Agent-to-n8n: AI agent that composes and deploys n8n workflows from natural language. Exposes n8n-a2e capabilities as MCP tools for workflow composition, deployment, credential management, and data table operations.
Server has 16 tools with complete input schemas and descriptions. Naming follows verb_noun convention (search_, get_, list_, create_, compose_, deploy_, execute_). Descriptions are present and contextual (avg ~120 chars), meeting baseline minimums. However, output schemas are entirely undocumented, no tool declares what fields it returns, forcing LLMs to guess downstream field names. Parameter descriptions are adequate but lack constraints (enums, ranges, formats). Error handling is not visible in the code sample. Credential handling is thoughtful (secrets never exposed), but destructive operations (delete_data_table) lack confirmation patterns. Tool composition is sound, tools chain logically (search → get_details → compose → deploy). Overall: solid foundation with significant gaps in output documentation and error guidance.
Compose an n8n workflow from a structured plan. Returns valid workflow JSON ready for deployment.
Create a new credential in the n8n instance. Requires name, type, and data fields matching the credential schema. Note: OAuth credentials (Gmail, Google Drive) require browser flow and cannot be created via API — use API key/token-based credentials instead.
Create a new Data Table with typed columns. Supported column types: string, number, boolean, date.
Permanently delete a Data Table and all its data. This cannot be undone.
Deploy a workflow JSON to the configured n8n instance.
Execute an existing workflow by ID. Can pass input data that the workflow will receive. Use list_workflows first to find the workflow ID.
No output schemas documented for any tool. LLMs cannot plan downstream calls or extract required fields (e.g., what does search_n8n_nodes return? field names for node ID, relevance score, description?). Forces agents to guess and retry on field mismatches.
Destructive operations (delete_data_table) lack confirmation or dry-run patterns. Agents can permanently delete tables without user approval, risking data loss.
| Scored | Grade | Overall | Spec posture | Rubric |
|---|---|---|---|---|
| 2026-09-23 | C | 69 | 2026-07-28+ | v2 |
Generate a rich context string with relevant nodes and patterns for a given use case. Useful for composing workflows.
Get the schema for a credential type — shows required fields and their types. Use this before creating a credential to know what data is needed.
Read rows from a Data Table. Returns up to 50 rows by default.
Get full details of a specific n8n node type including all parameters, credentials, inputs/outputs.
Insert one or more rows into a Data Table. Field names must match the table's column names.
List all credentials configured in the n8n instance. Returns names, types and IDs (secrets are never exposed).
List all Data Tables in the n8n instance. Data Tables are n8n's built-in SQLite database for storing structured data without external databases.
List known workflow patterns/templates that can be used as starting points.
List all workflows deployed in the n8n instance. Shows name, ID, active status, and nodes used. Use this to discover what workflows/tools are already available.
Search for n8n nodes by natural language description. Returns matching nodes with relevance scores.
Parameter constraints missing: 'limit' params (search_n8n_nodes, get_data_table_rows, list_workflows) lack min/max bounds. LLMs may pass absurd values (limit=999999) causing timeouts or API errors. No enums for 'type' or 'column type' fields.
Error handling not visible in code sample. No evidence of recovery guidance, error classification (retryable vs fatal), or actionable error messages. Agents will not know how to respond to failures.
Parameter 'data' in create_credential is untyped object with no schema. LLMs cannot know what fields are required for a given credential type without calling get_credential_schema first, forcing multi-step discovery.