n8n-nodes-cipp-advanced

Advanced n8n community node for CIPP.app — comprehensive Microsoft 365 multi-tenant management for MSPs.

Acknowledgement: This project builds on the foundation of @joshuanode/n8n-nodes-cipp by Joshua Smith. The codebase was substantially rewritten with a modularised architecture, full API alignment audit against the CIPP OpenAPI spec, and expanded to 476 operations across 29 resources (~89% of the CIPP API surface).

Features

476 operations across 29 resources covering:

• Identity Management — Users (51 ops), Groups (11), Contacts (11), Identity (9)
• Email & Exchange — Mailbox (46), Transport rules (20), Spam filters (18), Safe Links (12), Exchange Resources (9), Quarantine (4)
• Security & Compliance — Policies/Intune (32), Conditional Access (14), Alerts (14), GDAP (13)
• Tenant Administration — Tenants (34), Standards/BPA/Drift (23)
• Devices — Devices (10), Autopilot (12)
• Apps — Applications (24)
• Teams & SharePoint — Teams (12), Teams Shifts (28), Voice (4)
• CIPP Platform — Tools (11), CIPP Admin (24), CIPP Core (14), Scheduled Items (5), Backups (4), OneDrive (2)
• AI Composite Operations — Workflows (3 ops: security posture, BEC investigation, license audit + cross-tenant sweep)

User-Friendly Design

• Tenant Selector — Searchable dropdown to select tenants by name
• Tenant List Caching — In-memory cache (default 30 min TTL) speeds up the tenant dropdown; configurable on/off and TTL in credential settings
• Secure Score Caching — Raw Secure Score data cached per-tenant (default 60 min TTL); switching output modes re-runs the local transform without re-fetching
• Field Picker — Multi-select for user properties (no need to memorise Graph API field names)
• Smart Defaults — Sensible default selections to keep responses fast and small
• AI Agent Compatible — Works as a tool in n8n AI agent workflows (usableAsTool)
• Composite Operations — Multi-step CIPP workflows for AI agents and MSP automation: security posture (8-signal indicator scan + gaps[]), BEC investigation (sign-ins, forwarding rules, OAuth apps), license audit, and cross-tenant sweep

Installation

n8n (Self-hosted)

npm install n8n-nodes-cipp-advanced

Or add to your n8n Docker container:

# In your Dockerfile
RUN npm install -g n8n-nodes-cipp-advanced

Credentials Setup

1. Create an Azure AD App Registration for CIPP API access
2. Configure the following in n8n:
   • CIPP Instance URL: Your CIPP deployment URL (e.g., https://cipp.yourdomain.com)
   • Azure AD Tenant ID: The tenant where your CIPP app registration lives
   • Application (Client) ID: From your Azure AD app registration
   • Client Secret: Generated from your app registration
   • Enable Tenant List Cache (optional, default: on): Caches tenant list to speed up the dropdown
   • Tenant Cache TTL (optional, default: 30 min): How long to cache the tenant list (1–1440 minutes)
   • Enable Secure Score Cache (optional, default: on): Caches raw Secure Score data per tenant so re-runs with a different output mode don't re-fetch
   • Secure Score Cache TTL (optional, default: 60 min): How long to cache Secure Score data (1–1440 minutes)

For detailed authentication setup, see the CIPP API Documentation.

Resources & Operations

Example Usage

List All Tenants

Resource: Tenant
Operation: Get Many
Return All: true

List Users with Sign-In Activity

Resource: User
Operation: Get Many
Tenant: Select from dropdown
Fields to Return: Display Name, User Principal Name, Mail, Sign-In Activity
Return All: true

License Utilisation Report (MSP Summary)

Resource: Tenant
Operation: Get Licenses
Tenant: Select from dropdown
Output Mode: MSP Summary
Return All: true

Returns one flat row per license with UtilizationPct, RenewalUrgency, AssignmentMethod, and other computed metrics — ideal for dashboards and alerting workflows.

Custom Graph Request

Resource: Tools
Operation: Graph Request (List)
Tenant: Select from dropdown
Endpoint: users
$select: id,displayName,userPrincipalName
$filter: startsWith(displayName,'John')

Teams Shifts

Resource: Teams Shift
Operation: List Shifts
Tenant: Select from dropdown
Team ID: <team-guid>

CIPP-API Requirement: The Teams Shift resource and the Exec Graph Request tool both use POST /api/ExecGraphRequest, which is not part of the standard CIPP API. You must be running a custom fork of CIPP-API that exposes the ExecGraphRequest endpoint.

Development

# Install dependencies
npm install

# Build
npm run build

# Lint
npm run lint

# Link for local testing
npm link

Acknowledgements

This project builds on the foundation of @joshuanode/n8n-nodes-cipp by Joshua Smith, who created the original CIPP n8n integration.

Links

• CIPP.app
• CIPP Documentation
• CIPP API Endpoints
• n8n Community Nodes
• Original n8n-nodes-cipp

License

MIT - see LICENSE for details.