n8n-mcp-community 0.2.0 → 0.2.1

package/CHANGELOG.md

@@ -6,6 +6,25 @@ All notable changes to this project will be documented here. The format follows
 
 ## [Unreleased]
 
+## [0.2.1] - Frozen release candidate
+
+Version 0.2.1 is a frozen release candidate. Availability is established only
+by matching npm provenance, GitHub Release assets and signatures, and MCP
+Registry readbacks; this immutable entry is not rewritten after publication.
+
+### Changed
+
+- Forty tool definitions now state their exact selector semantics, pagination
+  behavior, authorization or configuration boundary, side effects, and return
+  contract in shorter agent-facing language. The four definitions already
+  rated 5.0 by Glama remain unchanged.
+- The durable 44-tool definition matrix now checks parameter, authorization,
+  configuration, return, annotation, and task-support invariants independently.
+  Controlled mutations prove that every invariant rejects semantic drift.
+- Execution-stop documentation now names every stoppable state and the
+  terminal-race mapping. Health documentation now states the explicit opt-in
+  required for remote plaintext HTTP.
+
 ## [0.2.0] - Frozen release candidate
 
 Version 0.2.0 is a frozen release candidate. Availability is established only
@@ -285,6 +304,7 @@ Registry readbacks; this immutable entry is not rewritten after publication.
   publishable history; authenticated public release receipts remain supported.
 
 [Unreleased]: #unreleased
+[0.2.1]: #021---frozen-release-candidate
 [0.2.0]: #020---frozen-release-candidate
 [0.1.4]: #014---frozen-release-candidate
 [0.1.3]: #013---frozen-release-candidate

package/README.md

@@ -104,7 +104,7 @@ how to check the download.
 The current source candidate has been verified with:
 
 - exactly **44 tools**, **5 resources**, and **4 prompts** over real stdio;
-- **296 passing tests** locally on Node.js 24.18.1; CI and release gates require
+- **297 passing tests** locally on Node.js 24.18.1; CI and release gates require
   the pinned Node.js 22.23.1 and 24.18.0 matrix;
 - zero findings from Gitleaks, Semgrep, Trivy, and both project-root
   production/full `npm audit` runs; all three source scanners are reproduced in
@@ -170,13 +170,13 @@ failure, and security reference.
 
 ### Executions
 
-| Tool                                                           | Mode      | Purpose                                                            |
-| -------------------------------------------------------------- | --------- | ------------------------------------------------------------------ |
-| [`n8n_executions_list`](docs/tools.md#n8n_executions_list)     | Read-only | List execution metadata with value-free data-presence summaries.   |
-| [`n8n_executions_get`](docs/tools.md#n8n_executions_get)       | Read-only | Read one execution's metadata without returning workflow payloads. |
-| [`n8n_executions_delete`](docs/tools.md#n8n_executions_delete) | Unsafe    | Permanently delete a saved execution.                              |
-| [`n8n_executions_retry`](docs/tools.md#n8n_executions_retry)   | Unsafe    | Retry an eligible saved execution.                                 |
-| [`n8n_executions_stop`](docs/tools.md#n8n_executions_stop)     | Unsafe    | Stop one running execution and bind identity from validated input. |
+| Tool                                                           | Mode      | Purpose                                                              |
+| -------------------------------------------------------------- | --------- | -------------------------------------------------------------------- |
+| [`n8n_executions_list`](docs/tools.md#n8n_executions_list)     | Read-only | List execution metadata with value-free data-presence summaries.     |
+| [`n8n_executions_get`](docs/tools.md#n8n_executions_get)       | Read-only | Read one execution's metadata without returning workflow payloads.   |
+| [`n8n_executions_delete`](docs/tools.md#n8n_executions_delete) | Unsafe    | Permanently delete a saved execution.                                |
+| [`n8n_executions_retry`](docs/tools.md#n8n_executions_retry)   | Unsafe    | Retry an eligible saved execution.                                   |
+| [`n8n_executions_stop`](docs/tools.md#n8n_executions_stop)     | Unsafe    | Stop one stoppable execution and bind identity from validated input. |
 
 ### Credentials
 
@@ -291,7 +291,7 @@ API. The project does not redistribute the `n8n-nodes-base` catalog and does not
 use browser cookies, interactive session routes, or runtime package downloads to
 construct one.
 
-The v0.2.0 candidate surface intentionally excludes arbitrary workflow execution,
+The v0.2.1 candidate surface intentionally excludes arbitrary workflow execution,
 credential/workflow transfer, folders, data tables, beta evaluation endpoints,
 and execution annotations. See the [roadmap](ROADMAP.md) for the annotation
 proposal retained outside the release target.

package/ROADMAP.md

@@ -18,7 +18,7 @@ maintainer approval.
 
 ## Accepted backlog proposal
 
-Execution annotations remain a coherent two-tool proposal outside v0.2.0:
+Execution annotations remain a coherent two-tool proposal outside v0.2.1:
 
