@atom8n/n8n 2.2.0

package/dist/modules/mcp/mcp.oauth-clients.controller.js

@@ -0,0 +1,93 @@
+"use strict";
+var __decorate = (this && this.__decorate) || function (decorators, target, key, desc) {
+    var c = arguments.length, r = c < 3 ? target : desc === null ? desc = Object.getOwnPropertyDescriptor(target, key) : desc, d;
+    if (typeof Reflect === "object" && typeof Reflect.decorate === "function") r = Reflect.decorate(decorators, target, key, desc);
+    else for (var i = decorators.length - 1; i >= 0; i--) if (d = decorators[i]) r = (c < 3 ? d(r) : c > 3 ? d(target, key, r) : d(target, key)) || r;
+    return c > 3 && r && Object.defineProperty(target, key, r), r;
+};
+var __metadata = (this && this.__metadata) || function (k, v) {
+    if (typeof Reflect === "object" && typeof Reflect.metadata === "function") return Reflect.metadata(k, v);
+};
+var __param = (this && this.__param) || function (paramIndex, decorator) {
+    return function (target, key) { decorator(target, key, paramIndex); }
+};
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.McpOAuthClientsController = void 0;
+const backend_common_1 = require("@n8n/backend-common");
+const decorators_1 = require("@n8n/decorators");
+const not_found_error_1 = require("../../errors/response-errors/not-found.error");
+const mcp_oauth_service_1 = require("./mcp-oauth-service");
+let McpOAuthClientsController = class McpOAuthClientsController {
+    constructor(mcpOAuthService, logger) {
+        this.mcpOAuthService = mcpOAuthService;
+        this.logger = logger;
+    }
+    async getAllClients(req, _res) {
+        this.logger.debug('Fetching all OAuth clients for user', { userId: req.user.id });
+        const clients = await this.mcpOAuthService.getAllClients(req.user.id);
+        this.logger.debug(`Found ${clients.length} OAuth clients`);
+        const clientDtos = clients.map((client) => ({
+            id: client.id,
+            name: client.name,
+            redirectUris: client.redirectUris,
+            grantTypes: client.grantTypes,
+            tokenEndpointAuthMethod: client.tokenEndpointAuthMethod,
+            createdAt: client.createdAt.toISOString(),
+            updatedAt: client.updatedAt.toISOString(),
+        }));
+        return {
+            data: clientDtos,
+            count: clients.length,
+        };
+    }
+    async deleteClient(req, _res, clientId) {
+        this.logger.info('Deleting OAuth client', {
+            clientId,
+            userId: req.user.id,
+            userEmail: req.user.email,
+        });
+        try {
+            await this.mcpOAuthService.deleteClient(clientId);
+            this.logger.info('OAuth client deleted successfully', {
+                clientId,
+                userId: req.user.id,
+            });
+            return {
+                success: true,
+                message: `OAuth client ${clientId} has been deleted successfully`,
+            };
+        }
+        catch (error) {
+            if (error instanceof Error && error.message.includes('not found')) {
+                this.logger.warn('Attempted to delete non-existent OAuth client', {
+                    clientId,
+                    userId: req.user.id,
+                });
+                throw new not_found_error_1.NotFoundError(`OAuth client with ID ${clientId} not found`);
+            }
+            throw error;
+        }
+    }
+};
+exports.McpOAuthClientsController = McpOAuthClientsController;
+__decorate([
+    (0, decorators_1.GlobalScope)('mcp:oauth'),
+    (0, decorators_1.Get)('/'),
+    __metadata("design:type", Function),
+    __metadata("design:paramtypes", [Object, Object]),
+    __metadata("design:returntype", Promise)
+], McpOAuthClientsController.prototype, "getAllClients", null);
+__decorate([
+    (0, decorators_1.GlobalScope)('mcp:oauth'),
+    (0, decorators_1.Delete)('/:clientId'),
+    __param(2, (0, decorators_1.Param)('clientId')),
+    __metadata("design:type", Function),
+    __metadata("design:paramtypes", [Object, Object, String]),
+    __metadata("design:returntype", Promise)
+], McpOAuthClientsController.prototype, "deleteClient", null);
+exports.McpOAuthClientsController = McpOAuthClientsController = __decorate([
+    (0, decorators_1.RestController)('/mcp/oauth-clients'),
+    __metadata("design:paramtypes", [mcp_oauth_service_1.McpOAuthService,
+        backend_common_1.Logger])
+], McpOAuthClientsController);
+//# sourceMappingURL=mcp.oauth-clients.controller.js.map

package/dist/modules/mcp/mcp.oauth-clients.controller.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"mcp.oauth-clients.controller.js","sourceRoot":"","sources":["../../../src/modules/mcp/mcp.oauth-clients.controller.ts"],"names":[],"mappings":";;;;;;;;;;;;;;;AAKA,wDAA6C;AAE7C,gDAAkF;AAGlF,8EAAyE;AAEzE,2DAAsD;AAG/C,IAAM,yBAAyB,GAA/B,MAAM,yBAAyB;IACrC,YACkB,eAAgC,EAChC,MAAc;QADd,oBAAe,GAAf,eAAe,CAAiB;QAChC,WAAM,GAAN,MAAM,CAAQ;IAC7B,CAAC;IAOE,AAAN,KAAK,CAAC,aAAa,CAClB,GAAyB,EACzB,IAAc;QAEd,IAAI,CAAC,MAAM,CAAC,KAAK,CAAC,qCAAqC,EAAE,EAAE,MAAM,EAAE,GAAG,CAAC,IAAI,CAAC,EAAE,EAAE,CAAC,CAAC;QAElF,MAAM,OAAO,GAAG,MAAM,IAAI,CAAC,eAAe,CAAC,aAAa,CAAC,GAAG,CAAC,IAAI,CAAC,EAAE,CAAC,CAAC;QAEtE,IAAI,CAAC,MAAM,CAAC,KAAK,CAAC,SAAS,OAAO,CAAC,MAAM,gBAAgB,CAAC,CAAC;QAE3D,MAAM,UAAU,GAA6B,OAAO,CAAC,GAAG,CAAC,CAAC,MAAM,EAAE,EAAE,CAAC,CAAC;YACrE,EAAE,EAAE,MAAM,CAAC,EAAE;YACb,IAAI,EAAE,MAAM,CAAC,IAAI;YACjB,YAAY,EAAE,MAAM,CAAC,YAAY;YACjC,UAAU,EAAE,MAAM,CAAC,UAAU;YAC7B,uBAAuB,EAAE,MAAM,CAAC,uBAAuB;YACvD,SAAS,EAAE,MAAM,CAAC,SAAS,CAAC,WAAW,EAAE;YACzC,SAAS,EAAE,MAAM,CAAC,SAAS,CAAC,WAAW,EAAE;SACzC,CAAC,CAAC,CAAC;QAEJ,OAAO;YACN,IAAI,EAAE,UAAU;YAChB,KAAK,EAAE,OAAO,CAAC,MAAM;SACrB,CAAC;IACH,CAAC;IAQK,AAAN,KAAK,CAAC,YAAY,CACjB,GAAyB,EACzB,IAAc,EACK,QAAgB;QAEnC,IAAI,CAAC,MAAM,CAAC,IAAI,CAAC,uBAAuB,EAAE;YACzC,QAAQ;YACR,MAAM,EAAE,GAAG,CAAC,IAAI,CAAC,EAAE;YACnB,SAAS,EAAE,GAAG,CAAC,IAAI,CAAC,KAAK;SACzB,CAAC,CAAC;QAEH,IAAI,CAAC;YACJ,MAAM,IAAI,CAAC,eAAe,CAAC,YAAY,CAAC,QAAQ,CAAC,CAAC;YAElD,IAAI,CAAC,MAAM,CAAC,IAAI,CAAC,mCAAmC,EAAE;gBACrD,QAAQ;gBACR,MAAM,EAAE,GAAG,CAAC,IAAI,CAAC,EAAE;aACnB,CAAC,CAAC;YAEH,OAAO;gBACN,OAAO,EAAE,IAAI;gBACb,OAAO,EAAE,gBAAgB,QAAQ,gCAAgC;aACjE,CAAC;QACH,CAAC;QAAC,OAAO,KAAK,EAAE,CAAC;YAChB,IAAI,KAAK,YAAY,KAAK,IAAI,KAAK,CAAC,OAAO,CAAC,QAAQ,CAAC,WAAW,CAAC,EAAE,CAAC;gBACnE,IAAI,CAAC,MAAM,CAAC,IAAI,CAAC,+CAA+C,EAAE;oBACjE,QAAQ;oBACR,MAAM,EAAE,GAAG,CAAC,IAAI,CAAC,EAAE;iBACnB,CAAC,CAAC;gBACH,MAAM,IAAI,+BAAa,CAAC,wBAAwB,QAAQ,YAAY,CAAC,CAAC;YACvE,CAAC;YACD,MAAM,KAAK,CAAC;QACb,CAAC;IACF,CAAC;CACD,CAAA;AA7EY,8DAAyB;AAW/B;IAFL,IAAA,wBAAW,EAAC,WAAW,CAAC;IACxB,IAAA,gBAAG,EAAC,GAAG,CAAC;;;;8DAyBR;AAQK;IAFL,IAAA,wBAAW,EAAC,WAAW,CAAC;IACxB,IAAA,mBAAM,EAAC,YAAY,CAAC;IAInB,WAAA,IAAA,kBAAK,EAAC,UAAU,CAAC,CAAA;;;;6DA8BlB;oCA5EW,yBAAyB;IADrC,IAAA,2BAAc,EAAC,oBAAoB,CAAC;qCAGD,mCAAe;QACxB,uBAAM;GAHpB,yBAAyB,CA6ErC"}

