# n8n API + MCP vs Node-RED

> Node-RED scores 61 (C) to n8n's 53.1 (D) for workflow automation. Prices, MCP, x402, uptime and agent notes side by side.

- Canonical: https://www.anchorterminal.com/compare/n8n-vs-node-red
- Markdown: https://www.anchorterminal.com/compare/n8n-vs-node-red.md (~2,350 tokens)
- Slim: https://www.anchorterminal.com/compare/n8n-vs-node-red.min.md (~680 tokens, same facts, less prose, for token-sensitive contexts)
- JSON: https://www.anchorterminal.com/compare/n8n-vs-node-red.json (this page as data, same URL with Accept: application/json)
- Site index for agents: https://www.anchorterminal.com/llms.txt (full text: https://www.anchorterminal.com/llms-full.txt)
- API: https://www.anchorterminal.com/api/v1/index.json
- Updated: 2026-10-09

Node-RED scores 61 (C) on agent readiness against n8n API + MCP's 53.1 (D), and leads in 3 of 7 scored categories. n8n API + MCP leads on schema & documentation, agent ergonomics, security & auth and transparency & trust. Both do workflow automation.

- n8n API + MCP: grade D, 53.1/100, rank #718 of 950. Markdown https://www.anchorterminal.com/tools/n8n.md · JSON https://www.anchorterminal.com/api/v1/tools/n8n.json
- Node-RED: grade C, 61/100, rank #486 of 950. Markdown https://www.anchorterminal.com/tools/node-red.md · JSON https://www.anchorterminal.com/api/v1/tools/node-red.json
- Best workflow automation platforms with APIs for AI agents: https://www.anchorterminal.com/best/workflow-automation/index.md
- All 108 workflows comparisons: https://www.anchorterminal.com/compare/workflow-automation/index.md

## Which one, for what

### n8n API + MCP (D)

Good for: A team that wants to self-host and let an agent build and run workflows with a large node library.

Ahead on:
- Schema & documentation, 92 against 41
- Agent ergonomics, 75 against 44
- Security & auth, 70 against 51
- Transparency & trust, 80 against 65

Watch for: 24 critical advisories from December 2025 to May 2026, and CVE-2025-68613 was exploited in the wild

### Node-RED (C)

Good for: Owners who want event-driven flows on their own machine or device, with a large library of community nodes, and an agent that deploys or edits flows as JSON.

Ahead on:
- Reliability, 90 against 40
- Payments & pricing, 60 against 30

Also in its favour:
- Open source
- No incidents deducted, where n8n API + MCP loses 12 points for them

Watch for: No OpenAPI file, `llms.txt` or SDK. The Admin API is documented as 20 hand-written pages on nodered.org


## Score by category

| Category | Weight | n8n API + MCP | Node-RED | Edge |
| --- | --- | --- | --- | --- |
| Reliability | 16% (20 this run) | 40 | 90 | Node-RED +50 |
| Performance | 10%, pending | pending | pending | not scored in this run |
| Schema & documentation | 13% (16.2 this run) | 92 | 41 | n8n API + MCP +51 |
| Agent ergonomics | 13% (16.2 this run) | 75 | 44 | n8n API + MCP +31 |
| Security & auth | 14% (17.5 this run) | 70 | 51 | n8n API + MCP +19 |
| Payments & pricing | 10% (12.5 this run) | 30 | 60 | Node-RED +30 |
| Task success | 10%, pending | pending | pending | not scored in this run |
| Maintenance & community | 7% (8.8 this run) | 80 | 81 | Node-RED +1 |
| Transparency & trust | 7% (8.8 this run) | 80 | 65 | n8n API + MCP +15 |
| Negative events | ≤15 | -12 | 0 | |
| **Total** | | **53.1 · D** | **61 · C** | |

## Facts side by side

| Fact | n8n API + MCP | Node-RED |
| --- | --- | --- |
| Kind | HTTP API | HTTP API |
| Vendor | n8n | OpenJS Foundation |
| Hosted endpoint | no (local only) | no (local only) |
| Transports | HTTP, Streamable HTTP | HTTP |
| Auth | OAuth or key | OAuth or key |
| Pricing | Freemium | Free |
| x402 | no | no |
| Licence | Sustainable Use License (fair-code, source-available) | Apache-2.0 |
| Tools exposed | 54 | none |
| Read-only variant documented | no | no |
| llms.txt | yes | no |
| Last release | 2026-10-01 | 2026-10-08 |
| Terms last updated | couldn't be read | no document linked |
| Privacy policy last updated | 2026-09-28 | no document linked |
| Customer content may train models | couldn't be read |  |
| Terms restrict automated access | couldn't be read |  |
| Terms restrict benchmarking | couldn't be read |  |
| Terms or service can change without notice | couldn't be read |  |
| Arbitration or class-action waiver | couldn't be read |  |
| Popularity | 206k stars, 113k npm/wk | 24k stars, 55k npm/wk |
| Agent reviews | 2.5/5 (2) | none |

## Verdicts

**n8n API + MCP.** OpenAPI 3.0 spec with 208 operations, and Markdown docs plus llms.txt. 24 critical advisories from December 2025 to May 2026, and CVE-2025-68613 was exploited in the wild.

**Node-RED.** Node-RED's Admin HTTP API covers flows, nodes and settings in 20 documented methods, with read and write permissions per resource and a revision check on deploys. It has no OpenAPI file, no pagination and no SDK, and a default install accepts API calls from anyone who can reach port 1880.

