N8n has 1 known CVE tracked by MCPpedia. You can verify these on OSV.dev by searching for "n8n". Review the Security section above for details before installing.

How do I install N8n?

N8n supports copy-paste install configs on its MCPpedia page for Claude Desktop, Cursor, and Claude Code. Scroll to the Quick Install section and select your client.

What AI clients work with N8n?

N8n is compatible with claude-desktop, cursor, claude-code. It uses stdio and sse transport.

Is N8n actively maintained?

N8n is actively maintained — last commit was 1 day ago. It has 194,757 GitHub stars.

N8n

Name: N8n
Author: n8n-io

Official

n8n · by n8n-io

Fair-code workflow automation platform with native AI capabilities. Combine visual building with custom code, self-host or cloud, 400+ integrations.

194.8k GitHub npm

1 open CVE

No license

Actively maintained

Last commit 1d ago

Works with most clients

Transport: stdio, sse

0 tools

Grade F

Edit this pageView history

Productivity Developer Tools

Step 1

Install in your client

Config is the same across clients — only the file and path differ.

Supported in Claude Desktopstdio, sse · Node 18+

Paste into ~/Library/Application Support/Claude/claude_desktop_config.json

{
  "mcpServers": {
    "n8n": {
      "args": [
        "-y",
        "n8n"
      ],
      "command": "npx"
    }
  }
}

Are you the author?

Add this badge to your README to show your security score and help users find safe servers.

Embed in your READMEAbout badges →

[![MCPpedia Score](https://mcppedia.org/api/badge/n8n)](https://mcppedia.org/s/n8n)

Read me

What N8n does

n8n is a workflow automation platform with 400+ integrations. While not primarily an MCP server, it supports MCP connections for AI agent workflows. Self-hostable, open source, and extensible.

Test This Server

This server supports HTTP transport. Be the first to test it — help the community know if it works.

Loading README…

Scored, not listed

Why this score

Five weighted categories — click any category to see the underlying evidence.

Score breakdown

48/100across 5 weighted dimensions

How we score →

0255075100

−52

Security

Maintenance

Efficiency

Documentation

Compatibility

Categoriesclick a row to see evidence

Security

OSV.dev

1 open103 fixed

GHSA-664h-gpgq-h6xxmedium · fixedCVSS 5.4

n8n: Wrong OAuth Scope on Evaluation Test Runs Endpoints

## Impact Three mutating endpoints in the evaluation test runs controller authorized state-changing actions using `workflow:read` instead of the action-appropriate `workflow:execute` scope. An authenticated user with `project:viewer` role on a project could start new evaluation test runs, cancel in-flight runs, and delete run records for workflows they only had read access to. This issue only affects instances with Advanced Permissions (Enterprise/Cloud) where projects and viewer roles are in u

Affected: >= 0Fixed in 1.123.55source →

CVE-2026-54304high · fixedCVSS 7.7

n8n: SecurityScorecard Node Leaks API Token to User-Controlled Host

## Impact An authenticated user with permission to create or modify workflows and access to a SecurityScorecard credential with limited allowed domains could configure the SecurityScorecard node's report download operation to target an attacker-controlled URL. The node attached the SecurityScorecard API token to the outbound request, causing the credential to be sent to the attacker-controlled host bypassing credential configured limitations and exfiltrating. ## Patches The issue has been fixed

Affected: >= 0Fixed in 1.123.55source →

CVE-2026-54309critical · fixedCVSS 10

n8n: MCP Browser HTTP Transport Exposes Unauthenticated Browser-Control Sessions

## Impact When `@n8n/mcp-browser` is run in HTTP transport mode, the MCP endpoint accepts session initialization and tool invocation requests without any authentication. Any network-reachable client, or any website visited by the user, can establish an MCP session and invoke browser-control tools. Where the n8n AI Browser Bridge extension is installed and a browser connection is active, an unauthenticated caller can access browser-control capabilities including navigation, JavaScript evaluation

