Back to Browse

FlowSentry MCP Server

by User
SecurityLow Risk8.2LocalRemoteNew
Free

Security scanning for AI agent workflows

About

FlowSentry scans n8n workflow exports and MCP server configurations for security risks: unauthenticated webhooks, hardcoded secrets, command injection via Execute Command nodes, prompt-injection-prone LLM nodes and 14 more rule checks. Every finding ships with severity, affected node, remediation guidance and an OWASP Agentic Top 10 mapping. The engine is the same one published as the open-source FlowSentry project and PyPI package.

Security Report

8.2
Low Risk8.2Low Risk

FlowSentry is a well-designed security scanner for n8n workflows with no malicious patterns, proper authentication model (reads local JSON files), and appropriate permissions for its purpose. The codebase is clean with zero dependencies and comprehensive rule coverage. Minor findings relate to code quality and the suspicious `requirements.txt` file containing an unknown package, but these do not materially impact security given the scanner's defensive-only nature.

5 files analyzed · 5 issues found

Security scores are indicators to help you make informed decisions, not guarantees. Always review permissions before connecting any MCP server.

Permissions Required

This plugin requests these system permissions. Most are normal for its category.

File System Read

Reads files on your machine. Normal for tools that analyze or process local data.

How to Install & Connect

Available as Local & Remote

This plugin can run on your machine or connect to a hosted endpoint. during install.

Getting Started

Once installed, try these example prompts and explore these capabilities:

  • 1Scan my n8n workflow JSON for security findings
  • 2Run a security scan on an MCP server config
  • 3Tool: scan_workflow: Scans one workflow export and returns findings with severity, remediation and OWASP mapping

Reviews

No reviews yet

Be the first to review this server!