drzamarian/n8n-mcp-community

A security-focused Model Context Protocol server for self-hosted n8n Community Edition
Give your AI client 44 tools for self-hosted n8n Community Edition. Manage
workflows, nodes, runs, credentials, tags, users, and diagnostics. No paid n8n
features. The server makes no external AI calls.
Install
You need Node.js 22 or 24, your n8n URL, and an n8n API key.
Install
--global installs the command once. Use npx below if you do not want a
global install.
Connect
Restart your client. You should see 44 tools, 5 resources, and 4 prompts.
If the client cannot find the command, run command -v n8n-mcp-community on
macOS/Linux or where n8n-mcp-community on Windows. Put that full path in
"command".
Want no global install? Copy this command into the client configuration shown
in the full guide:
Want the Claude Desktop app flow? Use the MCPB below. See the full
installation guide for updates, rollback, and checks.
Claude Desktop: install the MCPB (no Node.js needed)
1. Open the latest GitHub release.
2. Download the file that ends in .mcpb.
3. In Claude Desktop, open **Settings → Extensions → Advanced settings →
Install Extension…**.
4. Pick the file. Enter your n8n URL, API key, and mode.
Anthropic's MCPB guide
explains the same steps. Our installation guide explains
how to check the download.
> Install public builds only from
> npm or the
> latest GitHub release.
Read the demo transcript.
Why this project
- **Community Edition first.** The release surface is designed for self-hosted
n8n Community Edition, without presenting paid-only capabilities as available.
- **44 useful tools, one explicit contract.** Every tool has bounded inputs,
documented side effects, MCP safety annotations, and contract tests.
- **Safe by default.** Read-only mode is the default. You choose when to allow
writes or the full tool set.
- **Deterministic Introspect.** n8n_introspect runs a local 23-rule engine;
it does not execute workflows, call an agent, or contact an external model.
- **Surgical node updates.** n8n_update_node changes one validated node path
while preserving the rest of the workflow and disclosing the Public API's
non-atomic limitation.
- **Truthful discovery.** n8n_list_node_types reports only types observed in
accessible workflows. It does not claim to be a complete installed catalog.
- **Data minimization.** Credential values, raw execution values, pin data, and
static workflow data are not returned by the generic public tools.
See verification evidence
Current verification
The current source candidate has been verified with:
- exactly **44 tools**, **5 resources**, and **4 prompts** over real stdio;
- **320 passing tests** locally on Node.js 24.21.0; CI and release gates require
the pinned Node.js 22.23.1 and 24.18.0 matrix;
- zero findings from Gitleaks, Semgrep, Trivy, and both project-root
production/full npm audit runs; all three source scanners are reproduced in
CI, with immutable scanner/action identities;
- a separate no-override consumer install that resolves the patched
@hono/node-server 2.x line, requires a zero-finding production audit, and
proves the stdio runtime and exact 44/5/4 inventory;
- a reproducible dependency-license gate covering 187 installed package paths;
- bounded same-origin HTTP contracts and zero-request policy-denial tests;
- all 44 compiled tool lifecycles on disposable n8n Community 2.30.5 and 2.30.7
instances with egress isolation, revoked keys, cleanup, and zero residue; and
- a reviewed offline npm-tarball installation under the project's committed
dependency policy, plus a byte-reproducible unsigned MCPB with the same
compiled runtime and complete production dependency notices.
Publication proceeds only through the reviewed release procedure: the
repository-pinned MCPB signing identity, a human artifact-baseline receipt,
tag-scoped protected-environment approval, and an externally signed MCPB