$ loading_
Manage n8n workflows, executions, credentials, and variables through MCP tools.
This MCP tool claims the ability to manage n8n workflows, executions, credentials, tags, and variables, which implies operational access to automation configurations and sensitive objects. The materials do not declare required secrets or remote endpoints, and it is open source, but community adoption is very low and maintenance is unclear, so the overall posture is cautionary.
The materials say it can manage n8n credentials, indicating potential access to highly sensitive configuration objects. No mandatory extra API key is declared and Authentik OAuth is only described as optional, but once connected to a real n8n instance, there is a potential risk of viewing, modifying, or misusing credential objects.
No fixed remote endpoint is declared, and the provided checks do not show exfiltration to a third-party service; however, managing n8n resources normally implies communicating with a target n8n instance and transmitting workflow/execution data. There is no explicit red flag showing data being sent to unknown or unrelated endpoints.
The system explicitly marks this tool as executes-code, meaning it can start a local service process or execute code on the host. This is a normal inherent capability for MCP tools, but it should still be run with least privilege and limited host exposure.
Based on the description, the tool can operate on workflows, executions, variables, tags, and credentials, covering core business and configuration objects inside n8n. The materials do not specify local file read/write scope, and there is no sign of system permissions that exceed the stated purpose, so this is function-related but sensitive data access.
A positive factor is the presence of a public open-source repository, which allows some degree of source review. However, it comes from a third-party registry, the license is undeclared, GitHub shows 0 stars, maintenance is unknown, and the README is missing, so evidence of maturity and auditability is weak. No specific malicious red flag is present to justify a high-risk rating.
Copy the install command and let the AI configure it · recommended for beginners
No copy-paste install info for "n8n MCP Server" yet — see the docs or source repo.
List all workflows in the current n8n instance, group them by active status, and mark workflows that have not run in the last 7 days.
A workflow list grouped by status, with clear markers for workflows not executed recently.
Fetch failed n8n executions from the last 24 hours, summarize failure counts by workflow, and show the latest failure time and error for each workflow.
A summary report of failed executions to quickly identify problematic workflows and key errors.
List all credentials, tags, and variables in the current n8n setup, flag duplicate names, likely unused items, or entries missing descriptions, and suggest cleanup actions.
A configuration review with flagged items and actionable cleanup recommendations.
Manage, test, validate, and version n8n workflows and credentials with AI.
Create, manage, and run n8n workflows through conversational AI.
Manage n8n workflows and executions while monitoring instance health.
Generate, lint, diagnose, and operate n8n workflows with AI assistance.
Lets AI access n8n docs to build and validate workflows.
Build n8n automation workflows from natural language for faster integrations.