package/dist/modules/mcp/mcp.oauth.controller.d.ts

@@ -0,0 +1,13 @@
+import { StaticRouterMetadata } from '@n8n/decorators';
+import type { Response, Request } from 'express';
+import { UrlService } from '../../services/url.service';
+export declare class McpOAuthController {
+    private readonly urlService;
+    constructor(urlService: UrlService);
+    private setCorsHeaders;
+    static routers: StaticRouterMetadata[];
+    metadataOptions(_req: Request, res: Response): void;
+    metadata(_req: Request, res: Response): void;
+    protectedResourceMetadataOptions(_req: Request, res: Response): void;
+    protectedResourceMetadata(_req: Request, res: Response): void;
+}

package/dist/modules/mcp/mcp.oauth.controller.js

@@ -0,0 +1,124 @@
+"use strict";
+var __decorate = (this && this.__decorate) || function (decorators, target, key, desc) {
+    var c = arguments.length, r = c < 3 ? target : desc === null ? desc = Object.getOwnPropertyDescriptor(target, key) : desc, d;
+    if (typeof Reflect === "object" && typeof Reflect.decorate === "function") r = Reflect.decorate(decorators, target, key, desc);
+    else for (var i = decorators.length - 1; i >= 0; i--) if (d = decorators[i]) r = (c < 3 ? d(r) : c > 3 ? d(target, key, r) : d(target, key)) || r;
+    return c > 3 && r && Object.defineProperty(target, key, r), r;
+};
+var __metadata = (this && this.__metadata) || function (k, v) {
+    if (typeof Reflect === "object" && typeof Reflect.metadata === "function") return Reflect.metadata(k, v);
+};
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.McpOAuthController = void 0;
+const authorize_js_1 = require("@modelcontextprotocol/sdk/server/auth/handlers/authorize.js");
+const register_js_1 = require("@modelcontextprotocol/sdk/server/auth/handlers/register.js");
+const revoke_js_1 = require("@modelcontextprotocol/sdk/server/auth/handlers/revoke.js");
+const token_js_1 = require("@modelcontextprotocol/sdk/server/auth/handlers/token.js");
+const decorators_1 = require("@n8n/decorators");
+const di_1 = require("@n8n/di");
+const url_service_1 = require("../../services/url.service");
+const mcp_oauth_service_1 = require("./mcp-oauth-service");
+const mcpOAuthService = di_1.Container.get(mcp_oauth_service_1.McpOAuthService);
+let McpOAuthController = class McpOAuthController {
+    constructor(urlService) {
+        this.urlService = urlService;
+    }
+    setCorsHeaders(res) {
+        res.header('Access-Control-Allow-Origin', '*');
+        res.header('Access-Control-Allow-Methods', 'GET, OPTIONS');
+        res.header('Access-Control-Allow-Headers', 'Content-Type');
+    }
+    metadataOptions(_req, res) {
+        this.setCorsHeaders(res);
+        res.status(204).end();
+    }
+    metadata(_req, res) {
+        this.setCorsHeaders(res);
+        const baseUrl = this.urlService.getInstanceBaseUrl();
+        const metadata = {
+            issuer: baseUrl,
+            authorization_endpoint: `${baseUrl}/mcp-oauth/authorize`,
+            token_endpoint: `${baseUrl}/mcp-oauth/token`,
+            registration_endpoint: `${baseUrl}/mcp-oauth/register`,
+            revocation_endpoint: `${baseUrl}/mcp-oauth/revoke`,
+            response_types_supported: ['code'],
+            grant_types_supported: ['authorization_code', 'refresh_token'],
+            token_endpoint_auth_methods_supported: ['none', 'client_secret_post', 'client_secret_basic'],
+            code_challenge_methods_supported: ['S256'],
+            scopes_supported: mcp_oauth_service_1.SUPPORTED_SCOPES,
+        };
+        res.json(metadata);
+    }
+    protectedResourceMetadataOptions(_req, res) {
+        this.setCorsHeaders(res);
+        res.status(204).end();
+    }
+    protectedResourceMetadata(_req, res) {
+        this.setCorsHeaders(res);
+        const baseUrl = this.urlService.getInstanceBaseUrl();
+        res.json({
+            resource: `${baseUrl}/mcp-server/http`,
+            bearer_methods_supported: ['header'],
+            authorization_servers: [baseUrl],
+            scopes_supported: mcp_oauth_service_1.SUPPORTED_SCOPES,
+        });
+    }
+};
+exports.McpOAuthController = McpOAuthController;
+McpOAuthController.routers = [
+    {
+        path: '/mcp-oauth/register',
+        router: (0, register_js_1.clientRegistrationHandler)({ clientsStore: mcpOAuthService.clientsStore }),
+        skipAuth: true,
+    },
+    {
+        path: '/mcp-oauth/authorize',
+        router: (0, authorize_js_1.authorizationHandler)({ provider: mcpOAuthService }),
+        skipAuth: true,
+    },
+    {
+        path: '/mcp-oauth/token',
+        router: (0, token_js_1.tokenHandler)({ provider: mcpOAuthService }),
+        skipAuth: true,
+    },
+    {
+        path: '/mcp-oauth/revoke',
+        router: (0, revoke_js_1.revocationHandler)({ provider: mcpOAuthService }),
+        skipAuth: true,
+    },
+];
+__decorate([
+    (0, decorators_1.Options)('/.well-known/oauth-authorization-server', { skipAuth: true, usesTemplates: true }),
+    __metadata("design:type", Function),
+    __metadata("design:paramtypes", [Object, Object]),
+    __metadata("design:returntype", void 0)
+], McpOAuthController.prototype, "metadataOptions", null);
+__decorate([
+    (0, decorators_1.Get)('/.well-known/oauth-authorization-server', { skipAuth: true, usesTemplates: true }),
+    __metadata("design:type", Function),
+    __metadata("design:paramtypes", [Object, Object]),
+    __metadata("design:returntype", void 0)
+], McpOAuthController.prototype, "metadata", null);
+__decorate([
+    (0, decorators_1.Options)('/.well-known/oauth-protected-resource/mcp-server/http', {
+        skipAuth: true,
+        usesTemplates: true,
+    }),
+    __metadata("design:type", Function),
+    __metadata("design:paramtypes", [Object, Object]),
+    __metadata("design:returntype", void 0)
+], McpOAuthController.prototype, "protectedResourceMetadataOptions", null);
+__decorate([
+    (0, decorators_1.Get)('/.well-known/oauth-protected-resource/mcp-server/http', {
+        skipAuth: true,
+        usesTemplates: true,
+    }),
+    __metadata("design:type", Function),
+    __metadata("design:paramtypes", [Object, Object]),
+    __metadata("design:returntype", void 0)
+], McpOAuthController.prototype, "protectedResourceMetadata", null);
+exports.McpOAuthController = McpOAuthController = __decorate([
+    (0, decorators_1.RootLevelController)('/'),
+    __metadata("design:paramtypes", [url_service_1.UrlService])
+], McpOAuthController);
+//# sourceMappingURL=mcp.oauth.controller.js.map

