n8n
1. 介绍
1.1. 平台定位
n8n 是由德国柏林公司 n8n GmbH(2019 年成立)开发的工作流自动化平台,以「fair-code」模式发布:源码公开、可自托管,但超过阈值的商业使用需购买企业许可。它的本业是系统集成自动化——用可视化节点把 SaaS、数据库、消息系统连成自动化管道;2024 年之后,它借助 LangChain 节点与 AI Agent 节点快速向智能体领域延伸,成为「自动化平台 + AI」路线的代表。
一个常见的误读是把 n8n 当作「又一个 Agent 框架」。本研究的判断是:n8n 应被定位为 AI Harness 的「连接触达层」,而非完整的 Harness。它长于把智能体接进真实业务系统(CRM、数据库、工单、IM),短于智能体运行时的核心工程能力——上下文工程、评估与治理在它的能力版图中基本缺席。典型的最佳实践不是「用 n8n 造 Agent」,而是「用 n8n 给 LangGraph / CrewAI / Claude Agent SDK 造的 Agent 供血」。
1.2. 基本信息卡
| 项目 | 内容 | 置信度 |
|---|---|---|
| 开发商 | n8n GmbH(柏林,2019 年成立) | 高 |
| 形态 | 自动化平台(可视化工作流 + AI 扩展) | 高 |
| 许可证 | Sustainable Use License(fair-code):源码公开、可自托管;超过阈值的商业使用需付费企业许可 | 高 |
| 首发 | 2019 年 | 高 |
| 最新版本 | n8n 2.0(2026-01) | 中(第三方口径) |
| GitHub 规模 | 191K ~ 203.3K stars(2026-07 至 09 不同检索时点) | 中,口径随时点变化 |
| 集成规模 | 400+ 原生集成节点;社区节点 1200+;70+ LangChain 节点 | 中高 |
| 模板规模 | 9,500+ 工作流模板 | 中 |
| 融资 | Series C 1.8 亿美元(2025-10),估值约 25 亿美元(媒体口径,未经公司审计确认) | 中 |
| ARR | 约 7,000 万美元(媒体口径) | 低—中 |
| 定价(年付,欧元) | Community 自托管免费(无限工作流 / 执行 / 用户);Starter €20/月(2,500 次执行);Pro €50/月(10,000 次);Business €667/月(40,000 次,Git 版本控制、SSO/LDAP、独立环境);Enterprise 定制 | 中高 |
| 计费模型 | 按执行计费:一次完整工作流运行计为 1 次执行,与步骤数无关 | 高 |
| 合规 | 云版 SOC 2 Type II、ISO 27001、SOC 3、GDPR、支持 HIPAA;声明不使用客户数据训练模型 | 中 |
| 已知客户 | NASA、Adobe、Twilio(低相关度来源) | 低 |
| 社区规模 | 200,000+ 成员(厂商口径) | 低—中 |
版本号、stars 与融资数据均以 2026-09 检索时点为准,随时间快速变化,引用时建议注明检索日期。
1.3. 发展时间线
| 时间 | 事件 | 来源等级 |
|---|---|---|
| 2019 | n8n GmbH 成立,发布节点式工作流自动化平台 | 中高 |
| 2024—2025 | 引入 LangChain 节点体系与 AI Agent 节点,向智能体领域延伸 | 中 |
| 2025-04 起 | 定价策略调整:移除所有活跃工作流数量限制,各档位无限用户与无限活跃工作流 | 中 |
| 2025-10 | Series C 融资 1.8 亿美元,估值约 25 亿美元(媒体口径) | 中 |
| 2026-01 | n8n 2.0 发布:原生 LangChain 支持,Chains / Agents / Memory / Vector Stores 成为一等节点;Tool 节点引入 | 中 |
| 2026-07-03 | 切换欧元定价,新增 €667/月 Business 档(40,000 次执行、SSO、Git 版本控制) | 中 |
1.4. 在 AI Harness 体系中的位置
按参数卡的边界表,n8n 不属于 Agent Framework(主要覆盖 L2/L3 的子集),也不完全是 Agent Platform(Harness 的产品化封装)。它更准确的坐标是:Harness 谱系外侧的「连接触达层」——
- 它的 L2(工具与执行)以「连接器」形态达到全组最强:400+ 原生集成 + 1200+ 社区节点 + MCP 双向;
- 但 L1(上下文工程)与 L5(评估观测)基本空白,L3 缺少持久执行与断点续跑语义,L4 仅有基础的跨执行记忆;
- 它与 Agent 框架是互补关系而非竞争关系:Agent 框架长于「思考」,n8n 长于「触达真实系统」。
因此,把 n8n 评为「完整 Harness」是分类错误;把它排除出 Harness 调研同样是错误——在企业真实落地中,它是智能体与业务系统之间的那一段管道。
2. 名词解释
| 术语 | 英文/缩写 | 释义 |
|---|---|---|
| Workflow | Workflow | 由节点组成的自动化图,覆盖触发器、动作、数据转换与 AI 操作;是 n8n 的顶层组织单元 |
| Node | Node | 工作流中的一个操作单元;n8n 提供 400+ 原生集成节点与 1200+ 社区节点,另提供 JavaScript / Python 内联代码节点 |
| Trigger | Trigger | 工作流的入口节点,决定何时启动:定时调度、Webhook、应用事件、聊天消息、MCP 调用等 |
| Execution | Execution | 一次完整的工作流运行,是云版的计费单位——与步骤数无关,多步复杂流程与单步简单流程同价 |
| AI Agent Node | AI Agent Node | 智能体节点:把 LLM 与工具组合成自主循环,可把任意其他 n8n 节点当作工具调用,支持会话记忆与流式输出 |
| Tool Node | Tool Node | n8n 2.0 引入:任何工作流都可被指定为「Tool」,从而成为 AI Agent 可调用的复用技能 |
| Credential | Credential | 凭据管理机制:节点连接外部系统所需的密钥、令牌与账号配置统一托管,与工作流定义分离 |
| Persistent Memory | Persistent Memory | 跨执行维持对话上下文的记忆机制,后端可选 Redis、Postgres 或内存 |
