n8n MCP Community MCP server

n8n MCP Community

A security-focused Model Context Protocol server for self-hosted n8n Community Edition

Give your AI client 44 tools for self-hosted n8n Community Edition. Manage workflows, nodes, runs, credentials, tags, users, and diagnostics. No paid n8n features. The server makes no external AI calls.

Install

You need Node.js 22 or 24, your n8n URL, and an n8n API key.

Install

npm install --global n8n-mcp-community@latest

--global installs the command once. Use npx below if you do not want a global install.

Connect

{
  "mcpServers": {
    "n8n-community": {
      "command": "n8n-mcp-community",
      "env": {
        "N8N_API_URL": "https://n8n.example.com",
        "N8N_API_KEY": "replace-with-a-dedicated-api-key",
        "N8N_MCP_MODE": "read-only"
      }
    }
  }
}

Restart your client. You should see 44 tools, 5 resources, and 4 prompts.

If the client cannot find the command, run command -v n8n-mcp-community on macOS/Linux or where n8n-mcp-community on Windows. Put that full path in "command".

Want no global install? Copy this command into the client configuration shown in the full guide:

npx --yes n8n-mcp-community@latest

Want the Claude Desktop app flow? Use the MCPB below. See the full installation guide for updates, rollback, and checks.

Claude Desktop: install the MCPB (no Node.js needed)

Install Extension…**.

1. Open the latest GitHub release.
2. Download the file that ends in .mcpb.
3. In Claude Desktop, open **Settings → Extensions → Advanced settings →

1. Pick the file. Enter your n8n URL, API key, and mode.

Anthropic's MCPB guide explains the same steps. Our installation guide explains how to check the download.

Install public builds only from

npm or the

latest GitHub release.

Read the demo transcript.

Why this project

n8n Community Edition, without presenting paid-only capabilities as available.

• Community Edition first. The release surface is designed for self-hosted

documented side effects, MCP safety annotations, and contract tests.

• 44 useful tools, one explicit contract. Every tool has bounded inputs,

writes or the full tool set.

• Safe by default. Read-only mode is the default. You choose when to allow

it does not execute workflows, call an agent, or contact an external model.

• Deterministic Introspect. n8n_introspect runs a local 23-rule engine;

while preserving the rest of the workflow and disclosing the Public API's non-atomic limitation.

• Surgical node updates. n8nupdatenode changes one validated node path

accessible workflows. It does not claim to be a complete installed catalog.

• Truthful discovery. n8nlistnode_types reports only types observed in

static workflow data are not returned by the generic public tools.

• Data minimization. Credential values, raw execution values, pin data, and

Shortened. The full README is on GitHub.