n8n-MCP
Score = points from our five tests (install, handshake, maintenance, docs, license). Not a quality or security rating. Methodology
- Install20/20
- Handshake30/30
- Maintenance25/25
- Docs10/15
- License10/10
Tested npm n8n-mcp 2.102.0 (MIT; community project by czlonkowski, not made by n8n; 23,240 GitHub stars when checked). Runs over stdio in documentation mode with no n8n API key: initialize and tools/list listed 7 tools, all annotated readOnlyHint. Real calls: search_nodes, get_node, validate_node and search_templates all returned results. Workflow-management tools only appear when an n8n instance URL and API key are set; those were not tested. The server prints a telemetry notice on start: anonymous usage telemetry is on by default (opt-out documented in the package PRIVACY.md).
Tool-call test (2026-11-11, direct MCP stdio client, no LLM): pass. 4 of 4 documentation-mode calls passed. Workflow-management tools (need an n8n API key) not tested. Evidence: local test run, Nov 11, 2026.
Transport (tested 2026-11-11): stdio
Token cost (estimate): approx. 1966 tokens, cl100k estimate (7 tools, measured 2026-11-11, version 2.102.0). This is an estimate from our testing of the tool names, descriptions and input schemas, counted with cl100k_base.
Permissions: 7 read, 0 write (state-changing), 0 unclassified · Auth: none · Rate limit: unknown · Pricing unit: unknown
Auth: none. Rate limit: unknown. Pricing unit: unknown.
get_node— readget_template— readsearch_nodes— readsearch_templates— readtools_documentation— readvalidate_node— readvalidate_workflow— read
handshake and tools listed without a recorded key or OAuth
Score 95/100 · Tools 7 · Token cost approx. 1,966 tokens · Compare · Last tested 2026-11-11 · Version tested 2.102.0 · Package n8n-mcp · Repo czlonkowski/n8n-mcp
Summary: n8n-MCP completed an MCP handshake without credentials and exposed 7 tools.
Evidence summary
- Handshake
- pass
- Tools listed
- 7
- Context cost
- approx. 1966 tokens, cl100k estimate (7 tools, measured 2026-11-11, version 2.102.0; an estimate) ranking · add up your servers' context cost
- API key
- No key needed for the tools we called
- Tested
- 2026-11-11
Test results
| Test | Result | Points | Evidence |
|---|---|---|---|
| install | pass | 20 | npm install n8n-mcp (Node 20, Linux) succeeded in 3s. |
| handshake | pass | 30 | MCP initialize + tools/list over stdio succeeded with no credentials; 7 tools listed in 18.7s. |
| maintenance | pass | 25 | Repo pushed 1 days before test; 23,240 GitHub stars. |
| docs | partial | 10 | README over 3,000 chars; install instructions present. Check of the package's own README (README shipped in npm package). |
| license | pass | 10 | MIT (OSI-approved). |
Local-model readiness
Token cost (estimate): approx. 1966 tokens, cl100k estimate for 7 tools · about 24% of an 8k context. This is an estimate from our testing (counted with cl100k_base).
Small-model friendly (schema heuristic, not a model result): unknown.
Not tested
Small-model task runs: Not yet tested.
What we tested and what we didn't
Tested on 2026-11-11
- Install from the registry
- We connected with no credentials and asked for its tool list: it listed 7 tools (Method details: MCP
initializethentools/list) - Maintenance signals (last push, archived/deprecated status)
- Docs (README length, install and config example)
- License (OSI-approved or not)
- Token cost (estimate)
Not tested
- Security: not audited (no code review, no permission or data-flow analysis)
- Real tasks (no functional task runs yet)
- Behaviour with real credentials or a real account
- Performance, rate limits or load
- Correctness of results beyond the listed tasks
Methodology: how we test. A high score means it installs and responds, not that giving it access to your data carries no risk.
Known security issues
Checked on 2026-11-11 for version 2.102.0 against OSV, GitHub advisories, GitHub repository advisories. Scope: the package itself; dependencies not scanned.
No published advisories found in OSV and GitHub advisories whose affected range includes n8n-mcp 2.102.0 as of 2026-11-11. This is not a security audit.
Other advisories we checked (24)
- Tested version 2.102.0 is not in the affected range of GHSA-4ggg-h7ph-26qr.
- Tested version 2.102.0 is not in the affected range of GHSA-75hx-xj24-mqrw.
- Tested version 2.102.0 is not in the affected range of GHSA-pfm2-2mhg-8wpx.
- Tested version 2.102.0 is not in the affected range of GHSA-wg4g-395p-mqv3.
- Tested version 2.102.0 is not in the affected range of GHSA-56c3-vfp2-5qqj.