| MCP Server Trigger | MCP Server Trigger | 把工作流暴露给外部 AI Agent 的触发器,使 n8n 以 MCP 服务器身份被调用 |
| MCP Client Tool | MCP Client Tool | 让工作流调用外部 MCP 服务器的节点,使 n8n 以 MCP 客户端身份接入生态 |
| Expression | Expression | 节点间的数据引用表达式,可在参数中引用上游节点的输出,是 n8n 数据流拼接的基础 |
| AI Workflow Builder | AI Workflow Builder | 从自然语言描述自动生成工作流的辅助功能;Starter 档 50 credits/月、Pro 150、Enterprise 1,000 |
| Vector Store 节点 | Vector Store Nodes | 面向向量数据库的节点族,支持 Pinecone、Qdrant、Chroma、Supabase 等 |
| Community Node | Community Node | 社区贡献的扩展节点,总量 1200+,通过 npm 生态分发 |
| Autopilot | Autopilot | 使用云计算机的自主 Agent 执行形态(低相关度来源,细节 ) |
3. 功能说明
3.1. 可视化工作流引擎
n8n 的核心是节点式可视化工作流引擎,支持:
- 分支路径:按条件把执行流路由到不同分支;
- 并行执行:多个分支同时推进;
- 循环:对数据集合逐项处理;
- 错误处理:节点级错误分支与重试;
- 条件逻辑与表达式:节点间通过 Expression 引用上游数据。
这些能力均可可视化配置,也可通过 JavaScript / Python 内联代码节点扩展——「可视化为主、代码兜底」是 n8n 相对纯低代码平台的关键差异。
3.2. AI 子系统
n8n 的 AI 能力由 70+ LangChain 节点构成,分三块:
- LLM 节点:OpenAI、Anthropic Claude、Google Gemini、本地 Ollama 等;
- AI Agent 节点:把 LLM 与工具组合成自主循环,可调用 n8n 中任意节点作为工具——这是它最聪明的设计:智能体的「手」直接复用 400+ 集成节点,无需重写工具层;
- 向量存储节点:Pinecone、Qdrant、Chroma、Supabase 等,支撑简单的 RAG 场景。
3.3. MCP 双向能力
n8n 同时实现了 MCP 的两个方向:
- 作为 MCP 服务器(MCP Server Trigger):把任意工作流暴露为外部 AI Agent 可调用的工具;
- 作为 MCP 客户端(MCP Client Tool):工作流内直接调用外部 MCP 服务器。
这与 Dify 的 MCP 双向(详见 05-dify.md)在战略上同构:平台不再只是「造 Agent 的地方」,同时成为「其他生态 Agent 的手脚」。对 n8n 而言,后者的价值尤其大——它把 400+ 集成一夜之间变成了整个 MCP 生态共享的能力池。
3.4. n8n 2.0 的关键变更
n8n 2.0(2026-01)的主要变更:
- 原生 LangChain 支持:Chains / Agents / Memory / Vector Stores 成为一等节点;
- Tool 节点:任何工作流都可被指定为 Tool,成为 Agent 可复用的技能——工作流即工具;
- 自动保存(autosave)与改进的执行追踪;
- 高级节点分组与可折叠区块,改善大型工作流的可维护性。
3.5. 计费与版本策略
- 按执行计费是 n8n 云版对复杂工作流最友好的设计:一次 50 步的工作流与一次 1 步的工作流同为 1 次执行;对比按步计费的竞品,长流程成本优势显著;
- 2025 年起移除活跃工作流数量限制,所有档位无限用户;
- 2026-07 切换欧元定价并新增 Business 档,但 Starter(€20,5 并发)到 Business(€667)之间存在明显价格断层,Pro 与 Business 之间缺少过渡档。
4. 平台架构
图 4-1|n8n 分层架构:从 Agent 框架到业务系统的连接触达层
数据来源:基于本文分析绘制的示意图。
4.1. 部署形态与技术栈
- 部署方式:Docker、npm、任意 Linux / macOS / Windows 服务器、Kubernetes;
- 自托管时全部数据保留在客户基础设施内,这一数据主权特性使其能适配 HIPAA / GDPR / SOC 2 等合规要求;
- 开发形态:可视化节点编辑器 + JavaScript / Python 内联代码;
- 企业版提供 Git 版本控制、独立环境(dev / staging / prod)、SSO / LDAP、RBAC、审计日志与 200+ 并发执行。
4.2. 执行模型
n8n 的执行模型是传统工作流引擎语义,而非智能体运行时语义:
| 维度 | n8n 的语义 | Agent 运行时语义(对照) |
|---|---|---|
| 触发 | Trigger 启动一次运行 | 事件或用户消息驱动循环 |
| 状态 | 执行历史记录,无运行级检查点 | Session / Checkpoint 支持断点续跑 |
| 失败恢复 | 从头重跑或走错误分支 | 从最近检查点恢复(如 LangGraph 的 pending writes) |
| 长任务 | 受限于单次执行超时 | 可跨进程、跨小时持续运行 |
这一差异不是缺陷,而是形态使然:n8n 的主战场是分钟级的业务自动化,不是小时级的自主任务。
4.3. 与 Agent 框架的分工
n8n 官方与社区均不把 n8n 定位为 Agent 框架,而是把 Agent 接进真实业务系统的编排 / 连接层。两种典型分工:
- n8n 触发外部框架:n8n 的 Webhook / 定时触发器调用 CrewAI、LangGraph 等框架的服务,把结果写回业务系统;
- n8n 内嵌 Agent:直接使用 AI Agent 节点,由其调用 400+ 集成节点完成闭环,适合工具密集、推理简单的场景。
5. Harness 设计
5.1. 六层能力总览
| 层 | 名称 | 实现强度 | 判断依据 |
|---|---|---|---|
| L1 | 上下文工程 | 弱 | 无上下文工程原语;上下文靠节点手动拼装;仅 Persistent Memory 维持跨执行上下文 |
| L2 | 工具与执行 | 强(连接性全组最强) | 400+ 原生集成 + 1200+ 社区节点 + 内联 JS/Python + MCP 双向 + 向量存储节点 |
