czlonkowski/n8n-skills

"owner": {     "name": "Romuald Członkowski",     "url": "https://aiadvisors.pl/en"

"name": "Romuald Członkowski",     "url": "https://aiadvisors.pl/en"   },

"url": "https://aiadvisors.pl/en"

"author": {         "name": "Romuald Członkowski",         "url": "https://aiadvisors.pl/en"

"name": "Romuald Członkowski",         "url": "https://aiadvisors.pl/en"       },

"url": "https://aiadvisors.pl/en"

"skills"       ],       "homepage": "https://github.com/czlonkowski/n8n-skills",

],       "homepage": "https://github.com/czlonkowski/n8n-skills",       "repository": "https://github.com/czlonkowski/n8n-skills",

"homepage": "https://github.com/czlonkowski/n8n-skills",

"repository": "https://github.com/czlonkowski/n8n-skills",

"author": {     "name": "Romuald Członkowski",     "url": "https://aiadvisors.pl/en"

"name": "Romuald Członkowski",     "url": "https://aiadvisors.pl/en"   },

"url": "https://aiadvisors.pl/en"

"python"   ],   "repository": "https://github.com/czlonkowski/n8n-skills",

],   "repository": "https://github.com/czlonkowski/n8n-skills",   "homepage": "https://github.com/czlonkowski/n8n-skills"

"repository": "https://github.com/czlonkowski/n8n-skills",

"homepage": "https://github.com/czlonkowski/n8n-skills"

#!/usr/bin/env bash

# Portions of this file are adapted from the n8n-io/skills plugin # (https://github.com/n8n-io/skills), licensed under Apache License 2.0.

# (https://github.com/n8n-io/skills), licensed under Apache License 2.0.

#!/usr/bin/env bash

# Portions of this file are adapted from the n8n-io/skills plugin # (https://github.com/n8n-io/skills), licensed under Apache License 2.0.

# (https://github.com/n8n-io/skills), licensed under Apache License 2.0.

#!/usr/bin/env bash

# Portions of this file are adapted from the n8n-io/skills plugin # (https://github.com/n8n-io/skills), licensed under Apache License 2.0.

# (https://github.com/n8n-io/skills), licensed under Apache License 2.0.

#!/usr/bin/env bash

# Portions of this file are adapted from the n8n-io/skills plugin # (https://github.com/n8n-io/skills), licensed under Apache License 2.0.

# (https://github.com/n8n-io/skills), licensed under Apache License 2.0.

#!/usr/bin/env bash

# Portions of this file are adapted from the n8n-io/skills plugin # (https://github.com/n8n-io/skills), licensed under Apache License 2.0.

# (https://github.com/n8n-io/skills), licensed under Apache License 2.0.

#!/usr/bin/env bash

# Portions of this file are adapted from the n8n-io/skills plugin # (https://github.com/n8n-io/skills), licensed under Apache License 2.0.

# (https://github.com/n8n-io/skills), licensed under Apache License 2.0.

#!/usr/bin/env bash

# Portions of this file are adapted from the n8n-io/skills plugin # (https://github.com/n8n-io/skills), licensed under Apache License 2.0.

# (https://github.com/n8n-io/skills), licensed under Apache License 2.0.

#!/usr/bin/env bash

# Portions of this file are adapted from the n8n-io/skills plugin # (https://github.com/n8n-io/skills), licensed under Apache License 2.0.

# (https://github.com/n8n-io/skills), licensed under Apache License 2.0.

#!/usr/bin/env bash

# Portions of this file are adapted from the n8n-io/skills plugin # (https://github.com/n8n-io/skills), licensed under Apache License 2.0.

# (https://github.com/n8n-io/skills), licensed under Apache License 2.0.

rm -f "${STATE_DIR}/${SESSION_ID}-"*.loaded 2>/dev/null || true

"hasOutputParser": true,         "options": {           "systemMessage": "=You are a concise, direct assistant. Be a thinking partner, not an answer machine.\n\nCurrent date: {{ $now.format('DDDD') }}\n\n## Output\nYou are replying in Slack

"options": {           "systemMessage": "=You are a concise, direct assistant. Be a thinking partner, not an answer machine.\n\nCurrent date: {{ $now.format('DDDD') }}\n\n## Output\nYou are replying in Slack using Block Kit. Your entire res

"systemMessage": "=You are a concise, direct assistant. Be a thinking partner, not an answer machine.\n\nCurrent date: {{ $now.format('DDDD') }}\n\n## Output\nYou are replying in Slack using Block Kit. Your entire response must be valid JSO

[Credential-related source omitted]

{ "imageUrl": "https://...", "imageKey": "abc123.png" }

[Credential-related source omitted]

It carries **JSON only** — it cannot carry binary (no base64, no file bytes), even through a non-AI binding. For binary, pass a storage key as a string and have the tool re-fetch (→ **n8n-binary-and-data**).

"ok": true,   "key": "sess12-9f3c1a.png",   "url": "https://storage.example.com/files/sess12-9f3c1a.png",

"ok": true,   "key": "sess12-9f3c1a.png",   "url": "https://storage.example.com/files/sess12-9f3c1a.png",

"key": "sess12-9f3c1a.png",   "url": "https://storage.example.com/files/sess12-9f3c1a.png",   "mimeType": "image/png",

"key": "sess12-9f3c1a.png",   "url": "https://storage.example.com/files/sess12-9f3c1a.png",   "mimeType": "image/png",

"url": "https://storage.example.com/files/sess12-9f3c1a.png",

"url": "https://storage.example.com/files/sess12-9f3c1a.png",

<img src="https://cdn.example.com/img/abc123.png">

<img src="https://cdn.example.com/img/abc123.png">

binaryPropertyName: data    ↓ [Set: { imageUrl: "https://pub-<id>.r2.dev/<key>" }]

binaryPropertyName: data    ↓ [Set: { imageUrl: "https://pub-<id>.r2.dev/<key>" }]

↓ [Set: { imageUrl: "https://pub-<id>.r2.dev/<key>" }]    ↓

↓ [Set: { imageUrl: "https://pub-<id>.r2.dev/<key>" }]    ↓

[Set: { imageUrl: "https://pub-<id>.r2.dev/<key>" }]

[Set: { imageUrl: "https://pub-<id>.r2.dev/<key>" }]

Authoritative facts in this skill come from: - [n8n binary data docs](https://docs.n8n.io/data/binary-data/) — the `$binary` slot, property names, storage

Authoritative facts in this skill come from: - [n8n binary data docs](https://docs.n8n.io/data/binary-data/) — the `$binary` slot, property names, storage

- [n8n binary data docs](https://docs.n8n.io/data/binary-data/) — the `$binary` slot, property names, storage

- [n8n binary data docs](https://docs.n8n.io/data/binary-data/) — the `$binary` slot, property names, storage

- [n8n Code node docs](https://docs.n8n.io/code/builtin/) — `getBinaryDataBuffer` and the helpers surface

- [n8n Code node docs](https://docs.n8n.io/code/builtin/) — `getBinaryDataBuffer` and the helpers surface

- [n8n Merge node docs](https://docs.n8n.io/integrations/builtin/core-nodes/n8n-nodes-base.merge/) — `combineByPosition` semantics

- [n8n Merge node docs](https://docs.n8n.io/integrations/builtin/core-nodes/n8n-nodes-base.merge/) — `combineByPosition` semantics

- [n8n AI Agent / LangChain nodes docs](https://docs.n8n.io/advanced-ai/) — the agent ↔ tool JSON boundary and `passthroughBinaryImages`

- [n8n AI Agent / LangChain nodes docs](https://docs.n8n.io/advanced-ai/) — the agent ↔ tool JSON boundary and `passthroughBinaryImages`

1. The tool sub-workflow generates the binary, uploads it to storage, and returns JSON like `{ "ok": true, "key": "...", "url": "https://...", "mimeType": "image/png" }`.

1. The tool sub-workflow generates the binary, uploads it to storage, and returns JSON like `{ "ok": true, "key": "...", "url": "https://...", "mimeType": "image/png" }`.

const response = await this.helpers.httpRequest({   method: 'GET',   url: 'https://api.example.com/users'

const response = await this.helpers.httpRequest({   method: 'GET',   url: 'https://api.example.com/users'

method: 'GET',   url: 'https://api.example.com/users' });

method: 'GET',   url: 'https://api.example.com/users' });

url: 'https://api.example.com/users'

url: 'https://api.example.com/users'

const response = await this.helpers.httpRequest({   method: 'POST',  // GET, POST, PUT, DELETE, PATCH, HEAD, OPTIONS   url: 'https://api.example.com/users',

const response = await this.helpers.httpRequest({   method: 'POST',  // GET, POST, PUT, DELETE, PATCH, HEAD, OPTIONS   url: 'https://api.example.com/users',

method: 'POST',  // GET, POST, PUT, DELETE, PATCH, HEAD, OPTIONS   url: 'https://api.example.com/users',   headers: {

method: 'POST',  // GET, POST, PUT, DELETE, PATCH, HEAD, OPTIONS   url: 'https://api.example.com/users',   headers: {

url: 'https://api.example.com/users',

url: 'https://api.example.com/users',

const users = await this.helpers.httpRequest({   method: 'GET',   url: 'https://api.example.com/users'

const users = await this.helpers.httpRequest({   method: 'GET',   url: 'https://api.example.com/users'

method: 'GET',   url: 'https://api.example.com/users' });

method: 'GET',   url: 'https://api.example.com/users' });

url: 'https://api.example.com/users'

url: 'https://api.example.com/users'

const results = await this.helpers.httpRequest({   method: 'GET',   url: 'https://api.example.com/search',

const results = await this.helpers.httpRequest({   method: 'GET',   url: 'https://api.example.com/search',

method: 'GET',   url: 'https://api.example.com/search',   qs: {

method: 'GET',   url: 'https://api.example.com/search',   qs: {

url: 'https://api.example.com/search',

url: 'https://api.example.com/search',

const newUser = await this.helpers.httpRequest({   method: 'POST',   url: 'https://api.example.com/users',

const newUser = await this.helpers.httpRequest({   method: 'POST',   url: 'https://api.example.com/users',

method: 'POST',   url: 'https://api.example.com/users',   headers: {

method: 'POST',   url: 'https://api.example.com/users',   headers: {

url: 'https://api.example.com/users',

url: 'https://api.example.com/users',

const updated = await this.helpers.httpRequest({   method: 'PATCH',   url: `https://api.example.com/users/${userId}`,

const updated = await this.helpers.httpRequest({   method: 'PATCH',   url: `https://api.example.com/users/${userId}`,

method: 'PATCH',   url: `https://api.example.com/users/${userId}`,   body: {

method: 'PATCH',   url: `https://api.example.com/users/${userId}`,   body: {

url: `https://api.example.com/users/${userId}`,

url: `https://api.example.com/users/${userId}`,

await this.helpers.httpRequest({   method: 'DELETE',   url: `https://api.example.com/users/${userId}`,

await this.helpers.httpRequest({   method: 'DELETE',   url: `https://api.example.com/users/${userId}`,

method: 'DELETE',   url: `https://api.example.com/users/${userId}`,   headers: {

method: 'DELETE',   url: `https://api.example.com/users/${userId}`,   headers: {

url: `https://api.example.com/users/${userId}`,

url: `https://api.example.com/users/${userId}`,

// Bearer Token (token came from a previous node, not $env) const response = await this.helpers.httpRequest({   url: 'https://api.example.com/data',

