n8n AI Workflow Safety and Operations

Fact-check status

Reviewed claim by claim on 2026-09-02 against the primary or official sources identified inline as S1 and S2. Recommendations are design guidance unless a cited standard makes them normative.

Key jargon

Term	Plain-language meaning
Credential scope	The exact resources and operations an automation credential can access. S1
Expression	A runtime value or transformation evaluated within an n8n node. S1
Execution record	Stored state and output from a workflow run. S1
Error workflow	A separate workflow invoked to handle or report failures. S1

Key concepts

Treat imported workflows and community nodes as supply-chain inputs requiring review. S1
Restrict credentials per node purpose, validate expressions and inputs, configure error paths, and control stored execution data. S1

Concept map

flowchart LR
    A["Review workflow and nodes"] --> B["Bind least-privileged credentials"]
    B --> C["Execute with validation and error path"]
    C --> D["Inspect records and rotate secrets"]

Diagram semantics verified against S1 and S2 on 2026-09-02.

Checklist

Authenticate webhooks and prevent replay. S1
Store credentials in the supported credential store, not workflow JSON. S1
Restrict expression/code nodes and community packages. S1
Pin workflow versions and export reviewed backups without secrets. S1
Redact execution data and set retention. S1
Add retry limits, idempotency keys, timeout, and error workflow. S1
Separate read/propose from send/update/delete. S1
Require human approval for consequential effects. S1
Restrict network egress and destination allowlists where possible. S1
Test with synthetic credentials and data. S1

Exercise

Import a harmless three-node workflow in an isolated instance. Trigger twice with the same event ID and demonstrate duplicate suppression and an error path.

Source

n8n documentation