Connectors · Data & integration
n8n MCP server for AI agents.
actionlake is an MCP gateway: one remote MCP server that connects Claude and other MCP clients to n8n and the rest of your systems. It gives your agent 169 n8n actions (66 reads, 69 writes and 34 that wait for a confirmation) and holds the n8n credential itself, so the agent never does. It paces n8n's limits and records every call.
100,000 free calls a month. No card, no email, no password: press Start a free sandbox on the next screen and keep the key it shows you.
claude mcp add --transport http actionlake https://connect.actionlake.com/mcpdo { action: "n8n.users.list", intent: "check which n8n account is connected"}# Retrieve all users · read · 1 upstream call- 169actionsin one signed file
- 66readlook, never change
- 69writecreate and update
- 34wait for a yesdestructive, confirmed first
Set up
Connect n8n in three steps.
- 01
Add actionlake to Claude.
Run the command once in Claude Code; its consent page can create a free sandbox: 100,000 calls a month, no card. In the Claude app, add a custom connector with the URL below and paste your key on the consent page. Creating a new sandbox from the Claude app is not yet tested by us.
https://connect.actionlake.com/mcp - 02
Connect n8n.
API key. No consent screen: your agent can connect it for you, but the key then passes through your chat. To keep it out of the model's context, paste it in the console instead. actionlake stores what you paste write-only, sealed under your tenant's key.
api_keyn8n API key: in the n8n UI open Settings > n8n API > Create an API key, pick an expiry and (on Enterprise) the…hostWhere your n8n lives: your host
account { op: "connections.requirements", service: "n8n" } # free: exactly what to paste, and what is found for you - 03
Make the first call. Check before a write.
Ask in plain words; Claude picks the action. Before anything changes,
checkvalidates the call and prices it, for free.do { action: "n8n.users.list" }# retrieve all users · read · 1 upstream callcheck { action: "n8n.projects.create", input: { … } }# free: inputs, permissions, cost and confirmations, nothing sent
n8n at a glance
- Sign-in
- API key. No consent screen: your agent can connect it for you, but the key then passes through your chat. To keep it out of the model's context, paste it in the console instead.
- You provide
api_key- Setup fields
host- Limits we pace to
- 600 calls a minute, per connection
- API covered
- N8n Public API v1 (spec 1.1.1, OpenAPI 3.0.0), at your n8n instance's API base URL, which you enter when connecting
- Built from
- n8n's documentation, read 22 October 2026internal.users.n8n.clouddocs.n8n.io
- Service file
- Version 1.0.0, signed (Ed25519)
- Cached reads
- 48 of 66 reads, for up to 5 minutes; a write clears what it affects
- Shared entities
- 2, so ask can line n8n up with your other systems
- Data
- Processed and stored in Sydney, Australia. No US region yet
Capabilities
What an AI agent can do in n8n.
169 actions in 45 areas. Every one carries its effect, so a key can allow the reads and hold the rest.
- 66readlook, never change
- 69writecreate and update
- 34destructivewait for a confirmation
Promotion connections
132 read · 8 write · 3 destructive
Clone one direction's repository · Create a promotion connection · List promotion connections · Promote all team projects
Workflows
122 read · 8 write · 2 destructive
Retrieve all workflows · Create a workflow · Retrieve a workflow · Update a workflow
Credentials
73 read · 2 write · 2 destructive
Create a credential · List credentials · Get credential by ID · Update credential by ID
Data table rows
61 read · 3 write · 2 destructive
Insert rows into a data table · List rows of a data table · Update rows in a data table · Clear all rows from a data table
Executions
62 read · 1 write · 3 destructive
Retrieve all executions · Retrieve an execution · Stop an execution · Retry an execution
Log streaming destinations
63 read · 2 write · 1 destructive
List log streaming destinations · Create a log streaming destination · Retrieve a log streaming destination · Update a log streaming destination
Credential type policy documents
52 read · 2 write · 1 destructive
Preview: Create a credential type policy document · Preview: List credential type policy documents · Preview: Retrieve a credential type policy document · Preview: Replace the rules of a credential type policy document
Data tables
52 read · 2 write · 1 destructive
List all data tables · Create a new data table · Get a data table · Update a data table
37 more areas · 109 actions
- Folders 5
- Node type policy documents 5
- Promotion providers 5
- Role mapping rules 5
- Roles 5
- Tags 5
- Users 5
- Community packages 4
- Credential type policies 4
- Data table columns 4
- Node type policies 4
- Project promotions 4
- Project users 4
- Projects 4
- Test runs 4
- Variables 4
- Otel 3
- Promotion connection projects 3
- Source control 3
- Workflow versions 3
- Credential type policy attachments 2
- Execution tags 2
- Ldap 2
- Ldap syncs 2
- Node type policy attachments 2
- Oidc 2
- Saml 2
- Security policy 2
- Workflow tags 2
- Audit 1
- Credential types 1
- Discover 1
- Insights 1
- Log streaming event types 1
- Promotion provider branches 1
- Promotion provider repositories 1
- Test cases 1
Top actions
The n8n API, shaped for agents.