 - `n8n_executions_get_tags`
 - `n8n_executions_update_tags`

package/dist/tools/credentials.js

@@ -59,7 +59,7 @@ export const credentialTools = Object.freeze([
     defineTool({
         name: "n8n_credentials_create",
         title: "Create credential",
-        description: "Create and persist one credential as an additive write. Use n8n_credentials_schema first; use n8n_credentials_update when the credential exists. type selects the schema the caller should use to construct data, and isResolvable is sent only when supplied. Requires write/unsafe mode plus credential-create permission. Secret values belong only in input and are excluded from logs and output; returns metadata only.",
+        description: "Create and persist one credential as an additive write. First call n8n_credentials_schema with the planned type, then build data from its field contract; name is only the stored label. isResolvable is forwarded only when supplied. Use n8n_credentials_update for an existing credential. Requires write/unsafe mode plus create permission. Secret values belong only in data input and are excluded from logs and output; returns metadata only.",
         operation: "write",
         outputDataDescription: "Validated credential metadata with id, name, type, optional timestamps, managed/global flags, and resolvability. Stored credential values are never returned.",
         destructive: false,
@@ -89,7 +89,7 @@ export const credentialTools = Object.freeze([
     defineTool({
         name: "n8n_credentials_delete",
         title: "Delete credential",
-        description: "Permanently delete one stored credential, which can break every referencing workflow. Use n8n_credentials_usage across all pages first; use n8n_credentials_update when replacement is sufficient. No secret or rollback is returned. Requires unsafe mode plus credential-delete permission; returns the request-bound ID with deleted=true.",
+        description: "Permanently delete one stored credential, which can break every referencing workflow. credentialId must be the stable ID from n8n_credentials_list, get, or create; a credential name or type is not accepted. Scan all n8n_credentials_usage pages first, or update when replacement is enough. No secret or rollback is returned. Requires unsafe mode plus credential-delete permission; returns the request-bound credentialId with deleted=true.",
         operation: "unsafe",
         outputDataDescription: "Object with the validated input credentialId and deleted=true. Identity is bound to the request because n8n does not consistently return the deleted credential ID.",
         input: { credentialId: identifier("Stable ID of the credential to delete.") },
@@ -103,7 +103,7 @@ export const credentialTools = Object.freeze([
     defineTool({
         name: "n8n_credentials_schema",
         title: "Get credential schema",
-        description: "Get n8n's Public API field schema for one credential type. Use it before n8n_credentials_create or replacement-data updates; use n8n_credentials_get for stored metadata. credentialType is a route selector, not a stored credential ID, so this call never reads credential values. Requires schema-read permission; returns the validated upstream field contract without testing credentials.",
+        description: "Get n8n's Public API field contract for one credential type. credentialType is the public type name used by create/update, not a stored credential ID, name, or secret. Its result tells the caller which keys belong in data; it does not read or test a stored credential. Use n8n_credentials_get for stored metadata. Requires schema-read permission; returns the validated upstream field contract.",
         operation: "read-only",
         outputDataDescription: "Validated Public API schema object for the requested credential type. It describes accepted fields and constraints but never contains stored credential values.",
         input: {
@@ -116,7 +116,7 @@ export const credentialTools = Object.freeze([
     defineTool({
         name: "n8n_credentials_list",
         title: "List credentials",
-        description: "List one Public API page of credential metadata using the endpoint supported from n8n Community 2.30.5. Use it for discovery; use n8n_credentials_get when the ID is known. cursor resumes a prior page and limit bounds that single request; this call never auto-paginates. Requires credential-list permission; returns metadata and nextCursor, never stored values.",
+        description: "List one Public API page of credential metadata; the endpoint is supported from n8n Community 2.30.5. Omit cursor for page one. For later pages, pass nextCursor back unchanged; limit sizes only that request, and the tool never auto-paginates. Use n8n_credentials_get when an ID is known. Requires credential-list permission; returns metadata and nextCursor, never stored values.",
         operation: "read-only",
         outputDataDescription: "Object with data (up to 100 credential metadata records) and nextCursor (string or null). Records contain allowlisted metadata only; credential values are rejected.",
         input: { limit: pageLimit(), cursor: cursor.optional() },
@@ -131,7 +131,7 @@ export const credentialTools = Object.freeze([
     defineTool({
         name: "n8n_credentials_get",
         title: "Get credential",
-        description: "Get public metadata for one stored credential by stable ID. Use it for a known target; use n8n_credentials_list for discovery and n8n_credentials_schema for type fields. credentialId identifies stored metadata only: the endpoint and output contract do not retrieve credential values or test the external service. Requires credential-read permission; returns validated identity, type, flags, and timestamps.",
+        description: "Get public metadata for one stored credential. credentialId is the stable ID from n8n_credentials_list or create, not its name, type, or secret data. Use n8n_credentials_schema for type fields. The endpoint does not retrieve credential values or test the external service. Requires credential-read permission; returns validated identity, type, flags, and timestamps.",
         operation: "read-only",
         outputDataDescription: "One validated credential metadata record with id, name, type, optional timestamps, managed/global flags, and resolvability; no stored credential values.",
         input: { credentialId: identifier("Stable ID of the credential metadata to retrieve.") },
@@ -140,7 +140,7 @@ export const credentialTools = Object.freeze([
     defineTool({
         name: "n8n_credentials_update",
         title: "Update credential",
-        description: "Update selected metadata or values on one stored credential, potentially breaking dependent workflows. Use n8n_credentials_schema for data fields and n8n_credentials_create for a new credential. Supply at least one field; changing type also requires data. isPartialData=false treats data as replacement, while true requests a partial merge. Requires write/unsafe mode plus update permission; returns metadata without secret values.",
+        description: "Update one stored credential, potentially breaking dependent workflows. credentialId selects the record; omit fields to keep them and supply at least one change. If type changes, data is also required and must match n8n_credentials_schema. With data, isPartialData=false replaces the saved field set, while true requests a partial merge. Use create for a new credential. Requires write/unsafe mode plus update permission; returns metadata without secret values.",
         operation: "write",
         outputDataDescription: "Updated credential metadata with id, name, type, optional timestamps, managed/global flags, and resolvability. Supplied credential values are never echoed.",
         destructive: true,
@@ -201,7 +201,7 @@ export const credentialTools = Object.freeze([
     defineTool({
         name: "n8n_credentials_test",
         title: "Test credential",
-        description: "Test one stored credential by allowing n8n to contact its external service, which receives and may log the attempt. Use n8n_credentials_get for metadata-only inspection and do not call this when network contact is unwanted. Requires unsafe mode plus test permission; returns only the target-bound OK/Error outcome and withholds the upstream diagnostic message because it may contain secrets.",
+        description: "Test one already stored credential by allowing n8n to contact its external service, which receives and may log the attempt. credentialId is the stable ID from n8n_credentials_list or get; inline credential data, names, and types are not accepted. Use get for metadata-only inspection and skip this tool when network contact is unwanted. Requires unsafe mode plus test permission; returns only the target-bound OK/Error outcome and withholds the upstream diagnostic message.",
         operation: "unsafe",
         outputDataDescription: "Object with credentialId, status OK or Error, and a server-authored message that discloses only whether the test succeeded. The untrusted upstream diagnostic message is never returned.",
         openWorld: true,
@@ -221,7 +221,7 @@ export const credentialTools = Object.freeze([
     defineTool({
         name: "n8n_credentials_usage",
         title: "Find credential usage",
-        description: "Scan one bounded workflow page for exact references to a credential ID. Use it before n8n_credentials_update or deletion; use n8n_credentials_get for metadata only. active filters upstream, cursor resumes the scan, and unresolved legacy references are counted but never matched; coverage is complete only when nextCursor is null. Requires workflow-list permission; returns bounded workflow/node matches and omission counts.",
+        description: "Scan one workflow page for exact references to a credential. credentialId is the stable ID from n8n_credentials_list or get. Omit cursor for page one; keep credentialId, active, and limit unchanged when passing nextCursor. Unresolved legacy references are counted but never matched, and coverage is complete only when nextCursor is null. Use this before update/delete. Requires workflow-list permission; returns bounded workflow/node matches and omission counts.",
         operation: "read-only",
         outputDataDescription: "Object with credentialId, workflowsExamined, matchingWorkflowCount, workflows with at most 200 total node details and 20 per workflow, nextCursor, scanComplete, truncation counts, referencesScanned, and referencesUnresolved.",
         input: {