// Bearer Token (token came from a previous node, not $env) const response = await this.helpers.httpRequest({   url: 'https://api.example.com/data',

const response = await this.helpers.httpRequest({   url: 'https://api.example.com/data',   headers: {

const response = await this.helpers.httpRequest({   url: 'https://api.example.com/data',   headers: {

url: 'https://api.example.com/data',

url: 'https://api.example.com/data',

// API Key in Header (key came from a previous node, not $env) const response = await this.helpers.httpRequest({   url: 'https://api.example.com/data',

// API Key in Header (key came from a previous node, not $env) const response = await this.helpers.httpRequest({   url: 'https://api.example.com/data',

const response = await this.helpers.httpRequest({   url: 'https://api.example.com/data',   headers: {

const response = await this.helpers.httpRequest({   url: 'https://api.example.com/data',   headers: {

url: 'https://api.example.com/data',

url: 'https://api.example.com/data',

const response = await this.helpers.httpRequest({   url: 'https://api.example.com/data',

const response = await this.helpers.httpRequest({   url: 'https://api.example.com/data',

url: 'https://api.example.com/data',

url: 'https://api.example.com/data',

const response = await this.helpers.httpRequest({     method: 'GET',     url: 'https://api.example.com/users',

const response = await this.helpers.httpRequest({     method: 'GET',     url: 'https://api.example.com/users',

method: 'GET',     url: 'https://api.example.com/users',     simple: false  // Don't throw on 4xx/5xx

method: 'GET',     url: 'https://api.example.com/users',     simple: false  // Don't throw on 4xx/5xx

url: 'https://api.example.com/users',

url: 'https://api.example.com/users',

// Get full response including headers and status const response = await this.helpers.httpRequest({   url: 'https://api.example.com/data',

// Get full response including headers and status const response = await this.helpers.httpRequest({   url: 'https://api.example.com/data',

const response = await this.helpers.httpRequest({   url: 'https://api.example.com/data',   resolveWithFullResponse: true

const response = await this.helpers.httpRequest({   url: 'https://api.example.com/data',   resolveWithFullResponse: true

url: 'https://api.example.com/data',

url: 'https://api.example.com/data',

// Parse URL const url = new URL('https://example.com/path?param1=value1&param2=value2');

// Parse URL const url = new URL('https://example.com/path?param1=value1&param2=value2');

const url = new URL('https://example.com/path?param1=value1&param2=value2');

const url = new URL('https://example.com/path?param1=value1&param2=value2');

try {   const response = await this.helpers.httpRequest({     url: 'https://api.example.com/data'

try {   const response = await this.helpers.httpRequest({     url: 'https://api.example.com/data'

const response = await this.helpers.httpRequest({     url: 'https://api.example.com/data'   });

const response = await this.helpers.httpRequest({     url: 'https://api.example.com/data'   });

url: 'https://api.example.com/data'

url: 'https://api.example.com/data'

const response = await this.helpers.httpRequest({   method: 'GET',   url: `https://api.example.com/users/${userId}/details`

const response = await this.helpers.httpRequest({   method: 'GET',   url: `https://api.example.com/users/${userId}/details`

method: 'GET',   url: `https://api.example.com/users/${userId}/details` });

method: 'GET',   url: `https://api.example.com/users/${userId}/details` });

url: `https://api.example.com/users/${userId}/details`

url: `https://api.example.com/users/${userId}/details`

[Credential-related source omitted]

[Credential-related source omitted]

[Credential-related source omitted]

[Credential-related source omitted]

// Parent Code node — prepare payloads, then delegate return $input.all().map(i => ({ json: {   url: 'https://api.example.com/things',

// Parent Code node — prepare payloads, then delegate return $input.all().map(i => ({ json: {   url: 'https://api.example.com/things',

return $input.all().map(i => ({ json: {   url: 'https://api.example.com/things',   method: 'POST',

return $input.all().map(i => ({ json: {   url: 'https://api.example.com/things',   method: 'POST',

url: 'https://api.example.com/things',

url: 'https://api.example.com/things',

[Credential-related source omitted]

[Credential-related source omitted]

const data = await this.helpers.httpRequest({   url: 'https://api.example.com/data',

const data = await this.helpers.httpRequest({   url: 'https://api.example.com/data',

url: 'https://api.example.com/data',

url: 'https://api.example.com/data',

[Credential-related source omitted]

[Credential-related source omitted]

[Credential-related source omitted]

[Credential-related source omitted]

- **n8n Code Node Guide**: https://docs.n8n.io/code/code-node/

- **n8n Code Node Guide**: https://docs.n8n.io/code/code-node/

- **Built-in Methods Reference**: https://docs.n8n.io/code-examples/methods-variables-reference/

- **Built-in Methods Reference**: https://docs.n8n.io/code-examples/methods-variables-reference/

- **Luxon Documentation**: https://moment.github.io/luxon/

- **Luxon Documentation**: https://moment.github.io/luxon/

Conceived by Romuald Członkowski - [aiadvisors.pl/en](https://aiadvisors.pl/en)

Conceived by Romuald Członkowski - [aiadvisors.pl/en](https://aiadvisors.pl/en)

// HTTP requests (no auth — see sandbox note below) const res = await this.helpers.httpRequest({ method: 'GET', url: 'https://api.example.com/data' });

// HTTP requests (no auth — see sandbox note below) const res = await this.helpers.httpRequest({ method: 'GET', url: 'https://api.example.com/data' });

const res = await this.helpers.httpRequest({ method: 'GET', url: 'https://api.example.com/data' });

const res = await this.helpers.httpRequest({ method: 'GET', url: 'https://api.example.com/data' });

### n8n Documentation - Code Node Guide: https://docs.n8n.io/code/code-node/

### n8n Documentation - Code Node Guide: https://docs.n8n.io/code/code-node/

- Code Node Guide: https://docs.n8n.io/code/code-node/

- Code Node Guide: https://docs.n8n.io/code/code-node/

- Built-in Methods: https://docs.n8n.io/code-examples/methods-variables-reference/

- Built-in Methods: https://docs.n8n.io/code-examples/methods-variables-reference/

- Luxon Documentation: https://moment.github.io/luxon/

- Luxon Documentation: https://moment.github.io/luxon/

**Conceived by Romuald Członkowski** - Website: [aiadvisors.pl/en](https://aiadvisors.pl/en)

**Conceived by Romuald Członkowski** - Website: [aiadvisors.pl/en](https://aiadvisors.pl/en)

- Website: [aiadvisors.pl/en](https://aiadvisors.pl/en)

- Website: [aiadvisors.pl/en](https://aiadvisors.pl/en)

- Part of [n8n-mcp project](https://github.com/czlonkowski/n8n-mcp)

- Part of [n8n-mcp project](https://github.com/czlonkowski/n8n-mcp)

Authoritative facts in this skill come from: - [ToolCode source](https://github.com/n8n-io/n8n/blob/master/packages/%40n8n/nodes-langchain/nodes/tools/ToolCode/ToolCode.node.ts) — sandbox contract, `query` binding, return handling

Authoritative facts in this skill come from: - [ToolCode source](https://github.com/n8n-io/n8n/blob/master/packages/%40n8n/nodes-langchain/nodes/tools/ToolCode/ToolCode.node.ts) — sandbox contract, `query` binding, return handling

- [ToolCode source](https://github.com/n8n-io/n8n/blob/master/packages/%40n8n/nodes-langchain/nodes/tools/ToolCode/ToolCode.node.ts) — sandbox contract, `query` binding, return handling

- [ToolCode source](https://github.com/n8n-io/n8n/blob/master/packages/%40n8n/nodes-langchain/nodes/tools/ToolCode/ToolCode.node.ts) — sandbox contract, `query` binding, return handling

- [n8n Custom Code Tool docs](https://docs.n8n.io/integrations/builtin/cluster-nodes/sub-nodes/n8n-nodes-langchain.toolcode/)

- [n8n Custom Code Tool docs](https://docs.n8n.io/integrations/builtin/cluster-nodes/sub-nodes/n8n-nodes-langchain.toolcode/)

- [LangChain tool docs](https://js.langchain.com/docs/modules/agents/tools/) — `DynamicTool` / `DynamicStructuredTool` semantics

- [LangChain tool docs](https://js.langchain.com/docs/modules/agents/tools/) — `DynamicTool` / `DynamicStructuredTool` semantics

### Official sources - [n8n Custom Code Tool docs](https://docs.n8n.io/integrations/builtin/cluster-nodes/sub-nodes/n8n-nodes-langchain.toolcode/)

### Official sources - [n8n Custom Code Tool docs](https://docs.n8n.io/integrations/builtin/cluster-nodes/sub-nodes/n8n-nodes-langchain.toolcode/)

- [n8n Custom Code Tool docs](https://docs.n8n.io/integrations/builtin/cluster-nodes/sub-nodes/n8n-nodes-langchain.toolcode/)

- [n8n Custom Code Tool docs](https://docs.n8n.io/integrations/builtin/cluster-nodes/sub-nodes/n8n-nodes-langchain.toolcode/)

- [ToolCode source](https://github.com/n8n-io/n8n/blob/master/packages/%40n8n/nodes-langchain/nodes/tools/ToolCode/ToolCode.node.ts) — the sandbox contract

- [ToolCode source](https://github.com/n8n-io/n8n/blob/master/packages/%40n8n/nodes-langchain/nodes/tools/ToolCode/ToolCode.node.ts) — the sandbox contract

- [LangChain tool docs](https://js.langchain.com/docs/modules/agents/tools/) — DynamicTool / DynamicStructuredTool

- [LangChain tool docs](https://js.langchain.com/docs/modules/agents/tools/) — DynamicTool / DynamicStructuredTool

"execution": {     "id": "...",     "url": "https://your-n8n/workflow/<wfId>/executions/<execId>",

"execution": {     "id": "...",     "url": "https://your-n8n/workflow/<wfId>/executions/<execId>",

"id": "...",     "url": "https://your-n8n/workflow/<wfId>/executions/<execId>",     "retryOf": "...",

"id": "...",     "url": "https://your-n8n/workflow/<wfId>/executions/<execId>",     "retryOf": "...",

"url": "https://your-n8n/workflow/<wfId>/executions/<execId>",

"url": "https://your-n8n/workflow/<wfId>/executions/<execId>",

https://api.example.com/orders/{{$json.body.order_id}}

https://api.example.com/orders/{{$json.body.order_id}}

[Credential-related source omitted]

[Credential-related source omitted]

[Credential-related source omitted]

[Credential-related source omitted]

[Credential-related source omitted]

[Credential-related source omitted]

[Credential-related source omitted]

[Credential-related source omitted]

**Result**: `https://api.example.com/data?key=secret123`

**Result**: `https://api.example.com/data?key=secret123`

https://nominatim.openstreetmap.org/search?q={{$json.body.text}}&format=json

https://nominatim.openstreetmap.org/search?q={{$json.body.text}}&format=json

https://api.weather.gov/points/{{$node["OpenStreetMap"].json[0].lat}},{{$node["OpenStreetMap"].json[0].lon}}

https://api.weather.gov/points/{{$node["OpenStreetMap"].json[0].lat}},{{$node["OpenStreetMap"].json[0].lon}}