| L3 | 编排与控制 | 中强 | 可视化 DAG:分支、并行、循环、错误处理;但无图状态机、无 checkpoint 恢复语义 |
| L4 | 记忆与状态 | 中 | Persistent Memory(Redis / Postgres / in-memory)跨执行维持上下文 |
| L5 | 评估与观测 | 弱 / 中 | 执行历史与执行追踪(2.0 改进);无评估集、无 golden dataset、无 LLM 专用评测 |
| L6 | 治理与安全 | 中 | 自托管数据主权;SSO / RBAC / 审计仅 Enterprise;无 Agent 专用护栏、无预算护栏 |
5.2. L1 上下文工程层
n8n 在这一层基本缺席:
- 没有上下文压缩(Compaction)、优先级排序、缓存复用等原语;
- 传给 LLM 的上下文由开发者用节点和表达式手动拼装,长对话场景极易膨胀;
- Persistent Memory 只解决「记住」,不解决「压缩」与「取舍」。
若把重推理的智能体建在 n8n 内,L1 的缺失会直接转化为 token 成本与长任务失败率。
5.3. L2 工具与执行层
这是 n8n 的结构性优势所在,也是它相对所有 Agent 框架的独特价值:
- 连接密度:400+ 原生集成覆盖 CRM、数据库、通信、项目工具、云平台,社区节点再加 1200+——没有哪个 Agent 框架的工具生态能与之相比;
- Agent 即节点消费者:AI Agent 节点可把任意 n8n 节点当作工具,工具层零重复建设;
- MCP 双向:既输出能力(MCP 服务器)也消费能力(MCP 客户端);
- 代码兜底:内联 JS / Python 节点覆盖集成未覆盖的长尾场景。
5.4. L3 编排与控制层
- 可视化 DAG 提供分支、并行、循环、错误处理,对流程自动化而言足够;
- 但相对 LangGraph 的图状态机与持久执行、ADK 2.0 的 Workflow Runtime,n8n 缺少 checkpoint 恢复语义:长任务中断只能从头重跑;
- 无子智能体派发、无 HITL 审批节点等智能体专属控制原语;
- 评级为「中强」:作为工作流引擎是成熟的,作为智能体编排器是欠缺的。
5.5. L4 记忆与状态层
- Persistent Memory 是本层唯一机制,支持 Redis / Postgres / in-memory 后端,可跨执行维持会话上下文;
- 无长期记忆的分层设计(对比 CrewAI 的四层 Memory、ADK 的四作用域 State);
- 无工件(Artifact)管理与运行级检查点。
5.6. L5 评估与观测层
- 已有:执行历史、执行追踪(n8n 2.0 有所改进)、节点级数据查看;
- 缺失:无评估集、无 golden dataset、无 LLM 输出质量评测——智能体「做得好不好」这一层完全空白,需外挂 Langfuse、LangSmith 等第三方工具补齐;
- 这一层是 n8n 与「平台型选手」(Coze Loop、LangSmith、OpenJudge)差距最大的一层。
5.7. L6 治理与安全层
| 治理能力 | Community 自托管 | 付费云版 |
|---|---|---|
| 数据主权 | 全部数据在自有基础设施 | 云版合规认证 |
| SSO / LDAP | 无 | Business 起 |
| RBAC | 无 | Enterprise |
| 审计日志 | 无 | Enterprise |
| Git 版本控制 / 独立环境 | 无 | Business 起 |
| 合规认证 | 自托管自证 | SOC 2 Type II / ISO 27001 / SOC 3 / GDPR / HIPAA 支持 |
| Agent 专用护栏 | 无 | 无 |
| 预算护栏(成本上限) | 无 | 无 |
需强调:n8n 没有面向智能体的护栏与预算机制——Agent 循环跑飞了不会自动停,token 成本没有内置上限。这两项在 Claude Agent SDK(max_budget_usd)与百炼(Vault + 权限系统)中都是一等公民,在 n8n 中需要靠外部监控与流程设计兜底。
5.8. 三条内在张力的具体表现
| 张力 | 在本平台的体现 | 缓解手段 |
|---|---|---|
| 灵活性 ↔ 可预测性 | 可视化 DAG 可预测但表达力有限;AI Agent 节点引入概率行为后,执行路径部分不可控 | 把 Agent 限制在单一节点内;外部副作用(发邮件、写库)放在 Agent 节点之后的确定性节点中 |
| 开放性 ↔ 治理 | 1200+ 社区节点与 MCP 双向极大扩展能力,也引入供应链与攻击面;凭据集中托管放大了泄露影响半径 | 企业版 RBAC + 审计;社区节点须经安全评审后再装;凭据最小权限 |
| 成本 ↔ 深度 | 按执行计费对多步流程友好,但重推理链路的 token 成本不计入执行数,易被忽视 | 自托管免费档承接高频流程;为 LLM 节点加缓存与模型路由;外部监控 token 消耗 |
6. 实际案例
客户与规模(厂商 / 低相关度来源,未经独立验证):
- 已知客户包括 NASA、Adobe、Twilio(来自第三方评测站,未附具体场景与效果数据);
- 社区规模 200,000+ 成员(厂商口径)。
社区反馈(定性,非量化):
- 有用户以单个 n8n 实例替代 Zapier + 内部脚本 + 部分 LangChain 后端;
- 有用户在 Railway 上以约 5 美元/月运行生产工作流;
- DEV 社区有用户反馈「用了 8 个月后,不会为复杂项目回到 Zapier」;
- 有客户声称每天处理 1,000+ 次 AI 交互无压力。
未检索到公开量化数据的部分:截至检索日期 2026-09-12,未检索到任何带量化 ROI 数据的企业落地案例(如成本下降百分比、任务成功率、人力替代率)。上述客户名单与社区反馈均不构成效果证据,如实标注,不做补全。
7. 总结
7.1. 优点
- 连接性无可匹敌:400+ 原生集成 + 1200+ 社区节点,是所有平台中触达真实业务系统密度最高的;
- 成本结构友好:自托管完全免费且执行无限;云版按执行计费(非按步),复杂流程成本优势明显;
- 数据主权:自托管数据不出域,适配 HIPAA / GDPR / SOC 2 等合规要求;
- MCP 双向:既是 MCP 服务器又是客户端,把自己变成 MCP 生态的能力池;
- AI Agent 节点设计聪明:复用集成节点作为工具,工具层零重复建设;
- 生态与模板庞大:9,500+ 模板、200,000+ 社区成员(厂商口径)。
7.2. 缺点
- L1 / L5 基本空白:无上下文工程原语、无评估评测体系,是它作为「Agent 承载平台」的最大短板;