package/dist/modules/mcp/mcp.oauth.controller.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"mcp.oauth.controller.js","sourceRoot":"","sources":["../../../src/modules/mcp/mcp.oauth.controller.ts"],"names":[],"mappings":";;;;;;;;;;;;AAAA,8FAAmG;AACnG,4FAAuG;AACvG,wFAA6F;AAC7F,sFAAuF;AACvF,gDAA0F;AAC1F,gCAAoC;AAGpC,wDAAoD;AAEpD,2DAAwE;AAExE,MAAM,eAAe,GAAG,cAAS,CAAC,GAAG,CAAC,mCAAe,CAAC,CAAC;AAGhD,IAAM,kBAAkB,GAAxB,MAAM,kBAAkB;IAC9B,YAA6B,UAAsB;QAAtB,eAAU,GAAV,UAAU,CAAY;IAAG,CAAC;IAG/C,cAAc,CAAC,GAAa;QAEnC,GAAG,CAAC,MAAM,CAAC,6BAA6B,EAAE,GAAG,CAAC,CAAC;QAC/C,GAAG,CAAC,MAAM,CAAC,8BAA8B,EAAE,cAAc,CAAC,CAAC;QAC3D,GAAG,CAAC,MAAM,CAAC,8BAA8B,EAAE,cAAc,CAAC,CAAC;IAC5D,CAAC;IA0BD,eAAe,CAAC,IAAa,EAAE,GAAa;QAC3C,IAAI,CAAC,cAAc,CAAC,GAAG,CAAC,CAAC;QACzB,GAAG,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC,GAAG,EAAE,CAAC;IACvB,CAAC;IAGD,QAAQ,CAAC,IAAa,EAAE,GAAa;QACpC,IAAI,CAAC,cAAc,CAAC,GAAG,CAAC,CAAC;QAEzB,MAAM,OAAO,GAAG,IAAI,CAAC,UAAU,CAAC,kBAAkB,EAAE,CAAC;QACrD,MAAM,QAAQ,GAAG;YAChB,MAAM,EAAE,OAAO;YACf,sBAAsB,EAAE,GAAG,OAAO,sBAAsB;YACxD,cAAc,EAAE,GAAG,OAAO,kBAAkB;YAC5C,qBAAqB,EAAE,GAAG,OAAO,qBAAqB;YACtD,mBAAmB,EAAE,GAAG,OAAO,mBAAmB;YAClD,wBAAwB,EAAE,CAAC,MAAM,CAAC;YAClC,qBAAqB,EAAE,CAAC,oBAAoB,EAAE,eAAe,CAAC;YAC9D,qCAAqC,EAAE,CAAC,MAAM,EAAE,oBAAoB,EAAE,qBAAqB,CAAC;YAC5F,gCAAgC,EAAE,CAAC,MAAM,CAAC;YAC1C,gBAAgB,EAAE,oCAAgB;SAClC,CAAC;QAEF,GAAG,CAAC,IAAI,CAAC,QAAQ,CAAC,CAAC;IACpB,CAAC;IAMD,gCAAgC,CAAC,IAAa,EAAE,GAAa;QAC5D,IAAI,CAAC,cAAc,CAAC,GAAG,CAAC,CAAC;QACzB,GAAG,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC,GAAG,EAAE,CAAC;IACvB,CAAC;IAMD,yBAAyB,CAAC,IAAa,EAAE,GAAa;QACrD,IAAI,CAAC,cAAc,CAAC,GAAG,CAAC,CAAC;QAEzB,MAAM,OAAO,GAAG,IAAI,CAAC,UAAU,CAAC,kBAAkB,EAAE,CAAC;QACrD,GAAG,CAAC,IAAI,CAAC;YACR,QAAQ,EAAE,GAAG,OAAO,kBAAkB;YACtC,wBAAwB,EAAE,CAAC,QAAQ,CAAC;YACpC,qBAAqB,EAAE,CAAC,OAAO,CAAC;YAChC,gBAAgB,EAAE,oCAAgB;SAClC,CAAC,CAAC;IACJ,CAAC;;AApFW,gDAAkB;AAWvB,0BAAO,GAA2B;IACxC;QACC,IAAI,EAAE,qBAAqB;QAC3B,MAAM,EAAE,IAAA,uCAAyB,EAAC,EAAE,YAAY,EAAE,eAAe,CAAC,YAAY,EAAE,CAAW;QAC3F,QAAQ,EAAE,IAAI;KACd;IACD;QACC,IAAI,EAAE,sBAAsB;QAC5B,MAAM,EAAE,IAAA,mCAAoB,EAAC,EAAE,QAAQ,EAAE,eAAe,EAAE,CAAW;QACrE,QAAQ,EAAE,IAAI;KACd;IACD;QACC,IAAI,EAAE,kBAAkB;QACxB,MAAM,EAAE,IAAA,uBAAY,EAAC,EAAE,QAAQ,EAAE,eAAe,EAAE,CAAW;QAC7D,QAAQ,EAAE,IAAI;KACd;IACD;QACC,IAAI,EAAE,mBAAmB;QACzB,MAAM,EAAE,IAAA,6BAAiB,EAAC,EAAE,QAAQ,EAAE,eAAe,EAAE,CAAW;QAClE,QAAQ,EAAE,IAAI;KACd;CACD,AArBa,CAqBZ;AAGF;IADC,IAAA,oBAAO,EAAC,yCAAyC,EAAE,EAAE,QAAQ,EAAE,IAAI,EAAE,aAAa,EAAE,IAAI,EAAE,CAAC;;;;yDAI3F;AAGD;IADC,IAAA,gBAAG,EAAC,yCAAyC,EAAE,EAAE,QAAQ,EAAE,IAAI,EAAE,aAAa,EAAE,IAAI,EAAE,CAAC;;;;kDAmBvF;AAMD;IAJC,IAAA,oBAAO,EAAC,uDAAuD,EAAE;QACjE,QAAQ,EAAE,IAAI;QACd,aAAa,EAAE,IAAI;KACnB,CAAC;;;;0EAID;AAMD;IAJC,IAAA,gBAAG,EAAC,uDAAuD,EAAE;QAC7D,QAAQ,EAAE,IAAI;QACd,aAAa,EAAE,IAAI;KACnB,CAAC;;;;mEAWD;6BApFW,kBAAkB;IAD9B,IAAA,gCAAmB,EAAC,GAAG,CAAC;qCAEiB,wBAAU;GADvC,kBAAkB,CAqF9B"}