The ids your agent types, what each does, and the one name it shares with other systems. 58 of n8n's 58 action names are shared with at least one other connector, so an agent learns them once.
| Action | What it does | Effect | Same name in |
|---|---|---|---|
n8n.users.listRetrieve all users | Retrieve all users. | read | identity.user.list474 connectors |
n8n.projects.listRetrieve projects | Retrieve projects. | read | work.project.list109 connectors |
n8n.users.getGet user by ID/Email | Get user by ID/Email. | read | identity.user.get399 connectors |
n8n.projects.createCreate a project | Create a project. | write | work.project.create102 connectors |
n8n.folders.listRetrieve folders | Retrieve folders. | read | content.folder.list62 connectors |
n8n.folders.createCreate a folder | Create a folder. | write | content.folder.create62 connectors |
n8n.users.deleteDelete user | Delete user. | destructive | identity.user.delete253 connectors |
n8n.data_tables.listList all data tables | List all data tables. | read | content.table.list21 connectors |
n8n.data_tables.createCreate a new data table | Create a new data table. | write | content.table.create16 connectors |
n8n.workflows.listRetrieve all workflows | Retrieve all workflows. | read | automation.workflow.list51 connectors |
n8n.roles.listRetrieve all roles | Retrieve all roles. | read | identity.role.list184 connectors |
n8n.workflows.createCreate a workflow | Create a workflow. | write | automation.workflow.create38 connectors |
Try it
Prompts to paste into Claude.
Each one names the n8n actions it will call, so you know what it reads and what it changes before you send it.
- Readread
Give me a one-line status for every active n8n project.
calls
n8n.projects.list - Writewrite
Create a project in n8n. Show me exactly what you will send before you save it.
calls
n8n.projects.create
Governance for n8n
Destructive actions wait for a yes.
34 n8n actions are destructive. The first 10:
- Delete user
n8n.users.delete - Delete a project
n8n.projects.delete - Delete a folder
n8n.folders.delete - Delete a data table
n8n.data_tables.delete - Delete a workflow
n8n.workflows.delete - Delete a column
n8n.data_table_columns.delete - Delete a custom role
n8n.roles.delete - Stop an execution
n8n.executions.stop - Delete a variable
n8n.variables.delete - Delete a log streaming destination
n8n.log_streaming_destinations.delete
A destructive action runs only with confirm: true. Under the human policy the agent cannot confirm for itself: the run stops until a named person approves, in the console or from a signed link in an email. The cap on a key is refused before the call is sent, never after.
Delete user?
intent: the user asked me to delete user
account { op: "keys.create", name: "n8n-agent", allowed_actions: ["n8n.*"], cap_calls: 2000, confirm_policy: "human_for_writes", approval_rules: [ { match: "n8n.users.delete", approver: "[email protected]" }, { match: "n8n.projects.delete", approver: "[email protected]" }, { match: "n8n.folders.delete", approver: "[email protected]" } ]}Cost
What n8n costs on actionlake.
Every n8n action is one upstream call, the only thing actionlake bills. Searching, check, cost, account and any call n8n refused with 401, 403, 429 or a 5xx are free. Paid plans start at US$49 a month for 250,000 calls, with overage from US$0.30 down to US$0.18 per 1,000.
- 1upstream call per actionall 169 n8n actions
- 169actions pageeach page of a long list is one call
- 48reads can be cacheda cache hit costs nothing
- 100,000calls a month, freepaid plans from US$49 a month for 250,000
Action index
Every n8n action.
169 actions by area: the id your agent calls, what it does, and its effect.