**Part of**: n8n-skills repository **Conceived by**: Romuald Członkowski - [aiadvisors.pl/en](https://aiadvisors.pl/en)

**Part of**: n8n-skills repository **Conceived by**: Romuald Członkowski - [aiadvisors.pl/en](https://aiadvisors.pl/en)

**Conceived by**: Romuald Członkowski - [aiadvisors.pl/en](https://aiadvisors.pl/en)

**Conceived by**: Romuald Członkowski - [aiadvisors.pl/en](https://aiadvisors.pl/en)

[Credential-related source omitted]

[Credential-related source omitted]

// In URLs https://api.example.com/users/{{$json.body.user_id}}

// In URLs https://api.example.com/users/{{$json.body.user_id}}

https://api.example.com/users/{{$json.body.user_id}}

https://api.example.com/users/{{$json.body.user_id}}

[Credential-related source omitted]

[Credential-related source omitted]

[Credential-related source omitted]

[Credential-related source omitted]

**Part of**: n8n-skills repository **Conceived by**: Romuald Członkowski - [aiadvisors.pl/en](https://aiadvisors.pl/en)

**Part of**: n8n-skills repository **Conceived by**: Romuald Członkowski - [aiadvisors.pl/en](https://aiadvisors.pl/en)

**Conceived by**: Romuald Członkowski - [aiadvisors.pl/en](https://aiadvisors.pl/en)

**Conceived by**: Romuald Członkowski - [aiadvisors.pl/en](https://aiadvisors.pl/en)

validate_node({   nodeType: "nodes-base.httpRequest",   config: {method: "POST", url: "https://api.example.com"},

validate_node({   nodeType: "nodes-base.httpRequest",   config: {method: "POST", url: "https://api.example.com"},

nodeType: "nodes-base.httpRequest",   config: {method: "POST", url: "https://api.example.com"},   profile: "runtime"

nodeType: "nodes-base.httpRequest",   config: {method: "POST", url: "https://api.example.com"},   profile: "runtime"

config: {method: "POST", url: "https://api.example.com"},

config: {method: "POST", url: "https://api.example.com"},

[Credential-related source omitted]

[Credential-related source omitted]

[Credential-related source omitted]

[Credential-related source omitted]

[Credential-related source omitted]

[Credential-related source omitted]

[Credential-related source omitted]

[Credential-related source omitted]

[Credential-related source omitted]

[Credential-related source omitted]

[Credential-related source omitted]

[Credential-related source omitted]

[Credential-related source omitted]

[Credential-related source omitted]

[Credential-related source omitted]

[Credential-related source omitted]

[Credential-related source omitted]

[Credential-related source omitted]

[Credential-related source omitted]

[Credential-related source omitted]

[Credential-related source omitted]

[Credential-related source omitted]

[Credential-related source omitted]

[Credential-related source omitted]

{   "method": "GET",   "url": "https://api.example.com/v1/contacts",

{   "method": "GET",   "url": "https://api.example.com/v1/contacts",

"method": "GET",   "url": "https://api.example.com/v1/contacts",   "sendQuery": true,

"method": "GET",   "url": "https://api.example.com/v1/contacts",   "sendQuery": true,

"url": "https://api.example.com/v1/contacts",

"url": "https://api.example.com/v1/contacts",

"notes": "Why HTTP: no native node for this internal API",   "notesInFlow": true,   "parameters": { "url": "https://config.internal/api/v1/settings" }

"notes": "Why HTTP: no native node for this internal API",   "notesInFlow": true,   "parameters": { "url": "https://config.internal/api/v1/settings" }

"notesInFlow": true,   "parameters": { "url": "https://config.internal/api/v1/settings" } }

"notesInFlow": true,   "parameters": { "url": "https://config.internal/api/v1/settings" } }

"parameters": { "url": "https://config.internal/api/v1/settings" }

"parameters": { "url": "https://config.internal/api/v1/settings" }

{   "method": "GET",   "url": "https://api.example.com/users",

{   "method": "GET",   "url": "https://api.example.com/users",

"method": "GET",   "url": "https://api.example.com/users",   "authentication": "none"

"method": "GET",   "url": "https://api.example.com/users",   "authentication": "none"

"url": "https://api.example.com/users",

"url": "https://api.example.com/users",

{   "method": "GET",   "url": "https://api.example.com/users",

{   "method": "GET",   "url": "https://api.example.com/users",

"method": "GET",   "url": "https://api.example.com/users",   "authentication": "none",

"method": "GET",   "url": "https://api.example.com/users",   "authentication": "none",

"url": "https://api.example.com/users",

"url": "https://api.example.com/users",

{   "method": "GET",   "url": "https://api.example.com/users",

{   "method": "GET",   "url": "https://api.example.com/users",

"method": "GET",   "url": "https://api.example.com/users",   "authentication": "predefinedCredentialType",

"method": "GET",   "url": "https://api.example.com/users",   "authentication": "predefinedCredentialType",

"url": "https://api.example.com/users",

"url": "https://api.example.com/users",

{   "method": "POST",   "url": "https://api.example.com/users",

{   "method": "POST",   "url": "https://api.example.com/users",

"method": "POST",   "url": "https://api.example.com/users",   "authentication": "none",

"method": "POST",   "url": "https://api.example.com/users",   "authentication": "none",

"url": "https://api.example.com/users",

"url": "https://api.example.com/users",

{   "method": "POST",   "url": "https://api.example.com/users",

{   "method": "POST",   "url": "https://api.example.com/users",

"method": "POST",   "url": "https://api.example.com/users",   "authentication": "none",

"method": "POST",   "url": "https://api.example.com/users",   "authentication": "none",

"url": "https://api.example.com/users",

"url": "https://api.example.com/users",

{   "method": "PUT",  // or "PATCH"   "url": "https://api.example.com/users/123",

{   "method": "PUT",  // or "PATCH"   "url": "https://api.example.com/users/123",

"method": "PUT",  // or "PATCH"   "url": "https://api.example.com/users/123",   "authentication": "none",

"method": "PUT",  // or "PATCH"   "url": "https://api.example.com/users/123",   "authentication": "none",

"url": "https://api.example.com/users/123",

"url": "https://api.example.com/users/123",

{   "method": "DELETE",   "url": "https://api.example.com/users/123",

{   "method": "DELETE",   "url": "https://api.example.com/users/123",

"method": "DELETE",   "url": "https://api.example.com/users/123",   "authentication": "none"

"method": "DELETE",   "url": "https://api.example.com/users/123",   "authentication": "none"

"url": "https://api.example.com/users/123",

"url": "https://api.example.com/users/123",

{   "method": "DELETE",   "url": "https://api.example.com/users",

{   "method": "DELETE",   "url": "https://api.example.com/users",

"method": "DELETE",   "url": "https://api.example.com/users",   "authentication": "none",

"method": "DELETE",   "url": "https://api.example.com/users",   "authentication": "none",

"url": "https://api.example.com/users",

"url": "https://api.example.com/users",

{   "method": "POST",   "url": "https://api.example.com/create",

{   "method": "POST",   "url": "https://api.example.com/create",

"method": "POST",   "url": "https://api.example.com/create",   "authentication": "none"

"method": "POST",   "url": "https://api.example.com/create",   "authentication": "none"

"url": "https://api.example.com/create",

"url": "https://api.example.com/create",

{   "method": "POST",   "url": "https://api.example.com/create",

{   "method": "POST",   "url": "https://api.example.com/create",

"method": "POST",   "url": "https://api.example.com/create",   "authentication": "none",

"method": "POST",   "url": "https://api.example.com/create",   "authentication": "none",

"url": "https://api.example.com/create",

"url": "https://api.example.com/create",

{   "method": "POST",   "url": "https://api.example.com/create",

{   "method": "POST",   "url": "https://api.example.com/create",

"method": "POST",   "url": "https://api.example.com/create",   "authentication": "none",

"method": "POST",   "url": "https://api.example.com/create",   "authentication": "none",

"url": "https://api.example.com/create",

"url": "https://api.example.com/create",

{   "method": "GET",   "url": "https://api.example.com/users",

{   "method": "GET",   "url": "https://api.example.com/users",

"method": "GET",   "url": "https://api.example.com/users",   "authentication": "predefinedCredentialType",

"method": "GET",   "url": "https://api.example.com/users",   "authentication": "predefinedCredentialType",

"url": "https://api.example.com/users",

"url": "https://api.example.com/users",

{   "method": "POST",   "url": "https://api.example.com/users",

{   "method": "POST",   "url": "https://api.example.com/users",

"method": "POST",   "url": "https://api.example.com/users",   "authentication": "none",

"method": "POST",   "url": "https://api.example.com/users",   "authentication": "none",

"url": "https://api.example.com/users",

"url": "https://api.example.com/users",

{   "method": "POST",   "url": "https://api.example.com/create"

{   "method": "POST",   "url": "https://api.example.com/create"

"method": "POST",   "url": "https://api.example.com/create" }

"method": "POST",   "url": "https://api.example.com/create" }

"url": "https://api.example.com/create"

"url": "https://api.example.com/create"

{   "method": "POST",   "url": "https://api.example.com/create",

{   "method": "POST",   "url": "https://api.example.com/create",

"method": "POST",   "url": "https://api.example.com/create",   "sendBody": true,

"method": "POST",   "url": "https://api.example.com/create",   "sendBody": true,

"url": "https://api.example.com/create",

"url": "https://api.example.com/create",

Conceived by Romuald Członkowski - [aiadvisors.pl/en](https://aiadvisors.pl/en)

Conceived by Romuald Członkowski - [aiadvisors.pl/en](https://aiadvisors.pl/en)

{   "method": "GET",   "url": "https://api.example.com"

{   "method": "GET",   "url": "https://api.example.com"

"method": "GET",   "url": "https://api.example.com"   // sendBody not shown (GET doesn't have body)

"method": "GET",   "url": "https://api.example.com"   // sendBody not shown (GET doesn't have body)

"url": "https://api.example.com"

"url": "https://api.example.com"

{   "method": "POST",   "url": "https://api.example.com",

{   "method": "POST",   "url": "https://api.example.com",

"method": "POST",   "url": "https://api.example.com",   "sendBody": true,       // Now visible!

"method": "POST",   "url": "https://api.example.com",   "sendBody": true,       // Now visible!

"url": "https://api.example.com",

"url": "https://api.example.com",

[Credential-related source omitted]

[Credential-related source omitted]

Docs: <https://docs.n8n.io/administer/manage-credentials/credential-overwrites>

Docs: <https://docs.n8n.io/administer/manage-credentials/credential-overwrites>

[Credential-related source omitted]

[Credential-related source omitted]

[Credential-related source omitted]

[Credential-related source omitted]

[Credential-related source omitted]

[Credential-related source omitted]

[Credential-related source omitted]

[Credential-related source omitted]

[Credential-related source omitted]

[Credential-related source omitted]

[Credential-related source omitted]

[Credential-related source omitted]

just majors. For instances a business depends on, docs recommend trying the update on a   staging copy first. Official update guide:   <https://docs.n8n.io/deploy/host-n8n/keep-n8n-running/update-n8n>.

just majors. For instances a business depends on, docs recommend trying the update on a   staging copy first. Official update guide:   <https://docs.n8n.io/deploy/host-n8n/keep-n8n-running/update-n8n>.

<https://docs.n8n.io/deploy/host-n8n/keep-n8n-running/update-n8n>.

