Package Information
Documentation
n8n-nodes-axiorank
n8n community nodes for AxioRank, the security gateway for AI agents.
Use these nodes to bring AxioRank into your n8n workflows. Start a workflow the moment AxioRank reports a security event, then act on it: approve or deny a held action, quarantine an agent, or update an alert or incident. Because the action node is usable as an AI Agent tool, an n8n AI Agent can also take these actions directly.
This package has no runtime dependencies and calls the AxioRank API using n8n's built in HTTP client.
Installation
Nodes
Credentials
Example workflow
Compatibility
Resources
Installation
Follow the installation guide in the n8n community nodes documentation.
On n8n Cloud or a self hosted instance, open the nodes panel, search for AxioRank, and install. To install manually on a self hosted instance:
npm install n8n-nodes-axiorank
Nodes
AxioRank Trigger
Starts a workflow when AxioRank reports a security event. Select one or more events under Trigger On:
| Event | Fires when |
|---|---|
| Hold Awaiting Approval | An action is held and is waiting for a human decision |
| Approval Resolved | A held action is approved or denied |
| Tool Call Held | A tool call is held for approval as high risk |
| Kill Chain Detected | A multi step attack pattern is correlated on an agent |
| Agent Quarantined | An agent is quarantined by a rule or an operator |
| Inbound Request Flagged | Inbound agent traffic to a verified property is evaluated |
| Tool Call Evaluated | Any tool call is evaluated, for any decision (high volume) |
When the workflow is activated, the node registers a webhook subscription with AxioRank. When it is deactivated, the subscription is removed.
AxioRank
Acts on AxioRank entities.
| Resource | Operation | What it does |
|---|---|---|
| Approval | Approve or Deny | Resolve a held action by approving or denying it |
| Agent | Set Quarantine | Quarantine an agent as a reversible kill switch, or release it |
| Alert | Update Status | Acknowledge, resolve, suppress, or reopen an alert |
| Incident | Update Status | Acknowledge, resolve, or reopen an incident |
| Incident | Run Response | Quarantine the implicated agent, create a containment policy, or open a SOAR ticket |
Every ID field offers a searchable From List picker as well as a By ID mode, so you can map an ID straight from a trigger step.
Credentials
You need an AxioRank workspace API key with the automation scope.
- Sign in to AxioRank and open Settings, then API keys.
- Create a key, choosing the Workspace option and the
automationscope. The key starts withaxr_. - In n8n, create an AxioRank API credential and paste the key.
Leave Base URL at https://app.axiorank.com for AxioRank Cloud. Change it only for a self hosted or staging deployment.
Example workflow
- AxioRank Trigger with Hold Awaiting Approval selected.
- A Slack node that posts the held action to your security channel.
- A human replies, and an AxioRank node runs Approval: Approve or Deny with the approval ID mapped from the trigger.
Compatibility
Tested against n8n 1.x. Requires an AxioRank workspace.