- 无持久执行语义:无 checkpoint、无断点续跑,长任务可靠性弱于 LangGraph 类方案;
- 治理能力付费墙深:SSO / RBAC / 审计全部在 Enterprise / Business 档;
- 无 Agent 护栏与预算护栏:智能体失控与 token 超支需外部兜底;
- 学习曲线偏陡:对习惯 Zapier 的用户不友好;自托管需 Docker / Linux 运维能力;
- 错误排查体验差:社区常见抱怨是错误表现为空输出、无明确原因;
- 定价断层:Starter 5 并发与 Pro(€50) → Business(€667) 之间缺少过渡。
7.3. 适用边界
| 场景 | 是否适用 | 理由 |
|---|---|---|
| 把 AI Agent 接入真实业务系统(CRM / 工单 / IM / 数据库) | 最适用 | 连接密度全组最高 |
| 需要数据主权与成本控制的自动化 | 最适用 | 自托管免费 + 按执行计费 |
| 工具密集、推理简单的智能体闭环 | 适用 | AI Agent 节点复用集成节点 |
| 与 LangGraph / CrewAI / Claude Agent SDK 组合使用 | 适用 | 各司其职的经典分工 |
| 非技术团队的简单线性自动化 | 不适用 | Zapier / Make 更合适 |
| 需要持久执行、断点续跑的长时程任务 | 不适用 | 无 checkpoint 语义 |
| 需要评估回归体系的核心智能体流程 | 不适用 | L5 空白,应换用或外挂专业评估设施 |
7.4. 选型建议
- 定位判断:把 n8n 视为 AI Harness 的「连接触达层」补充,而不是完整的 Agent Harness。评估它时问的问题应是「我的 Agent 能不能方便地触达业务系统」,而不是「它能不能承载我的核心智能体」。
- 组合策略:推荐 n8n + LangGraph / CrewAI / Claude Agent SDK 分工协作——框架负责推理与编排,n8n 负责触发、集成与回写;n8n 的 MCP Server Trigger 让框架侧的 Agent 把 n8n 工作流当作工具调用,是一种低成本的组合方式。
- 与 Dify 的取舍:80% 的负载是 AI 推理与知识问答选 Dify;80% 的负载是系统间管道集成选 n8n。
- 采用前必须确认:重推理链路是否放在 n8n 内(建议不放);评估观测是否已有外部方案(Langfuse / LangSmith);企业治理需求是否落入付费墙之内。
信息缺口声明
- Series C 融资与估值:1.8 亿美元 / 约 25 亿美元估值为 2025-10 媒体口径,未获公司审计确认,标 。
- ARR 约 7,000 万美元:媒体口径,标 。
- 带量化 ROI 的企业案例:未检索到,未做补全。
- 2026-01 之后的版本与路线图:n8n 2.0 之后的版本演进未检索到官方说明。
- L1 / L5 层能力:基本确认缺失(非仅未检索到),评级为「弱」;若后续版本补齐,本文结论需更新。
- Autopilot 的具体机制:仅见低相关度来源提及,细节标 。
- 已知客户(NASA / Adobe / Twilio)的具体使用场景与规模:无公开细节。
- GitHub stars 数:191K / 198K / 203.3K 为不同检索时点口径,引用时须注明时点。
8. 参考资料
- n8n 官方网站。https://n8n.io/
- n8n 官方文档。https://docs.n8n.io/
- n8n Review (2026) — The AI Agent Index(集成规模、定价、合规)。https://theaiagentindex.com/agents/n8n
- n8n Guide 2026 — AI Tool Radar(计费模型、fair-code 许可)。https://aitoolradar.io/guides/n8n
- n8n Review 2026: Still the Best Free Zapier Alternative? — AI Tool Analysis(社区反馈、模板规模)。https://aitoolanalysis.com?p=2701/
- n8n - AI Tool Review — PromptGalaxy(n8n 2.0 特性、Persistent Memory、客户名单)。https://www.promptgalaxyai.com/tools/43
- Best Free AI Agents in 2026 — AI Market Cap(n8n 与 CrewAI 对比、社区用量反馈)。https://aimarketcap.io/?p=3568/
- 2026 企业智能体开发平台全景评测:八大主流平台横向对比 — 稀土掘金。https://juejin.cn/post/7654244323158016038
- 项目参数卡 v1.0(Harness 六层能力模型、Agent Framework / Platform 边界定义)— 本项目内部基准文件。
- R09-AI-Agents 组检索报告 — 本项目内部检索报告。
n8n
1. Introduction
1.1. Platform Positioning
n8n is a workflow automation platform developed by the Berlin-based German company n8n GmbH (founded in 2019), released under the "fair-code" model: the source code is public and it can be self-hosted, but commercial use beyond a threshold requires an enterprise license. Its core business is system integration automation — using visual nodes to connect SaaS, databases, and messaging systems into automation pipelines; after 2024, it rapidly extended into the agent domain via LangChain nodes and the AI Agent node, becoming a representative of the "automation platform + AI" route.