<https://docs.n8n.io/deploy/host-n8n/keep-n8n-running/update-n8n>.

[Credential-related source omitted]

[Credential-related source omitted]

[Credential-related source omitted]

[Credential-related source omitted]

[Credential-related source omitted]

[Credential-related source omitted]

`N8N_ENCRYPTION_KEY` to re-import; `--decrypted` writes **plaintext secrets** — treat such a file as a live credential dump. CLI reference: <https://docs.n8n.io/deploy/host-n8n/configure-n8n/use-the-command-line>.

`N8N_ENCRYPTION_KEY` to re-import; `--decrypted` writes **plaintext secrets** — treat such a file as a live credential dump. CLI reference: <https://docs.n8n.io/deploy/host-n8n/configure-n8n/use-the-command-line>.

<https://docs.n8n.io/deploy/host-n8n/configure-n8n/use-the-command-line>.

<https://docs.n8n.io/deploy/host-n8n/configure-n8n/use-the-command-line>.

[Credential-related source omitted]

[Credential-related source omitted]

- **Log tuning** — `N8N_LOG_LEVEL` (`info` default; `debug` when diagnosing) and   `N8N_LOG_OUTPUT=console` fit Docker; file output + rotation vars exist:   <https://docs.n8n.io/deploy/host-n8n/keep-n8n-running/set-up-logging>.

- **Log tuning** — `N8N_LOG_LEVEL` (`info` default; `debug` when diagnosing) and   `N8N_LOG_OUTPUT=console` fit Docker; file output + rotation vars exist:   <https://docs.n8n.io/deploy/host-n8n/keep-n8n-running/set-up-logging>.

`N8N_LOG_OUTPUT=console` fit Docker; file output + rotation vars exist:   <https://docs.n8n.io/deploy/host-n8n/keep-n8n-running/set-up-logging>. - **Prometheus** — `N8N_METRICS=true` exposes `/metrics` **unauthenticated**; since Caddy proxi

`N8N_LOG_OUTPUT=console` fit Docker; file output + rotation vars exist:   <https://docs.n8n.io/deploy/host-n8n/keep-n8n-running/set-up-logging>. - **Prometheus** — `N8N_METRICS=true` exposes `/metrics` **unauthenticated**; since Caddy proxi

<https://docs.n8n.io/deploy/host-n8n/keep-n8n-running/set-up-logging>.

<https://docs.n8n.io/deploy/host-n8n/keep-n8n-running/set-up-logging>.

- **Prometheus** — `N8N_METRICS=true` exposes `/metrics` **unauthenticated**; since Caddy proxies   everything, that would be public — keep it off, or block `/metrics` in the Caddyfile first:   <https://docs.n8n.io/deploy/host-n8n/configure

- **Prometheus** — `N8N_METRICS=true` exposes `/metrics` **unauthenticated**; since Caddy proxies   everything, that would be public — keep it off, or block `/metrics` in the Caddyfile first:   <https://docs.n8n.io/deploy/host-n8n/configure

everything, that would be public — keep it off, or block `/metrics` in the Caddyfile first:   <https://docs.n8n.io/deploy/host-n8n/configure-n8n/basic-configuration/configuration-examples/enable-prometheus-metrics>. - **Health/monitoring en

everything, that would be public — keep it off, or block `/metrics` in the Caddyfile first:   <https://docs.n8n.io/deploy/host-n8n/configure-n8n/basic-configuration/configuration-examples/enable-prometheus-metrics>. - **Health/monitoring en

<https://docs.n8n.io/deploy/host-n8n/configure-n8n/basic-configuration/configuration-examples/enable-prometheus-metrics>.

<https://docs.n8n.io/deploy/host-n8n/configure-n8n/basic-configuration/configuration-examples/enable-prometheus-metrics>.

- **Health/monitoring endpoints** — `/healthz` (process up) vs `/healthz/readiness` (DB ready):   <https://docs.n8n.io/deploy/host-n8n/keep-n8n-running/monitor-n8n>. - **Periodic security audit** — `docker compose exec -u node n8n n8n audit

- **Health/monitoring endpoints** — `/healthz` (process up) vs `/healthz/readiness` (DB ready):   <https://docs.n8n.io/deploy/host-n8n/keep-n8n-running/monitor-n8n>. - **Periodic security audit** — `docker compose exec -u node n8n n8n audit

<https://docs.n8n.io/deploy/host-n8n/keep-n8n-running/monitor-n8n>.

<https://docs.n8n.io/deploy/host-n8n/keep-n8n-running/monitor-n8n>.

- **Periodic security audit** — `docker compose exec -u node n8n n8n audit` (or the   `n8n_audit_instance` MCP tool from the n8n-mcp pack):   <https://docs.n8n.io/deploy/host-n8n/configure-n8n/security/run-security-audits>.

- **Periodic security audit** — `docker compose exec -u node n8n n8n audit` (or the   `n8n_audit_instance` MCP tool from the n8n-mcp pack):   <https://docs.n8n.io/deploy/host-n8n/configure-n8n/security/run-security-audits>.

<https://docs.n8n.io/deploy/host-n8n/configure-n8n/security/run-security-audits>.

<https://docs.n8n.io/deploy/host-n8n/configure-n8n/security/run-security-audits>.

mandatory** — don't deploy queue mode without it. `init-data.sh` creates the non-root DB user n8n connects as, separate from the Postgres superuser. Official guide: <https://docs.n8n.io/deploy/host-n8n/configure-n8n/scaling/enable-queue-mod

mandatory** — don't deploy queue mode without it. `init-data.sh` creates the non-root DB user n8n connects as, separate from the Postgres superuser. Official guide: <https://docs.n8n.io/deploy/host-n8n/configure-n8n/scaling/enable-queue-mod

<https://docs.n8n.io/deploy/host-n8n/configure-n8n/scaling/enable-queue-mode>.

<https://docs.n8n.io/deploy/host-n8n/configure-n8n/scaling/enable-queue-mode>.

- `QUEUE_BULL_REDIS_HOST=redis`, `QUEUE_BULL_REDIS_PORT=6379` (Redis auth/TLS/cluster vars   exist for external Redis; `QUEUE_BULL_REDIS_USERNAME` needs Redis ≥ 6 — full list:   <https://docs.n8n.io/deploy/host-n8n/configure-n8n/basic-confi

- `QUEUE_BULL_REDIS_HOST=redis`, `QUEUE_BULL_REDIS_PORT=6379` (Redis auth/TLS/cluster vars   exist for external Redis; `QUEUE_BULL_REDIS_USERNAME` needs Redis ≥ 6 — full list:   <https://docs.n8n.io/deploy/host-n8n/configure-n8n/basic-confi

exist for external Redis; `QUEUE_BULL_REDIS_USERNAME` needs Redis ≥ 6 — full list:   <https://docs.n8n.io/deploy/host-n8n/configure-n8n/basic-configuration/use-environment-variables/queue-mode>) - `QUEUE_HEALTH_CHECK_ACTIVE=true` (workers e

exist for external Redis; `QUEUE_BULL_REDIS_USERNAME` needs Redis ≥ 6 — full list:   <https://docs.n8n.io/deploy/host-n8n/configure-n8n/basic-configuration/use-environment-variables/queue-mode>) - `QUEUE_HEALTH_CHECK_ACTIVE=true` (workers e

<https://docs.n8n.io/deploy/host-n8n/configure-n8n/basic-configuration/use-environment-variables/queue-mode>)

<https://docs.n8n.io/deploy/host-n8n/configure-n8n/basic-configuration/use-environment-variables/queue-mode>)

CLI runs bypass it — and in queue mode a value other than `-1` **supersedes the worker   `--concurrency` flag**. Details:   <https://docs.n8n.io/deploy/host-n8n/configure-n8n/scaling/control-concurrency>.

CLI runs bypass it — and in queue mode a value other than `-1` **supersedes the worker   `--concurrency` flag**. Details:   <https://docs.n8n.io/deploy/host-n8n/configure-n8n/scaling/control-concurrency>.

<https://docs.n8n.io/deploy/host-n8n/configure-n8n/scaling/control-concurrency>.

<https://docs.n8n.io/deploy/host-n8n/configure-n8n/scaling/control-concurrency>.

shared volume — workers wouldn't reliably resolve each other's files. The template sets   `N8N_DEFAULT_BINARY_DATA_MODE=database`: binary data lives in Postgres, visible to main and   every worker. Doc: <https://docs.n8n.io/deploy/host-n8n/

shared volume — workers wouldn't reliably resolve each other's files. The template sets   `N8N_DEFAULT_BINARY_DATA_MODE=database`: binary data lives in Postgres, visible to main and   every worker. Doc: <https://docs.n8n.io/deploy/host-n8n/

`N8N_DEFAULT_BINARY_DATA_MODE=database`: binary data lives in Postgres, visible to main and   every worker. Doc: <https://docs.n8n.io/deploy/host-n8n/configure-n8n/scaling/handle-binary-data>. - `database` mode makes execution **pruning** l

`N8N_DEFAULT_BINARY_DATA_MODE=database`: binary data lives in Postgres, visible to main and   every worker. Doc: <https://docs.n8n.io/deploy/host-n8n/configure-n8n/scaling/handle-binary-data>. - `database` mode makes execution **pruning** l

every worker. Doc: <https://docs.n8n.io/deploy/host-n8n/configure-n8n/scaling/handle-binary-data>.

every worker. Doc: <https://docs.n8n.io/deploy/host-n8n/configure-n8n/scaling/handle-binary-data>.

`N8N_EXTERNAL_STORAGE_S3_*` vars, and an S3 **lifecycle policy is mandatory** (in s3 mode n8n   delegates binary pruning to the bucket instead of doing it itself). Doc:   <https://docs.n8n.io/deploy/host-n8n/configure-n8n/scaling/use-extern

`N8N_EXTERNAL_STORAGE_S3_*` vars, and an S3 **lifecycle policy is mandatory** (in s3 mode n8n   delegates binary pruning to the bucket instead of doing it itself). Doc:   <https://docs.n8n.io/deploy/host-n8n/configure-n8n/scaling/use-extern

<https://docs.n8n.io/deploy/host-n8n/configure-n8n/scaling/use-external-storage>.

<https://docs.n8n.io/deploy/host-n8n/configure-n8n/scaling/use-external-storage>.

responsive. Set `N8N_DISABLE_PRODUCTION_MAIN_PROCESS=true` on the main so it stays out of the webhook pool. Most deployments don't need this — add it only when webhook intake is the bottleneck. Doc: <https://docs.n8n.io/deploy/host-n8n/conf

responsive. Set `N8N_DISABLE_PRODUCTION_MAIN_PROCESS=true` on the main so it stays out of the webhook pool. Most deployments don't need this — add it only when webhook intake is the bottleneck. Doc: <https://docs.n8n.io/deploy/host-n8n/conf

bottleneck. Doc: <https://docs.n8n.io/deploy/host-n8n/configure-n8n/scaling/enable-queue-mode>.

bottleneck. Doc: <https://docs.n8n.io/deploy/host-n8n/configure-n8n/scaling/enable-queue-mode>.

sizing tables. For OOM crashes the docs' first advice is to redesign the workflow (batches, sub-workflows, less Code node), then raise the heap via `NODE_OPTIONS=--max-old-space-size`: <https://docs.n8n.io/deploy/host-n8n/configure-n8n/scal

sizing tables. For OOM crashes the docs' first advice is to redesign the workflow (batches, sub-workflows, less Code node), then raise the heap via `NODE_OPTIONS=--max-old-space-size`: <https://docs.n8n.io/deploy/host-n8n/configure-n8n/scal

sub-workflows, less Code node), then raise the heap via `NODE_OPTIONS=--max-old-space-size`: <https://docs.n8n.io/deploy/host-n8n/configure-n8n/scaling/fix-memory-issues>. Confirm the box is sized before deploying.

sub-workflows, less Code node), then raise the heap via `NODE_OPTIONS=--max-old-space-size`: <https://docs.n8n.io/deploy/host-n8n/configure-n8n/scaling/fix-memory-issues>. Confirm the box is sized before deploying.