package/dist/tools/executions.js

@@ -90,7 +90,7 @@ export const executionTools = Object.freeze([
     defineTool({
         name: "n8n_executions_get",
         title: "Get execution",
-        description: "Get metadata for one saved execution by stable ID. Use it for a known target; use n8n_executions_list to discover or filter executions. includeData changes only whether n8n is asked about payload presence—the tool never returns node inputs or outputs. Requires permission to read the execution; returns identity, status, timing, retry fields, and value-free dataPolicy.",
+        description: "Get metadata for one saved execution. executionId is the execution record ID from n8n_executions_list, not its workflowId. includeData=true asks n8n whether saved payload data exists, but the MCP still withholds every node input and output; false skips that request detail. Use list for discovery. Requires execution-read permission; returns identity, status, timing, retry fields, and value-free dataPolicy.",
         operation: "read-only",
         outputDataDescription: "One allowlisted execution metadata record with identity, status, mode, workflow/timing/retry fields when present, and value-free dataPolicy. Raw execution values are never returned.",
         input: {
@@ -111,7 +111,7 @@ export const executionTools = Object.freeze([
     defineTool({
         name: "n8n_executions_delete",
         title: "Delete execution",
-        description: "Permanently delete one saved execution and its retained history. Use it only after n8n_executions_get confirms the target; use read tools for inspection. The server provides no recovery or rollback. Requires unsafe mode plus execution-delete permission; returns the request-bound ID with deleted=true.",
+        description: "Permanently delete one saved execution and its retained history. executionId must be the execution record ID from n8n_executions_list or get; a workflow ID is not accepted. Confirm the target with get first. The server provides no recovery or rollback. Requires unsafe mode plus execution-delete permission; returns the request-bound executionId with deleted=true.",
         operation: "unsafe",
         outputDataDescription: "Object with the validated input executionId and deleted=true. Identity is bound to the request and does not rely on an upstream response body.",
         input: { executionId },
@@ -125,7 +125,7 @@ export const executionTools = Object.freeze([
     defineTool({
         name: "n8n_executions_retry",
         title: "Retry execution",
-        description: "Retry one eligible saved execution, potentially repeating every external effect already reached. Use it only after n8n_executions_get review; use n8n_executions_stop for a running execution. loadWorkflow=true uses the currently saved workflow, while false uses the original execution snapshot. Requires unsafe mode and retry permission; returns metadata without payload values.",
+        description: "Retry one saved execution that has retry data and did not finish successfully; n8n rejects queued/new executions and successful finished executions. executionId comes from n8n_executions_get or list. loadWorkflow=true uses the currently saved workflow, while false uses the original execution snapshot. A retry may repeat earlier external effects; use stop for a running execution. Requires unsafe mode and retry permission; returns metadata without payload values.",
         operation: "unsafe",
         outputDataDescription: "Allowlisted metadata for the new or retried execution, including scalar identity/status/timing/retry fields when supplied by n8n; raw execution values are omitted.",
         input: {
@@ -144,7 +144,7 @@ export const executionTools = Object.freeze([
     defineTool({
         name: "n8n_executions_stop",
         title: "Stop execution",
-        description: "Request cancellation of one running execution without rolling back completed external effects. Use n8n_executions_get for inspection or n8n_executions_retry for an eligible saved failure. A successful HTTP response alone does not prove cancellation. Requires unsafe mode plus stop permission; returns stopped, already_finished, or unknown from validated state.",
+        description: "Request cancellation of one stoppable execution: new, unknown, waiting, or running. executionId must be its record ID from n8n_executions_list or get, not a workflow ID. n8n rejects an execution that is already terminal. From a successful response, canceled maps to stopped, another terminal status maps to already_finished, and an unclear body maps to unknown; HTTP 200 alone never proves cancellation. Completed external effects remain. Requires unsafe mode and stop permission; returns the mapped state.",
         operation: "unsafe",
         outputDataDescription: "Object with executionId, stopped, state (stopped, already_finished, or unknown), and optional finished/status/stoppedAt metadata. HTTP success alone never asserts that a stop occurred.",
         input: { executionId },
@@ -160,10 +160,10 @@ export const executionTools = Object.freeze([
                 method: "POST",
                 path: `/executions/${pathSegment(input.executionId)}/stop`,
             }));
-            // n8n answers 200 even when the execution already finished in the race between the
-            // operator's check and this call. Derive the outcome from the validated body instead of
-            // asserting a stop that never happened: only a "canceled" terminal state means we stopped
-            // it; other terminal states mean it finished on its own; anything else is unknown.
+            // Supported n8n versions normally reject an already-terminal target. For any successful
+            // body, derive the outcome instead of trusting HTTP 200: only "canceled" proves this call
+            // stopped it; another terminal state maps defensively to already_finished; anything else
+            // is unknown.
             const normalizedStatus = upstream.status?.toLowerCase();
             const outcome = normalizedStatus === "canceled"
                 ? { stopped: true, state: "stopped" }

