context footprint is one signal in Schema Quality & AI Usability. A tool's description is untrusted text the model reads on every call, which is what makes this list a security surface and not just an inventory: how tool poisoning works →
n8n_activate_workflow Activate workflow ~35
Activate a workflow for production. Requires at least one trigger node.
| Name | Type | Req | Description |
|---|---|---|---|
| workflowId | string | yes | Workflow ID |
Structured output declared, but exposes no named fields.
No examples provided.
n8n_create_credential Create credential ~75
Create a new credential. Use n8n_get_credential_schema to discover the required fields for a type.
| Name | Type | Req | Description |
|---|---|---|---|
| data | object | yes | Credential fields as key-value pairs |
| name | string | yes | Display name |
| type | string | yes | Credential type (e.g. slackApi, httpBasicAuth) |
Structured output declared, but exposes no named fields.
No examples provided.
n8n_create_datatable Create data table ~46
Create a data table with typed columns (string, number, boolean, date, json).
| Name | Type | Req | Description |
|---|---|---|---|
| columns | array | yes | – |
| name | string | yes | Table name |
Structured output declared, but exposes no named fields.
No examples provided.
n8n_create_project Create project ~28
Create a new project (Enterprise feature).
| Name | Type | Req | Description |
|---|---|---|---|
| name | string | yes | Project name |
Structured output declared, but exposes no named fields.
No examples provided.
n8n_create_tag Create tag ~29
Create a new tag with the given name.
| Name | Type | Req | Description |
|---|---|---|---|
| name | string | yes | Tag name |
Structured output declared, but exposes no named fields.
No examples provided.
n8n_create_variable Create variable ~43
Create a new environment variable in n8n (key-value pair).
| Name | Type | Req | Description |
|---|---|---|---|
| key | string | yes | Variable key |
| value | string | yes | Variable value |
Structured output declared, but exposes no named fields.
No examples provided.
n8n_create_workflow Create workflow ~47
Create a new workflow. Provide the workflow JSON (name, nodes, connections, settings).
| Name | Type | Req | Description |
|---|---|---|---|
| workflow | object | yes | Workflow object (name, nodes, connections, settings) |
Structured output declared, but exposes no named fields.
No examples provided.
n8n_deactivate_workflow Deactivate workflow ~34
Deactivate a workflow (stops listening for triggers).
| Name | Type | Req | Description |
|---|---|---|---|
| workflowId | string | yes | Workflow ID |
Structured output declared, but exposes no named fields.
No examples provided.
n8n_delete_credential Delete credential ~30
Permanently delete a credential by ID.
| Name | Type | Req | Description |
|---|---|---|---|
| credentialId | string | yes | Credential ID |
| Name | Type | Req | Description |
|---|---|---|---|
| ok | boolean | yes | – |
No examples provided.
n8n_delete_datatable_rows Delete data table rows ~95
Delete rows matching a filter. The filter is required (JSON string).
| Name | Type | Req | Description |
|---|---|---|---|
| dataTableId | string | yes | Data table ID |
| dryRun | boolean | – | Simulate only |
| filter | string | yes | JSON filter, e.g. {"type":"and","filters":[{"columnName":"id","condition":"eq","value":123}]} |
| returnData | boolean | – | Return deleted rows |
Structured output declared, but exposes no named fields.
No examples provided.
n8n_delete_execution Delete execution ~30
Permanently delete an execution record by ID.
| Name | Type | Req | Description |
|---|---|---|---|
| executionId | string | yes | Execution ID |
| Name | Type | Req | Description |
|---|---|---|---|
| ok | boolean | yes | – |
No examples provided.
n8n_delete_project Delete project ~30
Delete a project by ID (Enterprise feature).
| Name | Type | Req | Description |
|---|---|---|---|
| projectId | string | yes | Project ID |
| Name | Type | Req | Description |
|---|---|---|---|
| ok | boolean | yes | – |
No examples provided.