<https://docs.n8n.io/deploy/host-n8n/configure-n8n/scaling/fix-memory-issues>. Confirm the box

<https://docs.n8n.io/deploy/host-n8n/configure-n8n/scaling/fix-memory-issues>. Confirm the box

docker compose ps     # postgres & redis healthy, then n8n (main) + workers Up docker compose logs caddy | grep -i 'certificate obtained' curl -fsS --retry 5 --retry-delay 10 https://<fqdn>/healthz

docker compose ps     # postgres & redis healthy, then n8n (main) + workers Up docker compose logs caddy | grep -i 'certificate obtained' curl -fsS --retry 5 --retry-delay 10 https://<fqdn>/healthz

docker compose logs caddy | grep -i 'certificate obtained' curl -fsS --retry 5 --retry-delay 10 https://<fqdn>/healthz docker compose logs n8n-worker | grep -iE 'ready|listening|jobs'   # worker is up + listening

docker compose logs caddy | grep -i 'certificate obtained' curl -fsS --retry 5 --retry-delay 10 https://<fqdn>/healthz docker compose logs n8n-worker | grep -iE 'ready|listening|jobs'   # worker is up + listening

curl -fsS --retry 5 --retry-delay 10 https://<fqdn>/healthz

curl -fsS --retry 5 --retry-delay 10 https://<fqdn>/healthz

allowlists via the launcher config, and upgrading n8n and the runners together. Previously 1.1.0 — realigned with the restructured official hosting docs ([docs.n8n.io/deploy/host-n8n](https://docs.n8n.io/deploy/host-n8n)): queue-mode binary

allowlists via the launcher config, and upgrading n8n and the runners together. Previously 1.1.0 — realigned with the restructured official hosting docs ([docs.n8n.io/deploy/host-n8n](https://docs.n8n.io/deploy/host-n8n)): queue-mode binary

Previously 1.1.0 — realigned with the restructured official hosting docs ([docs.n8n.io/deploy/host-n8n](https://docs.n8n.io/deploy/host-n8n)): queue-mode binary data moved to `database` mode (filesystem is unsupported in queue mode), SSRF p

Previously 1.1.0 — realigned with the restructured official hosting docs ([docs.n8n.io/deploy/host-n8n](https://docs.n8n.io/deploy/host-n8n)): queue-mode binary data moved to `database` mode (filesystem is unsupported in queue mode), SSRF p

([docs.n8n.io/deploy/host-n8n](https://docs.n8n.io/deploy/host-n8n)): queue-mode binary data

([docs.n8n.io/deploy/host-n8n](https://docs.n8n.io/deploy/host-n8n)): queue-mode binary data

[Credential-related source omitted]

[Credential-related source omitted]

[Credential-related source omitted]

[Credential-related source omitted]

[Credential-related source omitted]

[Credential-related source omitted]

above. Real rotation is a formal, one-way feature (UI: Settings → Data Encryption Keys, behind   the `N8N_ENV_FEAT_ENCRYPTION_KEY_ROTATION` flag; full DB backup required first; records   re-encrypt lazily): <https://docs.n8n.io/deploy/host-

above. Real rotation is a formal, one-way feature (UI: Settings → Data Encryption Keys, behind   the `N8N_ENV_FEAT_ENCRYPTION_KEY_ROTATION` flag; full DB backup required first; records   re-encrypt lazily): <https://docs.n8n.io/deploy/host-

re-encrypt lazily): <https://docs.n8n.io/deploy/host-n8n/configure-n8n/security/rotate-encryption-keys>.

re-encrypt lazily): <https://docs.n8n.io/deploy/host-n8n/configure-n8n/security/rotate-encryption-keys>.

| `N8N_ENCRYPTION_KEY` set explicitly | ✓ | Key lives in your secret store, not just a volume | | `N8N_SECURE_COOKIE=true` + `N8N_PROXY_HOPS=1` + `N8N_PROTOCOL=https` | ✓ | Login cookie only over HTTPS; n8n trusts Caddy's `X-Forwarded-*`. (

| `N8N_ENCRYPTION_KEY` set explicitly | ✓ | Key lives in your secret store, not just a volume | | `N8N_SECURE_COOKIE=true` + `N8N_PROXY_HOPS=1` + `N8N_PROTOCOL=https` | ✓ | Login cookie only over HTTPS; n8n trusts Caddy's `X-Forwarded-*`. (

| `N8N_SECURE_COOKIE=true` + `N8N_PROXY_HOPS=1` + `N8N_PROTOCOL=https` | ✓ | Login cookie only over HTTPS; n8n trusts Caddy's `X-Forwarded-*`. (Get these wrong and secure-cookie can lock you out.) | | `WEBHOOK_URL` / `N8N_EDITOR_BASE_URL` =

| `N8N_SECURE_COOKIE=true` + `N8N_PROXY_HOPS=1` + `N8N_PROTOCOL=https` | ✓ | Login cookie only over HTTPS; n8n trusts Caddy's `X-Forwarded-*`. (Get these wrong and secure-cookie can lock you out.) | | `WEBHOOK_URL` / `N8N_EDITOR_BASE_URL` =

| `WEBHOOK_URL` / `N8N_EDITOR_BASE_URL` = the public HTTPS URL | ✓ | Otherwise n8n hands out `http://localhost:5678/...` webhook & OAuth-callback URLs |

| `WEBHOOK_URL` / `N8N_EDITOR_BASE_URL` = the public HTTPS URL | ✓ | Otherwise n8n hands out `http://localhost:5678/...` webhook & OAuth-callback URLs |

| `N8N_DIAGNOSTICS_ENABLED=false` | ✓ | Turns off anonymous telemetry (side effect: also disables the Code node's "Ask AI"). For full outbound isolation (update pings, template fetches) see <https://docs.n8n.io/deploy/host-n8n/configure-n8n

| `N8N_DIAGNOSTICS_ENABLED=false` | ✓ | Turns off anonymous telemetry (side effect: also disables the Code node's "Ask AI"). For full outbound isolation (update pings, template fetches) see <https://docs.n8n.io/deploy/host-n8n/configure-n8n

| Internal ports never published (5678/5432/6379) | ✓ | Only Caddy is internet-facing | | `N8N_ENFORCE_SETTINGS_FILE_PERMISSIONS=true` | optional | Forces `0600` on the settings file in `~/.n8n` (default `false`) | | `N8N_RUNNERS_ENABLED=tr

| Internal ports never published (5678/5432/6379) | ✓ | Only Caddy is internet-facing | | `N8N_ENFORCE_SETTINGS_FILE_PERMISSIONS=true` | optional | Forces `0600` on the settings file in `~/.n8n` (default `false`) | | `N8N_RUNNERS_ENABLED=tr

| `N8N_ENFORCE_SETTINGS_FILE_PERMISSIONS=true` | optional | Forces `0600` on the settings file in `~/.n8n` (default `false`) | | `N8N_RUNNERS_ENABLED=true` | ✓ | Moves Code-node execution into a task runner (no-op on n8n ≥ 2.0, where runner

| `N8N_ENFORCE_SETTINGS_FILE_PERMISSIONS=true` | optional | Forces `0600` on the settings file in `~/.n8n` (default `false`) | | `N8N_RUNNERS_ENABLED=true` | ✓ | Moves Code-node execution into a task runner (no-op on n8n ≥ 2.0, where runner

| `N8N_RUNNERS_ENABLED=true` | ✓ | Moves Code-node execution into a task runner (no-op on n8n ≥ 2.0, where runners are always on). The default **internal** mode is a child process of n8n with the same user and access, which is not isolation

| `N8N_RUNNERS_ENABLED=true` | ✓ | Moves Code-node execution into a task runner (no-op on n8n ≥ 2.0, where runners are always on). The default **internal** mode is a child process of n8n with the same user and access, which is not isolation

| Code-node module allowlists left at defaults | ✓ | JS: `NODE_FUNCTION_ALLOW_BUILTIN` / `NODE_FUNCTION_ALLOW_EXTERNAL`. Python: `N8N_RUNNERS_STDLIB_ALLOW` / `N8N_RUNNERS_EXTERNAL_ALLOW`, empty by default, so even `import json` is rejected.

| Code-node module allowlists left at defaults | ✓ | JS: `NODE_FUNCTION_ALLOW_BUILTIN` / `NODE_FUNCTION_ALLOW_EXTERNAL`. Python: `N8N_RUNNERS_STDLIB_ALLOW` / `N8N_RUNNERS_EXTERNAL_ALLOW`, empty by default, so even `import json` is rejected.

| `N8N_SSRF_PROTECTION_ENABLED=true` | optional | Off by default (newer n8n only). Stops HTTP-type nodes from reaching loopback/private/link-local ranges — i.e. Docker-network neighbors like `postgres:5432` and cloud metadata IPs. Enable on

| `N8N_SSRF_PROTECTION_ENABLED=true` | optional | Off by default (newer n8n only). Stops HTTP-type nodes from reaching loopback/private/link-local ranges — i.e. Docker-network neighbors like `postgres:5432` and cloud metadata IPs. Enable on

| `NODES_EXCLUDE` | optional | Execute Command is already blocked by default (setting `NODES_EXCLUDE=[]` would *re-enable* it). To block more, JSON-array syntax: `NODES_EXCLUDE=["n8n-nodes-base.readWriteFile"]` — <https://docs.n8n.io/deploy

| `NODES_EXCLUDE` | optional | Execute Command is already blocked by default (setting `NODES_EXCLUDE=[]` would *re-enable* it). To block more, JSON-array syntax: `NODES_EXCLUDE=["n8n-nodes-base.readWriteFile"]` — <https://docs.n8n.io/deploy

| `N8N_PUBLIC_API_DISABLED=true` | optional | Turn the public REST API off if unused (commented in the single template); pair with `N8N_PUBLIC_API_SWAGGERUI_DISABLED=true` to also drop the API playground | | OS firewall: only 22/80/443 | ap

| `N8N_PUBLIC_API_DISABLED=true` | optional | Turn the public REST API off if unused (commented in the single template); pair with `N8N_PUBLIC_API_SWAGGERUI_DISABLED=true` to also drop the API playground | | OS firewall: only 22/80/443 | ap

| OS firewall: only 22/80/443 | apply in step 5 | `ufw allow OpenSSH && ufw allow 80 && ufw allow 443 && ufw enable` | | Owner account + 2FA | hand-off | Whoever completes the owner-setup form first claims the instance — do it before sharin

| OS firewall: only 22/80/443 | apply in step 5 | `ufw allow OpenSSH && ufw allow 80 && ufw allow 443 && ufw enable` | | Owner account + 2FA | hand-off | Whoever completes the owner-setup form first claims the instance — do it before sharin

| Owner account + 2FA | hand-off | Whoever completes the owner-setup form first claims the instance — do it before sharing the URL. Enable 2FA (per-user 2FA is free; org-wide *enforcement* via `N8N_MFA_ENFORCED_ENABLED` needs a paid plan). 

| Owner account + 2FA | hand-off | Whoever completes the owner-setup form first claims the instance — do it before sharing the URL. Enable 2FA (per-user 2FA is free; org-wide *enforcement* via `N8N_MFA_ENFORCED_ENABLED` needs a paid plan). 

| SMTP (`N8N_EMAIL_MODE=smtp` + `N8N_SMTP_*`) | multi-user | Without SMTP, invite links must be copied manually and users **cannot self-serve password resets**: <https://docs.n8n.io/deploy/host-n8n/configure-n8n/basic-configuration/use-envi

| SMTP (`N8N_EMAIL_MODE=smtp` + `N8N_SMTP_*`) | multi-user | Without SMTP, invite links must be copied manually and users **cannot self-serve password resets**: <https://docs.n8n.io/deploy/host-n8n/configure-n8n/basic-configuration/use-envi

[Credential-related source omitted]

[Credential-related source omitted]

These are the only two supported databases — MySQL/MariaDB support no longer exists, and Postgres is supported on "actively maintained versions" only: <https://docs.n8n.io/deploy/host-n8n/configure-n8n/choose-n8ns-database>.