package/dist/tools/tags.js

@@ -18,7 +18,7 @@ export const tagTools = Object.freeze([
     defineTool({
         name: "n8n_tags_list",
         title: "List tags",
-        description: "List one Public API page of workflow tags. Use it to discover stable tag IDs; use n8n_tags_get when the ID is already known. cursor resumes the prior page and limit bounds only this request, so continue nextCursor until null when complete coverage matters. Requires tag-list permission and never changes assignments; returns validated metadata and nextCursor.",
+        description: "List one Public API page of workflow tags. Omit cursor for page one; for later pages, pass nextCursor back unchanged. limit sizes only the current page, so continue until nextCursor is null for complete coverage. Use n8n_tags_get when the stable tag ID is known. Requires tag-list permission and never changes assignments; returns validated metadata and nextCursor.",
         operation: "read-only",
         outputDataDescription: "Object with data (up to 100 validated tag records) and nextCursor (string or null). Each tag includes id, name, and optional createdAt/updatedAt timestamps.",
         input: { limit: pageLimit(), cursor: cursor.optional() },
@@ -33,7 +33,7 @@ export const tagTools = Object.freeze([
     defineTool({
         name: "n8n_tags_get",
         title: "Get tag",
-        description: "Get one workflow tag by stable ID. Use it to verify a known target before assigning, renaming, or deleting it; use n8n_tags_list for discovery. tagId identifies the reusable tag itself, not a workflow assignment, so this call neither lists nor changes assigned workflows. Requires tag-read permission; returns validated ID, name, and optional timestamps.",
+        description: "Get one workflow tag. tagId is the stable tag identity returned by n8n_tags_list or create; a tag name or workflow ID is not accepted. Use it before assigning, renaming, or deleting the tag. The ID identifies the reusable tag itself, not an assignment, so this call neither lists nor changes assigned workflows. Requires tag-read permission; returns validated ID, name, and optional timestamps.",
         operation: "read-only",
         outputDataDescription: "One validated tag record with id, name, and optional createdAt/updatedAt timestamps.",
         input: { tagId: identifier("Stable ID of the workflow tag to retrieve.") },
@@ -42,7 +42,7 @@ export const tagTools = Object.freeze([
     defineTool({
         name: "n8n_tags_create",
         title: "Create tag",
-        description: "Create and persist one workflow tag as an additive write. Use it for a new reusable label; use n8n_tags_update when the tag exists and n8n_workflows_update_tags to assign it. name must already be trimmed, and duplicate-name handling belongs to n8n; creation never changes any workflow assignment. Requires write/unsafe mode plus tag-create permission; returns validated metadata.",
+        description: "Create and persist one reusable workflow label as an additive write. name is the literal display label, not a tag ID or workflow assignment; it must already be trimmed. Duplicate-name handling belongs to n8n, and creation never assigns the tag to a workflow. Use n8n_tags_update for an existing tag and n8n_workflows_update_tags to assign it. Requires write/unsafe mode plus create permission; returns validated metadata.",
         operation: "write",
         outputDataDescription: "Created tag record with validated id, name, and optional createdAt/updatedAt timestamps.",
         destructive: false,
@@ -54,7 +54,7 @@ export const tagTools = Object.freeze([
     defineTool({
         name: "n8n_tags_update",
         title: "Update tag",
-        description: "Rename one existing workflow tag while preserving its stable ID and current assignments. Use n8n_tags_create for a new label and n8n_workflows_update_tags to change assignments. tagId selects the existing record and name is its complete replacement; duplicate-name acceptance belongs to n8n. Requires write/unsafe mode plus tag-update permission; returns validated metadata.",
+        description: "Rename one existing workflow tag while preserving its ID and assignments. tagId is the stable selector from n8n_tags_list or get; name is the complete new display label, not another ID. Duplicate-name acceptance belongs to n8n. Use n8n_tags_create for a new label and n8n_workflows_update_tags to change assignments. Requires write/unsafe mode plus tag-update permission; returns validated metadata.",
         operation: "write",
         outputDataDescription: "Updated tag record with validated id, name, and optional createdAt/updatedAt timestamps.",
         input: { tagId: identifier("Stable ID of the workflow tag to rename."), name: tagName },
@@ -67,7 +67,7 @@ export const tagTools = Object.freeze([
     defineTool({
         name: "n8n_tags_delete",
         title: "Delete tag",
-        description: "Permanently delete one workflow tag, which can remove that label from multiple workflows. Use n8n_tags_get plus affected-workflow review first; use n8n_tags_update when a rename is sufficient. No rollback is provided. Requires unsafe mode plus tag-delete permission; returns the request-bound ID with deleted=true.",
+        description: "Permanently delete one workflow tag, which can remove that label from many workflows. tagId must be the stable ID from n8n_tags_list or get; a tag name or workflow ID is not accepted. Review the target and affected workflows first, or use n8n_tags_update when a rename is enough. No rollback is provided. Requires unsafe mode plus tag-delete permission; returns the request-bound tagId with deleted=true.",
         operation: "unsafe",
         outputDataDescription: "Object with the validated input tagId and deleted=true. Identity is bound to the request and does not rely on an upstream response body.",
         input: { tagId: identifier("Stable ID of the workflow tag to delete.") },

package/dist/tools/users.js

@@ -71,7 +71,7 @@ export const userTools = Object.freeze([
     defineTool({
         name: "n8n_users_get",
         title: "Get user",
-        description: "Get one user by stable ID or exact email. Use it for targeted verification before an administrative action; use n8n_users_list for discovery. userIdOrEmail chooses ID lookup or an exact percent-encoded email lookup; includeRole=true requests but cannot guarantee role visibility. Requires user-read permission; returns redaction-protected identity and account state without mutation.",
+        description: "Get one user by stable ID or exact email. userIdOrEmail routes ID-shaped input to ID lookup and other input to an exact percent-encoded email lookup; partial email matching is not used. includeRole=true asks n8n for the global role, but permissions may still hide it. Use n8n_users_list for discovery. Requires user-read permission; returns redaction-protected identity and account state without mutation.",
         operation: "read-only",
         outputDataDescription: "One validated user record with id and optional email, firstName, lastName, role, disabled/pending status, and timestamps. Recognized personal values may be redacted.",
         input: {
@@ -89,7 +89,7 @@ export const userTools = Object.freeze([
     defineTool({
         name: "n8n_users_create",
         title: "Invite user",
-        description: "Create a pending non-owner invitation as an additive write that may send email. Use n8n_users_get first when the address may exist; this is not an update or project-membership tool. role defaults to global:member. Requires unsafe mode plus invite permission. An inconclusive response may still mean a pending user exists; returns delivery state but never the acceptance URL.",
+        description: "Create a pending invitation as an additive write that may send email. email is the future account login; use n8n_users_get first when it may exist. role is a global account role, not project membership, and omission selects global:member; owner invitations are rejected. Requires unsafe mode plus invite permission. An inconclusive response may still mean a pending user exists; returns delivery state but never the acceptance URL.",
         operation: "unsafe",
         outputDataDescription: "Confirmed invitation outcome with userCreated, invited, userId, email, requestedRole, roleConfirmedByResponse, emailSent, delivery, and inviteAcceptUrlReturned=false. Acceptance URLs are never returned.",
         destructive: false,
@@ -134,7 +134,7 @@ export const userTools = Object.freeze([
     defineTool({
         name: "n8n_users_delete",
         title: "Delete user",
-        description: "Permanently delete one API-eligible user. Use n8n_users_get to verify the target first; use read tools for inspection. userId accepts no transfer target, so ownership handling remains entirely with n8n. Requires unsafe mode plus user-delete permission; returns the request-bound ID with deleted=true and provides no rollback claim.",
+        description: "Permanently delete one API-eligible user. userId must be the stable ID from n8n_users_list or get; an email address is not accepted. The input has no transfer target, so workflow or credential ownership handling remains entirely with n8n. Verify the target with get first. Requires unsafe mode plus user-delete permission; returns the request-bound userId with deleted=true and provides no rollback claim.",
         operation: "unsafe",
         outputDataDescription: "Object with the validated input userId and deleted=true. The tool makes no ownership-transfer claim and accepts n8n's successful empty response.",
         input: { userId: identifier("Stable ID of the API-eligible user to delete.") },

