n8n-mcp

It includes clear documentation, TypeScript declarations, licensing, and no install-time script. Repository activity, testing, releases, and provenance are strong, though workflow hygiene needs attention before broad adoption.

Latest 2.90.0

NPM

82%

Total Score

Maintainer Stability

Dependencies

100

Maturity

100

Supply Chain

Attestations

100

Are you affected? Scan for Free

Health Score Breakdown

Project backing

The repository is owned by a named individual rather than an organization, so the project has a thinner formal backing structure; strong recent release and repository activity partly compensates.

Workflow audit

All 8 workflows were analyzed with no untrusted checkouts or script-injection counts, but two high-confidence template-injection findings, two adhoc package installations, and 70 of 110 unpinned action uses weaken workflow hygiene. The findings are not independently a release-blocking danger because no risky trigger or untrusted checkout was reported.

Vulnerabilities

Title	Versions	Severity
AIKIDO-2026-924507 n8n-mcp is vulnerable to Server-Side Request Forgery (SSRF) in versions 2.16.3 - 2.68.4.	2.16.3 - 2.68.4	Low
AIKIDO-2026-552585 n8n-mcp is vulnerable to Insecure Direct Object Reference (IDOR) in versions 2.22.5 - 2.56.0.	2.22.5 - 2.56.0	Critical
AIKIDO-2026-210530 n8n-mcp is vulnerable to Incorrect Authorization in versions 2.7.7 - 2.57.3.	2.7.7 - 2.57.3	Medium
CVE-2026-45707 n8n-mcp is vulnerable to Improper Access Control in versions 0.0.0 - 2.51.1.	0.0.0 - 2.51.1	High
CVE-2026-45582 n8n-mcp is vulnerable to Insertion of Sensitive Information Into Sent Data in versions 0.0.0 - 2.51.3.	0.0.0 - 2.51.3	Medium