These are the only two supported databases — MySQL/MariaDB support no longer exists, and Postgres is supported on "actively maintained versions" only: <https://docs.n8n.io/deploy/host-n8n/configure-n8n/choose-n8ns-database>.

<https://docs.n8n.io/deploy/host-n8n/configure-n8n/choose-n8ns-database>.

<https://docs.n8n.io/deploy/host-n8n/configure-n8n/choose-n8ns-database>.

but writes plaintext secrets to disk — avoid it unless that's explicitly wanted, and shred the file after.) Plan a short maintenance window. CLI reference: <https://docs.n8n.io/deploy/host-n8n/configure-n8n/use-the-command-line>.

but writes plaintext secrets to disk — avoid it unless that's explicitly wanted, and shred the file after.) Plan a short maintenance window. CLI reference: <https://docs.n8n.io/deploy/host-n8n/configure-n8n/use-the-command-line>.

<https://docs.n8n.io/deploy/host-n8n/configure-n8n/use-the-command-line>.

<https://docs.n8n.io/deploy/host-n8n/configure-n8n/use-the-command-line>.

docker compose ps                       # caddy + n8n Up docker compose exec n8n wget -qO- http://localhost:5678/healthz   # n8n itself up (internal)

docker compose ps                       # caddy + n8n Up docker compose exec n8n wget -qO- http://localhost:5678/healthz   # n8n itself up (internal)

docker compose exec n8n wget -qO- http://localhost:5678/healthz   # n8n itself up (internal)

docker compose exec n8n wget -qO- http://localhost:5678/healthz   # n8n itself up (internal)

curl -fsS --retry 5 --retry-delay 10 https://<fqdn>/healthz       # public; retry covers ACME delay

curl -fsS --retry 5 --retry-delay 10 https://<fqdn>/healthz       # public; retry covers ACME delay

This skill takes a **fresh Linux VM** (Ubuntu/Debian, root or sudo SSH) to a **running,

This skill takes a **fresh Linux VM** (Ubuntu/Debian, root or sudo SSH) to a **running,

- **SSH target** — `user@host` and how you authenticate (key path or the user confirms the agent already has access). Root or a sudo user.

- **SSH target** — `user@host` and how you authenticate (key path or the user confirms the agent already has access). Root or a sudo user.

### 1. Preflight (the cheapest failure is the one you catch here) - SSH in; confirm the OS is Debian/Ubuntu-like (`. /etc/os-release`). - **DNS must already point at the box.** Compare the box's public IP (`curl -s ifconfig.me`)

### 1. Preflight (the cheapest failure is the one you catch here) - SSH in; confirm the OS is Debian/Ubuntu-like (`. /etc/os-release`). - **DNS must already point at the box.** Compare the box's public IP (`curl -s ifconfig.me`)

- SSH in; confirm the OS is Debian/Ubuntu-like (`. /etc/os-release`). - **DNS must already point at the box.** Compare the box's public IP (`curl -s ifconfig.me`)   with `dig +short <fqdn>` (run it from the box AND ideally your laptop). If 

- SSH in; confirm the OS is Debian/Ubuntu-like (`. /etc/os-release`). - **DNS must already point at the box.** Compare the box's public IP (`curl -s ifconfig.me`)   with `dig +short <fqdn>` (run it from the box AND ideally your laptop). If 

- **DNS must already point at the box.** Compare the box's public IP (`curl -s ifconfig.me`)

- **DNS must already point at the box.** Compare the box's public IP (`curl -s ifconfig.me`)

[Credential-related source omitted]

[Credential-related source omitted]

[Credential-related source omitted]

[Credential-related source omitted]

### 7. Verify (don't declare success without this) - `docker compose ps` — every service `Up`/healthy (queue: postgres & redis `healthy` first). - **n8n itself up (internal):** `docker compose exec n8n wget -qO- http://localhost:5678/health

### 7. Verify (don't declare success without this) - `docker compose ps` — every service `Up`/healthy (queue: postgres & redis `healthy` first). - **n8n itself up (internal):** `docker compose exec n8n wget -qO- http://localhost:5678/health

- `docker compose ps` — every service `Up`/healthy (queue: postgres & redis `healthy` first). - **n8n itself up (internal):** `docker compose exec n8n wget -qO- http://localhost:5678/healthz`   → `{"status":"ok"}`. This separates "n8n is ru

- `docker compose ps` — every service `Up`/healthy (queue: postgres & redis `healthy` first). - **n8n itself up (internal):** `docker compose exec n8n wget -qO- http://localhost:5678/healthz`   → `{"status":"ok"}`. This separates "n8n is ru

- **n8n itself up (internal):** `docker compose exec n8n wget -qO- http://localhost:5678/healthz`

- **n8n itself up (internal):** `docker compose exec n8n wget -qO- http://localhost:5678/healthz`

→ `{"status":"ok"}`. This separates "n8n is running" from "TLS isn't ready yet." - **Cert issued:** `docker compose logs caddy | grep -i 'certificate obtained'`. First-boot ACME   can take a minute or two; until it finishes, a public `https

→ `{"status":"ok"}`. This separates "n8n is running" from "TLS isn't ready yet." - **Cert issued:** `docker compose logs caddy | grep -i 'certificate obtained'`. First-boot ACME   can take a minute or two; until it finishes, a public `https

- **Cert issued:** `docker compose logs caddy | grep -i 'certificate obtained'`. First-boot ACME   can take a minute or two; until it finishes, a public `https://` request fails TLS — that means   the cert is still pending, **not** that n8n

- **Cert issued:** `docker compose logs caddy | grep -i 'certificate obtained'`. First-boot ACME   can take a minute or two; until it finishes, a public `https://` request fails TLS — that means   the cert is still pending, **not** that n8n

can take a minute or two; until it finishes, a public `https://` request fails TLS — that means   the cert is still pending, **not** that n8n is down. - **Public reachability (with retry):** `curl -fsS --retry 5 --retry-delay 10 https://<fq

can take a minute or two; until it finishes, a public `https://` request fails TLS — that means   the cert is still pending, **not** that n8n is down. - **Public reachability (with retry):** `curl -fsS --retry 5 --retry-delay 10 https://<fq

the cert is still pending, **not** that n8n is down. - **Public reachability (with retry):** `curl -fsS --retry 5 --retry-delay 10 https://<fqdn>/healthz`   → `{"status":"ok"}`. (`/healthz` only proves the process is reachable; `/healthz/re

the cert is still pending, **not** that n8n is down. - **Public reachability (with retry):** `curl -fsS --retry 5 --retry-delay 10 https://<fqdn>/healthz`   → `{"status":"ok"}`. (`/healthz` only proves the process is reachable; `/healthz/re

- **Public reachability (with retry):** `curl -fsS --retry 5 --retry-delay 10 https://<fqdn>/healthz`

- **Public reachability (with retry):** `curl -fsS --retry 5 --retry-delay 10 https://<fqdn>/healthz`

Authoritative upstream reference: the official hosting docs live at <https://docs.n8n.io/deploy/host-n8n> (restructured mid-2026 from the old `/hosting/` paths —

Authoritative upstream reference: the official hosting docs live at <https://docs.n8n.io/deploy/host-n8n> (restructured mid-2026 from the old `/hosting/` paths —

<https://docs.n8n.io/deploy/host-n8n> (restructured mid-2026 from the old `/hosting/` paths —

<https://docs.n8n.io/deploy/host-n8n> (restructured mid-2026 from the old `/hosting/` paths —

prefer these URLs). The env-var reference index is at <https://docs.n8n.io/deploy/host-n8n/configure-n8n/basic-configuration/use-environment-variables>. When this skill and the live docs disagree, trust the docs and tell the user.

prefer these URLs). The env-var reference index is at <https://docs.n8n.io/deploy/host-n8n/configure-n8n/basic-configuration/use-environment-variables>. When this skill and the live docs disagree, trust the docs and tell the user.

<https://docs.n8n.io/deploy/host-n8n/configure-n8n/basic-configuration/use-environment-variables>.

<https://docs.n8n.io/deploy/host-n8n/configure-n8n/basic-configuration/use-environment-variables>.

file covers switching a Docker deployment to **external mode** — a `n8nio/runners` sidecar next to n8n — which is what makes Python Code nodes work and what the docs require for real isolation. Official guide: <https://docs.n8n.io/deploy/ho

file covers switching a Docker deployment to **external mode** — a `n8nio/runners` sidecar next to n8n — which is what makes Python Code nodes work and what the docs require for real isolation. Official guide: <https://docs.n8n.io/deploy/ho

Official guide: <https://docs.n8n.io/deploy/host-n8n/configure-n8n/set-up-task-runners>.

Official guide: <https://docs.n8n.io/deploy/host-n8n/configure-n8n/set-up-task-runners>.