package/dist/tools/utilities.js

@@ -65,7 +65,7 @@ export const utilityTools = Object.freeze([
     defineTool({
         name: "n8n_health",
         title: "Check n8n health",
-        description: "Perform one redirect-free same-origin /healthz request with a 10-second timeout. Use it for HTTP reachability only; use an authenticated read tool such as n8n_workflows_list to validate API-key capability. The shared client still requires configured URL/key values, but no workflow data is read or changed. Returns ok=true and the successful status, never the upstream body.",
+        description: "Perform one redirect-free same-origin /healthz request with a 10-second timeout. This tool accepts no arguments and requires the configured n8n URL and API key; remote plaintext HTTP also requires N8N_ALLOW_INSECURE_HTTP=1. Use it for HTTP reachability, then use n8n_workflows_list to test API-key capability. No workflow data is read or changed. Returns ok=true and the successful status, never the upstream body.",
         operation: "read-only",
         outputDataDescription: "Object with ok=true and the successful n8n health endpoint HTTP status. It proves bounded reachability, not authenticated Public API capability.",
         input: {},
@@ -112,7 +112,7 @@ export const utilityTools = Object.freeze([
     defineTool({
         name: "n8n_audit_generate",
         title: "Generate security audit",
-        description: "Run n8n's broad, non-destructive instance security scan. Use it for an owner-approved audit; use n8n_introspect for local analysis of one workflow. Omitting categories lets n8n choose its complete default, while daysAbandonedWorkflow changes only the inactive-workflow threshold. Requires unsafe mode and owner-authorized API access; returns a sanitized but untrusted report without changing instance configuration.",
+        description: "Run n8n's broad, non-destructive instance security scan. Omit categories to use n8n's complete default, or supply the exact risk areas to include. daysAbandonedWorkflow is independent: it changes only the inactive-workflow age threshold and does not select categories. Use n8n_introspect for one workflow. Requires unsafe mode and owner-authorized API access; returns a sanitized but untrusted report without changing configuration.",
         operation: "unsafe",
         preserveValidatedRootRecordValues: true,
         outputDataDescription: "Map of upstream report titles to validated reports. Each report has one official risk category and bounded sections with recommendations plus typed locations or instance details; all content is sanitized and untrusted.",
@@ -149,7 +149,7 @@ export const utilityTools = Object.freeze([
     defineTool({
         name: "n8n_search_workflows",
         title: "Search workflows",
-        description: "Search one workflow page locally with a case-insensitive substring. Use it for name, node-type, or tag-name matching; use n8n_workflows_list for an unsearched API page. searchIn selects local fields after active filters upstream; cursor and limit select one page, not a global index, so continue nextCursor for coverage. Requires workflow-list permission; returns at most 50 value-free matches and explicit scan state.",
+        description: "Search one workflow page for a case-insensitive substring. query is matched locally only in the fields named by searchIn; active filters upstream first. Omit cursor for page one, then keep query, searchIn, active, and limit unchanged when passing nextCursor. This is not a global index; use n8n_workflows_list for an unsearched page. Requires workflow-list permission; returns at most 50 value-free matches and explicit scan state.",
         operation: "read-only",
         outputDataDescription: "Object with query, workflowsExamined, matches (up to 50 identity/state records with matchedIn scopes), nextCursor, scanComplete, and truncated. It covers one requested workflow page, not a global index.",
         input: {
@@ -215,7 +215,7 @@ export const utilityTools = Object.freeze([
     defineTool({
         name: "n8n_get_node_docs",
         title: "Get node documentation",
-        description: "Return one immutable bundled reference selected by the four-value node key. Use it for offline orientation; use n8n_list_node_types to inventory observed types and official docs for any other node. Requires no n8n URL, API key, network, or elevated mode; it never follows the included URL. Returns source/fetched provenance, canonical type, title, summary, guidance, and official URL.",
+        description: "Return one immutable bundled reference. node is an exact local key—webhook, code, http-request, or if—not an arbitrary n8n node-type string. Use n8n_list_node_types to inventory observed types and official docs for anything else. Requires no n8n URL, API key, network, or elevated mode; it never follows the included URL. Returns source/fetched provenance, canonical type, title, summary, guidance, and official URL.",
         operation: "read-only",
         outputDataDescription: "Bundled reference with source=bundled_offline_reference, fetched=false, node type, title, concise summary/guidance, and official documentation URL. No network fetch occurs.",
         openWorld: false,
@@ -233,7 +233,7 @@ export const utilityTools = Object.freeze([
     defineTool({
         name: "n8n_list_node_types",
         title: "List observed node types",
-        description: "Inventory node-type strings observed across bounded workflow pages. Use it for usage evidence, not installed availability; use n8n_get_node_docs for bundled references or n8n_community_packages_list for package metadata. cursor selects the start, maxPages bounds continuation, and active filters upstream; a complete result requires starting at the first page and reaching the end. Requires workflow-list permission; returns counts and exact coverage under 30-second/20,000-node budgets.",
+        description: "Inventory node types observed across workflow pages; this proves usage, not installation. Omit cursor to start at page one. maxPages limits how many pages this call follows; active and limit apply to every page, so keep them unchanged when continuing from nextCursor. Complete coverage requires starting at page one and reaching the end. Use n8n_get_node_docs for bundled references. Requires workflow-list permission; returns counts and exact coverage, capped at 30 seconds or 20,000 nodes.",
         operation: "read-only",
         outputDataDescription: "Observed-workflow inventory with scope/availabilityStatement, up to 500 sorted types and counts, page/workflow/node counters, coverage booleans, nextCursor, resultComplete, truncated, and omittedTypeCount.",
         input: {
@@ -399,7 +399,7 @@ export const utilityTools = Object.freeze([
     defineTool({
         name: "n8n_community_packages_list",
         title: "List community packages",
-        description: "List bounded metadata for installed n8n community packages. Use it for package inventory; use n8n_list_node_types for types actually observed in workflows. This zero-input call retains at most 100 of the endpoint's records and reports exact total/omitted counts; it does not download or inspect package contents. Requires package-list permission, never installs, updates, or removes packages, and returns untrusted metadata with author emails redacted.",
+        description: "List bounded metadata for installed n8n community packages. This call accepts no arguments, filters, cursor, or limit; it keeps at most 100 endpoint records and reports exact omissions. Use n8n_list_node_types for types observed in workflows. It does not download or inspect contents. Requires package-list permission, never installs, updates, or removes packages, and returns untrusted metadata with author emails redacted.",
         operation: "read-only",
         outputDataDescription: "Object with data (at most 100 package metadata records), totalCount, truncated, and exact omittedCount. Records may include packageName, installedVersion, author metadata, and timestamps; author emails are redacted.",
         input: {},