Affected: >= 2.26.0Fixed in 2.26.2source →

CVE-2026-54305critical · fixedCVSS 9.9

n8n: Cross-Tenant Credential Takeover via Dynamic Credentials EE Endpoints

## Impact Three EE endpoints used by the Dynamic Credentials feature accepted any authenticated n8n session without performing per-resource ownership or scope checks on the target workflow or credential. An authenticated user with no project membership or credential sharing relationship could enumerate credential identifiers, names, and types referenced by any private workflow in the instance, initiate an OAuth authorization flow against another user's credential to overwrite its stored tokens w

Affected: >= 0Fixed in 1.123.55source →

CVE-2026-54307critical · fixedCVSS 9.6

n8n: Credential Exfiltration via Permission Bypass

## Impact A member-level user with editor access to a shared workflow could reference credentials they do not own via specific public API endpoints. Credential ownership checks were only enforced partially leading to cross-user credential access. This issue affects instances where workflow sharing is enabled and at least one workflow has been shared with a member-level user as an Editor. ## Patches The issue has been fixed in n8n versions 1.123.55, 2.25.7, and 2.26.2. Users should upgrade to o

Affected: >= 0Fixed in 1.123.55source →

Community

Reviews

Be the first to review

Have you used this server?

Share your experience — it helps other developers decide.

How easy was setup?Did it work reliably?How was the documentation?

Frequently Asked Questions

Is N8n safe to use?: N8n has 1 known CVE tracked by MCPpedia. You can verify these on OSV.dev by searching for "n8n". Review the Security section above for details before installing.
How do I install N8n?: N8n supports copy-paste install configs on its MCPpedia page for Claude Desktop, Cursor, and Claude Code. Scroll to the Quick Install section and select your client.
What AI clients work with N8n?: N8n is compatible with claude-desktop, cursor, claude-code. It uses stdio and sse transport.
Is N8n actively maintained?: N8n is actively maintained — last commit was 1 day ago. It has 194,757 GitHub stars.

Similar servers

Others in productivity / developer-tools

View all →

Memory MCP Server98

Persistent memory using a knowledge graph

87.9k 5

XcodeBuildMCP97

A Model Context Protocol (MCP) server and CLI that provides tools for agent use when working on iOS and macOS projects.

6.0k 2

XcodeBuildMCP97

XcodeBuildMCP provides tools for Xcode project management, simulator management, and app utilities.

6.0k 1

Supabase MCP Server97

Manage Supabase projects — databases, auth, storage, and edge functions

2.8k 4

MCP Security Weekly

Get CVE alerts and security updates for N8n and similar servers.

Community

Discussion

Start a conversation

Ask a question, share a tip, or report an issue.

Has anyone used this with Cursor?How do you handle auth?Any alternatives?

Edit this pageView history

Productivity Developer Tools

Step 1

Install in your client

Config is the same across clients — only the file and path differ.

Supported in Claude Desktopstdio, sse · Node 18+

Paste into ~/Library/Application Support/Claude/claude_desktop_config.json

{
  "mcpServers": {
    "n8n": {
      "args": [
        "-y",
        "n8n"
      ],
      "command": "npx"
    }
  }
}

Are you the author?

Add this badge to your README to show your security score and help users find safe servers.

Embed in your READMEAbout badges →

[![MCPpedia Score](https://mcppedia.org/api/badge/n8n)](https://mcppedia.org/s/n8n)

Read me

What N8n does

n8n is a workflow automation platform with 400+ integrations. While not primarily an MCP server, it supports MCP connections for AI agent workflows. Self-hostable, open source, and extensible.

Test This Server

This server supports HTTP transport. Be the first to test it — help the community know if it works.

README

n8n - Secure Workflow Automation for Technical Teams

n8n is a workflow automation platform that gives technical teams the flexibility of code with the speed of no-code. With 400+ integrations, native AI capabilities, and a fair-code license, n8n lets you build powerful automations while maintaining full control over your data and deployments.

