Description

MCPBackend for n8n

Build workflows with the MCPBackend REST API. This community node sends ordinary HTTP resource requests and returns JSON responses. It does not connect to an MCP server or use JSON-RPC.

Installation

Install n8n-nodes-mcpbackend from Settings → Community nodes in your n8n instance. You can also install the npm package in a self-hosted n8n installation.

Authentication

Create the MCPBackend OAuth2 API credential, select Connect my account, sign in to MCPBackend, and approve the listed permissions. Credentials use dynamic registration, OAuth authorization code flow, PKCE, expiring access tokens, and refresh tokens. The API resource is https://mcpbackend.com/v1; REST tokens are separate from MCP tokens.

Upgrading from 1.x or 2.x: create a new MCPBackend OAuth2 API credential and reconnect it before running workflows. Version 3 uses the product REST resource at https://mcpbackend.com/v1 with its own OAuth audience. Tokens issued for the earlier resource cannot be reused. Inputs retain their names; review the resource JSON and write confirmations before enabling workflows.

Resources and operations

Choose a Resource, then an Operation. Only operations and input fields for that resource are shown. Resources: API Key, Project, Schema, Team Member, Webhook.

Requests

| Operation | HTTP request |
| —————— | —————————————————- |
| add_column | POST /v1/projects/:projectId/tables/:table/columns |
| addteammember | POST /v1/team |
| createapikey | POST /v1/projects/:projectId/keys |
| create_project | POST /v1/projects |
| create_table | POST /v1/projects/:projectId/tables |
| create_webhook | POST /v1/projects/:projectId/webhooks |
| get_project | GET /v1/projects/:projectId |
| getprojectapi | GET /v1/projects/:projectId/openapi.json |
| get_schema | GET /v1/projects/:projectId/schema |
| get_usage | GET /v1/projects/:projectId/usage |
| list_projects | GET /v1/projects |
| listteammembers | GET /v1/team |
| removeteammember | DELETE /v1/team/:memberId |
| setauthenabled | PUT /v1/projects/:projectId/auth |
| settablerls | PUT /v1/projects/:projectId/tables/:table/rls |
| updateteammember | PATCH /v1/team/:memberId |

Signed webhook trigger

The MCPBackend Trigger registers an event subscription when a workflow activates, checks the stored subscription on subsequent activations, and removes only that subscription when the workflow deactivates. It verifies the provider’s HMAC signature against the original request body, checks event freshness and resource ownership, and rejects unsigned or altered payloads. Signing secrets stay in the node’s workflow state and are never emitted as event data.

Use a public HTTPS n8n webhook URL. Select an owned project and its event types. Product plan and role requirements still apply. Testing a trigger temporarily registers its test URL; cleanup removes that subscription when n8n stops listening.

Workflow behavior

Each input item makes one API request and produces one linked output item. Optional pagination fields can be passed through the node’s options; list responses retain their next-page cursor or offset. Write operations require the node’s explicit confirmation switch. Failed requests stop the workflow unless Continue On Fail is enabled. HTTP errors are summarized without including credentials or raw request headers.

Requests use the fixed product API origin, encode resource identifiers, and do not follow redirects. Use a dedicated account for automation when you want separate access and data. Account ownership, workspace permissions, billing limits, and entitlement checks are enforced by the product API.

Development and support

Run npm ci, npm run lint, and npm test to build and validate the package with the n8n node CLI. Source and release automation: mcpbackend/n8n-nodes-mcpbackend. Report node issues in GitHub Issues.

Product: MCPBackend · Privacy · Agent skill

MIT license.

REST API contract

The request origin and OAuth resource are the product API shown above. GET reads a resource, POST creates or requests an explicitly confirmed action, PATCH updates, and DELETE removes the selected owned resource. The node does not forward requests to a protocol server. Authentication, permissions and ownership are enforced before the API executes an operation.

Release checks (3.1.0)

Resource and Operation definitions are explicit in the TypeScript node source. This minor update preserves API endpoints, credential types and operation identifiers. Every publication must pass Prettier, the official n8n node CLI linter with zero warnings, the runtime tests, and the n8n community package scanner against both TypeScript source and compiled JavaScript. GitHub Actions runs these checks before publishing with npm provenance.

Run npm ci --ignore-scripts, npm test, and npm run review before proposing a release.