---
title: "n8n"
description: "Scoped credential management for n8n agents"
url: "https://gazebohq.com/agents/n8n"
---

n8n is a workflow automation platform that connects APIs, databases, and services through visual pipelines. A self-hosted instance is often a persistent operational component: it receives webhooks, runs scheduled jobs, transforms data, and makes outbound calls long after a workflow is published. Its execution environment, credential store, worker processes, and workflow definitions therefore deserve the same access design as any production service. Separate development from production, identify the owner and purpose of every enabled workflow, validate data before write nodes, and avoid making one administrator credential the default for every integration. A credential boundary should survive routine workflow changes and make it possible to contain one automation without taking down the rest.

## Why does n8n need IAM?

n8n workflows can run on schedules or event triggers without a person present. Broad credentials stored for convenience can give a small data-sync workflow access to unrelated repositories, payment data, or production databases. Inputs from webhooks, tickets, documents, and AI nodes also need careful treatment: validate and constrain them before they select records, construct requests, or cause a downstream write. Gazebo gives each workflow or bounded workflow group a profile for credential retrieval, logs those retrievals, and allows that profile to be revoked independently. It is not a substitute for securing the n8n host, encrypting and backing up its credential store, restricting editor access, using provider-side scopes, or reviewing execution logs. Used together, these controls reduce both the standing access and the time required to contain an unexpected run.

## How it works

1. Connect only the services required by the automation and provision provider credentials with an appropriate environment and scope: a specific database project, repository, queue, or service account rather than a personal administrator credential.
2. Create a named access profile per n8n workflow or tightly bounded workflow group. Include the workflow purpose and environment in its name, and keep experimental, staging, and production profiles distinct.
3. Configure the relevant n8n credential or retrieval node to use Gazebo's MCP endpoint. Keep bearer tokens and service secrets out of workflow notes, code nodes, exported JSON, and repositories that may be shared.
4. When the workflow requests a credential, Gazebo checks the profile and logs the workflow identity, service, and timestamp available to it. Keep n8n execution data and provider audit logging available as the companion record of what the workflow did after retrieval.
5. Review active profiles alongside workflow owners, schedules, webhook endpoints, and failed executions. Revoke a profile immediately to stop future credential retrieval for a suspect or retired workflow, then investigate the execution and provider activity before granting replacement access.

## Use cases

**Self-hosted n8n with enterprise-grade credential control:** Self-hosting lets you control where workflows run, but it also makes host hardening, editor permissions, backups, updates, and credential handling your responsibility. Use Gazebo profiles to separate what each automation may retrieve from the n8n instance's broader operational footprint. Keep an inventory of profiles and workflow owners so an auditor can trace a workflow's intended service access.

**Least-privilege workflow credentials:** A GitHub-to-Linear sync should have only the GitHub and Linear access it needs, ideally limited to the relevant repository and team. Give a database export its own read-only profile and require a separate, reviewed profile for any mutation or migration. This also makes it easier to see when a workflow's scope has expanded beyond its original business purpose.

**Incident response:** For an unexpected service event, first revoke the affected workflow profile to prevent further credential retrieval. Correlate Gazebo's timestamped retrieval record with n8n execution IDs, webhook payloads, node outputs, and the service provider's audit events. Preserve this evidence before editing the workflow, then restore only the minimum access needed after the root cause is understood.

**Review code nodes and AI paths:** Code nodes, HTTP request nodes, and AI-assisted transformations can change how a workflow uses data after its initial review. Restrict who may edit them, inspect changes before activation, and validate webhook or model output before it controls a database, ticket, or payment action. A workflow-specific profile ensures that even an unexpected path can retrieve only the service credentials deliberately assigned to that automation.

**Primary integrations:** stripe, github, linear, supabase