NEW: Scan Your n8n Workflows for AI Security Risks
Your workflows contain AI — do you know what’s hiding in them?
We built AI-BOM because we scanned our own 4,343 workflows and found hardcoded API keys, unauthenticated AI agents, and MCP clients connecting to unknown servers — all invisible to existing security tools.
AI-BOM is the first and only tool that scans n8n workflows for AI security risks.
pip install ai-bom
ai-bom scan ./workflows/
One command finds every AI Agent node, LLM integration, MCP client, hardcoded credential, and dangerous tool combination — then gives you a risk score and a compliance-ready report.
EU AI Act deadline: August 2025. You need an AI inventory.
# Clone the repository
git clone https://github.com/Zie619/n8n-workflows.git
cd n8n-workflows
# Install dependencies
pip install -r requirements.txt
# Start the server
python run.py
# Open in browser
# http://localhost:8000
Docker Installation
# Using Docker Hub
docker run -p 8000:8000 zie619/n8n-workflows:latest
# Or build locally
docker build -t n8n-workflows .
docker run -p 8000:8000 n8n-workflows
Documentation
API Endpoints
Endpoint
Method
Description
/
GET
Web interface
/api/search
GET
Search workflows
/api/stats
GET
Repository statistics
/api/workflow/{id}
GET
Get workflow JSON
/api/categories
GET
List all categories
/api/export
GET
Export workflows
Search Features
Full-text search across names, descriptions, and nodes
Trigger type filtering (Webhook, Schedule, Manual, etc.)
Service filtering (365+ integrations)
Architecture
graph LR
A[User] --> B[Web Interface]
B --> C[FastAPI Server]
C --> D[SQLite FTS5]
D --> E[Workflow Database]
C --> F[Static Files]
F --> G[Workflow JSONs]
Tech Stack
Backend: Python, FastAPI, SQLite with FTS5
Frontend: Vanilla JS, Tailwind CSS
Database: SQLite with Full-Text Search
Deployment: Docker, GitHub Actions, GitHub Pages
Security: Trivy scanning, CORS protection, Input validation
n8n Workflow Collection
The Ultimate Collection of n8n Automation Workflows
Browse Online · Documentation · Contributing · License
NEW: Scan Your n8n Workflows for AI Security Risks
Your workflows contain AI — do you know what’s hiding in them?
We built AI-BOM because we scanned our own 4,343 workflows and found hardcoded API keys, unauthenticated AI agents, and MCP clients connecting to unknown servers — all invisible to existing security tools.
AI-BOM is the first and only tool that scans n8n workflows for AI security risks.
One command finds every AI Agent node, LLM integration, MCP client, hardcoded credential, and dangerous tool combination — then gives you a risk score and a compliance-ready report.
EU AI Act deadline: August 2025. You need an AI inventory.
Get AI-BOM (free & open source) →
AI-BOM by Trusera
Securing the Agentic Service Mesh
What does AI-BOM detect in n8n workflows? (click to expand)
Beyond n8n, AI-BOM also scans source code (Python, JS, TS, Java, Go, Rust, Ruby), Docker configs, cloud infrastructure (Terraform, CloudFormation), and network endpoints — 21+ AI SDKs detected across 7 languages.
Output formats: CycloneDX SBOM | SARIF (GitHub Code Scanning) | HTML Dashboard | Markdown | JSON
What’s New
Latest Updates (November 2025)
Quick Access
Use Online (No Installation)
Visit zie619.github.io/n8n-workflows for instant access to:
Features
By The Numbers
Performance
Local Installation
Prerequisites
Quick Start
Docker Installation
Documentation
API Endpoints
//api/search/api/stats/api/workflow/{id}/api/categories/api/exportSearch Features
Architecture
graph LR A[User] --> B[Web Interface] B --> C[FastAPI Server] C --> D[SQLite FTS5] D --> E[Workflow Database] C --> F[Static Files] F --> G[Workflow JSONs]Tech Stack
Repository Structure
Contributing
We love contributions! Here’s how you can help:
Ways to Contribute
Development Setup
Security
Security Features
Reporting Security Issues
Please report security vulnerabilities to the maintainers via Security Advisory.
License
This project is licensed under the MIT License - see the LICENSE file for details.
Support
If you find this project helpful, please consider:
Star us on GitHub — it motivates us a lot!
Made with care by Zie619 and contributors
AI-BOM — Discover every AI agent, model, and API hiding in your infrastructure.
Open source by Trusera — Securing the Agentic Service Mesh.