package/dist/tools/workflows.js

@@ -651,7 +651,7 @@ export const workflowTools = Object.freeze([
     defineTool({
         name: "n8n_workflows_list",
         title: "List workflows",
-        description: "List one Public API page of workflows visible to the configured API key. Use it for unsearched discovery; use n8n_search_workflows for local substring matching or n8n_workflows_get when the ID is known. Filters are applied upstream, cursor resumes a prior page, and this call never auto-paginates. Requires workflow-list permission; returns projected workflows and nextCursor, never pin/static values.",
+        description: "List one Public API page of workflows visible to the configured API key. Use n8n_search_workflows for substring matching or n8n_workflows_get for a known ID. Omit cursor for page one. active, tags, and name are combined upstream; keep those filters and excludePinnedData unchanged when passing nextCursor. limit sizes only that page, and the tool never auto-paginates. Requires workflow-list permission; returns projected workflows and nextCursor, never pin/static values.",
         operation: "read-only",
         outputDataDescription: "Object with data (up to 100 projected workflows) and nextCursor (string or null). Each workflow includes structure/state plus pinDataPresent and staticDataPresent presence markers, but never pinned or static values.",
         input: {
@@ -698,7 +698,7 @@ export const workflowTools = Object.freeze([
     defineTool({
         name: "n8n_workflows_get",
         title: "Get workflow",
-        description: "Get one current workflow by stable ID for inspection or reviewed editing. Use n8n_workflows_get_version for retained history or n8n_workflows_list for discovery. excludePinnedData controls only the upstream request and presence reporting; values are always withheld. Requires permission to read the target; returns structure, state, settings, and presence flags.",
+        description: "Get one current workflow for inspection or reviewed editing. workflowId is the stable ID returned by n8n_workflows_list or create, not a workflow name or version ID. Use n8n_workflows_get_version for history. excludePinnedData changes only the upstream request and the pinDataPresent/staticDataPresent flags; pinned values are withheld whether true or false. Requires permission to read the target; returns structure, state, settings, and presence flags.",
         operation: "read-only",
         outputDataDescription: "Current workflow projection with id, optional versionId/description/state, name, nodes, connections, settings, and pinDataPresent/staticDataPresent markers. Pinned and static values are never returned.",
         input: {
@@ -716,7 +716,7 @@ export const workflowTools = Object.freeze([
     defineTool({
         name: "n8n_workflows_create",
         title: "Create workflow",
-        description: "Create and persist one workflow as an additive write without activating its triggers. Use it for a new workflow; use n8n_workflows_update for an existing one and n8n_workflows_activate separately for triggers. nodes and connections must describe one complete consistent graph; optional pin/static inputs are accepted but never returned. Requires write or unsafe mode plus create permission; returns the validated projection.",
+        description: "Create and persist one workflow as an additive write without activating its triggers. name, nodes, and connections define a new record; nodes and connections must form one complete graph, while omitting settings uses an empty object. Optional pinData, staticData, description, and nodeGroups are forwarded only when supplied. Use n8n_workflows_update for an existing workflow and activate for triggers. Requires write or unsafe mode plus create permission; returns the validated projection without pin/static values.",
         operation: "write",
         outputDataDescription: "Created workflow projection with id, optional versionId/description/state, name, nodes, connections, settings, and withheld pin/static presence markers. Pinned and static values are never returned.",
         destructive: false,
@@ -764,7 +764,7 @@ export const workflowTools = Object.freeze([
     defineTool({
         name: "n8n_workflows_update",
         title: "Update workflow",
-        description: "Update selected top-level workflow fields through a non-atomic full PUT. Use n8n_update_node for one node property and n8n_workflows_update_tags for tag assignments. expectedVersionId must match both pre-write reads; omitted writable fields are preserved, while supplied nodes or other composite fields replace that field completely. Requires write/unsafe mode plus read and update permission; returns the confirmed projection.",
+        description: "Update selected top-level fields through a non-atomic full PUT. workflowId selects the current record; copy expectedVersionId from its latest read, and supply at least one writable field. The version must match both pre-write reads. Omitted fields are preserved, but each supplied array or object replaces that whole field. Use n8n_update_node for one node property and n8n_workflows_update_tags for tags. Requires write/unsafe mode plus read and update permission; returns the confirmed projection.",
         operation: "write",
         outputDataDescription: "Confirmed updated workflow projection with id, version/state, name, optional description, nodes, connections, settings, and withheld pin/static presence markers. Omitted writable fields come from the immediate pre-write read.",
         destructive: true,
@@ -838,7 +838,7 @@ export const workflowTools = Object.freeze([
     defineTool({
         name: "n8n_update_node",
         title: "Update one workflow node",
-        description: "Update one validated path on one workflow node while preserving sibling data. Use it instead of n8n_workflows_update for a single-node change; use the full update for top-level or multi-node edits. path selects the mutable root whose contract validates value, and both version/risk guards must match before the non-atomic PUT. Requires write/unsafe mode plus read and update permission; returns the changed path and residual race risk.",
+        description: "Update one path on one node while preserving sibling data. workflowId selects the current workflow, nodeId selects exactly one node inside it, and path selects the mutable field whose contract validates value. Copy expectedVersionId from the latest workflow read and set acknowledgeNonAtomicRisk=true; both guards are required before the full PUT. Use n8n_workflows_update for top-level or multi-node edits. Requires write/unsafe mode plus read and update permission; returns the changed path and residual race risk.",
         operation: "write",
         outputDataDescription: "Object with workflowId, versionId, nodeId, path, updated=true, atomic=false, and residualRisk describing the Public API's non-atomic full-workflow PUT limitation.",
         destructive: true,
@@ -916,7 +916,7 @@ export const workflowTools = Object.freeze([
     defineTool({
         name: "n8n_workflows_delete",
         title: "Delete workflow",
-        description: "Permanently delete one workflow and its saved definition. Use n8n_workflows_archive when reversible removal is sufficient and n8n_workflows_get for inspection. This action has no rollback or transfer. Requires unsafe mode plus delete permission; returns the request-bound ID with deleted=true.",
+        description: "Permanently delete one workflow and its saved definition. workflowId must be the current stable ID from n8n_workflows_list or get; a name or version ID is not accepted. Use n8n_workflows_archive for reversible removal and n8n_workflows_get for inspection. This action has no rollback or transfer. Requires unsafe mode plus delete permission; returns the request-bound workflowId with deleted=true.",
         operation: "unsafe",
         outputDataDescription: "Object with the validated input workflowId and deleted=true. Identity is bound to the request and does not rely on an upstream response body.",
         input: { workflowId: identifier("Stable ID of the workflow to delete.") },
@@ -931,8 +931,8 @@ export const workflowTools = Object.freeze([
         name: `n8n_workflows_${action}`,
         title: `${action === "activate" ? "Activate" : "Deactivate"} workflow`,
         description: action === "activate"
-            ? "Activate one workflow so production triggers can accept future events; this does not execute it immediately. Use it only after n8n_workflows_get review; use n8n_workflows_deactivate to stop future triggers. Requires unsafe mode plus activation permission; returns target-validated active state metadata."
-            : "Deactivate one workflow's future production triggers without deleting saved data or stopping executions already running. Use n8n_workflows_activate to reverse this state or n8n_workflows_archive for lifecycle removal. Requires unsafe mode plus deactivation permission; returns target-validated inactive state metadata.",