package/dist/modules/mcp/mcp.service.d.ts

@@ -0,0 +1,22 @@
+import { McpServer } from '@modelcontextprotocol/sdk/server/mcp.js';
+import { GlobalConfig } from '@n8n/config';
+import { User } from '@n8n/db';
+import { ActiveExecutions } from '../../active-executions';
+import { CredentialsService } from '../../credentials/credentials.service';
+import { UrlService } from '../../services/url.service';
+import { Telemetry } from '../../telemetry';
+import { WorkflowRunner } from '../../workflow-runner';
+import { WorkflowFinderService } from '../../workflows/workflow-finder.service';
+import { WorkflowService } from '../../workflows/workflow.service';
+export declare class McpService {
+    private readonly workflowFinderService;
+    private readonly workflowService;
+    private readonly urlService;
+    private readonly credentialsService;
+    private readonly activeExecutions;
+    private readonly globalConfig;
+    private readonly telemetry;
+    private readonly workflowRunner;
+    constructor(workflowFinderService: WorkflowFinderService, workflowService: WorkflowService, urlService: UrlService, credentialsService: CredentialsService, activeExecutions: ActiveExecutions, globalConfig: GlobalConfig, telemetry: Telemetry, workflowRunner: WorkflowRunner);
+    getServer(user: User): McpServer;
+}

package/dist/modules/mcp/mcp.service.js

@@ -0,0 +1,66 @@
+"use strict";
+var __decorate = (this && this.__decorate) || function (decorators, target, key, desc) {
+    var c = arguments.length, r = c < 3 ? target : desc === null ? desc = Object.getOwnPropertyDescriptor(target, key) : desc, d;
+    if (typeof Reflect === "object" && typeof Reflect.decorate === "function") r = Reflect.decorate(decorators, target, key, desc);
+    else for (var i = decorators.length - 1; i >= 0; i--) if (d = decorators[i]) r = (c < 3 ? d(r) : c > 3 ? d(target, key, r) : d(target, key)) || r;
+    return c > 3 && r && Object.defineProperty(target, key, r), r;
+};
+var __metadata = (this && this.__metadata) || function (k, v) {
+    if (typeof Reflect === "object" && typeof Reflect.metadata === "function") return Reflect.metadata(k, v);
+};
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.McpService = void 0;
+const mcp_js_1 = require("@modelcontextprotocol/sdk/server/mcp.js");
+const config_1 = require("@n8n/config");
+const di_1 = require("@n8n/di");
+const execute_workflow_tool_1 = require("./tools/execute-workflow.tool");
+const get_workflow_details_tool_1 = require("./tools/get-workflow-details.tool");
+const search_workflows_tool_1 = require("./tools/search-workflows.tool");
+const active_executions_1 = require("../../active-executions");
+const credentials_service_1 = require("../../credentials/credentials.service");
+const url_service_1 = require("../../services/url.service");
+const telemetry_1 = require("../../telemetry");
+const workflow_runner_1 = require("../../workflow-runner");
+const workflow_finder_service_1 = require("../../workflows/workflow-finder.service");
+const workflow_service_1 = require("../../workflows/workflow.service");
+let McpService = class McpService {
+    constructor(workflowFinderService, workflowService, urlService, credentialsService, activeExecutions, globalConfig, telemetry, workflowRunner) {
+        this.workflowFinderService = workflowFinderService;
+        this.workflowService = workflowService;
+        this.urlService = urlService;
+        this.credentialsService = credentialsService;
+        this.activeExecutions = activeExecutions;
+        this.globalConfig = globalConfig;
+        this.telemetry = telemetry;
+        this.workflowRunner = workflowRunner;
+    }
+    getServer(user) {
+        const server = new mcp_js_1.McpServer({
+            name: 'n8n MCP Server',
+            version: '1.0.0',
+        });
+        const workflowSearchTool = (0, search_workflows_tool_1.createSearchWorkflowsTool)(user, this.workflowService, this.telemetry);
+        server.registerTool(workflowSearchTool.name, workflowSearchTool.config, workflowSearchTool.handler);
+        const executeWorkflowTool = (0, execute_workflow_tool_1.createExecuteWorkflowTool)(user, this.workflowFinderService, this.activeExecutions, this.workflowRunner, this.telemetry);
+        server.registerTool(executeWorkflowTool.name, executeWorkflowTool.config, executeWorkflowTool.handler);
+        const workflowDetailsTool = (0, get_workflow_details_tool_1.createWorkflowDetailsTool)(user, this.urlService.getWebhookBaseUrl(), this.workflowFinderService, this.credentialsService, {
+            webhook: this.globalConfig.endpoints.webhook,
+            webhookTest: this.globalConfig.endpoints.webhookTest,
+        }, this.telemetry);
+        server.registerTool(workflowDetailsTool.name, workflowDetailsTool.config, workflowDetailsTool.handler);
+        return server;
+    }
+};
+exports.McpService = McpService;
+exports.McpService = McpService = __decorate([
+    (0, di_1.Service)(),
+    __metadata("design:paramtypes", [workflow_finder_service_1.WorkflowFinderService,
+        workflow_service_1.WorkflowService,
+        url_service_1.UrlService,
+        credentials_service_1.CredentialsService,
+        active_executions_1.ActiveExecutions,
+        config_1.GlobalConfig,
+        telemetry_1.Telemetry,
+        workflow_runner_1.WorkflowRunner])
+], McpService);
+//# sourceMappingURL=mcp.service.js.map