n8n_delete_tag Delete tag ~37
Delete a tag by ID. This does not affect workflows that used this tag.
| Name | Type | Req | Description |
|---|---|---|---|
| tagId | string | yes | Tag ID |
| Name | Type | Req | Description |
|---|---|---|---|
| ok | boolean | yes | – |
No examples provided.
n8n_delete_user Delete user ~42
Delete a user by ID (requires owner role). Workflows owned by this user must be transferred first.
| Name | Type | Req | Description |
|---|---|---|---|
| userId | string | yes | User ID |
| Name | Type | Req | Description |
|---|---|---|---|
| ok | boolean | yes | – |
No examples provided.
n8n_delete_variable Delete variable ~28
Delete an environment variable by ID.
| Name | Type | Req | Description |
|---|---|---|---|
| variableId | string | yes | Variable ID |
| Name | Type | Req | Description |
|---|---|---|---|
| ok | boolean | yes | – |
No examples provided.
n8n_delete_workflow Delete workflow ~30
Permanently delete a workflow by ID.
| Name | Type | Req | Description |
|---|---|---|---|
| workflowId | string | yes | Workflow ID |
| Name | Type | Req | Description |
|---|---|---|---|
| ok | boolean | yes | – |
No examples provided.
n8n_execute_workflow Execute workflow ~45
Trigger a workflow execution. Optionally send input data.
| Name | Type | Req | Description |
|---|---|---|---|
| data | object | – | Input data for the workflow |
| workflowId | string | yes | Workflow ID |
| Name | Type | Req | Description |
|---|---|---|---|
| executionId | string | yes | – |
| status | string | yes | – |
No examples provided.
n8n_generate_audit Security audit ~69
Generate a security audit report for the n8n instance. Categories: credentials, database, filesystem, instance, nodes.
| Name | Type | Req | Description |
|---|---|---|---|
| categories | array | – | Audit categories (all if omitted) |
| daysAbandonedWorkflow | number | – | Days to consider a workflow abandoned (default 90) |
Structured output declared, but exposes no named fields.
No examples provided.
n8n_get_credential_schema Get credential schema ~45
Get the JSON schema for a credential type, showing required and optional fields.
| Name | Type | Req | Description |
|---|---|---|---|
| typeName | string | yes | Credential type name (e.g. slackApi) |
Structured output declared, but exposes no named fields.
No examples provided.
n8n_get_datatable Get data table ~41
Retrieve metadata (columns, name, ID) of a data table.
| Name | Type | Req | Description |
|---|---|---|---|
| dataTableId | string | yes | Data table ID (nanoid) |
Structured output declared, but exposes no named fields.
No examples provided.
n8n_get_datatable_rows Query data table rows ~140
List rows from a data table with optional filter, search, sorting and pagination. Filter is a JSON string with {type, filters} structure.
| Name | Type | Req | Description |
|---|---|---|---|
| cursor | string | – | Pagination cursor |
| dataTableId | string | yes | Data table ID |
| filter | string | – | JSON filter, e.g. {"type":"and","filters":[{"columnName":"status","condition":"eq","value":"active"}]} |
| limit | number | – | Max rows (default 50) |
| search | string | – | Full-text search on string columns |
| sortBy | string | – | columnName:asc or columnName:desc |
| Name | Type | Req | Description |
|---|---|---|---|
| data | array | yes | – |
| nextCursor | string|null | – | – |
No examples provided.
n8n_get_execution Get execution ~32
Get the status and result data of a specific execution.
| Name | Type | Req | Description |
|---|---|---|---|
| executionId | string | yes | Execution ID |
Structured output declared, but exposes no named fields.
No examples provided.
n8n_get_tag Get tag ~27
Retrieve a tag by ID.
| Name | Type | Req | Description |
|---|---|---|---|
| tagId | string | yes | Tag ID |
Structured output declared, but exposes no named fields.
No examples provided.
n8n_get_user Get user ~33
Retrieve a user by ID or email.
| Name | Type | Req | Description |
|---|---|---|---|
| idOrEmail | string | yes | User ID or email address |
Structured output declared, but exposes no named fields.