[Credential-related source omitted]

[Credential-related source omitted]

[Credential-related source omitted]

[Credential-related source omitted]

restart: unless-stopped     environment:       - N8N_RUNNERS_TASK_BROKER_URI=http://n8n:5679   # the n8n service name

restart: unless-stopped     environment:       - N8N_RUNNERS_TASK_BROKER_URI=http://n8n:5679   # the n8n service name

[Credential-related source omitted]

[Credential-related source omitted]

- N8N_RUNNERS_TASK_BROKER_URI=http://n8n:5679   # the n8n service name

- N8N_RUNNERS_TASK_BROKER_URI=http://n8n:5679   # the n8n service name

[Credential-related source omitted]

[Credential-related source omitted]

A launcher connects to exactly one broker, and every worker is its own broker. That breaks the template's `deploy.replicas` / `--scale n8n-worker=N` approach. A single `task-runners` service pointed at `http://n8n-worker:5679` attaches to w

A launcher connects to exactly one broker, and every worker is its own broker. That breaks the template's `deploy.replicas` / `--scale n8n-worker=N` approach. A single `task-runners` service pointed at `http://n8n-worker:5679` attaches to w

template's `deploy.replicas` / `--scale n8n-worker=N` approach. A single `task-runners` service pointed at `http://n8n-worker:5679` attaches to whichever replica DNS returns first. The other workers have no runner, so their Code nodes wait 

template's `deploy.replicas` / `--scale n8n-worker=N` approach. A single `task-runners` service pointed at `http://n8n-worker:5679` attaches to whichever replica DNS returns first. The other workers have no runner, so their Code nodes wait 

pointed at `http://n8n-worker:5679` attaches to whichever replica DNS returns first. The other

pointed at `http://n8n-worker:5679` attaches to whichever replica DNS returns first. The other

restart: unless-stopped     environment:       N8N_RUNNERS_TASK_BROKER_URI: http://n8n-worker-1:5679

restart: unless-stopped     environment:       N8N_RUNNERS_TASK_BROKER_URI: http://n8n-worker-1:5679

[Credential-related source omitted]

[Credential-related source omitted]

N8N_RUNNERS_TASK_BROKER_URI: http://n8n-worker-1:5679

N8N_RUNNERS_TASK_BROKER_URI: http://n8n-worker-1:5679

[Credential-related source omitted]

[Credential-related source omitted]

[Credential-related source omitted]

[Credential-related source omitted]

[Credential-related source omitted]

[Credential-related source omitted]

# --- your domain: final URL becomes https://SUBDOMAIN.DOMAIN_NAME/ ---

# --- your domain: final URL becomes https://SUBDOMAIN.DOMAIN_NAME/ ---

[Credential-related source omitted]

[Credential-related source omitted]

# --- your domain: final URL becomes https://SUBDOMAIN.DOMAIN_NAME/ ---

# --- your domain: final URL becomes https://SUBDOMAIN.DOMAIN_NAME/ ---

[Credential-related source omitted]

[Credential-related source omitted]

[Credential-related source omitted]

[Credential-related source omitted]

N8N_PORT: "5678"       N8N_PROTOCOL: https       N8N_EDITOR_BASE_URL: https://${SUBDOMAIN}.${DOMAIN_NAME}/

N8N_PORT: "5678"       N8N_PROTOCOL: https       N8N_EDITOR_BASE_URL: https://${SUBDOMAIN}.${DOMAIN_NAME}/

N8N_PROTOCOL: https       N8N_EDITOR_BASE_URL: https://${SUBDOMAIN}.${DOMAIN_NAME}/       WEBHOOK_URL: https://${SUBDOMAIN}.${DOMAIN_NAME}/

N8N_PROTOCOL: https       N8N_EDITOR_BASE_URL: https://${SUBDOMAIN}.${DOMAIN_NAME}/       WEBHOOK_URL: https://${SUBDOMAIN}.${DOMAIN_NAME}/

N8N_EDITOR_BASE_URL: https://${SUBDOMAIN}.${DOMAIN_NAME}/

N8N_EDITOR_BASE_URL: https://${SUBDOMAIN}.${DOMAIN_NAME}/

WEBHOOK_URL: https://${SUBDOMAIN}.${DOMAIN_NAME}/

WEBHOOK_URL: https://${SUBDOMAIN}.${DOMAIN_NAME}/

[Credential-related source omitted]

[Credential-related source omitted]

- N8N_PORT=5678       - N8N_PROTOCOL=https       - N8N_EDITOR_BASE_URL=https://${SUBDOMAIN}.${DOMAIN_NAME}/

- N8N_PORT=5678       - N8N_PROTOCOL=https       - N8N_EDITOR_BASE_URL=https://${SUBDOMAIN}.${DOMAIN_NAME}/

- N8N_PROTOCOL=https       - N8N_EDITOR_BASE_URL=https://${SUBDOMAIN}.${DOMAIN_NAME}/       - WEBHOOK_URL=https://${SUBDOMAIN}.${DOMAIN_NAME}/

- N8N_PROTOCOL=https       - N8N_EDITOR_BASE_URL=https://${SUBDOMAIN}.${DOMAIN_NAME}/       - WEBHOOK_URL=https://${SUBDOMAIN}.${DOMAIN_NAME}/

- N8N_EDITOR_BASE_URL=https://${SUBDOMAIN}.${DOMAIN_NAME}/

- N8N_EDITOR_BASE_URL=https://${SUBDOMAIN}.${DOMAIN_NAME}/

- WEBHOOK_URL=https://${SUBDOMAIN}.${DOMAIN_NAME}/

- WEBHOOK_URL=https://${SUBDOMAIN}.${DOMAIN_NAME}/

[Credential-related source omitted]

[Credential-related source omitted]

#!/bin/bash

#!/bin/bash

[Credential-related source omitted]

[Credential-related source omitted]

"method": "GET",   "authentication": "none",   "url": "https://api.example.com/data"  // ✅ Added

"method": "GET",   "authentication": "none",   "url": "https://api.example.com/data"  // ✅ Added

"authentication": "none",   "url": "https://api.example.com/data"  // ✅ Added }

"authentication": "none",   "url": "https://api.example.com/data"  // ✅ Added }

"url": "https://api.example.com/data"  // ✅ Added

"url": "https://api.example.com/data"  // ✅ Added

{   "method": "POST",   "url": "https://api.example.com/create",

{   "method": "POST",   "url": "https://api.example.com/create",

"method": "POST",   "url": "https://api.example.com/create",   "sendBody": true

"method": "POST",   "url": "https://api.example.com/create",   "sendBody": true

"url": "https://api.example.com/create",

"url": "https://api.example.com/create",

{   "method": "POST",   "url": "https://api.example.com/create",

{   "method": "POST",   "url": "https://api.example.com/create",

"method": "POST",   "url": "https://api.example.com/create",   "sendBody": true,

"method": "POST",   "url": "https://api.example.com/create",   "sendBody": true,

"url": "https://api.example.com/create",

"url": "https://api.example.com/create",

{   "method": "FETCH",  // ❌ Invalid   "url": "https://api.example.com"

{   "method": "FETCH",  // ❌ Invalid   "url": "https://api.example.com"

"method": "FETCH",  // ❌ Invalid   "url": "https://api.example.com" }

"method": "FETCH",  // ❌ Invalid   "url": "https://api.example.com" }

"url": "https://api.example.com"

"url": "https://api.example.com"

{   "method": "GET",  // ✅ Use valid HTTP method   "url": "https://api.example.com"

{   "method": "GET",  // ✅ Use valid HTTP method   "url": "https://api.example.com"

"method": "GET",  // ✅ Use valid HTTP method   "url": "https://api.example.com" }

"method": "GET",  // ✅ Use valid HTTP method   "url": "https://api.example.com" }

"url": "https://api.example.com"

"url": "https://api.example.com"

{   "method": "GET",   "url": "https://api.example.com",

{   "method": "GET",   "url": "https://api.example.com",

"method": "GET",   "url": "https://api.example.com",   "sendHeaders": "true"  // ❌ String "true"

"method": "GET",   "url": "https://api.example.com",   "sendHeaders": "true"  // ❌ String "true"

"url": "https://api.example.com",

"url": "https://api.example.com",

{   "method": "GET",   "url": "https://api.example.com",

{   "method": "GET",   "url": "https://api.example.com",

"method": "GET",   "url": "https://api.example.com",   "sendHeaders": true  // ✅ Boolean true

"method": "GET",   "url": "https://api.example.com",   "sendHeaders": true  // ✅ Boolean true

"url": "https://api.example.com",

"url": "https://api.example.com",

{   "method": "GET",   "url": "https://api.example.com/status"

{   "method": "GET",   "url": "https://api.example.com/status"

"method": "GET",   "url": "https://api.example.com/status"   // Read-only, no side effects

"method": "GET",   "url": "https://api.example.com/status"   // Read-only, no side effects

"url": "https://api.example.com/status"

"url": "https://api.example.com/status"

// Internal API with high reliability {   "url": "http://localhost:3000/process"

// Internal API with high reliability {   "url": "http://localhost:3000/process"

{   "url": "http://localhost:3000/process"   // Local service, failures are rare and obvious

{   "url": "http://localhost:3000/process"   // Local service, failures are rare and obvious

"url": "http://localhost:3000/process"

"url": "http://localhost:3000/process"

// BAD: Known unreliable API without retries {   "url": "https://unreliable-api.com/data"

// BAD: Known unreliable API without retries {   "url": "https://unreliable-api.com/data"

{   "url": "https://unreliable-api.com/data"   // ❌ Should retry!

{   "url": "https://unreliable-api.com/data"   // ❌ Should retry!

"url": "https://unreliable-api.com/data"

"url": "https://unreliable-api.com/data"

// GOOD: {   "url": "https://unreliable-api.com/data",

// GOOD: {   "url": "https://unreliable-api.com/data",

{   "url": "https://unreliable-api.com/data",   "retryOnFail": true,

{   "url": "https://unreliable-api.com/data",   "retryOnFail": true,

"url": "https://unreliable-api.com/data",

"url": "https://unreliable-api.com/data",

{   "method": "POST",   "url": "https://api.example.com/create"

{   "method": "POST",   "url": "https://api.example.com/create"

"method": "POST",   "url": "https://api.example.com/create"   // ❌ Could timeout and lose data

"method": "POST",   "url": "https://api.example.com/create"   // ❌ Could timeout and lose data

"url": "https://api.example.com/create"

"url": "https://api.example.com/create"

// Internal microservice - no rate limits {   "url": "http://internal-api/process"

// Internal microservice - no rate limits {   "url": "http://internal-api/process"

{   "url": "http://internal-api/process"   // Company controls both ends

{   "url": "http://internal-api/process"   // Company controls both ends

"url": "http://internal-api/process"

"url": "http://internal-api/process"

"type": "n8n-nodes-base.httpRequest",     "parameters": {       "url": "https://api.example.com/daily-report"

"type": "n8n-nodes-base.httpRequest",     "parameters": {       "url": "https://api.example.com/daily-report"

"parameters": {       "url": "https://api.example.com/daily-report"       // Once per day = no rate limit concerns

"parameters": {       "url": "https://api.example.com/daily-report"       // Once per day = no rate limit concerns

"url": "https://api.example.com/daily-report"

"url": "https://api.example.com/daily-report"

// API returns 429 and n8n handles it {   "url": "https://api.example.com/data",

// API returns 429 and n8n handles it {   "url": "https://api.example.com/data",

{   "url": "https://api.example.com/data",   "options": {

{   "url": "https://api.example.com/data",   "options": {

"url": "https://api.example.com/data",

"url": "https://api.example.com/data",

"type": "n8n-nodes-base.httpRequest",     "parameters": {       "url": "https://api.github.com/..."

"type": "n8n-nodes-base.httpRequest",     "parameters": {       "url": "https://api.github.com/..."

"parameters": {       "url": "https://api.github.com/..."       // ❌ GitHub has strict rate limits!

"parameters": {       "url": "https://api.github.com/..."       // ❌ GitHub has strict rate limits!

"url": "https://api.github.com/..."

"url": "https://api.github.com/..."

