n8n.delete_agent critical conf mediumhuman approval
Permanently destroys an agent along with its skills, tasks, custom tools, and version history; a single caller can wipe the whole configuration with no recovery path.
n8n.publish_workflow high conf mediumhuman approval
Promotes a draft to the live production version, putting automation that holds production credentials into service with no second reviewer in the loop.
n8n.execute_workflow high conf mediumOBO
Runs the published version of a workflow against production credentials, so every external side effect it encodes — emails sent, records written, files moved — happens for real and cannot be undone.
n8n.test_workflow high conf mediumOBO
Pins credentialed nodes but still executes credential-free I/O nodes for real, so Execute Command and file read/write nodes run against the n8n host during a nominal test.
n8n.mutate_agent high conf mediumOBO
Changes what an AI agent is allowed to do — its instructions, skills, scheduled tasks, and attached custom tools — widening the blast radius of everything the agent later executes.
n8n.publish_agent high conf mediumhuman approval
Turns a draft into a live agent and activates its scheduled tasks and chat integrations, putting an autonomous actor into production without a separate approver.
n8n.update_agent_integration high conf mediumOBO
Wires an AI agent into a Slack, Telegram, or Linear workspace — or severs that link — changing which conversations the agent can read and post into.
n8n.delete_data_table_column high conf lowhuman approval
Permanently drops a column and every value stored in it; one caller can destroy a field of records, including personal data, with no undo.
n8n.get_workflow_execution medium conf lowaudit
Retrieves a single execution record whose payload can contain whatever data the workflow processed, including customer records pulled from connected systems.
n8n.add_data_table_rows medium conf lowaudit
Bulk-inserts rows into a shared data table that production workflows read from, and the values written may include personal data supplied by the agent.
All other tools (15)
n8n.add_data_table_column low conf mediumallow
Extends a data table's schema with an additional column; existing rows and workflow bindings are unaffected.
n8n.archive_workflow medium conf mediumaudit
Removes a workflow from the active set so it no longer appears in normal use; recoverable, but any process depending on it stops.
n8n.create_agent medium conf mediumaudit
Stands up a new AI agent draft with a model, a credential, and system instructions — the governed configuration surface for an autonomous actor inside the tenant.
n8n.create_data_table low conf mediumallow
Provisions a new data table in a project; empty on creation, so the immediate impact is storage footprint rather than data exposure.
n8n.create_workflow_from_code medium conf mediumaudit
Materializes a new workflow from supplied SDK code, including Code nodes and nodes bound to stored credentials; it stays a draft until published.
n8n.explore_node_resources medium conf mediumaudit
Uses a stored credential to query a connected service live and return its real resources — Slack channels, Google Sheets tabs, available models — exposing the connected account's inventory.
n8n.list_credentials medium conf mediumaudit
Enumerates every credential the caller can reference from a workflow — names and IDs only, no secret material, but it maps which third-party systems the instance can reach.
n8n.rename_data_table low conf mediumallow
Changes a data table's display name; the table ID and its contents are untouched, so workflow bindings keep working.
n8n.rename_data_table_column medium conf mediumaudit
Renames a column that live workflows reference by name, so automations reading that field can start failing or writing to the wrong place.
n8n.revert_agent medium conf mediumaudit
Overwrites the working draft with an older published version, discarding unpublished config, skill, task, and custom-tool changes.
n8n.search_workflow_executions low conf mediumallow
Returns execution metadata — status, timing, workflow ID — useful for run-history reconnaissance but carrying no payload data.
n8n.unpublish_agent medium conf mediumaudit
Stops a live agent's tasks and chat integrations; work routed through that agent quietly stops being handled until it is republished.
n8n.unpublish_workflow medium conf mediumaudit
Takes a live automation out of production; downstream business processes stop running silently until someone republishes it.
n8n.update_workflow medium conf mediumaudit
Rewrites the node graph, parameters, and credential bindings of an existing workflow; the batch is atomic but the prior definition is replaced.
n8n.verify_agent_mcp_server medium conf mediumaudit
Opens a live connection to an external MCP server using a stored credential and enumerates its tools, vetting a third-party tool surface before it is attached to an agent.