Promotion connections13
n8n.promotion_connections.applyApply a package to the instancewriten8n.promotion_connections.clone_checkoutClone one direction's repositorywriten8n.promotion_connections.continue_applyContinue Apply after binding setupwriten8n.promotion_connections.createCreate a promotion connectionwriten8n.promotion_connections.deleteDelete a promotion connectiondestructiven8n.promotion_connections.delete_configRemove one directiondestructiven8n.promotion_connections.disconnect_checkoutRemove one direction's local checkoutdestructiven8n.promotion_connections.getRetrieve a promotion connectionreadn8n.promotion_connections.listList promotion connectionsreadn8n.promotion_connections.promotePromote all team projectswriten8n.promotion_connections.updateUpdate a promotion connectionwriten8n.promotion_connections.upsert_apply_configCreate or replace the Apply configurationwriten8n.promotion_connections.upsert_promote_configCreate or replace the Promote configurationwrite
Workflows12
n8n.workflows.activatePublish a workflowwriten8n.workflows.archiveArchive a workflowwriten8n.workflows.createCreate a workflowwriten8n.workflows.deactivateDeactivate a workflowwriten8n.workflows.deleteDelete a workflowdestructiven8n.workflows.getRetrieve a workflowreadn8n.workflows.listRetrieve all workflowsreadn8n.workflows.publishPublish a workflowwriten8n.workflows.transferTransfer a workflow to another projectdestructiven8n.workflows.unarchiveUnarchive a workflowwriten8n.workflows.unpublishUnpublish a workflowwriten8n.workflows.updateUpdate a workflowwrite
Credentials7
n8n.credentials.createCreate a credentialwriten8n.credentials.deleteDelete credential by IDdestructiven8n.credentials.getGet credential by IDreadn8n.credentials.listList credentialsreadn8n.credentials.testTest credential by IDreadn8n.credentials.transferTransfer a credential to another project.destructiven8n.credentials.updateUpdate credential by IDwrite
Data table rows6
n8n.data_table_rows.clearClear all rows from a data tabledestructiven8n.data_table_rows.deleteDelete rows from a data tabledestructiven8n.data_table_rows.insertInsert rows into a data tablewriten8n.data_table_rows.listList rows of a data tablereadn8n.data_table_rows.updateUpdate rows in a data tablewriten8n.data_table_rows.upsertUpsert a row in a data tablewrite
Executions6
n8n.executions.deleteDelete an executiondestructiven8n.executions.getRetrieve an executionreadn8n.executions.listRetrieve all executionsreadn8n.executions.retryRetry an executionwriten8n.executions.stopStop an executiondestructiven8n.executions.stop_manyStop multiple executionsdestructive
Log streaming destinations6
n8n.log_streaming_destinations.createCreate a log streaming destinationwriten8n.log_streaming_destinations.deleteDelete a log streaming destinationdestructiven8n.log_streaming_destinations.getRetrieve a log streaming destinationreadn8n.log_streaming_destinations.listList log streaming destinationsreadn8n.log_streaming_destinations.testSend a test message to a log streaming destinationreadn8n.log_streaming_destinations.updateUpdate a log streaming destinationwrite
Credential type policy documents5
n8n.credential_type_policy_documents.createPreview: Create a credential type policy documentwriten8n.credential_type_policy_documents.deletePreview: Delete a credential type policy documentdestructiven8n.credential_type_policy_documents.getPreview: Retrieve a credential type policy documentreadn8n.credential_type_policy_documents.listPreview: List credential type policy documentsreadn8n.credential_type_policy_documents.updatePreview: Replace the rules of a credential type policy documentwrite
Data tables5
n8n.data_tables.createCreate a new data tablewriten8n.data_tables.deleteDelete a data tabledestructiven8n.data_tables.getGet a data tablereadn8n.data_tables.listList all data tablesreadn8n.data_tables.updateUpdate a data tablewrite
Folders5
n8n.folders.createCreate a folderwriten8n.folders.deleteDelete a folderdestructiven8n.folders.getGet folder detailsreadn8n.folders.listRetrieve foldersreadn8n.folders.updateUpdate a folderwrite
Node type policy documents5
n8n.node_type_policy_documents.createPreview: Create a node type policy documentwriten8n.node_type_policy_documents.deletePreview: Delete a node type policy documentdestructiven8n.node_type_policy_documents.getPreview: Retrieve a node type policy documentreadn8n.node_type_policy_documents.listPreview: List node type policy documentsreadn8n.node_type_policy_documents.updatePreview: Replace the rules of a node type policy documentwrite
Promotion providers5