package/dist/modules/mcp/mcp.service.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"mcp.service.js","sourceRoot":"","sources":["../../../src/modules/mcp/mcp.service.ts"],"names":[],"mappings":";;;;;;;;;;;;AAAA,oEAAoE;AACpE,wCAA2C;AAE3C,gCAAkC;AAElC,yEAA0E;AAC1E,iFAA8E;AAC9E,yEAA0E;AAE1E,2DAAuD;AACvD,2EAAuE;AACvE,wDAAoD;AACpD,2CAAwC;AACxC,uDAAmD;AACnD,iFAA4E;AAC5E,mEAA+D;AAGxD,IAAM,UAAU,GAAhB,MAAM,UAAU;IACtB,YACkB,qBAA4C,EAC5C,eAAgC,EAChC,UAAsB,EACtB,kBAAsC,EACtC,gBAAkC,EAClC,YAA0B,EAC1B,SAAoB,EACpB,cAA8B;QAP9B,0BAAqB,GAArB,qBAAqB,CAAuB;QAC5C,oBAAe,GAAf,eAAe,CAAiB;QAChC,eAAU,GAAV,UAAU,CAAY;QACtB,uBAAkB,GAAlB,kBAAkB,CAAoB;QACtC,qBAAgB,GAAhB,gBAAgB,CAAkB;QAClC,iBAAY,GAAZ,YAAY,CAAc;QAC1B,cAAS,GAAT,SAAS,CAAW;QACpB,mBAAc,GAAd,cAAc,CAAgB;IAC7C,CAAC;IAEJ,SAAS,CAAC,IAAU;QACnB,MAAM,MAAM,GAAG,IAAI,kBAAS,CAAC;YAC5B,IAAI,EAAE,gBAAgB;YACtB,OAAO,EAAE,OAAO;SAChB,CAAC,CAAC;QAEH,MAAM,kBAAkB,GAAG,IAAA,iDAAyB,EACnD,IAAI,EACJ,IAAI,CAAC,eAAe,EACpB,IAAI,CAAC,SAAS,CACd,CAAC;QACF,MAAM,CAAC,YAAY,CAClB,kBAAkB,CAAC,IAAI,EACvB,kBAAkB,CAAC,MAAM,EACzB,kBAAkB,CAAC,OAAO,CAC1B,CAAC;QAEF,MAAM,mBAAmB,GAAG,IAAA,iDAAyB,EACpD,IAAI,EACJ,IAAI,CAAC,qBAAqB,EAC1B,IAAI,CAAC,gBAAgB,EACrB,IAAI,CAAC,cAAc,EACnB,IAAI,CAAC,SAAS,CACd,CAAC;QACF,MAAM,CAAC,YAAY,CAClB,mBAAmB,CAAC,IAAI,EACxB,mBAAmB,CAAC,MAAM,EAC1B,mBAAmB,CAAC,OAAO,CAC3B,CAAC;QAEF,MAAM,mBAAmB,GAAG,IAAA,qDAAyB,EACpD,IAAI,EACJ,IAAI,CAAC,UAAU,CAAC,iBAAiB,EAAE,EACnC,IAAI,CAAC,qBAAqB,EAC1B,IAAI,CAAC,kBAAkB,EACvB;YACC,OAAO,EAAE,IAAI,CAAC,YAAY,CAAC,SAAS,CAAC,OAAO;YAC5C,WAAW,EAAE,IAAI,CAAC,YAAY,CAAC,SAAS,CAAC,WAAW;SACpD,EACD,IAAI,CAAC,SAAS,CACd,CAAC;QACF,MAAM,CAAC,YAAY,CAClB,mBAAmB,CAAC,IAAI,EACxB,mBAAmB,CAAC,MAAM,EAC1B,mBAAmB,CAAC,OAAO,CAC3B,CAAC;QAEF,OAAO,MAAM,CAAC;IACf,CAAC;CACD,CAAA;AA7DY,gCAAU;qBAAV,UAAU;IADtB,IAAA,YAAO,GAAE;qCAGgC,+CAAqB;QAC3B,kCAAe;QACpB,wBAAU;QACF,wCAAkB;QACpB,oCAAgB;QACpB,qBAAY;QACf,qBAAS;QACJ,gCAAc;GATpC,UAAU,CA6DtB"}

package/dist/modules/mcp/mcp.settings.controller.d.ts

@@ -0,0 +1,30 @@
+import { ModuleRegistry, Logger } from '@n8n/backend-common';
+import { type AuthenticatedRequest } from '@n8n/db';
+import type { Response } from 'express';
+import { UpdateMcpSettingsDto } from './dto/update-mcp-settings.dto';
+import { UpdateWorkflowAvailabilityDto } from './dto/update-workflow-availability.dto';
+import { McpServerApiKeyService } from './mcp-api-key.service';
+import { McpSettingsService } from './mcp.settings.service';
+import type { ListQuery } from '../../requests';
+import { WorkflowFinderService } from '../../workflows/workflow-finder.service';
+import { WorkflowService } from '../../workflows/workflow.service';
+export declare class McpSettingsController {
+    private readonly mcpSettingsService;
+    private readonly logger;
+    private readonly moduleRegistry;
+    private readonly mcpServerApiKeyService;
+    private readonly workflowFinderService;
+    private readonly workflowService;
+    constructor(mcpSettingsService: McpSettingsService, logger: Logger, moduleRegistry: ModuleRegistry, mcpServerApiKeyService: McpServerApiKeyService, workflowFinderService: WorkflowFinderService, workflowService: WorkflowService);
+    updateSettings(_req: AuthenticatedRequest, _res: Response, dto: UpdateMcpSettingsDto): Promise<{
+        mcpAccessEnabled: boolean;
+    }>;
+    getApiKeyForMcpServer(req: AuthenticatedRequest): Promise<import("@n8n/db").ApiKey>;
+    rotateApiKeyForMcpServer(req: AuthenticatedRequest): Promise<import("@n8n/db").ApiKey>;
+    getMcpEligibleWorkflows(req: ListQuery.Request, res: Response): Promise<void>;
+    toggleWorkflowMCPAccess(req: AuthenticatedRequest, _res: Response, workflowId: string, dto: UpdateWorkflowAvailabilityDto): Promise<{
+        id: string;
+        settings: import("n8n-workflow").IWorkflowSettings | undefined;
+        versionId: string;
+    }>;
+}

