N8n

Official

n8n · by n8n-io

Fair-code workflow automation platform with native AI capabilities. Combine visual building with custom code, self-host or cloud, 400+ integrations.

202.5k 138.8k/wk GitHub npm

No known CVEs

No license

Actively maintained

Last commit 0d ago

Works with most clients

Transport: stdio, sse

0 tools

Grade F

MCPpedia last refreshed this data 16h ago

Edit this pageView history

N8n is an MCP server that fair-code workflow automation platform with native AI capabilities. Combine visual building with custom code, self-host or cloud, 400+ integrations. Its tool list has not been published yet over stdio and sse, requires no API key, and scores 60/100 on MCPpedia's security, maintenance and efficiency rubric.

Productivity Developer Tools

Step 1

Install in your client

Config is the same across clients — only the file and path differ.

CD

Supported in Claude Desktopstdio, sse · Node 18+

Paste into ~/Library/Application Support/Claude/claude_desktop_config.json

{
  "mcpServers": {
    "n8n": {
      "args": [
        "-y",
        "n8n"
      ],
      "command": "npx"
    }
  }
}

Are you the author?

Add this badge to your README to show your security score and help users find safe servers.

Embed in your READMEAbout badges →

MCPpedia Score badge

[![MCPpedia Score](https://mcppedia.org/api/badge/n8n)](https://mcppedia.org/s/n8n)

Read me

What N8n does

n8n is a workflow automation platform with 400+ integrations. While not primarily an MCP server, it supports MCP connections for AI agent workflows. Self-hostable, open source, and extensible.

Test This Server

This server supports HTTP transport. Be the first to test it — help the community know if it works.

Scored, not listed

Why this score

Five weighted categories — click any category to see the underlying evidence.

Score breakdown

60/100across 5 weighted dimensions

How we score →

0255075100

15

20

15

10

−40

Security

Maintenance

Efficiency

Documentation

Compatibility

Categoriesclick a row to see evidence

Security

OSV.dev

100 fixed

CVE-2026-72750medium · fixed

n8n: Snowflake Node executeQuery Operation Allows SQL Injection via Unparameterized Expression Interpolation

## Impact The n8n Snowflake node's Execute Query operation interpolated expression values directly into the SQL string, making queries built with untrusted data susceptible to SQL injection. Exploitation requires that a workflow author has already embedded untrusted expression data directly in a raw SQL query. ## Patches The issue has been fixed in n8n versions 1.123.67, 2.31.5, and 2.32.1. Users should upgrade to one of these versions or later to remediate the vulnerability. The fix introdu

Affected: >= 0Fixed in 1.123.67source →

GHSA-652q-gvq3-74qvmedium · fixed

n8n: Snowflake Node executeQuery Operation Allows SQL Injection via Unparameterized Expression Interpolation

## Impact The n8n Snowflake node's Execute Query operation interpolated expression values directly into the SQL string, making queries built with untrusted data susceptible to SQL injection. Exploitation requires that a workflow author has already embedded untrusted expression data directly in a raw SQL query. ## Patches The issue has been fixed in n8n versions 1.123.67, 2.31.5, and 2.32.1. Users should upgrade to one of these versions or later to remediate the vulnerability. The fix introdu

Affected: >= 0Fixed in 1.123.67source →

CVE-2026-72775medium · fixed

n8n: PostgresTrigger Node SQL Injection Allows Authenticated Users to Execute Arbitrary SQL on Connected PostgreSQL Instances

## Impact The Postgres Trigger node interpolated user-supplied identifier parameters (channel, function, and trigger names) into SQL statements without proper escaping, so an authenticated user could inject arbitrary SQL executed against the connected PostgreSQL database with the configured credential's privileges. Successful exploitation allows full read and write access to the connected PostgreSQL database. ## Patches The issue has been fixed in n8n versions 1.123.67, 2.31.5 and 2.32.1. U

Affected: >= 0Fixed in 1.123.67source →

GHSA-jqwr-vx3p-r266medium · fixed

n8n: PostgresTrigger Node SQL Injection Allows Authenticated Users to Execute Arbitrary SQL on Connected PostgreSQL Instances

## Impact The Postgres Trigger node interpolated user-supplied identifier parameters (channel, function, and trigger names) into SQL statements without proper escaping, so an authenticated user could inject arbitrary SQL executed against the connected PostgreSQL database with the configured credential's privileges. Successful exploitation allows full read and write access to the connected PostgreSQL database. ## Patches The issue has been fixed in n8n versions 1.123.67, 2.31.5 and 2.32.1. U

Affected: >= 0Fixed in 1.123.67source →

GHSA-9cmh-xcqm-5hqrmedium · fixed

n8n: Cross-Tenant Module-Cache Poisoning in the JS Task Runner

## Impact n8n's JavaScript task runner shared one module cache across all users' Code-node executions, so a user able to run a Code node could poison a cached module and alter other users' Code-node executions on the same runner, affecting their confidentiality, integrity, or availability. This is a cross-user isolation break within a single n8n instance. It does not constitute a sandbox escape or remote code execution. All multi-user n8n instances running the JS task runner with built-in or e

Affected: >= 0Fixed in 1.123.67source →

Community

Reviews

Be the first to review

Have you used this server?

Share your experience — it helps other developers decide.

How easy was setup?Did it work reliably?How was the documentation?

Sign in to write a review.

Frequently Asked Questions

Is N8n safe to use?: N8n has 1 known CVE tracked by MCPpedia. You can verify these on OSV.dev by searching for "n8n". Review the Security section above for details before installing.
How do I install N8n?: N8n supports copy-paste install configs on its MCPpedia page for Claude Desktop, Cursor, and Claude Code. Scroll to the Quick Install section and select your client.
What AI clients work with N8n?: N8n is compatible with claude-desktop, cursor, claude-code. It uses stdio and sse transport.
Is N8n actively maintained?: N8n is actively maintained — last commit was 0 days ago. It has 202,468 GitHub stars.

Related

Similar servers

Others in productivity / developer-tools

Context7 Platform -- Up-to-date code documentation for LLMs and AI code editors

MCP server for using the GitLab API

Supabase MCP Server96

Manage Supabase projects — databases, auth, storage, and edge functions

Chrome Devtools Mcp96

Chrome DevTools for coding agents

MCP Security Weekly

Get CVE alerts and security updates for N8n and similar servers.

Community

Discussion

Start a conversation

Ask a question, share a tip, or report an issue.

Has anyone used this with Cursor?How do you handle auth?Any alternatives?

Sign in to join the discussion.