Our grade: 4 checks
Based on public data, not a full audit. See how we grade. Something changed? Request a re-grade.
Community rating
- 5 2
- 4 5
- 3 0
- 2 0
- 1 0
Trust in production
- Trust it - 57%
- With caveats - 43%
- Wouldn't - 0%
100% would recommend this server
How reviewers scored it
- Setup & docs 3.9
- Auth experience 4.0
- Reliability 4.1
- Maintainer responsiveness 4.1
Why it got an A
Built into n8n and very actively maintained. An owner or admin has to turn it on, and only workflows marked "Available in MCP" are exposed. Clients sign in with OAuth and can be revoked one by one; a personal access token is the alternative. Eight MCP-related advisories in 2026 (OAuth client registration, the browser add-on, AI Agent domain limits, a workflow-validation account takeover and an OAuth open redirect in October) were all fixed in releases out by the disclosure date, so stay on a current version. Biggest deduction: on a self-hosted instance, TLS depends on your own setup, so we scored transport low.
How to connect
claude mcp add --transport http n8n https://<your-n8n-domain>/mcp-server/httpIs n8n MCP Server (instance-level) safe?
Is n8n MCP Server (instance-level) safe to use?
n8n MCP Server (instance-level) grades A (strong public trust signals). It shells out to helper programs or serves HTTP without enforced TLS, so keep it local and isolated.
Does n8n MCP Server (instance-level) have known vulnerabilities?
Not in our current data: it has no open CVEs or advisories. We re-check as new ones are published.
Does n8n MCP Server (instance-level) support authentication?
Yes. It requires a login, so access can be tied to a person or a scoped key.
Alternatives in Workflow Automation
- A Make MCPOfficial hosted Make server that exposes your scenarios (and, on paid plans, management tools) to agents.
- A NeverApply MCP ServerOfficial hosted server to search and match jobs, tailor resumes, prep for interviews and apply to jobs you approve, with separate read, write and apply OAuth scopes.
- A Repostit MCP ServerOfficial hosted server to draft social posts and carousels, schedule or publish them to your connected accounts, set up cross-posting workflows and check delivery.
- B Zapier MCPOfficial hosted Zapier server that lets an agent run actions across thousands of connected apps.
- C ComfyUI MCP (artokun/comfyui-mcp)A community MCP server for ComfyUI, run locally from npm, that builds and runs image, video and audio workflows, edits your live graph, and manages models and custom nodes.
Embed this badge
[](https://trustedmcp.io/servers/n8n-mcp-server)<a href="https://trustedmcp.io/servers/n8n-mcp-server"><img src="https://trustedmcp.io/badge/n8n-mcp-server.svg" alt="TrustedMCP grade A" height="80"></a>Community reviews
Surprisingly polished
I use this almost daily. Hosted endpoint means no local process to babysit. I like that access goes through a proper sign-in instead of a long-lived secret on disk. The OAuth flow worked first time in Claude Code. Happy to run it in production.
Used for Scheduled reporting jobs
- Setup & docs 4/5
- Auth experience 4/5
- Reliability 4/5
- Maintainer responsiveness 3/5
Does what it says, no drama
Of the n8n (instance-level) integrations I tried, this one is the most predictable. Sign-in flow was painless and I never had to paste a key into a config file. Releases come often and the changelog is clear. Fine in production if you sandbox it.
Used for Routing inbound requests
- Setup & docs 4/5
- Auth experience 3/5
- Reliability 4/5
- Maintainer responsiveness 4/5
Easy win for our agent setup
Our agents call this dozens of times a day. Self-hosting it was straightforward and I like keeping the data on our side. Updates land regularly, and nothing broke when I upgraded.
Used for Ops tasks like provisioning accounts
- Setup & docs 5/5
- Auth experience 5/5
- Reliability 5/5
- Maintainer responsiveness 5/5
Solid and well behaved
Replaced a homegrown script with n8n MCP Server (instance-level) and have not looked back. Self-hosting it was straightforward and I like keeping the data on our side. I like that access goes through a proper sign-in instead of a long-lived secret on disk.
Used for Triggering workflows from chat
- Setup & docs 3/5
- Auth experience 3/5
- Reliability 5/5
- Maintainer responsiveness 5/5
Exactly what I needed from n8n (instance-level)
Been running this for about a month now. Auth is handled properly, and revoking access later was one click. Hosted endpoint means no local process to babysit. Worth it, just do not skip the hardening steps.
Used for Glue between tools that have no direct integration
- Setup & docs 4/5
- Auth experience 4/5
- Reliability 3/5
- Maintainer responsiveness 3/5
Our team uses it every day
Simple to set up in Cursor, simple to reason about. Nothing to install, I just point the client at the URL. Scoped the token to just what the agent needs and it respected that. Filed an issue and got a reply within two days. Recommended, with sensible guardrails.
Used for Triggering workflows from chat
- Setup & docs 3/5
- Auth experience 4/5
- Reliability 3/5
- Maintainer responsiveness 4/5
Trustworthy enough for real work
Hooked n8n MCP Server (instance-level) into Claude Code and it worked on the first try. Self-hosting it was straightforward and I like keeping the data on our side. Scoped the token to just what the agent needs and it respected that. You can tell it is actively maintained, the rough edges keep getting fixed. It is in our production agent and I sleep fine.
Used for Connecting the agent to existing automations
- Setup & docs 4/5
- Auth experience 5/5
- Reliability 5/5
- Maintainer responsiveness 5/5
Write a review
Ran this server? Tell other teams how it went. You get one review per server. We email you a link to confirm it, then an editor checks it before it goes up. We never show your email.