package/dist/modules/mcp/mcp.settings.controller.js

@@ -0,0 +1,154 @@
+"use strict";
+var __decorate = (this && this.__decorate) || function (decorators, target, key, desc) {
+    var c = arguments.length, r = c < 3 ? target : desc === null ? desc = Object.getOwnPropertyDescriptor(target, key) : desc, d;
+    if (typeof Reflect === "object" && typeof Reflect.decorate === "function") r = Reflect.decorate(decorators, target, key, desc);
+    else for (var i = decorators.length - 1; i >= 0; i--) if (d = decorators[i]) r = (c < 3 ? d(r) : c > 3 ? d(target, key, r) : d(target, key)) || r;
+    return c > 3 && r && Object.defineProperty(target, key, r), r;
+};
+var __metadata = (this && this.__metadata) || function (k, v) {
+    if (typeof Reflect === "object" && typeof Reflect.metadata === "function") return Reflect.metadata(k, v);
+};
+var __param = (this && this.__param) || function (paramIndex, decorator) {
+    return function (target, key) { decorator(target, key, paramIndex); }
+};
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.McpSettingsController = void 0;
+const backend_common_1 = require("@n8n/backend-common");
+const db_1 = require("@n8n/db");
+const decorators_1 = require("@n8n/decorators");
+const update_mcp_settings_dto_1 = require("./dto/update-mcp-settings.dto");
+const update_workflow_availability_dto_1 = require("./dto/update-workflow-availability.dto");
+const mcp_api_key_service_1 = require("./mcp-api-key.service");
+const mcp_constants_1 = require("./mcp.constants");
+const mcp_settings_service_1 = require("./mcp.settings.service");
+const mcp_utils_1 = require("./mcp.utils");
+const bad_request_error_1 = require("../../errors/response-errors/bad-request.error");
+const not_found_error_1 = require("../../errors/response-errors/not-found.error");
+const middlewares_1 = require("../../middlewares");
+const workflow_finder_service_1 = require("../../workflows/workflow-finder.service");
+const workflow_service_1 = require("../../workflows/workflow.service");
+let McpSettingsController = class McpSettingsController {
+    constructor(mcpSettingsService, logger, moduleRegistry, mcpServerApiKeyService, workflowFinderService, workflowService) {
+        this.mcpSettingsService = mcpSettingsService;
+        this.logger = logger;
+        this.moduleRegistry = moduleRegistry;
+        this.mcpServerApiKeyService = mcpServerApiKeyService;
+        this.workflowFinderService = workflowFinderService;
+        this.workflowService = workflowService;
+    }
+    async updateSettings(_req, _res, dto) {
+        const enabled = dto.mcpAccessEnabled;
+        await this.mcpSettingsService.setEnabled(enabled);
+        try {
+            await this.moduleRegistry.refreshModuleSettings('mcp');
+        }
+        catch (error) {
+            this.logger.warn('Failed to sync MCP settings to module registry', {
+                cause: error instanceof Error ? error.message : String(error),
+            });
+        }
+        return { mcpAccessEnabled: enabled };
+    }
+    async getApiKeyForMcpServer(req) {
+        return await this.mcpServerApiKeyService.getOrCreateApiKey(req.user);
+    }
+    async rotateApiKeyForMcpServer(req) {
+        return await this.mcpServerApiKeyService.rotateMcpServerApiKey(req.user);
+    }
+    async getMcpEligibleWorkflows(req, res) {
+        const supportedTriggerNodeTypes = Object.keys(mcp_constants_1.SUPPORTED_MCP_TRIGGERS);
+        const options = {
+            ...req.listQueryOptions,
+            filter: {
+                ...req.listQueryOptions?.filter,
+                active: true,
+                isArchived: false,
+                availableInMCP: false,
+                triggerNodeTypes: supportedTriggerNodeTypes,
+            },
+        };
+        const { workflows, count } = await this.workflowService.getMany(req.user, options, false, false, false, ['workflow:update']);
+        res.json({ count, data: workflows });
+    }
+    async toggleWorkflowMCPAccess(req, _res, workflowId, dto) {
+        const workflow = await this.workflowFinderService.findWorkflowForUser(workflowId, req.user, ['workflow:update'], { includeActiveVersion: true });
+        if (!workflow) {
+            this.logger.warn('User attempted to update MCP availability without permissions', {
+                workflowId,
+                userId: req.user.id,
+            });
+            throw new not_found_error_1.NotFoundError('Could not load the workflow - you can only access workflows available to you');
+        }
+        if (dto.availableInMCP) {
+            if (!workflow.activeVersionId) {
+                throw new bad_request_error_1.BadRequestError('MCP access can only be set for published workflows');
+            }
+            const nodes = workflow.activeVersion?.nodes ?? [];
+            const supportedTrigger = (0, mcp_utils_1.findMcpSupportedTrigger)(nodes);
+            if (!supportedTrigger) {
+                throw new bad_request_error_1.BadRequestError(`MCP access can only be set for published workflows with one of the following trigger nodes: ${Object.values(mcp_constants_1.SUPPORTED_MCP_TRIGGERS).join(', ')}.`);
+            }
+        }
+        const workflowUpdate = new db_1.WorkflowEntity();
+        const currentSettings = workflow.settings ?? {};
+        workflowUpdate.settings = {
+            ...currentSettings,
+            availableInMCP: dto.availableInMCP,
+        };
+        workflowUpdate.versionId = workflow.versionId;
+        const updatedWorkflow = await this.workflowService.update(req.user, workflowUpdate, workflowId);
+        return {
+            id: updatedWorkflow.id,
+            settings: updatedWorkflow.settings,
+            versionId: updatedWorkflow.versionId,
+        };
+    }
+};
+exports.McpSettingsController = McpSettingsController;
+__decorate([
+    (0, decorators_1.GlobalScope)('mcp:manage'),
+    (0, decorators_1.Patch)('/settings'),
+    __param(2, decorators_1.Body),
+    __metadata("design:type", Function),
+    __metadata("design:paramtypes", [Object, Object, update_mcp_settings_dto_1.UpdateMcpSettingsDto]),
+    __metadata("design:returntype", Promise)
+], McpSettingsController.prototype, "updateSettings", null);
+__decorate([
+    (0, decorators_1.GlobalScope)('mcpApiKey:create'),
+    (0, decorators_1.Get)('/api-key'),
+    __metadata("design:type", Function),
+    __metadata("design:paramtypes", [Object]),
+    __metadata("design:returntype", Promise)
+], McpSettingsController.prototype, "getApiKeyForMcpServer", null);
+__decorate([
+    (0, decorators_1.GlobalScope)('mcpApiKey:rotate'),
+    (0, decorators_1.Post)('/api-key/rotate'),
+    __metadata("design:type", Function),
+    __metadata("design:paramtypes", [Object]),
+    __metadata("design:returntype", Promise)
+], McpSettingsController.prototype, "rotateApiKeyForMcpServer", null);
+__decorate([
+    (0, decorators_1.Get)('/workflows', { middlewares: middlewares_1.listQueryMiddleware }),
+    __metadata("design:type", Function),
+    __metadata("design:paramtypes", [Object, Object]),
+    __metadata("design:returntype", Promise)
+], McpSettingsController.prototype, "getMcpEligibleWorkflows", null);
+__decorate([
+    (0, decorators_1.ProjectScope)('workflow:update'),
+    (0, decorators_1.Patch)('/workflows/:workflowId/toggle-access'),
+    __param(2, (0, decorators_1.Param)('workflowId')),
+    __param(3, decorators_1.Body),
+    __metadata("design:type", Function),
+    __metadata("design:paramtypes", [Object, Object, String, update_workflow_availability_dto_1.UpdateWorkflowAvailabilityDto]),
+    __metadata("design:returntype", Promise)
+], McpSettingsController.prototype, "toggleWorkflowMCPAccess", null);
+exports.McpSettingsController = McpSettingsController = __decorate([
+    (0, decorators_1.RestController)('/mcp'),
+    __metadata("design:paramtypes", [mcp_settings_service_1.McpSettingsService,
+        backend_common_1.Logger,
+        backend_common_1.ModuleRegistry,
+        mcp_api_key_service_1.McpServerApiKeyService,
+        workflow_finder_service_1.WorkflowFinderService,
+        workflow_service_1.WorkflowService])
+], McpSettingsController);
+//# sourceMappingURL=mcp.settings.controller.js.map

