product · DiggingBeagle record
n8n-mcp third-party MCP adapter
n8n-mcp is a separately maintained MCP interface to n8n workflows, using independent server authentication, telemetry, caches and local backups. Vulnerabilities in its Node.js adapter are not automatically vulnerabilities in core n8n.
- Entity kind
- product
Record description
n8n-mcp is a separately maintained Model Context Protocol bridge to n8n that may run an HTTP server, cache workflow backups and send diagnostic telemetry. Its disclosed defects include public placeholder bearer-token acceptance in a legacy mode, prototype pollution from workflow keys, stale backup rights after upstream API-key revocation and incomplete secret redaction. A fix in core n8n does not patch this adapter; source API-key revocation and adapter-local data lifecycle need independent checks.