"type": "n8n-nodes-base.httpRequest",   "parameters": {     "url": "https://api.github.com/...",

"type": "n8n-nodes-base.httpRequest",   "parameters": {     "url": "https://api.github.com/...",

"parameters": {     "url": "https://api.github.com/...",     "options": {

"parameters": {     "url": "https://api.github.com/...",     "options": {

"url": "https://api.github.com/...",

"url": "https://api.github.com/...",

// Truly public API with no secrets {   "url": "https://api.ipify.org"

// Truly public API with no secrets {   "url": "https://api.ipify.org"

{   "url": "https://api.ipify.org"   // No credentials needed

{   "url": "https://api.ipify.org"   // No credentials needed

"url": "https://api.ipify.org"

"url": "https://api.ipify.org"

// Example workflow in documentation {   "url": "https://example.com/api",

// Example workflow in documentation {   "url": "https://example.com/api",

{   "url": "https://example.com/api",   "headers": {

{   "url": "https://example.com/api",   "headers": {

"url": "https://example.com/api",

"url": "https://example.com/api",

| Validator says | Reality | What to do | |---|---|---| | **ERROR** "Incorrect error output configuration. Nodes "X" appear to be error handlers but are in main[0]…" | A name/type heuristic: fires when `main[0]` fans out and a target is `re

| Validator says | Reality | What to do | |---|---|---| | **ERROR** "Incorrect error output configuration. Nodes "X" appear to be error handlers but are in main[0]…" | A name/type heuristic: fires when `main[0]` fans out and a target is `re

|---|---|---| | **ERROR** "Incorrect error output configuration. Nodes "X" appear to be error handlers but are in main[0]…" | A name/type heuristic: fires when `main[0]` fans out and a target is `respondToWebhook`, `emailSend`, or has *erro

|---|---|---| | **ERROR** "Incorrect error output configuration. Nodes "X" appear to be error handlers but are in main[0]…" | A name/type heuristic: fires when `main[0]` fans out and a target is `respondToWebhook`, `emailSend`, or has *erro

| **ERROR** "Incorrect error output configuration. Nodes "X" appear to be error handlers but are in main[0]…" | A name/type heuristic: fires when `main[0]` fans out and a target is `respondToWebhook`, `emailSend`, or has *error / fail / cat

| **ERROR** "Incorrect error output configuration. Nodes "X" appear to be error handlers but are in main[0]…" | A name/type heuristic: fires when `main[0]` fans out and a target is `respondToWebhook`, `emailSend`, or has *error / fail / cat

| Warning "Possible missing $ prefix for variable (e.g., use $json instead of json)" | The check reads inside string literals, e.g. the JMESPath query `"[?json.country=='PL'].json.name"` over `.all()` items, where `json.` is required | Igno

| Warning "Possible missing $ prefix for variable (e.g., use $json instead of json)" | The check reads inside string literals, e.g. the JMESPath query `"[?json.country=='PL'].json.name"` over `.all()` items, where `json.` is required | Igno

| `validate_node` → "Code cannot be empty" (`jsCode`) on a Code node with `language: "pythonNative"` | `validate_node` doesn't recognize `pythonNative`, the only Python option in n8n 2.x | Validate the workflow (`validate_workflow` / `n8n_v

| `validate_node` → "Code cannot be empty" (`jsCode`) on a Code node with `language: "pythonNative"` | `validate_node` doesn't recognize `pythonNative`, the only Python option in n8n 2.x | Validate the workflow (`validate_workflow` / `n8n_v

| Python "Return value must be a list of dicts" for `return {"count": …}` in Run Once for All Items | Native Python auto-wraps a single dict into one item | Accept, or return `[{"json": {...}}]` to silence it. [#1113](https://github.com/czl

| Python "Return value must be a list of dicts" for `return {"count": …}` in Run Once for All Items | Native Python auto-wraps a single dict into one item | Accept, or return `[{"json": {...}}]` to silence it. [#1113](https://github.com/czl

- **`$jmespath` mistakes inside expressions**: `country=="PL"` (→ `[]`), a bare number   `revenue > 100000`, or `and` instead of `&&` (→ `null`). Only Code-node source is checked.   [#1114](https://github.com/czlonkowski/n8n-mcp/issues/1114

- **`$jmespath` mistakes inside expressions**: `country=="PL"` (→ `[]`), a bare number   `revenue > 100000`, or `and` instead of `&&` (→ `null`). Only Code-node source is checked.   [#1114](https://github.com/czlonkowski/n8n-mcp/issues/1114

`revenue > 100000`, or `and` instead of `&&` (→ `null`). Only Code-node source is checked.   [#1114](https://github.com/czlonkowski/n8n-mcp/issues/1114) - **Native Python Code nodes**: legacy `_input`/`_json`/`_node`/`_now`, `item.json.x` d

`revenue > 100000`, or `and` instead of `&&` (→ `null`). Only Code-node source is checked.   [#1114](https://github.com/czlonkowski/n8n-mcp/issues/1114) - **Native Python Code nodes**: legacy `_input`/`_json`/`_node`/`_now`, `item.json.x` d

[#1114](https://github.com/czlonkowski/n8n-mcp/issues/1114)

[#1114](https://github.com/czlonkowski/n8n-mcp/issues/1114)

any import not on the instance allowlist, `class`, `type()`/`getattr()`, dunder access,   `global` inside a function, and a list returned in each-item mode.   [#1113](https://github.com/czlonkowski/n8n-mcp/issues/1113), see **n8n-code-pytho

any import not on the instance allowlist, `class`, `type()`/`getattr()`, dunder access,   `global` inside a function, and a list returned in each-item mode.   [#1113](https://github.com/czlonkowski/n8n-mcp/issues/1113), see **n8n-code-pytho

[#1113](https://github.com/czlonkowski/n8n-mcp/issues/1113), see **n8n-code-python**.

[#1113](https://github.com/czlonkowski/n8n-mcp/issues/1113), see **n8n-code-python**.

- **Template literals inside expressions** — `` ={{ `https://api/${$json.id}` }} `` is valid; n8n's engine evaluates full modern JS (template literals, optional chaining `?.`) inside `{{ }}`.

- **Template literals inside expressions** — `` ={{ `https://api/${$json.id}` }} `` is valid; n8n's engine evaluates full modern JS (template literals, optional chaining `?.`) inside `{{ }}`.

Conceived by Romuald Członkowski - [aiadvisors.pl/en](https://aiadvisors.pl/en)

Conceived by Romuald Członkowski - [aiadvisors.pl/en](https://aiadvisors.pl/en)

- **ERROR "Incorrect error output configuration… appear to be error handlers but are in main[0]"** on a fan-out where one target is a Respond to Webhook or Send Email node, or has *error / fail / catch / exception* in its name. Moving Respo

- **ERROR "Incorrect error output configuration… appear to be error handlers but are in main[0]"** on a fan-out where one target is a Respond to Webhook or Send Email node, or has *error / fail / catch / exception* in its name. Moving Respo

- **Warning "Possible missing $ prefix"** on `json`/`items` *inside a string*, e.g. `$jmespath($('X').all(), "[?json.country=='PL'].json.name")`. The `json.` prefix is required there, so ignore the warning. ([#1115](https://github.com/czlon

- **Warning "Possible missing $ prefix"** on `json`/`items` *inside a string*, e.g. `$jmespath($('X').all(), "[?json.country=='PL'].json.name")`. The `json.` prefix is required there, so ignore the warning. ([#1115](https://github.com/czlon

- **`validate_node` on a `language: "pythonNative"` Code node → "Code cannot be empty" (`jsCode`)**. The error is false; validate the workflow instead. ([#1112](https://github.com/czlonkowski/n8n-mcp/issues/1112))

- **`validate_node` on a `language: "pythonNative"` Code node → "Code cannot be empty" (`jsCode`)**. The error is false; validate the workflow instead. ([#1112](https://github.com/czlonkowski/n8n-mcp/issues/1112))

- **Python "Return value must be a list of dicts"** for a single-dict return in all-items mode. n8n accepts it and emits one item. ([#1113](https://github.com/czlonkowski/n8n-mcp/issues/1113))

- **Python "Return value must be a list of dicts"** for a single-dict return in all-items mode. n8n accepts it and emits one item. ([#1113](https://github.com/czlonkowski/n8n-mcp/issues/1113))

**Blind spots (valid workflow, wrong result at runtime):** `$jmespath` syntax/quoting mistakes inside expressions ([#1114](https://github.com/czlonkowski/n8n-mcp/issues/1114)); *any* JS error inside `{{ }}`, which resolves to `null` while t

**Blind spots (valid workflow, wrong result at runtime):** `$jmespath` syntax/quoting mistakes inside expressions ([#1114](https://github.com/czlonkowski/n8n-mcp/issues/1114)); *any* JS error inside `{{ }}`, which resolves to `null` while t

[Credential-related source omitted]

[Credential-related source omitted]

**Part of**: n8n-skills repository **Conceived by**: Romuald Członkowski - [aiadvisors.pl/en](https://aiadvisors.pl/en)

**Part of**: n8n-skills repository **Conceived by**: Romuald Członkowski - [aiadvisors.pl/en](https://aiadvisors.pl/en)

**Conceived by**: Romuald Członkowski - [aiadvisors.pl/en](https://aiadvisors.pl/en)

**Conceived by**: Romuald Członkowski - [aiadvisors.pl/en](https://aiadvisors.pl/en)

- **`convertToGoogleDocument: true` creates a Google Doc (text)**, NOT a Google Sheet — to upload a CSV for download, omit this option entirely - **CSV download link format**: `https://drive.google.com/uc?id={fileId}&export=download` — use 

- **`convertToGoogleDocument: true` creates a Google Doc (text)**, NOT a Google Sheet — to upload a CSV for download, omit this option entirely - **CSV download link format**: `https://drive.google.com/uc?id={fileId}&export=download` — use 

- **CSV download link format**: `https://drive.google.com/uc?id={fileId}&export=download` — use instead of `/view` links

- **CSV download link format**: `https://drive.google.com/uc?id={fileId}&export=download` — use instead of `/view` links

{   method: "GET",                    // GET, POST, PUT, DELETE, PATCH   url: "https://api.example.com/users",

{   method: "GET",                    // GET, POST, PUT, DELETE, PATCH   url: "https://api.example.com/users",

method: "GET",                    // GET, POST, PUT, DELETE, PATCH   url: "https://api.example.com/users",   authentication: "predefinedCredentialType",

method: "GET",                    // GET, POST, PUT, DELETE, PATCH   url: "https://api.example.com/users",   authentication: "predefinedCredentialType",

url: "https://api.example.com/users",

url: "https://api.example.com/users",

[Credential-related source omitted]

[Credential-related source omitted]

{   method: "GET",   url: "https://api.example.com/users",

{   method: "GET",   url: "https://api.example.com/users",

method: "GET",   url: "https://api.example.com/users",   sendQuery: true,

method: "GET",   url: "https://api.example.com/users",   sendQuery: true,

url: "https://api.example.com/users",

url: "https://api.example.com/users",

{   method: "POST",   url: "https://api.example.com/users",

{   method: "POST",   url: "https://api.example.com/users",

method: "POST",   url: "https://api.example.com/users",   sendBody: true,

method: "POST",   url: "https://api.example.com/users",   sendBody: true,

url: "https://api.example.com/users",

url: "https://api.example.com/users",

{   method: "POST",   url: "https://api.example.com/upload",

{   method: "POST",   url: "https://api.example.com/upload",

method: "POST",   url: "https://api.example.com/upload",   sendBody: true,

method: "POST",   url: "https://api.example.com/upload",   sendBody: true,

url: "https://api.example.com/upload",

url: "https://api.example.com/upload",

{   method: "PATCH",   url: "https://api.example.com/users/={{$json.userId}}",