io.github.flow-84/n8n-guard is an MCP server that read-only health checks for self-hosted n8n: datastore growth, stuck runs, retention, git drift. Its tool list has not been published yet over stdio, requires no API key, and scores 54/100 on MCPpedia's security, maintenance and efficiency rubric.
Config is the same across clients - only the file and path differ.
{
"mcpServers": {
"io-github-flow-84-n8n-guard": {
"command": "npx",
"args": [
"-y",
"n8n-guard"
]
}
}
}Are you the author?
Add this badge to your README to show your security score and help users find safe servers.
Read-only health checks for self-hosted n8n: datastore growth, stuck runs, retention, git drift.
Run this in your terminal to verify the server starts. Then let us know if it worked - your result helps other developers.
npx -y 'n8n-guard' 2>&1 | head -1 && echo "✓ Server started successfully"
After testing, let us know if it worked:
Five weighted categories - click any category to see the underlying evidence.
No known CVEs.
Checked n8n-guard against OSV.dev.
Be the first to review
Have you used this server?
Share your experience - it helps other developers decide.
Sign in to write a review.
Others in devops
MCP server for using the GitLab API
MCP server for discovering, reading, and changing ZenML resources with compact generic tools
MCP server for Dynatrace Managed to access logs, events, and metrics.
An MCP server for Azure DevOps
MCP Security Weekly
Get CVE alerts and security updates for io.github.flow-84/n8n-guard and similar servers.
Start a conversation
Ask a question, share a tip, or report an issue.
Sign in to join the discussion.
An MCP server for the operational layer underneath the n8n Public API.
Most n8n MCP servers on the registry wrap the same public endpoints: list workflows, list executions, create, activate, delete. That is useful for building workflows. It is close to useless for keeping a self-hosted instance alive, because the things that actually take an instance down are not in that API at all.
n8n-guard answers the four questions the API cannot:
running looks identical to a healthy long job
until you compare it against what that workflow normally takes. n8n-guard
builds a per-workflow median from finished runs and flags the outliers.It is strictly read-only. n8n-guard never writes to your instance, never deletes executions, and never activates or edits a workflow. It reports; you decide.
npx -y n8n-guard
Requires Node.js 22 or newer (it uses the built-in node:sqlite). For a
permanent install use npm install -g n8n-guard.
{
"mcpServers": {
"n8n-guard": {
"command": "n8n-guard",
"env": {
"N8N_URL": "https://n8n.example.com",
"N8N_API_KEY": "n8n_api_...",
"N8N_SQLITE_PATH": "/var/lib/n8n/.n8n/database.sqlite",
"N8N_GIT_REPO_PATH": "/srv/workflow-exports"
}
}
}
}
Everything is an environment variable. There are no hardcoded hosts, paths, container names or accounts, so the server runs against any self-hosted instance.
| Variable | Required | Default | Purpose |
|---|---|---|---|
N8N_URL | no | http://localhost:5678 | Base URL of the instance |
N8N_API_KEY | for execution and workflow checks | none | Public API key (Settings, n8n API) |
N8N_SQLITE_PATH | for datastore checks on SQLite | none | Path to database.sqlite |
N8N_POSTGRES_URL | for datastore checks on Postgres | none | Connection string, takes precedence over SQLite |
N8N_GIT_REPO_PATH | for the drift check | none | Checkout holding exported workflow JSON |
N8N_GUARD_STUCK_MINUTES | no | 15 | Minutes in running before a run counts as stuck |
N8N_GUARD_DB_WARN_BYTES | no | 1073741824 (1 GB) | Datastore warning threshold |
N8N_GUARD_DB_CRITICAL_BYTES | no | 4294967296 (4 GB) | Datastore critical threshold |
N8N_GUARD_TIMEOUT_MS | no | 15000 | Per-request API timeout |
Partial configuration is a supported mode, not an error. With only N8N_URL and
N8N_SQLITE_PATH you still get disk and retention answers; the API-backed checks
report that they are unconfigured and the rest of the run continues.
| Tool | What it does |
|---|---|
instance_info | Reachability, configured datastore, workflow inventory. Shows which c |