+            ? "Activate one workflow so production triggers can accept future events; this does not execute it now. workflowId must be the current stable ID from n8n_workflows_list or get, not a name or version ID. Review the workflow first; use n8n_workflows_deactivate to stop future triggers. Requires unsafe mode plus activation permission; returns target-validated active state metadata."
+            : "Deactivate one workflow's future production triggers without deleting saved data or stopping runs already in progress. workflowId must be the current stable ID from n8n_workflows_list or get, not a name or version ID. Use n8n_workflows_activate to reverse the state or archive for lifecycle removal. Requires unsafe mode plus deactivation permission; returns target-validated inactive state metadata.",
         operation: "unsafe",
         outputDataDescription: action === "activate"
             ? "Target-bound workflow metadata with required id and active=true; optional name, type, archive state, versionId, and timestamps are included when supplied by n8n, while all other fields are omitted."
@@ -948,7 +948,7 @@ export const workflowTools = Object.freeze([
     defineTool({
         name: "n8n_workflows_get_version",
         title: "Get workflow version",
-        description: "Get one retained historical workflow snapshot selected by workflowId and versionId. Use it when exact historical nodes/connections are needed; use n8n_workflows_get for current state or n8n_workflows_diff for value-free comparison. Both returned IDs must match the selectors; a missing endpoint and a pruned version share an explicit ambiguous 404 outcome. Requires history-read permission; returns validated structure subject to retention.",
+        description: "Get one retained workflow snapshot. workflowId is the stable workflow ID; versionId is that workflow's separate retained-version ID. Do not swap them or pass a workflow name. Use n8n_workflows_get for current state or n8n_workflows_diff for comparison. Both returned IDs must match the selectors; a missing endpoint and a pruned version share an explicit ambiguous 404 outcome. Requires history-read permission; returns validated nodes and connections subject to retention.",
         operation: "read-only",
         outputDataDescription: "Historical snapshot with workflowId, versionId, optional name, nodes, and connections. Historical settings, pin data, and static data are unavailable from the supported Public API.",
         input: {
@@ -964,7 +964,7 @@ export const workflowTools = Object.freeze([
     defineTool({
         name: "n8n_workflows_get_tags",
         title: "Get workflow tags",
-        description: "List the tags currently assigned to one workflow. Use it before n8n_workflows_update_tags when assignments must be preserved; use n8n_tags_list to discover all available tags. This endpoint has no cursor: the tool retains at most 100 records and reports totalCount plus exact omissions. Requires permission to read the workflow's assignments; returns validated tag metadata.",
+        description: "List tags currently assigned to one workflow. workflowId selects the workflow from n8n_workflows_list or get; it is not a tag ID and this call does not list unassigned tags. Use it before n8n_workflows_update_tags when assignments must be preserved; use n8n_tags_list for all tags. The endpoint has no cursor, so the tool keeps at most 100 records and reports exact omissions. Requires assignment-read permission; returns validated tag metadata.",
         operation: "read-only",
         outputDataDescription: "Object with data (at most 100 validated tag records), totalCount, truncated, and exact omittedCount. Each tag may include id, name, createdAt, and updatedAt.",
         input: {
@@ -977,7 +977,7 @@ export const workflowTools = Object.freeze([
     defineTool({
         name: "n8n_workflows_update_tags",
         title: "Update workflow tags",
-        description: "Replace the complete tag assignment for one workflow; this is not a merge. Use n8n_workflows_get_tags first to preserve IDs and n8n_tags_create for a missing tag. tagIds is the entire desired set, so omitted IDs are removed and an empty array clears all tags. Requires write/unsafe mode plus assignment permission; returns n8n's validated replacement.",
+        description: "Replace one workflow's complete tag assignment; this is not a merge. workflowId selects the workflow, while every tagIds item must be a stable tag ID from n8n_tags_list or get; tag names are not accepted. tagIds is the whole desired set, so omitted IDs are removed and [] clears all tags. Use n8n_workflows_get_tags first to preserve assignments. Requires write/unsafe mode plus assignment permission; returns n8n's validated replacement.",
         operation: "write",
         outputDataDescription: "Array of at most 100 validated tag records returned by n8n after replacing the workflow's complete assignment. An empty returned array represents no assigned tags.",
         destructive: true,
@@ -1001,8 +1001,8 @@ export const workflowTools = Object.freeze([
         name: `n8n_workflows_${action}`,
         title: `${action === "archive" ? "Archive" : "Unarchive"} workflow`,
         description: action === "archive"
-            ? "Archive one workflow without deleting its saved definition. Use it instead of n8n_workflows_delete for reversible lifecycle removal; use n8n_workflows_deactivate only to stop triggers. The availability change can disrupt callers. Requires unsafe mode plus archive permission; returns target-validated archive state."
-            : "Restore one archived workflow without activating its triggers. Use it to reverse n8n_workflows_archive; call n8n_workflows_activate separately only if triggers should resume. Current active state is not inferred. Requires unsafe mode plus unarchive permission; returns target-validated archive state.",
+            ? "Archive one workflow without deleting its saved definition. workflowId must be the current stable ID from n8n_workflows_list or get, not a name or version ID. Use this instead of delete for reversible removal; use deactivate only to stop triggers. The availability change can disrupt callers. Requires unsafe mode plus archive permission; returns target-validated metadata with isArchived=true."
+            : "Restore one archived workflow without activating its triggers. workflowId must identify the archived workflow itself, not a name or version ID. Use this to reverse n8n_workflows_archive; call activate separately only if triggers should resume. Current active state is not inferred. Requires unsafe mode plus unarchive permission; returns target-validated metadata with isArchived=false.",
         operation: "unsafe",
         outputDataDescription: action === "archive"
             ? "Target-bound workflow metadata with required id and isArchived=true; optional name, type, active state, versionId, and timestamps are included when supplied by n8n, while all other fields are omitted."
@@ -1018,7 +1018,7 @@ export const workflowTools = Object.freeze([
     defineTool({
         name: "n8n_workflows_diff",
         title: "Compare workflow versions",
-        description: "Compare one retained workflow version with another or current state without returning changed values. Use it for review; use n8n_workflows_get_version when raw historical structure is needed. Omitting toVersionId selects current, while ignoreLayout=true suppresses position-only changes; selectors must differ. Requires workflow/history read permission; returns coverage, counts, and a byte-bounded prefix of up to 200 changes.",
+        description: "Compare two states of one workflow without returning changed values. workflowId selects the workflow; fromVersionId is the retained baseline, and toVersionId is a different retained target. Omit toVersionId to compare with current state. ignoreLayout=true hides position-only changes. Use n8n_workflows_get_version for raw history. Requires workflow/history read permission; returns coverage, counts, and a byte-bounded prefix of up to 200 changes.",
         operation: "read-only",
         outputDataDescription: "Value-free comparison with workflowId, from/to selectors, comparisonCoverage, summary counts, byte-budgeted changes (up to 200), truncated, and exact omittedDetails. Modified nodes name changed fields; parameterChanges expose only sanitized paths, presence, value types, changed=true, and exact truncation metadata, while credential changes expose only referenceChanged=true. Raw values and webhook identifiers are never returned.",
         input: {

package/dist/version.js

@@ -1 +1 @@
-export const PACKAGE_VERSION = "0.2.0";
+export const PACKAGE_VERSION = "0.2.1";

package/docs/compatibility.md

@@ -18,7 +18,7 @@ release evidence from the client-matrix gates that remain open.
 