A common misconception is to treat n8n as "just another Agent framework." This study's judgment is: n8n should be positioned as the "connectivity and reach layer" of an AI Harness, rather than a complete Harness. It excels at connecting agents into real business systems (CRM, databases, ticketing, IM), but falls short on the core engineering capabilities of an agent runtime — context engineering, evaluation, and governance are largely absent from its capability landscape. The typical best practice is not "build agents with n8n," but "use n8n to supply blood to agents built with LangGraph / CrewAI / Claude Agent SDK."
1.2. Basic Information Card
| Item | Content | Confidence |
|---|---|---|
| Developer | n8n GmbH (Berlin, founded 2019) | High |
| Form | Automation platform (visual workflows + AI extensions) | High |
| License | Sustainable Use License (fair-code): source code public, self-hostable; commercial use beyond a threshold requires a paid enterprise license | High |
| First release | 2019 | High |
| Latest version | n8n 2.0 (2026-01) | Medium (third-party source) |
| GitHub scale | 191K ~ 203.3K stars (different search time points between 2026-07 and 09) | Medium, varies by time point |
| Integration scale | 400+ native integration nodes; 1,200+ community nodes; 70+ LangChain nodes | Medium-high |
| Template scale | 9,500+ workflow templates | Medium |
| Funding | Series C of $180M (2025-10), valuation of approximately $2.5B (media source, not independently audited by the company) | Medium |
| ARR | Approximately $70M (media source) | Low–Medium |
| Pricing (annual, EUR) | Community self-hosted free (unlimited workflows / executions / users); Starter €20/month (2,500 executions); Pro €50/month (10,000); Business €667/month (40,000, Git version control, SSO/LDAP, isolated environments); Enterprise custom | Medium-high |
| Billing model | Per-execution billing: one complete workflow run counts as 1 execution, regardless of the number of steps | High |
| Compliance | Cloud version SOC 2 Type II, ISO 27001, SOC 3, GDPR, HIPAA support; states it does not train models on customer data | Medium |
| Known customers | NASA, Adobe, Twilio (low-relevance sources) | Low |
| Community scale | 200,000+ members (vendor claim) | Low–Medium |
Version numbers, stars, and funding data are as of the 2026-09 search time point and change rapidly; when citing, it is recommended to note the retrieval date.
1.3. Development Timeline
| Time | Event | Source grade |
|---|---|---|
| 2019 | n8n GmbH founded; released the node-based workflow automation platform | Medium-high |
| 2024–2025 | Introduced the LangChain node system and AI Agent node, extending into the agent domain | Medium |
| From 2025-04 | Pricing strategy adjustment: removed all active workflow count limits; unlimited users and unlimited active workflows across all tiers | Medium |
| 2025-10 | Series C funding of $180M, valuation of approximately $2.5B (media source) | Medium |
| 2026-01 | n8n 2.0 released: native LangChain support; Chains / Agents / Memory / Vector Stores became first-class nodes; the Tool node was introduced | Medium |
| 2026-07-03 | Switched to EUR pricing, added the €667/month Business tier (40,000 executions, SSO, Git version control) | Medium |
1.4. Position in the AI Harness System
According to the parameter card's boundary table, n8n is neither an Agent Framework (which mainly covers a subset of L2/L3) nor fully an Agent Platform (Harness' productized encapsulation). Its more accurate coordinate is: the "connectivity and reach layer" outside the Harness lineage —
- Its L2 (Tools and Execution) reaches the strongest level in the entire group in the form of "connectors": 400+ native integrations + 1,200+ community nodes + bidirectional MCP;
- But L1 (Context Engineering) and L5 (Evaluation and Observability) are largely blank; L3 lacks persistent execution and resumable-run semantics; L4 has only basic cross-execution memory;
- It has a complementary rather than competitive relationship with Agent frameworks: Agent frameworks excel at "thinking," while n8n excels at "reaching real systems."
Therefore, rating n8n as a "complete Harness" is a classification error; excluding it from the Harness research would likewise be an error — in real enterprise deployment, it is the pipeline between agents and business systems.
