n8n MCP Server: Shared Workflow Visibility Across Clientsn8n MCP Server: Shared Workflow Visibility Across Clients
The network for creativity
Join 1.25M professional creatives like you
Connect with clients, get discovered, and run your business 100% commission-free
Creatives on Contra have earned over $150M and we are just getting started
n8n MCP server: every client you connect sees every workflow you enable If you turn on n8n's instance-level MCP server, the workflows you enable aren't scoped per client. Claude Code, ChatGPT and anything else you connect all see the same list. That's in n8n's MCP server docs: https://docs.n8n.io/connect/connect-to-n8n-mcp-server You enable MCP once, then opt in each workflow. One exception: search_workflows previews every workflow your user can view, without the full data. I use n8n and I write my code in Claude Code. Here's how I'd connect the two without handing over the whole instance: 1. Expose small, single-purpose workflows, like "create draft invoice", never a generic HTTP runner. 2. Leave Auto-expose new workflows off. It's off by default. 3. Use OAuth, grant the narrowest access, and revoke clients you stopped using. 4. Put a human approval step inside any workflow that sends, pays or deletes. The MCP (Model Context Protocol) tools spec says a human SHOULD always be able to deny tool calls: https://modelcontextprotocol.io/specification/2026-07-28/server/tools The tradeoff: one connection serves every client, which is handy until one is a chat app you half trust. For tighter limits, an MCP Server Trigger node exposes tools from just one workflow. Do you give each AI client its own scoped MCP server, or share one?
Post image
Benjamin's avatar
TRUEFRAME logo
wait, every connected client sees the same list? thats a lot riding on one toggle
Huzaifa's avatar
Yes, enabled workflows are shared across connected clients on the instance-level server. That's why I'd expose only narrowly scoped workflows and use a separate trigger where you need a tighter boundary.
Shivansh's avatar
The docs separate shared workflow visibility from OAuth action permissions. Two clients connected as the same user can see the same enabled workflows, while one is allowed to read and the other to execute.
I'd verify that in staging with a harmless fixture: connect A without...

docs.n8n.io

Connect to n8n MCP server | Connect | n8n Docs

Connect, authenticate, and integrate MCP clients to build and execute n8n workflows programmatically

Huzaifa's avatar
That's a cleaner test than what I sketched, especially re-running from B's already-open session after revoking it. I'll log the n8n version next to the result so the check stays repeatable.
Back to feed
The network for creativity
Join 1.25M professional creatives like you
Connect with clients, get discovered, and run your business 100% commission-free
Creatives on Contra have earned over $150M and we are just getting started