package/dist/modules/mcp/mcp.settings.controller.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"mcp.settings.controller.js","sourceRoot":"","sources":["../../../src/modules/mcp/mcp.settings.controller.ts"],"names":[],"mappings":";;;;;;;;;;;;;;;AAAA,wDAA6D;AAC7D,gCAAoE;AACpE,gDASyB;AAGzB,2EAAqE;AACrE,6FAAuF;AACvF,+DAA+D;AAC/D,mDAAyD;AACzD,iEAA4D;AAC5D,2CAAsD;AAEtD,kFAA6E;AAC7E,8EAAyE;AACzE,+CAAoD;AAEpD,iFAA4E;AAC5E,mEAA+D;AAGxD,IAAM,qBAAqB,GAA3B,MAAM,qBAAqB;IACjC,YACkB,kBAAsC,EACtC,MAAc,EACd,cAA8B,EAC9B,sBAA8C,EAC9C,qBAA4C,EAC5C,eAAgC;QALhC,uBAAkB,GAAlB,kBAAkB,CAAoB;QACtC,WAAM,GAAN,MAAM,CAAQ;QACd,mBAAc,GAAd,cAAc,CAAgB;QAC9B,2BAAsB,GAAtB,sBAAsB,CAAwB;QAC9C,0BAAqB,GAArB,qBAAqB,CAAuB;QAC5C,oBAAe,GAAf,eAAe,CAAiB;IAC/C,CAAC;IAIE,AAAN,KAAK,CAAC,cAAc,CACnB,IAA0B,EAC1B,IAAc,EACR,GAAyB;QAE/B,MAAM,OAAO,GAAG,GAAG,CAAC,gBAAgB,CAAC;QACrC,MAAM,IAAI,CAAC,kBAAkB,CAAC,UAAU,CAAC,OAAO,CAAC,CAAC;QAClD,IAAI,CAAC;YACJ,MAAM,IAAI,CAAC,cAAc,CAAC,qBAAqB,CAAC,KAAK,CAAC,CAAC;QACxD,CAAC;QAAC,OAAO,KAAK,EAAE,CAAC;YAChB,IAAI,CAAC,MAAM,CAAC,IAAI,CAAC,gDAAgD,EAAE;gBAClE,KAAK,EAAE,KAAK,YAAY,KAAK,CAAC,CAAC,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC,CAAC,MAAM,CAAC,KAAK,CAAC;aAC7D,CAAC,CAAC;QACJ,CAAC;QACD,OAAO,EAAE,gBAAgB,EAAE,OAAO,EAAE,CAAC;IACtC,CAAC;IAIK,AAAN,KAAK,CAAC,qBAAqB,CAAC,GAAyB;QACpD,OAAO,MAAM,IAAI,CAAC,sBAAsB,CAAC,iBAAiB,CAAC,GAAG,CAAC,IAAI,CAAC,CAAC;IACtE,CAAC;IAIK,AAAN,KAAK,CAAC,wBAAwB,CAAC,GAAyB;QACvD,OAAO,MAAM,IAAI,CAAC,sBAAsB,CAAC,qBAAqB,CAAC,GAAG,CAAC,IAAI,CAAC,CAAC;IAC1E,CAAC;IAGK,AAAN,KAAK,CAAC,uBAAuB,CAAC,GAAsB,EAAE,GAAa;QAClE,MAAM,yBAAyB,GAAG,MAAM,CAAC,IAAI,CAAC,sCAAsB,CAAC,CAAC;QAEtE,MAAM,OAAO,GAAsB;YAClC,GAAG,GAAG,CAAC,gBAAgB;YACvB,MAAM,EAAE;gBACP,GAAG,GAAG,CAAC,gBAAgB,EAAE,MAAM;gBAC/B,MAAM,EAAE,IAAI;gBACZ,UAAU,EAAE,KAAK;gBACjB,cAAc,EAAE,KAAK;gBACrB,gBAAgB,EAAE,yBAAyB;aAC3C;SACD,CAAC;QAEF,MAAM,EAAE,SAAS,EAAE,KAAK,EAAE,GAAG,MAAM,IAAI,CAAC,eAAe,CAAC,OAAO,CAC9D,GAAG,CAAC,IAAI,EACR,OAAO,EACP,KAAK,EACL,KAAK,EACL,KAAK,EACL,CAAC,iBAAiB,CAAC,CACnB,CAAC;QAEF,GAAG,CAAC,IAAI,CAAC,EAAE,KAAK,EAAE,IAAI,EAAE,SAAS,EAAE,CAAC,CAAC;IACtC,CAAC;IAIK,AAAN,KAAK,CAAC,uBAAuB,CAC5B,GAAyB,EACzB,IAAc,EACO,UAAkB,EACjC,GAAkC;QAExC,MAAM,QAAQ,GAAG,MAAM,IAAI,CAAC,qBAAqB,CAAC,mBAAmB,CACpE,UAAU,EACV,GAAG,CAAC,IAAI,EACR,CAAC,iBAAiB,CAAC,EACnB,EAAE,oBAAoB,EAAE,IAAI,EAAE,CAC9B,CAAC;QAEF,IAAI,CAAC,QAAQ,EAAE,CAAC;YACf,IAAI,CAAC,MAAM,CAAC,IAAI,CAAC,+DAA+D,EAAE;gBACjF,UAAU;gBACV,MAAM,EAAE,GAAG,CAAC,IAAI,CAAC,EAAE;aACnB,CAAC,CAAC;YACH,MAAM,IAAI,+BAAa,CACtB,8EAA8E,CAC9E,CAAC;QACH,CAAC;QAED,IAAI,GAAG,CAAC,cAAc,EAAE,CAAC;YACxB,IAAI,CAAC,QAAQ,CAAC,eAAe,EAAE,CAAC;gBAC/B,MAAM,IAAI,mCAAe,CAAC,oDAAoD,CAAC,CAAC;YACjF,CAAC;YACD,MAAM,KAAK,GAAG,QAAQ,CAAC,aAAa,EAAE,KAAK,IAAI,EAAE,CAAC;YAClD,MAAM,gBAAgB,GAAG,IAAA,mCAAuB,EAAC,KAAK,CAAC,CAAC;YAExD,IAAI,CAAC,gBAAgB,EAAE,CAAC;gBACvB,MAAM,IAAI,mCAAe,CACxB,+FAA+F,MAAM,CAAC,MAAM,CAAC,sCAAsB,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,GAAG,CAClJ,CAAC;YACH,CAAC;QACF,CAAC;QAED,MAAM,cAAc,GAAG,IAAI,mBAAc,EAAE,CAAC;QAC5C,MAAM,eAAe,GAAG,QAAQ,CAAC,QAAQ,IAAI,EAAE,CAAC;QAChD,cAAc,CAAC,QAAQ,GAAG;YACzB,GAAG,eAAe;YAClB,cAAc,EAAE,GAAG,CAAC,cAAc;SAClC,CAAC;QACF,cAAc,CAAC,SAAS,GAAG,QAAQ,CAAC,SAAS,CAAC;QAE9C,MAAM,eAAe,GAAG,MAAM,IAAI,CAAC,eAAe,CAAC,MAAM,CAAC,GAAG,CAAC,IAAI,EAAE,cAAc,EAAE,UAAU,CAAC,CAAC;QAEhG,OAAO;YACN,EAAE,EAAE,eAAe,CAAC,EAAE;YACtB,QAAQ,EAAE,eAAe,CAAC,QAAQ;YAClC,SAAS,EAAE,eAAe,CAAC,SAAS;SACpC,CAAC;IACH,CAAC;CACD,CAAA;AA3HY,sDAAqB;AAY3B;IAFL,IAAA,wBAAW,EAAC,YAAY,CAAC;IACzB,IAAA,kBAAK,EAAC,WAAW,CAAC;IAIjB,WAAA,iBAAI,CAAA;;qDAAM,8CAAoB;;2DAY/B;AAIK;IAFL,IAAA,wBAAW,EAAC,kBAAkB,CAAC;IAC/B,IAAA,gBAAG,EAAC,UAAU,CAAC;;;;kEAGf;AAIK;IAFL,IAAA,wBAAW,EAAC,kBAAkB,CAAC;IAC/B,IAAA,iBAAI,EAAC,iBAAiB,CAAC;;;;qEAGvB;AAGK;IADL,IAAA,gBAAG,EAAC,YAAY,EAAE,EAAE,WAAW,EAAE,iCAAmB,EAAE,CAAC;;;;oEAyBvD;AAIK;IAFL,IAAA,yBAAY,EAAC,iBAAiB,CAAC;IAC/B,IAAA,kBAAK,EAAC,sCAAsC,CAAC;IAI5C,WAAA,IAAA,kBAAK,EAAC,YAAY,CAAC,CAAA;IACnB,WAAA,iBAAI,CAAA;;6DAAM,gEAA6B;;oEAgDxC;gCA1HW,qBAAqB;IADjC,IAAA,2BAAc,EAAC,MAAM,CAAC;qCAGgB,yCAAkB;QAC9B,uBAAM;QACE,+BAAc;QACN,4CAAsB;QACvB,+CAAqB;QAC3B,kCAAe;GAPtC,qBAAqB,CA2HjC"}