2. Glossary
| Term | English / Abbreviation | Definition |
|---|---|---|
| Workflow | Workflow | An automation graph composed of nodes, covering triggers, actions, data transformations, and AI operations; it is the top-level organizing unit of n8n |
| Node | Node | A unit of operation within a workflow; n8n provides 400+ native integration nodes and 1,200+ community nodes, plus inline JavaScript / Python code nodes |
| Trigger | Trigger | The entry node of a workflow, determining when it starts: scheduled schedules, Webhooks, application events, chat messages, MCP calls, etc. |
| Execution | Execution | One complete workflow run, which is the cloud version's billing unit — independent of the number of steps; a multi-step complex flow and a single-step simple flow cost the same |
| AI Agent Node | AI Agent Node | An agent node: combines an LLM with tools into an autonomous loop, can invoke any other n8n node as a tool, supports conversation memory and streaming output |
| Tool Node | Tool Node | Introduced in n8n 2.0: any workflow can be designated as a "Tool," thereby becoming a reusable skill callable by an AI Agent |
| Credential | Credential | A credential management mechanism: keys, tokens, and account configurations needed by nodes to connect external systems are centrally managed, separated from workflow definitions |
| Persistent Memory | Persistent Memory | A memory mechanism that maintains conversation context across executions; the backend can be Redis, Postgres, or in-memory |
| MCP Server Trigger | MCP Server Trigger | A trigger that exposes a workflow to external AI Agents, letting n8n be invoked as an MCP server |
| MCP Client Tool | MCP Client Tool | A node that lets a workflow call external MCP servers, connecting n8n into the ecosystem as an MCP client |
| Expression | Expression | A data-reference expression between nodes that can reference upstream nodes' output in parameters; it is the basis of n8n's data-flow assembly |
| AI Workflow Builder | AI Workflow Builder | An auxiliary feature that automatically generates workflows from natural-language descriptions; 50 credits/month on Starter, 150 on Pro, 1,000 on Enterprise |
| Vector Store Nodes | Vector Store Nodes | A family of nodes for vector databases, supporting Pinecone, Qdrant, Chroma, Supabase, and more |
| Community Node | Community Node | Community-contributed extension nodes, over 1,200 in total, distributed through the npm ecosystem |
| Autopilot | Autopilot | An autonomous Agent execution form using cloud computing resources (low-relevance source, details) |
3. Feature Description
3.1. Visual Workflow Engine
The core of n8n is a node-based visual workflow engine, which supports:
- Branching paths: route the execution flow to different branches based on conditions;
- Parallel execution: multiple branches advance simultaneously;
- Loops: process each item of a data collection one by one;
- Error handling: node-level error branches and retries;
- Conditional logic and expressions: reference upstream data between nodes via Expressions.
All of these capabilities can be configured visually, and can also be extended via JavaScript / Python inline code nodes — "visual-first, code as a fallback" is the key difference between n8n and purely low-code platforms.
3.2. AI Subsystem
n8n's AI capabilities are composed of 70+ LangChain nodes, divided into three parts:
- LLM nodes: OpenAI, Anthropic Claude, Google Gemini, local Ollama, and more;
- AI Agent node: combines an LLM with tools into an autonomous loop, able to invoke any node in n8n as a tool — this is its smartest design: the agent's "hands" directly reuse the 400+ integration nodes without rewriting the tool layer;
- Vector store nodes: Pinecone, Qdrant, Chroma, Supabase, and more, supporting simple RAG scenarios.
3.3. Bidirectional MCP Capability
n8n implements both directions of MCP:
- As an MCP server (MCP Server Trigger): expose any workflow as a tool callable by external AI Agents;
- As an MCP client (MCP Client Tool): call external MCP servers directly within a workflow.
This is strategically isomorphic to Dify's bidirectional MCP (see 05-dify.md): the platform is no longer just a "place to build Agents," but also becomes "the hands and feet of Agents from other ecosystems." For n8n, the latter is especially valuable — it turns the 400+ integrations into a capability pool shared by the entire MCP ecosystem overnight.
3.4. Key Changes in n8n 2.0
The main changes in n8n 2.0 (2026-01):
- Native LangChain support: Chains / Agents / Memory / Vector Stores became first-class nodes;
- Tool node: any workflow can be designated as a Tool, becoming a reusable skill for Agents — a workflow is a tool;
- Autosave and improved execution tracing;
- Advanced node grouping and collapsible sections, improving the maintainability of large workflows.
3.5. Billing and Version Strategy
- Per-execution billing is the n8n cloud version's most workflow-friendly design: a 50-step workflow and a 1-step workflow both count as 1 execution; compared with competitors that bill per step, the cost advantage for long flows is significant;
- Removed active-workflow count limits starting in 2025; unlimited users across all tiers;
- Switched to EUR pricing in 2026-07 and added the Business tier, but there is a clear price gap between Starter (€20, 5 concurrent) and Business (€667), with a missing transitional tier between Pro and Business.
4. Platform Architecture
图 4-1|n8n 分层架构:从 Agent 框架到业务系统的连接触达层
数据来源:基于本文分析绘制的示意图。
4.1. Deployment Modes and Tech Stack
- Deployment methods: Docker, npm, any Linux / macOS / Windows server, Kubernetes;
- When self-hosted, all data remains within the customer's infrastructure, and this data-sovereignty feature lets it meet compliance requirements such as HIPAA / GDPR / SOC 2;
- Development form: visual node editor + JavaScript / Python inline code;
- The enterprise version provides Git version control, isolated environments (dev / staging / prod), SSO / LDAP, RBAC, audit logs, and 200+ concurrent executions.
4.2. Execution Model
n8n's execution model follows traditional workflow-engine semantics, rather than agent-runtime semantics:
| Dimension | n8n's semantics | Agent runtime semantics (comparison) |
|---|---|---|
| Trigger | A Trigger starts a single run | Loops driven by events or user messages |
| State | Execution history records, with no run-level checkpoints | Session / Checkpoint supports resuming from breakpoints |
| Failure recovery | Re-run from scratch or take an error branch | Resume from the most recent checkpoint (e.g., LangGraph's pending writes) |
| Long tasks | Limited by a single execution's timeout | Can run across processes and across hours continuously |
This difference is not a defect but a consequence of its form: n8n's main battleground is minute-level business automation, not hour-level autonomous tasks.
4.3. Division of Labor with Agent Frameworks
Neither n8n's official team nor the community positions n8n as an Agent framework, but rather as the orchestration / connectivity layer that connects Agents into real business systems. Two typical divisions of labor:
- n8n triggers external frameworks: n8n's Webhook / scheduled triggers call services of frameworks such as CrewAI and LangGraph, and write the results back to business systems;
- n8n embeds Agents: directly use the AI Agent node, which calls the 400+ integration nodes to complete a closed loop, suitable for tool-dense, reasoning-light scenarios.