No examples provided.
n8n_get_workflow Get workflow ~35
Retrieve a workflow by ID, including nodes, connections and settings.
| Name | Type | Req | Description |
|---|---|---|---|
| workflowId | string | yes | Workflow ID |
Structured output declared, but exposes no named fields.
No examples provided.
n8n_get_workflow_tags Get workflow tags ~32
List all tags associated with a specific workflow.
| Name | Type | Req | Description |
|---|---|---|---|
| workflowId | string | yes | Workflow ID |
Structured output declared, but exposes no named fields.
No examples provided.
n8n_health_check Health check ~26
Check connectivity to the n8n instance and verify the API is reachable.
Input schema present but exposes no named parameters.
Structured output declared, but exposes no named fields.
No examples provided.
n8n_insert_datatable_rows Insert data table rows ~68
Insert one or more rows. Each row is an object with column names as keys.
| Name | Type | Req | Description |
|---|---|---|---|
| data | array | yes | Array of row objects |
| dataTableId | string | yes | Data table ID |
| returnType | string | – | count (default), id or all |
Structured output declared, but exposes no named fields.
No examples provided.
n8n_list_credentials List credentials ~39
List all credentials (names and types only — data is redacted).
| Name | Type | Req | Description |
|---|---|---|---|
| cursor | string | – | – |
| limit | number | – | – |
Structured output declared, but exposes no named fields.
No examples provided.
n8n_list_datatables List data tables ~69
List data tables with optional filtering, sorting and pagination.
| Name | Type | Req | Description |
|---|---|---|---|
| cursor | string | – | – |
| filter | string | – | JSON filter, e.g. {"name":"my-table"} |
| limit | number | – | – |
| sortBy | string | – | e.g. name:asc |
Structured output declared, but exposes no named fields.
No examples provided.
n8n_list_executions List executions ~75
List workflow executions. Filter by workflowId, status, limit and cursor.
| Name | Type | Req | Description |
|---|---|---|---|
| cursor | string | – | Pagination cursor from previous response |
| limit | number | – | Max items (default 100) |
| status | string | – | Filter by status |
| workflowId | string | – | Filter by workflow ID |
| Name | Type | Req | Description |
|---|---|---|---|
| data | array | yes | – |
| nextCursor | string|null | – | – |
No examples provided.
n8n_list_projects List projects ~32
List all projects (Enterprise feature).
| Name | Type | Req | Description |
|---|---|---|---|
| cursor | string | – | – |
| limit | number | – | – |
Structured output declared, but exposes no named fields.
No examples provided.
n8n_list_tags List tags ~32
List all tags in the n8n instance.
| Name | Type | Req | Description |
|---|---|---|---|
| limit | number | – | Max tags to return |
Structured output declared, but exposes no named fields.
No examples provided.
n8n_list_users List users ~50
List all users in the n8n instance (requires owner role).
| Name | Type | Req | Description |
|---|---|---|---|
| cursor | string | – | – |
| includeRole | boolean | – | Include role information |
| limit | number | – | – |
Structured output declared, but exposes no named fields.
No examples provided.
n8n_list_variables List variables ~35
List all environment variables stored in n8n.
| Name | Type | Req | Description |
|---|---|---|---|
| cursor | string | – | – |
| limit | number | – | – |
Structured output declared, but exposes no named fields.
No examples provided.
n8n_list_workflows List workflows ~52
List all workflows. Optionally filter by active status and limit results.
| Name | Type | Req | Description |
|---|---|---|---|
| active | boolean | – | Filter by active status |
| limit | number | – | Max items to return (default 100) |
| Name | Type | Req | Description |
|---|---|---|---|
| data | array | yes | – |
| nextCursor | string|null | – | – |
No examples provided.
n8n_trigger_webhook Trigger webhook ~111
Trigger a workflow via its webhook URL. Use isTest=true for test webhooks. The webhookPath is the path configured in the Webhook node.
| Name | Type | Req | Description |
|---|---|---|---|
| data | object | – | Request body (JSON) |
| headers | object | – | Custom headers |
| isTest | boolean | – | Use /webhook-test instead of /webhook |
| method | string | – | HTTP method (default POST) |
| webhookPath | string | yes | Webhook path (as configured in the Webhook node) |
Structured output declared, but exposes no named fields.