 The package declares Node.js `>=22.0.0`. That engine range is an acceptance
 floor, not evidence that every later major has completed the release matrix.
-The supported release lines for v0.2.0 are Node.js 22 and 24.
+The supported release lines for v0.2.1 are Node.js 22 and 24.
 
 ## Upgrading from 0.1.x
 
@@ -36,7 +36,7 @@ update and rollback steps.
 
 ## n8n Community Edition
 
-The v0.2.0 floor candidate is n8n Community Edition 2.30.5, with 2.30.7 as the
+The v0.2.1 floor candidate is n8n Community Edition 2.30.5, with 2.30.7 as the
 current comparison target. The compiled public 44-tool candidate passed fresh,
 disposable lifecycles on both versions with synthetic fixtures, API-key
 revocation, resource cleanup, enforced candidate-process egress isolation, and
@@ -48,7 +48,7 @@ browser cookies, interactive `/rest` routes, paid project transfers, arbitrary
 workflow execution, or runtime node-catalog downloads.
 
 `n8n_credentials_list` is supported only from n8n 2.30.5 onward. Project
-selectors are intentionally absent because v0.2.0 does not present paid project
+selectors are intentionally absent because v0.2.1 does not present paid project
 capabilities as Community features. Other tools may also depend on endpoint
 availability and the permissions assigned to the API key; an HTTP 403 does not
 by itself mean the endpoint is absent.
@@ -87,7 +87,7 @@ surface.
 
 ## Deliberate exclusions
 
-v0.2.0 does not include:
+v0.2.1 does not include:
 
 - folders or data tables;
 - beta evaluation endpoints;

package/docs/security-model.md

@@ -1,6 +1,6 @@
 # Security model
 
-This document describes the controls and residual risks of the v0.2.0 source
+This document describes the controls and residual risks of the v0.2.1 source
 candidate. It is a threat model, not a claim that the software or the connected
 n8n instance is invulnerable.
 

package/docs/tools.md

@@ -431,19 +431,23 @@ Asks n8n to retry one eligible saved execution.
 
 ## n8n_executions_stop
 
-Stops one currently running execution.
+Stops one execution whose state is `new`, `unknown`, `waiting`, or `running`.
 
 - **Policy and endpoint:** unsafe; `POST /executions/{executionId}/stop`;
   `RO=false, D=true, I=false, OW=true`.
 - **Requirements:** Requires mode `unsafe` and API-key permission to stop the execution.
-- **Community Edition:** Verified on Community 2.30.5 and 2.30.7. Only currently stoppable executions succeed; completed external effects are not rolled back.
+- **Community Edition:** Verified on Community 2.30.5 and 2.30.7. Stoppable
+  states are `new`, `unknown`, `waiting`, and `running`; completed external
+  effects are not rolled back.
 - **Inputs:** required `executionId`.
 - **Returns:** the validated input ID, a `stopped` boolean derived from the
-  validated upstream `status`/`finished` body fields (n8n answers HTTP 200 even
-  for executions that already finished, so HTTP success alone never asserts a
-  stop), a `state` of `stopped`, `already_finished`, or `unknown`, passthrough
-  `finished` when present, and allowlisted upstream status/timestamp when
-  present. Identity never depends on the upstream body.
+  validated upstream `status`/`finished` body fields. Supported n8n versions
+  reject an already-terminal target. For any successful body, only `canceled`
+  maps to `stopped`; another terminal status maps defensively to
+  `already_finished`, and an unclear body maps to `unknown`. HTTP success alone
+  never asserts a stop. The tool also returns `finished` when present and
+  allowlisted upstream status/timestamp metadata. Identity never depends on the
+  upstream body.
 - **Failures and privacy:** a denied mode issues zero requests. n8n
   may reject a terminal, missing, or non-stoppable execution; stopping may leave
   external side effects already performed by earlier nodes.
@@ -771,10 +775,14 @@ Performs a short same-origin health check against the configured n8n instance.
 
 - **Policy and endpoint:** read-only; `GET /healthz` outside the Public API
   prefix with a 10-second timeout; `RO=true, D=false, I=true, OW=true`.
-- **Requirements:** Requires valid connected configuration because the shared HTTP boundary supplies the API key, even though `/healthz` itself is a root health route.
+- **Requirements:** Requires valid connected configuration because the shared
+  HTTP boundary supplies the API key, even though `/healthz` itself is a root
+  health route. A non-loopback plaintext HTTP URL also requires
+  `N8N_ALLOW_INSECURE_HTTP=1`.
 - **Community Edition:** Verified on Community 2.30.5 and 2.30.7. It proves HTTP reachability only, not workflow, queue, or credential health.
 - **Inputs:** none. Connected configuration still requires `N8N_API_URL` and
-  `N8N_API_KEY` because the shared client owns the request boundary.
+  `N8N_API_KEY` because the shared client owns the request boundary; the
+  plaintext-HTTP exception above remains explicit opt-in.
 - **Returns:** `ok: true` and the successful HTTP status.
 - **Failures and privacy:** invalid configuration, DNS/TLS/connectivity failure,
   redirect, timeout, oversize, or non-success status returns a fixed sanitized

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "n8n-mcp-community",
-  "version": "0.2.0",
+  "version": "0.2.1",
   "description": "A security-focused MCP server for self-hosted n8n Community Edition.",
   "private": false,
   "releaseState": "candidate",

package/server.json

@@ -8,13 +8,13 @@
     "url": "https://github.com/drzamarian/n8n-mcp-community",
     "source": "github"
   },
-  "version": "0.2.0",
+  "version": "0.2.1",
   "packages": [
     {
       "registryType": "npm",
       "registryBaseUrl": "https://registry.npmjs.org",
       "identifier": "n8n-mcp-community",
-      "version": "0.2.0",
+      "version": "0.2.1",
       "transport": {
         "type": "stdio"
       },