- Tested version 2.102.0 is not in the affected range of GHSA-cmrh-wvq6-wm9r.
- Tested version 2.102.0 is not in the affected range of GHSA-8g7g-hmwm-6rv2.
- Tested version 2.102.0 is not in the affected range of GHSA-f3rg-xqjj-cj9w.
- Tested version 2.102.0 is not in the affected range of GHSA-jxx9-px88-pj69.
- Tested version 2.102.0 is not in the affected range of GHSA-j6r7-6fhx-77wx.
- Tested version 2.102.0 is not in the affected range of GHSA-2cf7-hpwf-47h9.
- Tested version 2.102.0 is not in the affected range of GHSA-2x5j-hrmv-ccrq.
- Tested version 2.102.0 is not in the affected range of GHSA-gg57-wj7g-vfrv.
- Tested version 2.102.0 is not in the affected range of GHSA-xf82-4743-c4gm.
- Tested version 2.102.0 is not in the affected range of GHSA-74jq-crxq-6x63.
- Tested version 2.102.0 is not in the affected range of GHSA-74hp-7jv7-vx4j.
- Tested version 2.102.0 is not in the affected range of GHSA-7mg3-m9wx-m555.
- Tested version 2.102.0 is not in the affected range of GHSA-rqgx-cvr7-hc6x.
- Tested version 2.102.0 is not in the affected range of GHSA-xvxq-x6hr-xc2c.
- Tested version 2.102.0 is not in the affected range of GHSA-ppgm-m8rg-4wqv.
- Tested version 2.102.0 is not in the affected range of GHSA-qm7x-j9xp-x3gv.
- Tested version 2.102.0 is not in the affected range of GHSA-q7jr-6fm4-vvhg.
- Tested version 2.102.0 is not in the affected range of GHSA-68rj-xv59-f2ch.
- Tested version 2.102.0 is not in the affected range of GHSA-gwj8-fp64-q94q.
Monthly roundup: MCP security issues, October 2026.
Tool list changes
Baseline recorded from the 2026-11-11 test run; changes appear after the next test.
Snapshot hash (fingerprint of the tool list)
16a564749bd1: SHA-256 of the canonical tool names, descriptions and input schemas. If it changes, the tool list changed.
Raw test record (JSON)
{
"name": "n8n-mcp",
"version": "2.102.0",
"registry": "npm",
"status": "working",
"tested": "2026-11-11",
"tools_count": 7,
"deprecated": false,
"archived": false,
"tests": {
"install": [
"pass",
20,
"`npm install n8n-mcp` (Node 20, Linux) succeeded in 3s."
],
"handshake": [
"pass",
30,
"MCP `initialize` + `tools/list` over stdio succeeded with no credentials; 7 tools listed in 18.7s."
],
"maintenance": [
"pass",
25,
"Repo pushed 1 days before test; 23,240 GitHub stars."
],
"docs": [
"partial",
10,
"README over 3,000 chars; install instructions present. Check of the package's own README (README shipped in npm package)."
],
"license": [
"pass",
10,
"MIT (OSI-approved)."
]
}
}Install
npx -y n8n-mcp
Pin the version we tested
npx -y n8n-mcp@2.102.0
tested 2026-11-11. Newer versions may differ and were not tested by us.
{
"mcpServers": {
"n8n-mcp": {
"command": "npx",
"args": [
"-y",
"n8n-mcp@2.102.0"
]
}
}
}Tools listed
get_node, get_template, search_nodes, search_templates, tools_documentation, validate_node, validate_workflow
Tool history: captured Nov 11, 2026. All tool history.
Quick config
{
"mcpServers": {
"n8n-mcp": {
"command": "npx",
"args": [
"-y",
"n8n-mcp"
]
}
}
}Add to config Opens the config generator with this server selected.
Setup
- Install. Run
npm install n8n-mcp(Node 20). This is the exact command we ran on 2026-11-11. - Configure. Add the mcpServers entry below to your MCP client config.
- Verify. Restart the client and check that tools/list returns tools (7 in our test).
{
"mcpServers": {
"n8n-mcp": {
"command": "npx",
"args": [
"-y",
"n8n-mcp"
]
}
}
}Test history
- 2026-11-11: New
Related: Troubleshooting: Protocol version mismatch (HTTP 400)
FAQ
Is n8n-MCP deprecated?
No. n8n-mcp was not deprecated or archived when we last tested it on 2026-11-11.
What replaces n8n-MCP?
Nothing; n8n-MCP is not deprecated as of 2026-11-11.
Does n8n-MCP need an API key?
No. It completed an MCP handshake with no credentials and listed 7 tools.
Embed the badge
Every tested server gets a free embeddable badge. It shows the current score and test date and expires after 90 days. Testing is free; payment never changes a score.