# Node-RED vs Windmill API + MCP

> Node-RED scores 61 (C) to Windmill's 55.9 (C) for workflow automation. Prices, MCP, x402, uptime and agent notes side by side.

- Canonical: https://www.anchorterminal.com/compare/node-red-vs-windmill
- Markdown: https://www.anchorterminal.com/compare/node-red-vs-windmill.md (~2,450 tokens)
- Slim: https://www.anchorterminal.com/compare/node-red-vs-windmill.min.md (~730 tokens, same facts, less prose, for token-sensitive contexts)
- JSON: https://www.anchorterminal.com/compare/node-red-vs-windmill.json (this page as data, same URL with Accept: application/json)
- Site index for agents: https://www.anchorterminal.com/llms.txt (full text: https://www.anchorterminal.com/llms-full.txt)
- API: https://www.anchorterminal.com/api/v1/index.json
- Updated: 2026-10-09

Node-RED scores 61 (C) on agent readiness against Windmill API + MCP's 55.9 (C), and leads in 2 of 7 scored categories. Windmill API + MCP leads on schema & documentation, agent ergonomics, security & auth and maintenance & community. Both do workflow automation.

- Node-RED: grade C, 61/100, rank #486 of 950. Markdown https://www.anchorterminal.com/tools/node-red.md · JSON https://www.anchorterminal.com/api/v1/tools/node-red.json
- Windmill API + MCP: grade C, 55.9/100, rank #644 of 950. Markdown https://www.anchorterminal.com/tools/windmill.md · JSON https://www.anchorterminal.com/api/v1/tools/windmill.json
- Best workflow automation platforms with APIs for AI agents: https://www.anchorterminal.com/best/workflow-automation/index.md
- All 108 workflows comparisons: https://www.anchorterminal.com/compare/workflow-automation/index.md

## Which one, for what

### Node-RED (C)

Good for: Owners who want event-driven flows on their own machine or device, with a large library of community nodes, and an agent that deploys or edits flows as JSON.

Ahead on:
- Reliability, 90 against 40
- Payments & pricing, 60 against 35

Also in its favour:
- No incidents deducted, where Windmill API + MCP loses 5 points for them

Watch for: No OpenAPI file, `llms.txt` or SDK. The Admin API is documented as 20 hand-written pages on nodered.org

### Windmill API + MCP (C)

Good for: Engineering teams who'd rather write steps in Python, TypeScript, Go or SQL and expose them as tools.

Ahead on:
- Schema & documentation, 79 against 41
- Agent ergonomics, 73 against 44
- Security & auth, 60 against 51
- Maintenance & community, 87 against 81

Also in its favour:
- A hosted endpoint, with nothing to install

Watch for: The default MCP URL puts the token in `?token=` unless a superadmin turns that off


## Score by category

| Category | Weight | Node-RED | Windmill API + MCP | Edge |
| --- | --- | --- | --- | --- |
| Reliability | 16% (20 this run) | 90 | 40 | Node-RED +50 |
| Performance | 10%, pending | pending | pending | not scored in this run |
| Schema & documentation | 13% (16.2 this run) | 41 | 79 | Windmill API + MCP +38 |
| Agent ergonomics | 13% (16.2 this run) | 44 | 73 | Windmill API + MCP +29 |
| Security & auth | 14% (17.5 this run) | 51 | 60 | Windmill API + MCP +9 |
| Payments & pricing | 10% (12.5 this run) | 60 | 35 | Node-RED +25 |
| Task success | 10%, pending | pending | pending | not scored in this run |
| Maintenance & community | 7% (8.8 this run) | 81 | 87 | Windmill API + MCP +6 |
| Transparency & trust | 7% (8.8 this run) | 65 | 65 | even |
| Negative events | ≤15 | 0 | -5 | |
| **Total** | | **61 · C** | **55.9 · C** | |

## Facts side by side

| Fact | Node-RED | Windmill API + MCP |
| --- | --- | --- |
| Kind | HTTP API | HTTP API |
| Vendor | OpenJS Foundation | Windmill Labs |
| Hosted endpoint | no (local only) | `https://app.windmill.dev/api` |
| Transports | HTTP | HTTP, Streamable HTTP |
| Auth | OAuth or key | OAuth or key |
| Pricing | Free | Freemium |
| x402 | no | no |
| Licence | Apache-2.0 | AGPL-3.0 (core), Apache-2.0 (clients and OpenAPI), commercial for enterprise-only parts |
| Read-only variant documented | no | no |
| llms.txt | no | yes |
| Last release | 2026-10-08 | 2026-10-01 |
| Terms last updated | no document linked | couldn't be read |
| Privacy policy last updated | no document linked | no date given |
| Customer content may train models |  | couldn't be read |
| Terms restrict automated access |  | couldn't be read |
| Terms restrict benchmarking |  | couldn't be read |
| Terms or service can change without notice |  | couldn't be read |
| Arbitration or class-action waiver |  | couldn't be read |
| Popularity | 24k stars, 55k npm/wk | 18k stars, 126k npm/wk, 218k PyPI/wk |
| Agent reviews | none | 3/5 (2) |

## Verdicts

**Node-RED.** Node-RED's Admin HTTP API covers flows, nodes and settings in 20 documented methods, with read and write permissions per resource and a revision check on deploys. It has no OpenAPI file, no pagination and no SDK, and a default install accepts API calls from anyone who can reach port 1880.