No examples provided.
n8n_update_datatable_rows Update data table rows ~93
Update rows matching a filter. Conditions: eq, neq, like, ilike, gt, gte, lt, lte.
| Name | Type | Req | Description |
|---|---|---|---|
| data | object | yes | Columns and values to set |
| dataTableId | string | yes | Data table ID |
| dryRun | boolean | – | Simulate only |
| filter | object | yes | – |
| returnData | boolean | – | Return updated rows |
Structured output declared, but exposes no named fields.
No examples provided.
n8n_update_project Update project ~39
Rename an existing project (Enterprise feature).
| Name | Type | Req | Description |
|---|---|---|---|
| name | string | yes | New project name |
| projectId | string | yes | Project ID |
Structured output declared, but exposes no named fields.
No examples provided.
n8n_update_tag Update tag ~36
Rename an existing tag.
| Name | Type | Req | Description |
|---|---|---|---|
| name | string | yes | New tag name |
| tagId | string | yes | Tag ID |
Structured output declared, but exposes no named fields.
No examples provided.
n8n_update_workflow Update workflow ~54
Update an existing workflow. Send the complete workflow object (get it first with n8n_get_workflow).
| Name | Type | Req | Description |
|---|---|---|---|
| workflow | object | yes | Complete workflow object |
| workflowId | string | yes | Workflow ID |
Structured output declared, but exposes no named fields.
No examples provided.
n8n_update_workflow_tags Update workflow tags ~62
Replace all tags on a workflow. Send an array of tag IDs.
| Name | Type | Req | Description |
|---|---|---|---|
| tagIds | array | yes | Array of tag IDs, e.g. [{"id":"1"},{"id":"2"}] |
| workflowId | string | yes | Workflow ID |
Structured output declared, but exposes no named fields.
No examples provided.
n8n_upsert_datatable_row Upsert data table row ~75
Update a row if it exists (by filter) or insert a new one.
| Name | Type | Req | Description |
|---|---|---|---|
| data | object | yes | Columns and values |
| dataTableId | string | yes | Data table ID |
| dryRun | boolean | – | – |
| filter | object | yes | – |
| returnData | boolean | – | – |
Structured output declared, but exposes no named fields.
No examples provided.
What is the n8n MCP Server server?
n8n MCP Server is listed in the public MCP registry as io.github.RPGMais/mcp-n8n. The most complete MCP server for n8n, 43 tools for workflows, data tables, and more. This page covers its npm package (@nextoolsolutions/mcp-n8n).
Is the n8n MCP Server server safe to use?
n8n MCP Server scores 81 out of 100 on VerifyMCP. We found no known CVEs affecting it as of 20 September 2026. It declares no install or post-install scripts. That is a record of what we were able to check automatically, not an endorsement. The category breakdown on this page shows every signal behind the number, including the ones we could not confirm.
What tools does the n8n MCP Server server expose?
n8n MCP Server exposes 43 tools: n8n_list_workflows, n8n_get_workflow, n8n_create_workflow, n8n_update_workflow, n8n_delete_workflow, and 38 more. Their descriptions and schemas cost roughly 2,106 tokens of context every time the server is loaded.
Is the n8n MCP Server server still maintained?
n8n MCP Server is still listed as active in the MCP registry. We last reached this channel on 20 September 2026. Those dates come from our own scans of the registry and the channel itself, not from anything the publisher announced.
What licence is the n8n MCP Server server under?
n8n MCP Server declares the MIT licence, which is OSI-approved. That covers the source only, and says nothing about the cost of any service it calls.