n8n.promotion_providers.createCreate a promotion providerwriten8n.promotion_providers.deleteDelete a promotion providerdestructiven8n.promotion_providers.getRetrieve a promotion providerreadn8n.promotion_providers.listList promotion providersreadn8n.promotion_providers.updateUpdate a promotion providerwrite
Role mapping rules5
n8n.role_mapping_rules.createCreate a role-mapping ruledestructiven8n.role_mapping_rules.deleteDelete a role-mapping ruledestructiven8n.role_mapping_rules.listRetrieve role-mapping rulesreadn8n.role_mapping_rules.moveMove a role-mapping rulewriten8n.role_mapping_rules.updateUpdate a role-mapping ruledestructive
Roles5
n8n.roles.createCreate a custom rolewriten8n.roles.deleteDelete a custom roledestructiven8n.roles.getRetrieve a rolereadn8n.roles.listRetrieve all rolesreadn8n.roles.updateUpdate a custom rolewrite
Tags5
n8n.tags.createCreate a tagwriten8n.tags.deleteDelete a tagdestructiven8n.tags.getRetrieves a tagreadn8n.tags.listRetrieve all tagsreadn8n.tags.updateUpdate a tagwrite
Users5
n8n.users.change_roleChange a user's global roledestructiven8n.users.deleteDelete userdestructiven8n.users.getGet user by ID/Emailreadn8n.users.inviteCreate multiple userswriten8n.users.listRetrieve all usersread
Community packages4
n8n.community_packages.installInstall a community packagewriten8n.community_packages.listList installed community packagesreadn8n.community_packages.uninstallUninstall a community packagedestructiven8n.community_packages.updateUpdate a community packagewrite
Credential type policies4
n8n.credential_type_policies.get_instancePreview: Retrieve the instance credential type policyreadn8n.credential_type_policies.get_projectPreview: Retrieve a project's credential type policyreadn8n.credential_type_policies.update_instancePreview: Replace the instance credential type policywriten8n.credential_type_policies.update_projectPreview: Replace a project's credential type policywrite
Data table columns4
n8n.data_table_columns.createAdd a column to a data tablewriten8n.data_table_columns.deleteDelete a columndestructiven8n.data_table_columns.listList columns of a data tablereadn8n.data_table_columns.updateUpdate a columnwrite
Node type policies4
n8n.node_type_policies.get_instancePreview: Retrieve the instance node type policyreadn8n.node_type_policies.get_projectPreview: Retrieve a project's node type policyreadn8n.node_type_policies.update_instancePreview: Replace the instance node type policywriten8n.node_type_policies.update_projectPreview: Replace a project's node type policywrite
Project promotions4
n8n.project_promotions.applyApply a selection of a project's workflowswriten8n.project_promotions.continue_applyContinue applying a selection after binding setupwriten8n.project_promotions.list_changesList the changes of a project in one directionreadn8n.project_promotions.promotePromote a selection of a project's workflowswrite
Project users4
n8n.project_users.addAdd one or more users to a projectdestructiven8n.project_users.change_roleChange a user's role in a projectdestructiven8n.project_users.listList project membersreadn8n.project_users.removeDelete a user from a projectdestructive
Projects4
n8n.projects.createCreate a projectwriten8n.projects.deleteDelete a projectdestructiven8n.projects.listRetrieve projectsreadn8n.projects.updateUpdate a projectwrite
Test runs4
n8n.test_runs.cancelCancel a test rundestructiven8n.test_runs.createTrigger a test runwriten8n.test_runs.getRetrieve a test runreadn8n.test_runs.listRetrieve test runsread
Variables4
n8n.variables.createCreate a variablewriten8n.variables.deleteDelete a variabledestructiven8n.variables.listRetrieve variablesreadn8n.variables.updateUpdate a variablewrite
Otel3
n8n.otel.get_settingsRetrieve the OpenTelemetry configurationreadn8n.otel.test_traceTest the connection to an OTLP collectorreadn8n.otel.update_settingsSet the OpenTelemetry configurationwrite
Promotion connection projects3
n8n.promotion_connection_projects.addLink a project to a promotion connectionwriten8n.promotion_connection_projects.getList projects linked to a promotion connectionreadn8n.promotion_connection_projects.removeUnlink a project from a promotion connectiondestructive
Source control3
n8n.source_control.get_statusPreview pending source control changesreadn8n.source_control.pullPull changes from the remote repositorywriten8n.source_control.pushPush local source control changeswrite
Workflow versions3
n8n.workflow_versions.getRetrieve a workflow versionreadn8n.workflow_versions.get_legacyRetrieves a specific version of a workflowreadn8n.workflow_versions.listRetrieve workflow version historyread
Credential type policy attachments2
n8n.credential_type_policy_attachments.getPreview: Retrieve a scope's attached policy documentsreadn8n.credential_type_policy_attachments.replacePreview: Replace a scope's attached policy documentswrite