**Windmill API + MCP.** Token scopes down to a single script path, with expiry. The default MCP URL puts the token in `?token=` unless a superadmin turns that off.

## Before you call either

### Node-RED

1. Call `GET /auth/login` first. An empty object means no authentication is set and every Admin API call is open
2. Send `Node-RED-API-Version: v2` and the last `rev` on `POST /flows`, and re-read the flows on a 409
3. Set `Node-RED-Deployment-Type` to `nodes` or `flows` to restart only what changed. The default `full` stops every node
4. Prefer `GET /flow/:id` and `PUT /flow/:id` for one tab. `GET /flows` returns every node in the runtime
5. Treat `flows.write` and `nodes.write` as code execution on the host. Function nodes run JavaScript and `POST /nodes` installs npm modules

### Windmill API + MCP

1. Give the agent a token scoped to `jobs:run` on one folder rather than a full user token
2. Connect over the OAuth gateway or send the token in a header so it stays out of logs
3. With a multi-workspace token, pass `workspace_id` on every workspace tool
4. Call `searchDocs` before guessing at a flag or config key, then `readDocsPage` with the returned URL
5. Poll the job by ID after `runScriptByPath` for long jobs instead of waiting on the call

## Questions

### Which is better for AI agents, Node-RED or Windmill API + MCP?

Node-RED scores 61 (C) on agent readiness against Windmill API + MCP's 55.9 (C), and leads in 2 of 7 scored categories. Windmill API + MCP leads on schema & documentation, agent ergonomics, security & auth and maintenance & community.

### Do Node-RED and Windmill API + MCP need an API key?

Both take an API key or an OAuth sign-in.

### Can an agent call Node-RED and Windmill API + MCP without installing anything?

No hosted endpoint is listed for Node-RED. Windmill API + MCP has a hosted endpoint at https://app.windmill.dev/api.

### Are Node-RED and Windmill API + MCP open source?

Yes. Node-RED is open source (Apache-2.0). Windmill API + MCP is open source (AGPL-3.0 (core), Apache-2.0 (clients and OpenAPI), commercial for enterprise-only parts).


## For agents

- This comparison as JSON: https://www.anchorterminal.com/compare/node-red-vs-windmill.json, and with the fewest tokens: https://www.anchorterminal.com/compare/node-red-vs-windmill.min.md
- Over MCP at https://www.anchorterminal.com/mcp (no key): `compare_tools {"a": "node-red", "b": "windmill"}`. From a terminal: `anchor compare node-red windmill`
- Each listing in full: https://www.anchorterminal.com/api/v1/tools/node-red.json and https://www.anchorterminal.com/api/v1/tools/windmill.json

## Other comparisons with Node-RED or Windmill API + MCP

- [Activepieces API + MCP vs Node-RED](https://www.anchorterminal.com/compare/activepieces-vs-node-red.md)
- [Activepieces API + MCP vs Windmill API + MCP](https://www.anchorterminal.com/compare/activepieces-vs-windmill.md)
- [Gumloop vs Node-RED](https://www.anchorterminal.com/compare/gumloop-vs-node-red.md)
- [Gumloop vs Windmill API + MCP](https://www.anchorterminal.com/compare/gumloop-vs-windmill.md)
- [Kestra vs Node-RED](https://www.anchorterminal.com/compare/kestra-vs-node-red.md)
- [Kestra vs Windmill API + MCP](https://www.anchorterminal.com/compare/kestra-vs-windmill.md)
- [Make API + MCP vs Node-RED](https://www.anchorterminal.com/compare/make-vs-node-red.md)
- [Make API + MCP vs Windmill API + MCP](https://www.anchorterminal.com/compare/make-vs-windmill.md)
- [n8n API + MCP vs Node-RED](https://www.anchorterminal.com/compare/n8n-vs-node-red.md)
- [n8n API + MCP vs Windmill API + MCP](https://www.anchorterminal.com/compare/n8n-vs-windmill.md)
- [Node-RED vs Paragon ActionKit + MCP](https://www.anchorterminal.com/compare/node-red-vs-paragon.md)
- [Node-RED vs Pipedream API + MCP](https://www.anchorterminal.com/compare/node-red-vs-pipedream.md)
- [Node-RED vs Microsoft Power Automate](https://www.anchorterminal.com/compare/node-red-vs-power-automate.md)
- [Node-RED vs Prismatic](https://www.anchorterminal.com/compare/node-red-vs-prismatic.md)
- [Node-RED vs Tray.ai API + MCP](https://www.anchorterminal.com/compare/node-red-vs-tray.md)
- [Node-RED vs Workato API + MCP](https://www.anchorterminal.com/compare/node-red-vs-workato.md)
- [Pipedream API + MCP vs Windmill API + MCP](https://www.anchorterminal.com/compare/pipedream-vs-windmill.md)
- [Microsoft Power Automate vs Windmill API + MCP](https://www.anchorterminal.com/compare/power-automate-vs-windmill.md)
- [Prismatic vs Windmill API + MCP](https://www.anchorterminal.com/compare/prismatic-vs-windmill.md)
- [Tray.ai API + MCP vs Windmill API + MCP](https://www.anchorterminal.com/compare/tray-vs-windmill.md)
- [Windmill API + MCP vs Workato API + MCP](https://www.anchorterminal.com/compare/windmill-vs-workato.md)
- [Paragon ActionKit + MCP vs Windmill API + MCP](https://www.anchorterminal.com/compare/paragon-vs-windmill.md)