5. Harness Design
5.1. Overview of the Six-Layer Capabilities
| Layer | Name | Implementation strength | Basis for judgment |
|---|---|---|---|
| L1 | Context Engineering | Weak | No context-engineering primitives; context is manually assembled via nodes; only Persistent Memory maintains cross-execution context |
| L2 | Tools and Execution | Strong (the strongest connectivity in the group) | 400+ native integrations + 1,200+ community nodes + inline JS/Python + bidirectional MCP + vector store nodes |
| L3 | Orchestration and Control | Medium-strong | Visual DAG: branching, parallel, loops, error handling; but no graph state machine, no checkpoint recovery semantics |
| L4 | Memory and State | Medium | Persistent Memory (Redis / Postgres / in-memory) maintains context across executions |
| L5 | Evaluation and Observability | Weak / Medium | Execution history and execution tracing (improved in 2.0); no evaluation sets, no golden dataset, no LLM-specific evaluation |
| L6 | Governance and Security | Medium | Self-hosted data sovereignty; SSO / RBAC / audit only on Enterprise; no Agent-specific guardrails, no budget guardrails |
5.2. L1 Context Engineering Layer
n8n is largely absent at this layer:
- No primitives such as context compaction, priority ordering, or cache reuse;
- The context passed to the LLM is manually assembled by developers using nodes and expressions, and can easily balloon in long-conversation scenarios;
- Persistent Memory only solves "remembering," not "compression" and "selection."
If a heavy-reasoning agent is built inside n8n, the absence of L1 directly translates into token costs and a higher failure rate for long tasks.
5.3. L2 Tools and Execution Layer
This is where n8n's structural advantage lies, and it is its unique value relative to all Agent frameworks:
- Connection density: 400+ native integrations covering CRM, databases, communications, project tools, and cloud platforms, plus 1,200+ community nodes — no Agent framework's tool ecosystem can compare;
- Agents are node consumers: the AI Agent node can use any n8n node as a tool, with zero redundant construction of the tool layer;
- Bidirectional MCP: both exports capabilities (MCP server) and consumes capabilities (MCP client);
- Code as a fallback: inline JS / Python nodes cover long-tail scenarios not covered by integrations.
5.4. L3 Orchestration and Control Layer
- The visual DAG provides branching, parallel, loops, and error handling, which is sufficient for process automation;
- But compared to LangGraph's graph state machine and persistent execution, and ADK 2.0's Workflow Runtime, n8n lacks checkpoint recovery semantics: an interrupted long task can only be re-run from scratch;
- No sub-agent dispatch, no HITL approval nodes, or other agent-specific control primitives;
- Rated "medium-strong": mature as a workflow engine, but lacking as an agent orchestrator.
5.5. L4 Memory and State Layer
- Persistent Memory is the only mechanism at this layer, supporting Redis / Postgres / in-memory backends, and can maintain session context across executions;
- No layered design for long-term memory (compared to CrewAI's four-layer Memory, and ADK's four-scope State);
- No artifact management or run-level checkpoints.
5.6. L5 Evaluation and Observability Layer
- Existing: execution history, execution tracing (improved in n8n 2.0), node-level data inspection;
- Missing: no evaluation sets, no golden dataset, and no evaluation of LLM output quality — the "how well the agent performs" layer is completely blank and requires external tools such as Langfuse and LangSmith to fill in;
- This is the layer where the gap between n8n and "platform-type players" (Coze Loop, LangSmith, OpenJudge) is largest.
5.7. L6 Governance and Security Layer
| Governance capability | Community self-hosted | Paid cloud version |
|---|---|---|
| Data sovereignty | All data on own infrastructure | Cloud compliance certifications |
| SSO / LDAP | None | From Business |
| RBAC | None | Enterprise |
| Audit logs | None | Enterprise |
| Git version control / isolated environments | None | From Business |
| Compliance certifications | Self-hosted self-certification | SOC 2 Type II / ISO 27001 / SOC 3 / GDPR / HIPAA support |
| Agent-specific guardrails | None | None |
| Budget guardrails (cost caps) | None | None |
It must be emphasized: n8n has no agent-facing guardrails or budget mechanisms — a runaway agent loop will not stop on its own, and there is no built-in cap on token costs. These two are first-class citizens in Claude Agent SDK (max_budget_usd) and Bailian (Vault + permission system), but in n8n they must rely on external monitoring and process design as a fallback.
5.8. Concrete Manifestations of Three Inherent Tensions
| Tension | Manifestation on this platform | Mitigation means |
|---|---|---|
| Flexibility ↔ Predictability | The visual DAG is predictable but limited in expressiveness; after the AI Agent node introduces probabilistic behavior, part of the execution path becomes uncontrollable | Constrain the Agent within a single node; place external side effects (sending emails, writing to the database) in deterministic nodes after the Agent node |
| Openness ↔ Governance | The 1,200+ community nodes and bidirectional MCP greatly expand capability but also introduce supply-chain and attack surface; centralized credential management enlarges the blast radius of a leak | Enterprise RBAC + audit; community nodes must pass security review before installation; least-privilege credentials |
| Cost ↔ Depth | Per-execution billing is friendly to multi-step flows, but the token cost of heavy-reasoning chains is not counted in the execution count and is easily overlooked | The free self-hosted tier handles high-frequency flows; add caching and model routing to LLM nodes; monitor token consumption externally |
6. Real-world Cases
Customers and scale (vendor / low-relevance sources, not independently verified):
- Known customers include NASA, Adobe, and Twilio (from third-party review sites, without specific scenarios or effectiveness data);
- Community scale of 200,000+ members (vendor claim).
Community feedback (qualitative, not quantitative):
- Some users replaced Zapier + internal scripts + part of a LangChain backend with a single n8n instance;
- Some users run production workflows on Railway for about $5/month;
- Users on the DEV community reported that "after 8 months of use, I would not go back to Zapier for complex projects";
- Some customers claim to handle 1,000+ AI interactions per day without pressure.