Key Capabilities

Code When You Need It: Write JavaScript/Python, add npm packages, or use the visual interface
AI-Native Platform: Build AI agent workflows based on LangChain with your own data and models
Full Control: Self-host with our fair-code license or use our cloud offering
Enterprise-Ready: Advanced permissions, SSO, and air-gapped deployments
Active Community: 400+ integrations and 900+ ready-to-use templates

Quick Start

Try n8n instantly with npx (requires Node.js):

npx n8n

Or deploy with Docker:

docker volume create n8n_data
docker run -it --rm --name n8n -p 5678:5678 -v n8n_data:/home/node/.n8n docker.n8n.io/n8nio/n8n

Access the editor at http://localhost:5678

Resources

Support

Need help? Our community forum is the place to get support and connect with other users: community.n8n.io

License

n8n is fair-code distributed under the Sustainable Use License and n8n Enterprise License.

Source Available: Always visible source code
Self-Hostable: Deploy anywhere
Extensible: Add your own nodes and functionality

Enterprise Licenses available for additional features and support.

Additional information about the license model can be found in the docs.

Contributing

Found a bug 🐛 or have a feature idea ✨? Check our Contributing Guide for a setup guide & best practices.

Join the Team

Want to shape the future of automation? Check out our job posts and join our team!

What does n8n mean?

Short answer: It means "nodemation" and is pronounced as n-eight-n.

Long answer: "I get that question quite often (more often than I expected) so I decided it is probably best to answer it here. While looking for a good name for the project with a free domain I realized very quickly that all the good ones I could think of were already taken. So, in the end, I chose nodemation. 'node-' in the sense that it uses a Node-View and that it uses Node.js and '-mation' for 'automation' which is what the project is supposed to help with. However, I did not like how long the name was and I could not imagine writing something that long every time in the CLI. That is when I then ended up on 'n8n'." - Jan Oberhauser, Founder and CEO, n8n.io

Loading README…

Scored, not listed

Why this score

Five weighted categories — click any category to see the underlying evidence.

Score breakdown

48/100across 5 weighted dimensions

How we score →

0255075100

−52

Security

Maintenance

Efficiency

Documentation

Compatibility

Categoriesclick a row to see evidence

Security

OSV.dev

1 open103 fixed

GHSA-664h-gpgq-h6xxmedium · fixedCVSS 5.4

n8n: Wrong OAuth Scope on Evaluation Test Runs Endpoints

Affected: >= 0Fixed in 1.123.55source →

CVE-2026-54304high · fixedCVSS 7.7

n8n: SecurityScorecard Node Leaks API Token to User-Controlled Host

Affected: >= 0Fixed in 1.123.55source →

CVE-2026-54309critical · fixedCVSS 10

n8n: MCP Browser HTTP Transport Exposes Unauthenticated Browser-Control Sessions

Affected: >= 2.26.0Fixed in 2.26.2source →

CVE-2026-54305critical · fixedCVSS 9.9

n8n: Cross-Tenant Credential Takeover via Dynamic Credentials EE Endpoints

Affected: >= 0Fixed in 1.123.55source →

CVE-2026-54307critical · fixedCVSS 9.6

n8n: Credential Exfiltration via Permission Bypass

Affected: >= 0Fixed in 1.123.55source →

Community

Reviews

Be the first to review

Have you used this server?

Share your experience — it helps other developers decide.

How easy was setup?Did it work reliably?How was the documentation?

Frequently Asked Questions

Is N8n safe to use?: N8n has 1 known CVE tracked by MCPpedia. You can verify these on OSV.dev by searching for "n8n". Review the Security section above for details before installing.
How do I install N8n?: N8n supports copy-paste install configs on its MCPpedia page for Claude Desktop, Cursor, and Claude Code. Scroll to the Quick Install section and select your client.
What AI clients work with N8n?: N8n is compatible with claude-desktop, cursor, claude-code. It uses stdio and sse transport.
Is N8n actively maintained?: N8n is actively maintained — last commit was 1 day ago. It has 194,757 GitHub stars.