package/dist/modules/mcp/mcp.settings.service.d.ts

@@ -0,0 +1,9 @@
+import { SettingsRepository } from '@n8n/db';
+import { CacheService } from '../../services/cache/cache.service';
+export declare class McpSettingsService {
+    private readonly settingsRepository;
+    private readonly cacheService;
+    constructor(settingsRepository: SettingsRepository, cacheService: CacheService);
+    getEnabled(): Promise<boolean>;
+    setEnabled(enabled: boolean): Promise<void>;
+}

package/dist/modules/mcp/mcp.settings.service.js

@@ -0,0 +1,43 @@
+"use strict";
+var __decorate = (this && this.__decorate) || function (decorators, target, key, desc) {
+    var c = arguments.length, r = c < 3 ? target : desc === null ? desc = Object.getOwnPropertyDescriptor(target, key) : desc, d;
+    if (typeof Reflect === "object" && typeof Reflect.decorate === "function") r = Reflect.decorate(decorators, target, key, desc);
+    else for (var i = decorators.length - 1; i >= 0; i--) if (d = decorators[i]) r = (c < 3 ? d(r) : c > 3 ? d(target, key, r) : d(target, key)) || r;
+    return c > 3 && r && Object.defineProperty(target, key, r), r;
+};
+var __metadata = (this && this.__metadata) || function (k, v) {
+    if (typeof Reflect === "object" && typeof Reflect.metadata === "function") return Reflect.metadata(k, v);
+};
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.McpSettingsService = void 0;
+const db_1 = require("@n8n/db");
+const di_1 = require("@n8n/di");
+const cache_service_1 = require("../../services/cache/cache.service");
+const KEY = 'mcp.access.enabled';
+let McpSettingsService = class McpSettingsService {
+    constructor(settingsRepository, cacheService) {
+        this.settingsRepository = settingsRepository;
+        this.cacheService = cacheService;
+    }
+    async getEnabled() {
+        const isMcpAccessEnabled = await this.cacheService.get(KEY);
+        if (isMcpAccessEnabled !== undefined) {
+            return isMcpAccessEnabled === 'true';
+        }
+        const row = await this.settingsRepository.findByKey(KEY);
+        const enabled = row?.value === 'true';
+        await this.cacheService.set(KEY, enabled.toString());
+        return enabled;
+    }
+    async setEnabled(enabled) {
+        await this.settingsRepository.upsert({ key: KEY, value: enabled.toString(), loadOnStartup: true }, ['key']);
+        await this.cacheService.set(KEY, enabled.toString());
+    }
+};
+exports.McpSettingsService = McpSettingsService;
+exports.McpSettingsService = McpSettingsService = __decorate([
+    (0, di_1.Service)(),
+    __metadata("design:paramtypes", [db_1.SettingsRepository,
+        cache_service_1.CacheService])
+], McpSettingsService);
+//# sourceMappingURL=mcp.settings.service.js.map

package/dist/modules/mcp/mcp.settings.service.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"mcp.settings.service.js","sourceRoot":"","sources":["../../../src/modules/mcp/mcp.settings.service.ts"],"names":[],"mappings":";;;;;;;;;;;;AAAA,gCAA6C;AAC7C,gCAAkC;AAElC,kEAA8D;AAE9D,MAAM,GAAG,GAAG,oBAAoB,CAAC;AAG1B,IAAM,kBAAkB,GAAxB,MAAM,kBAAkB;IAC9B,YACkB,kBAAsC,EACtC,YAA0B;QAD1B,uBAAkB,GAAlB,kBAAkB,CAAoB;QACtC,iBAAY,GAAZ,YAAY,CAAc;IACzC,CAAC;IAEJ,KAAK,CAAC,UAAU;QACf,MAAM,kBAAkB,GAAG,MAAM,IAAI,CAAC,YAAY,CAAC,GAAG,CAAS,GAAG,CAAC,CAAC;QAEpE,IAAI,kBAAkB,KAAK,SAAS,EAAE,CAAC;YACtC,OAAO,kBAAkB,KAAK,MAAM,CAAC;QACtC,CAAC;QAED,MAAM,GAAG,GAAG,MAAM,IAAI,CAAC,kBAAkB,CAAC,SAAS,CAAC,GAAG,CAAC,CAAC;QAEzD,MAAM,OAAO,GAAG,GAAG,EAAE,KAAK,KAAK,MAAM,CAAC;QAEtC,MAAM,IAAI,CAAC,YAAY,CAAC,GAAG,CAAC,GAAG,EAAE,OAAO,CAAC,QAAQ,EAAE,CAAC,CAAC;QAErD,OAAO,OAAO,CAAC;IAChB,CAAC;IAED,KAAK,CAAC,UAAU,CAAC,OAAgB;QAChC,MAAM,IAAI,CAAC,kBAAkB,CAAC,MAAM,CACnC,EAAE,GAAG,EAAE,GAAG,EAAE,KAAK,EAAE,OAAO,CAAC,QAAQ,EAAE,EAAE,aAAa,EAAE,IAAI,EAAE,EAC5D,CAAC,KAAK,CAAC,CACP,CAAC;QAEF,MAAM,IAAI,CAAC,YAAY,CAAC,GAAG,CAAC,GAAG,EAAE,OAAO,CAAC,QAAQ,EAAE,CAAC,CAAC;IACtD,CAAC;CACD,CAAA;AA9BY,gDAAkB;6BAAlB,kBAAkB;IAD9B,IAAA,YAAO,GAAE;qCAG6B,uBAAkB;QACxB,4BAAY;GAHhC,kBAAkB,CA8B9B"}

package/dist/modules/mcp/mcp.typeguards.d.ts

@@ -0,0 +1,24 @@
+import type { JSONRPCRequest } from './mcp.types';
+type UnknownRecord = Record<string, unknown>;
+export type HttpHeaderAuthDecryptedData = {
+    name: string;
+    value?: unknown;
+};
+export type WithDecryptedData<T> = UnknownRecord & {
+    data: T;
+};
+export declare function isRecord(value: unknown): value is UnknownRecord;
+export declare function hasHttpHeaderAuthDecryptedData(value: unknown): value is WithDecryptedData<HttpHeaderAuthDecryptedData>;
+export type JwtPassphraseDecryptedData = {
+    keyType?: 'passphrase' | string;
+    secret: string;
+};
+export type JwtPemKeyDecryptedData = {
+    keyType?: 'pemKey' | string;
+    privateKey?: string;
+    publicKey?: string;
+};
+export declare function hasJwtSecretDecryptedData(value: unknown): value is WithDecryptedData<JwtPassphraseDecryptedData>;
+export declare function hasJwtPemKeyDecryptedData(value: unknown): value is WithDecryptedData<JwtPemKeyDecryptedData>;
+export declare function isJSONRPCRequest(value: unknown): value is JSONRPCRequest;
+export {};