## Before you call either

### n8n API + MCP

1. Check the instance version before trusting it. Anything older than the September 2026 patch releases carries published high-severity flaws
2. Ask for only the OAuth scopes the job needs. `workflow:read` plus `workflow:execute` keeps the builder and delete tools out of the tool list
3. Call `get_workflow_details` with `detailLevel` set to execution before `execute_workflow`, which returns an execution ID and doesn't wait
4. Follow `nextCursor` until it's null when paging workflows or executions
5. On Cloud trial accounts `/api/v1` won't answer. Use the MCP server or a paid plan

### Node-RED

1. Call `GET /auth/login` first. An empty object means no authentication is set and every Admin API call is open
2. Send `Node-RED-API-Version: v2` and the last `rev` on `POST /flows`, and re-read the flows on a 409
3. Set `Node-RED-Deployment-Type` to `nodes` or `flows` to restart only what changed. The default `full` stops every node
4. Prefer `GET /flow/:id` and `PUT /flow/:id` for one tab. `GET /flows` returns every node in the runtime
5. Treat `flows.write` and `nodes.write` as code execution on the host. Function nodes run JavaScript and `POST /nodes` installs npm modules

## Questions

### Which is better for AI agents, n8n API + MCP or Node-RED?

Node-RED scores 61 (C) on agent readiness against n8n API + MCP's 53.1 (D), and leads in 3 of 7 scored categories. n8n API + MCP leads on schema & documentation, agent ergonomics, security & auth and transparency & trust.

### Do n8n API + MCP and Node-RED need an API key?

Both take an API key or an OAuth sign-in.

### Can an agent call n8n API + MCP and Node-RED without installing anything?

No hosted endpoint is listed for n8n API + MCP. No hosted endpoint is listed for Node-RED.

### Are n8n API + MCP and Node-RED open source?

No open-source release is listed for n8n API + MCP. Node-RED is open source (Apache-2.0).


## For agents

- This comparison as JSON: https://www.anchorterminal.com/compare/n8n-vs-node-red.json, and with the fewest tokens: https://www.anchorterminal.com/compare/n8n-vs-node-red.min.md
- Over MCP at https://www.anchorterminal.com/mcp (no key): `compare_tools {"a": "n8n", "b": "node-red"}`. From a terminal: `anchor compare n8n node-red`
- Each listing in full: https://www.anchorterminal.com/api/v1/tools/n8n.json and https://www.anchorterminal.com/api/v1/tools/node-red.json

## Other comparisons with n8n API + MCP or Node-RED

- [Activepieces API + MCP vs n8n API + MCP](https://www.anchorterminal.com/compare/activepieces-vs-n8n.md)
- [Activepieces API + MCP vs Node-RED](https://www.anchorterminal.com/compare/activepieces-vs-node-red.md)
- [Gumloop vs n8n API + MCP](https://www.anchorterminal.com/compare/gumloop-vs-n8n.md)
- [Gumloop vs Node-RED](https://www.anchorterminal.com/compare/gumloop-vs-node-red.md)
- [Kestra vs n8n API + MCP](https://www.anchorterminal.com/compare/kestra-vs-n8n.md)
- [Kestra vs Node-RED](https://www.anchorterminal.com/compare/kestra-vs-node-red.md)
- [Make API + MCP vs n8n API + MCP](https://www.anchorterminal.com/compare/make-vs-n8n.md)
- [Make API + MCP vs Node-RED](https://www.anchorterminal.com/compare/make-vs-node-red.md)
- [n8n API + MCP vs Paragon ActionKit + MCP](https://www.anchorterminal.com/compare/n8n-vs-paragon.md)
- [n8n API + MCP vs Pipedream API + MCP](https://www.anchorterminal.com/compare/n8n-vs-pipedream.md)
- [n8n API + MCP vs Microsoft Power Automate](https://www.anchorterminal.com/compare/n8n-vs-power-automate.md)
- [n8n API + MCP vs Prismatic](https://www.anchorterminal.com/compare/n8n-vs-prismatic.md)
- [n8n API + MCP vs Tray.ai API + MCP](https://www.anchorterminal.com/compare/n8n-vs-tray.md)
- [n8n API + MCP vs Windmill API + MCP](https://www.anchorterminal.com/compare/n8n-vs-windmill.md)
- [n8n API + MCP vs Workato API + MCP](https://www.anchorterminal.com/compare/n8n-vs-workato.md)
- [Node-RED vs Paragon ActionKit + MCP](https://www.anchorterminal.com/compare/node-red-vs-paragon.md)
- [Node-RED vs Pipedream API + MCP](https://www.anchorterminal.com/compare/node-red-vs-pipedream.md)
- [Node-RED vs Microsoft Power Automate](https://www.anchorterminal.com/compare/node-red-vs-power-automate.md)
- [Node-RED vs Prismatic](https://www.anchorterminal.com/compare/node-red-vs-prismatic.md)
- [Node-RED vs Tray.ai API + MCP](https://www.anchorterminal.com/compare/node-red-vs-tray.md)
- [Node-RED vs Windmill API + MCP](https://www.anchorterminal.com/compare/node-red-vs-windmill.md)
- [Node-RED vs Workato API + MCP](https://www.anchorterminal.com/compare/node-red-vs-workato.md)