Parts with no public quantitative data found: as of the retrieval date 2026-09-12, no enterprise deployment case with quantitative ROI data was found (such as cost-reduction percentages, task success rates, or labor-replacement rates). Neither the customer list nor the community feedback above constitutes evidence of effectiveness; it is labeled truthfully and not supplemented.
7. Summary
7.1. Strengths
- Unmatched connectivity: 400+ native integrations + 1,200+ community nodes, the highest-density means of reaching real business systems among all platforms;
- Friendly cost structure: self-hosting is entirely free with unlimited executions; the cloud version bills per execution (not per step), giving a clear cost advantage for complex flows;
- Data sovereignty: self-hosted data does not leave the domain, fitting compliance requirements such as HIPAA / GDPR / SOC 2;
- Bidirectional MCP: both an MCP server and a client, turning itself into a capability pool for the MCP ecosystem;
- Smart AI Agent node design: reuses integration nodes as tools, with zero redundant construction of the tool layer;
- Huge ecosystem and templates: 9,500+ templates, 200,000+ community members (vendor claim).
7.2. Weaknesses
- L1 / L5 are largely blank: no context-engineering primitives and no evaluation system, which is its biggest shortcoming as an "agent hosting platform";
- No persistent execution semantics: no checkpoints, no resuming from breakpoints, so long-task reliability is weaker than LangGraph-style solutions;
- Governance is buried behind a deep paywall: SSO / RBAC / audit are all in the Enterprise / Business tiers;
- No Agent guardrails or budget guardrails: runaway agents and token overspend require external fallback;
- Steep learning curve: unfriendly to users accustomed to Zapier; self-hosting requires Docker / Linux operations skills;
- Poor error-troubleshooting experience: a common community complaint is that errors appear as empty output with no clear cause;
- Pricing gap: there is no transition tier between Starter's 5 concurrency and Pro (€50) → Business (€667).
7.3. Application Boundaries
| Scenario | Applicable? | Reason |
|---|---|---|
| Connecting AI Agents into real business systems (CRM / ticketing / IM / databases) | Most applicable | Highest connection density in the group |
| Automation requiring data sovereignty and cost control | Most applicable | Self-hosted free + per-execution billing |
| Tool-dense, reasoning-light agent closed loops | Applicable | The AI Agent node reuses integration nodes |
| Combining with LangGraph / CrewAI / Claude Agent SDK | Applicable | A classic division of labor where each does its own job |
| Simple linear automation for non-technical teams | Not applicable | Zapier / Make are more suitable |
| Long-duration tasks requiring persistent execution and resuming from breakpoints | Not applicable | No checkpoint semantics |
| Core agent flows requiring an evaluation regression system | Not applicable | L5 is blank; should switch to or bolt on a specialized evaluation facility |
7.4. Selection Recommendations
- Positioning judgment: treat n8n as a supplement to an AI Harness's "connectivity and reach layer," rather than a complete Agent Harness. The question to ask when evaluating it should be "Can my Agents conveniently reach business systems?" rather than "Can it host my core agents?"
- Combination strategy: recommend a division of labor among n8n + LangGraph / CrewAI / Claude Agent SDK — the framework handles reasoning and orchestration, while n8n handles triggering, integration, and writing back; n8n's MCP Server Trigger lets the framework-side Agent call n8n workflows as tools, which is a low-cost way to combine them.
- Trade-off with Dify: choose Dify when 80% of the load is AI reasoning and knowledge QA; choose n8n when 80% of the load is pipeline integration between systems.
- Must confirm before adoption: whether heavy-reasoning chains are placed inside n8n (recommended not to); whether evaluation and observability already have an external solution (Langfuse / LangSmith); whether enterprise governance needs fall inside the paywall.
Information-Gap Statement
- Series C funding and valuation: the $180M / approximately $2.5B valuation is a 2025-10 media figure, not confirmed by company audit, marked
[To be verified]. - ARR of approximately $70M: media figure, marked
[To be verified]. - Enterprise cases with quantitative ROI: none found, and none supplemented.
- Versions and roadmap after 2026-01: no official description was found for version evolution after n8n 2.0.
- L1 / L5 layer capabilities: essentially confirmed missing (not merely not found), rated "Weak"; if a later version fills them in, this article's conclusions need updating.
- Autopilot's specific mechanism: only mentioned by a low-relevance source; details marked
[To be verified]. - Specific use scenarios and scale of known customers (NASA / Adobe / Twilio): no public details.
- GitHub stars count: 191K / 198K / 203.3K are figures from different retrieval time points; the time point must be noted when citing.
8. References
- n8n official website. https://n8n.io/
- n8n official documentation. https://docs.n8n.io/
- n8n Review (2026) — The AI Agent Index (integration scale, pricing, compliance). https://theaiagentindex.com/agents/n8n
- n8n Guide 2026 — AI Tool Radar (billing model, fair-code license). https://aitoolradar.io/guides/n8n
- n8n Review 2026: Still the Best Free Zapier Alternative? — AI Tool Analysis (community feedback, template scale). https://aitoolanalysis.com?p=2701/
- n8n - AI Tool Review — PromptGalaxy (n8n 2.0 features, Persistent Memory, customer list). https://www.promptgalaxyai.com/tools/43
- Best Free AI Agents in 2026 — AI Market Cap (comparison of n8n and CrewAI, community usage feedback). https://aimarketcap.io/?p=3568/
- 2026 Enterprise Agent Development Platform Panoramic Review: Horizontal Comparison of Eight Major Platforms — Juejin. https://juejin.cn/post/7654244323158016038
- Project Parameter Card v1.0 (Harness six-layer capability model, Agent Framework / Platform boundary definitions) — this project's internal benchmark document.
- R09-AI-Agents group retrieval report — this project's internal retrieval report.