x=hub

your toolset

    build deployment
    sign in

    n8n

    projectother official scan blocked
    io.github.n8n-io/n8n · v
    deploy just this

    Fair-code workflow automation platform with native AI capabilities. Combine visual building with custom code, self-host or cloud, 400+ integrations.

    run it

    blocked by the security scan
    Blocked by the security scanThe worker scanned github.com/n8n-io/n8n at 936349a9c77c for v with [email protected][email protected] on 2026-10-17, before building it, and found code that looks malicious: threat-runtime-keylogging in packages/@n8n/instance-ai/src/agent/__tests__/sanitize-mcp-descriptions.test.ts:30, threat-runtime-keylogging in packages/@n8n/instance-ai/src/agent/__tests__/sanitize-mcp-descriptions.test.ts:33, threat-runtime-obfuscation-steganography in packages/cli/src/modules/instance-ai/eval/__tests__/execution.service.test.ts:2200. It built nothing, and the hub offers no way to run this version: no package, no image, no build, no web service. An operator can look at the findings and let it run; a new version is scanned again.

    connect to it

    copy what your client needs
    {
  "mcpServers": {
    "n8n": {
      "command": "CHANGE_ME",
      "args": []
    }
  }
}
    #!/usr/bin/env bash
# Registers every server with Claude Code (run once; `claude mcp list` to check).
set -euo pipefail
set -a; [ -f .env ] && source .env; set +a
claude mcp add n8n -- CHANGE_ME

    {
  "mcpServers": {
    "n8n": {
      "command": "CHANGE_ME",
      "args": []
    }
  }
}
    {
  "servers": {
    "n8n": {
      "type": "stdio",
      "command": "CHANGE_ME",
      "args": []
    }
  }
}
    name: my-agent
target: local
servers:
- hub: io.github.n8n-io/n8n
    • not probed yet: tools unpinned, ingest lists them
    • blocked: the worker's security scan of github.com/n8n-io/n8n at 936349a9c77c on v found code that looks malicious (threat-runtime-keylogging, threat-runtime-obfuscation-steganography); nothing is deployed for it

    tools

    Probe result: faileddocker: security scan: github.com/n8n-io/n8n at 936349a9c77c has code that looks malicious: threat-runtime-keylogging in packages/@n8n/instance-ai/src/agent/__tests__/sanitize-mcp-descriptions.test.ts:30, threat-runtime-keylogging in packages/@n8n/instance-ai/src/agent/__tests__/sanitize-mcp-descriptions.test.ts:33, threat-runtime-obfuscation-steganography in packages/cli/src/modules/instance-ai/eval/__tests__/execution.service.test.ts:2200

    runs · 1

    the latest tests of this entry by the hub and its workers, newest first
    dateworkermethodstatussandboxreason
    2026-10-17 13:01 local-mac-vm docker failed gvisor docker: security scan: github.com/n8n-io/n8n at 936349a9c77c has code that looks malicious: threat-runtime-keylogging in packages/@n8n/instance-ai/src/agent/__t…