Execution tags2
n8n.execution_tags.listGet execution tagsreadn8n.execution_tags.replaceUpdate tags of an executionwrite
Ldap2
n8n.ldap.get_configRetrieve the LDAP configurationreadn8n.ldap.update_configSet the LDAP configurationwrite
Ldap syncs2
n8n.ldap_syncs.listRetrieve LDAP synchronization historyreadn8n.ldap_syncs.runTrigger an LDAP synchronizationwrite
Node type policy attachments2
n8n.node_type_policy_attachments.getPreview: Retrieve a scope's attached policy documentsreadn8n.node_type_policy_attachments.replacePreview: Replace a scope's attached policy documentswrite
Oidc2
n8n.oidc.get_configRetrieve the OIDC SSO configurationreadn8n.oidc.update_configSet the OIDC SSO configurationwrite
Saml2
n8n.saml.get_configRetrieve the SAML SSO configurationreadn8n.saml.update_configSet the SAML SSO configurationwrite
Security policy2
n8n.security_policy.getRetrieve the security policyreadn8n.security_policy.updateSet the security policywrite
Workflow tags2
n8n.workflow_tags.listGet workflow tagsreadn8n.workflow_tags.replaceUpdate tags of a workflowwrite
Audit1
n8n.audit.generateGenerate an auditread
Credential types1
n8n.credential_types.get_schemaShow credential data schemaread
Discover1
n8n.discover.getDiscover available API capabilitiesread
Insights1
n8n.insights.get_summaryRetrieve insights summaryread
Log streaming event types1
n8n.log_streaming_event_types.listList streamable event typesread
Promotion provider branches1
n8n.promotion_provider_branches.listList branches of a promotion repositoryread
Promotion provider repositories1
n8n.promotion_provider_repositories.listList repositories of a promotion providerread
Test cases1
n8n.test_cases.listRetrieve test run casesread
Questions
The n8n MCP server, answered.
Is there a n8n MCP server for Claude?
Yes. actionlake is an MCP gateway: a remote MCP server that gives Claude, or another MCP client, 169 n8n actions across promotion connections, workflows, credentials and data table rows, through the same eight tools it uses for every other connector. actionlake is independent; it is not made or endorsed by n8n.
What do I need to connect n8n?
N8n API key: in the n8n UI open Settings > n8n API > Create an API key, pick an expiry and (on Enterprise) the…. Plus your host. The free call account { op: "connections.requirements", service: "n8n" } lists exactly what to paste.
Can an AI agent delete or change things in n8n?
Only if its key allows it, and only with an explicit confirmation. 34 n8n actions are destructive, including delete user, delete a project and delete a folder. Each runs only with confirm: true. Under the human confirm policy, or an approval rule on the key, the run waits until a named person approves it.
Will an AI agent use up my n8n API limit?
actionlake paces every call to the limits in the n8n service file: 600 calls a minute per connection. Repeated reads are answered from cache (48 n8n actions can be), which never reaches n8n.
What does a n8n action cost?
One upstream call, the only unit actionlake bills. A list that pages bills one call per page (169 n8n actions page). Cache hits, searches, dry runs and calls n8n refused with 401, 403, 429 or a 5xx are free. The Free plan includes 100,000 calls a month with no card. Paid plans start at US$49 a month for 250,000 calls, with overage from US$0.30 down to US$0.18 per 1,000.
Which n8n API does it cover?
The n8n Public API v1 (spec 1.1.1, OpenAPI 3.0.0) at your n8n instance's API base URL, which you enter when connecting. It is built from n8n's documentation as read on 22 October 2026. 169 actions in 45 areas, each one in the signed service file (version 1.0.0).
Does actionlake keep my n8n data, and where?
actionlake processes and stores data in Sydney, Australia; there is no US region yet. Reads may be cached for up to 5 minutes, and a write clears the reads it affects. Each run's request and response is kept, sealed, for your plan's trace window: 1 day on Free, 3 days on Starter, 7 days on Pro, 14 days on Team, 30 days on Business and 30 days on Enterprise. Your n8n credential is sealed under your tenant's key, never logged and never returned. Your traffic is not used to train models.
Which AI clients can use it?
Claude Code, tested by us end to end, and the Claude app as a custom connector, tested by us with an existing key. Other MCP clients that support remote servers over Streamable HTTP (MCP revisions 2025-06-18 and 2025-11-25) and OAuth dynamic client registration, or a bearer header, should connect the same way; we have not tested them. Or plain REST, under the same action names.
Give your agent n8n today.
Start free - 100,000 calls/month, no card. No signup. Hard caps on every key. Cached answers are free.
