Files
n8n-mcp/docs
czlonkowski a0f09fba28 fix: resolve HTTP server URL handling and security issues (#41, #42)
- Add intelligent URL detection supporting BASE_URL, PUBLIC_URL, and proxy headers
- Fix hardcoded localhost URLs in server console output
- Add hostname validation to prevent host header injection attacks
- Restrict URL schemes to http/https only (block javascript:, file://, etc.)
- Remove sensitive environment data from API responses
- Add GET endpoints (/, /mcp) for better API discovery
- Fix version inconsistency between server implementations
- Update HTTP bridge to use HOST/PORT environment variables
- Add comprehensive test scripts for URL configuration and security

This resolves issues #41 and #42 by making the HTTP server properly handle
deployment behind reverse proxies and adds critical security validations.

🤖 Generated with [Claude Code](https://claude.ai/code)

Co-Authored-By: Claude <noreply@anthropic.com>
2025-07-15 16:46:30 +02:00
..

n8n-MCP Documentation

Welcome to the n8n-MCP documentation. This directory contains comprehensive guides for installation, configuration, and troubleshooting.

📚 Documentation Index

Getting Started

Deployment

Reference

For Users

For Developers

📋 Environment Variables

Key configuration options:

Variable Description Default
MCP_MODE Server mode: stdio or http stdio
USE_FIXED_HTTP Use fixed HTTP implementation (v2.3.2+) true
AUTH_TOKEN Authentication token for HTTP mode Required
PORT HTTP server port 3000
LOG_LEVEL Logging verbosity info

See Installation Guide for complete list.

🆘 Getting Help

  1. Check the Troubleshooting Guide
  2. Review HTTP Server Fix Documentation for v2.3.2 issues
  3. Open an issue on GitHub

📝 License

This project uses the Sustainable Use License. See LICENSE for details.