{ "schema": "varexis-public-evidence-record/0.3", "generated_at_utc": "2026-10-14T00:29:51.399Z", "record_id": "VXI-EXT-TOOL-TRUST-N8N-01-v1", "record_kind": "external_reference", "title": "n8n MCP: Workflow visibility, authoring and execution", "system": "n8n instance MCP", "evidence_family": "agent_tool_trust_review", "index_status": "PUBLIC_SAFE_SOURCE_REVIEW", "evidence_state": "PRIMARY_DOCUMENTATION_REVIEW_ONLY", "canonical_question": "Does connecting to n8n MCP only let an agent run a fixed workflow?", "near_questions": [ "Can n8n MCP create or edit workflows?", "Does n8n workflow search reveal only exposed workflow previews?", "Can n8n MCP run unpublished workflows?", "What distinguishes production and manual n8n execution?", "Which user identity does an n8n MCP token represent?", "Does enabling n8n MCP expose every workflow?", "Can n8n workflows act through connected service credentials?", "What permissions did an OAuth client receive in n8n?", "Does revoking one OAuth client remove all personal-token access?", "What evidence should precede an agent workflow execution?", "Can I save an n8n workflow-authority review?", "When should workflow authoring require a separate approval?" ], "supported_claims": [ { "claim": "The reviewed n8n documentation includes workflow search, execution and authoring. Search previews and full workflow access have different boundaries; OAuth grants and workflow exposure also matter. Check the installed version and execution mode before granting access, because a workflow can call connected services using its configured credentials.", "reliance": "DOCUMENTED_CAPABILITY_ONLY" } ], "not_demonstrated_claims": [ "Verified buyer configuration or effective access rights", "Independent execution, completeness or security testing", "Vendor certification, legal compliance or guaranteed suitability" ], "public_summary": "The reviewed n8n documentation includes workflow search, execution and authoring. Search previews and full workflow access have different boundaries; OAuth grants and workflow exposure also matter. Check the installed version and execution mode before granting access, because a workflow can call connected services using its configured credentials.", "related_record_ids": [ "VXI-EXT-TOOL-TRUST-BROWSERBASE-01-v1", "VXI-EXT-TOOL-TRUST-SEMGREP-GUARDIAN-01-v1", "VXI-EXT-TOOL-TRUST-SNYK-01-v1", "VXI-EXT-TOOL-TRUST-PAGERDUTY-01-v1" ], "source_review": { "source_type": "official_external_documentation", "source_title": "n8n instance MCP authentication and workflow capabilities", "source_url": "https://docs.n8n.io/connect/connect-to-n8n-mcp-server.md", "checked_on": "2026-10-14", "candidate_record_id": "VXI-EXT-TOOL-TRUST-N8N-01-v1", "candidate_record_sha256": "54420ca9465e704813ae6a3bac1ccef55ef58447d38cd508e94d7d11b505da1b", "method": "Primary documentation reviewed for the published bounded statement.", "deployment_tested_by_varexis": false, "revalidation": "The delivered snapshot preserves the review date shown. Recheck current primary documentation and deployment context before relying on present applicability; payment does not trigger fresh research." }, "answer_policy": { "classification": "DOCUMENTED_WITH_DEPLOYMENT_BOUNDARY", "bounded_answer": "The reviewed n8n documentation includes workflow search, execution and authoring. Search previews and full workflow access have different boundaries; OAuth grants and workflow exposure also matter. Check the installed version and execution mode before granting access, because a workflow can call connected services using its configured credentials.", "required_buyer_context": "Instance version, OAuth grants or personal token, workflow exposure, published versus manual execution and downstream credentials.", "missing_evidence": "A broader claim needs evidence matching the intended use. Payment does not upgrade the evidence state." }, "private_boundary": "Raw logs, thresholds, private paths, source code, protected mechanisms and reconstruction-level details are excluded from public and paid delivery.", "trust_profile": { "schema": "varexis-agent-tool-trust/1", "identity": { "tool": "n8n instance MCP", "variant": "Built-in instance service; version-dependent permissions" }, "review_status": "documentation_review_only", "checked_on": "2026-10-14", "version_scope": "Dated rolling documentation snapshot; no installed or hosted runtime version independently verified.", "plan_scope": "Buyer plan, entitlement and effective configuration are not verified.", "findings": [ { "field": "operator", "label": "Publisher and operator", "status": "documented", "statement": "n8n publishes the instance MCP service for Cloud and self-hosted instances.", "source_ids": [ "n8n-main" ] }, { "field": "purpose", "label": "Purpose", "status": "documented", "statement": "Discover, build, edit and execute workflows where permitted.", "source_ids": [ "n8n-main" ] }, { "field": "reads", "label": "Read capability", "status": "documented", "statement": "Workflow previews and exposed workflow data within user access.", "source_ids": [ "n8n-main" ] }, { "field": "writes", "label": "Write capability", "status": "documented", "statement": "Create or edit workflows and data tables, and trigger workflow execution.", "source_ids": [ "n8n-main" ] }, { "field": "auth", "label": "Authentication", "status": "documented", "statement": "OAuth or a personal access token tied to the user.", "source_ids": [ "n8n-main" ] }, { "field": "permissions", "label": "Permission surface", "status": "documented", "statement": "User access, client grants and workflow exposure apply; discovery previews have a broader scope.", "source_ids": [ "n8n-main" ] }, { "field": "egress", "label": "Data leaving the environment", "status": "review_inference", "statement": "Workflow inputs and outputs may reach connected services and the MCP client.", "source_ids": [ "n8n-main" ] }, { "field": "failures", "label": "Failure modes to consider", "status": "review_inference", "statement": "Choosing the wrong execution mode or workflow can trigger unintended downstream actions.", "source_ids": [ "n8n-main" ] }, { "field": "unknown", "label": "Unknowns and applicability", "status": "unknown", "statement": "Installed features, effective grants and downstream credential scope are unverified.", "source_ids": [] }, { "field": "gate", "label": "Suggested refusal or clarification condition", "status": "varexis_review_policy", "statement": "Confirm workflow, execution mode and downstream action authorization before running it.", "source_ids": [] } ], "evidence_sources": [ { "source_id": "n8n-main", "url": "https://docs.n8n.io/connect/connect-to-n8n-mcp-server.md", "final_url": "https://docs.n8n.io/connect/connect-to-n8n-mcp-server.md", "title": "n8n instance MCP authentication and workflow capabilities", "checked_on": "2026-10-14", "sha256": "ad3b47217751f29d8ca6bb660d44acc969eb239d2d67492eb0758afa806096dd", "bytes": 25798 } ], "observed_tool_execution": false, "policy_basis": "Suggested VAREXIS review gates; apply the buyer's authorized task and policy. These conditions do not execute or enforce controls.", "commercial_reliance_boundary": "A source-linked review aid, not a vendor certification, security clearance or deployment assessment. Unknown does not mean false or unsafe.", "paid_value": { "decision_context": "Preserve the version, exposure and downstream-action assumptions behind workflow access.", "free": "Complete review, practical questions, sources and limitations; may be saved locally.", "single_request": "Existing server-saved version-bound route snapshot for later authenticated retrieval.", "evidence_receipt": "The same snapshot plus the existing unsigned delivery receipt.", "excluded": [ "Fresh vendor research", "Continuous monitoring or change alerts", "Testing the buyer configuration", "Private evidence or vendor certification" ], "integrity": "Hashes identify content versions; they do not prove truth or provide a signature." }, "revalidation": { "trigger": "Recheck when permissions, deployment, authentication, source guidance or intended use changes; a purchase does not trigger revalidation.", "specific_watch": "Recheck instance version, OAuth grants, exposure settings and published workflow revisions." }, "change_history": [ { "version": 1, "date": "2026-10-14", "change": "Initial documentation review; no earlier vendor assessment claimed." } ] }, "paid_access_note": "The full published answer and boundaries are free. Paid access saves the selected route and source versions, with an unsigned receipt when purchased. Preview coverage before paying. Fresh research, bespoke assessment and protected evidence are excluded.", "service_route": { "request_guide": "/varexis-index/request.html", "request_workflow": "/varexis-index/request-workflow.json", "service_id": "single_request", "service_routes_url": "/varexis-index/service-routes.json", "payment_required": true, "availability_endpoint": "/api/index/capabilities", "operational_status": "AUTOMATIC_SERVICE_CAPABILITIES_GATED", "checkout_url": "/index-access" }, "authority_boundary": "VAREXIS-INDEX informs evidence reliance. It does not provide advice, certification, deployment authority, security assurance, production approval, or guarantee.", "human_page": "/varexis-index/catalog.html#n8n-instance-mcp-workflow-authority-trust", "machine_readable_record": "/varexis-index/records/n8n-instance-mcp-workflow-authority-trust.json" }