MCP server for direct AI interaction with n8n workflows and automation
This server has critical gaps across naming, descriptions, schemas, and error handling. Tool names lack clear action verbs (createWorkflow vs create_workflow convention). Descriptions are present but minimal (10-50 chars, below the 50-200 char LLM-optimized baseline). Input schemas exist but lack parameter descriptions entirely, every parameter is undescribed, violating the 100% A+ baseline. No output schemas documented. No error handling guidance. No security controls visible (credentials in env vars is good, but no permission gates, audit logging, or input validation shown). The 'nodes' parameter in createWorkflow and updateWorkflow accepts 'any[]' with zero guidance on structure, format, or constraints, LLMs will hallucinate invalid node definitions. No pagination support on listWorkflows despite potential for large result sets. Overall, this reads as a proof-of-concept rather than production-grade tooling.
Create a new workflow with specified name and nodes
Delete a workflow by its ID
Execute/activate a workflow by its ID
List all available workflows
Update an existing workflow with new nodes
All parameters lack descriptions. The 'nodes' parameter in createWorkflow and updateWorkflow is typed as 'any[]' with no guidance on node structure, required fields, or valid node types. LLMs cannot infer what a valid node object looks like and will hallucinate invalid payloads.
No output schemas documented. Callers cannot know what fields are returned by createWorkflow, executeWorkflow, updateWorkflow, deleteWorkflow, or listWorkflows. This breaks tool chaining, if createWorkflow returns a workflow object, what fields does it contain? Is there a workflow_id field for downstream calls?
No error handling or recovery guidance. If a workflow creation fails (invalid nodes, duplicate name, permission denied), the raw API response is returned with no actionable guidance for the LLM. No distinction between retryable and fatal errors.
| Scored | Grade | Overall | Spec posture | Rubric |
|---|---|---|---|---|
| 2026-09-23 | F | 36 | 2026-07-28+ | v2 |
Destructive operations (deleteWorkflow) lack confirmation or dry-run support. An agent can permanently delete a workflow with a single call. No confirmation step or undo mechanism.
listWorkflows has no pagination support. If a user has hundreds of workflows, the tool returns all of them, bloating the response and risking context window exhaustion. No limit, offset, or cursor parameters.