n8n-nodes-keylynk

A native n8n community node to securely resolve and decrypt credentials from your zero-knowledge KeyLynk vault.

Why KeyLynk for n8n?

Most n8n builders paste raw API keys directly into HTTP nodes or store them in n8n's database. This creates two major security leaks:

1. Workflow JSON Leaks: Exporting or sharing your workflow JSON exposes your live production secrets in plaintext.
2. Execution History Leaks: n8n saves node inputs and outputs, meaning your decrypted API keys are stored in plaintext in the n8n database and visible in your execution history UI.

Included Nodes

This package includes two nodes tailored for different security and architectural needs:

1. KeyLynk HTTP Request (Recommended - 100% Secure)

Make outbound API requests using a secret from your vault without ever exposing the decrypted key to the n8n canvas or database logs.

• How it works: It fetches your encrypted secret, decrypts it in-memory, injects it directly into the outgoing request (header, query parameter, or JSON body), and outputs only the API response to the canvas.
• Best for: Securely calling REST APIs (e.g., Supadata, OpenAI, Anthropic, custom webhooks).

2. KeyLynk Resolver (Flexible)

Resolve and decrypt a secret and output it as a plaintext value to the n8n canvas so you can chain it to downstream nodes.

• Warning: Because it outputs the secret to the canvas, the key will be visible in execution history logs. To secure this node, you must set Save successful production executions to Do not save in your workflow settings.
• Best for: Advanced workflows where the secret must be passed to native n8n integration nodes (like Slack, Google Sheets, databases) that cannot be replicated with a simple HTTP request.

Installation

You can install this node directly from your self-hosted or cloud n8n dashboard:

1. Go to Settings > Community Nodes.
2. Click Install a community node.
3. Enter n8n-nodes-keylynk.
4. Click Install.