Category: n8n Workflows

  • Automate Seo Tasks With Google Search Console & Ai Via Mcp Server 6824 – n8n Workflows – Free Template

    What This Workflow Does

    This n8n workflow automates SEO tasks by connecting Google Search Console with AI capabilities through a Model Context Protocol (MCP) server. It enables seamless integration between MCP-compatible AI tools like Claude and Google Search Console APIs, allowing users to manage and analyze search performance data programmatically without manual intervention.

    How It Works

    The workflow operates as an MCP server that bridges AI tools and Google Search Console. When triggered, it processes requests from AI assistants and translates them into API calls to Google Search Console. The httpRequestTool node handles API communications, while the MCP trigger receives commands from compatible AI platforms. Data flows through the workflow nodes, which process search console information and return results back to the requesting AI tool.

    Use Cases

    • Monitor keyword rankings and search performance across multiple websites automatically without logging into Google Search Console manually
    • Generate SEO reports by extracting search impressions, click-through rates, and average positions for specific date ranges
    • Identify and analyze low-performing pages to prioritize content optimization efforts based on real search data
    • Automate competitor keyword tracking and market trend analysis by querying search console data regularly
    • Create custom dashboards that pull live Google Search Console metrics and display them in a unified interface

    Nodes Used

    • httpRequestTool: Manages HTTP requests to Google Search Console APIs for data retrieval and manipulation
    • stickyNote: Provides workflow documentation and configuration notes for users implementing the template
    • @n8n/mcpTrigger: Receives commands and requests from MCP-compatible AI tools to initiate workflow actions

    Prerequisites

    • Active n8n instance with ability to create and run workflows
    • Google Search Console account with at least one verified property
    • Google Cloud Project with Search Console API enabled
    • Proper authentication credentials for Google APIs (OAuth 2.0 or service account)
    • MCP-compatible AI tool or client configured to connect to this workflow server
    • Basic understanding of SEO metrics and Google Search Console data structure

    Difficulty Level

    Intermediate. This workflow requires knowledge of API authentication, Google Search Console functionality, and MCP server concepts. While the template provides the foundation, users should be comfortable configuring OAuth credentials and understanding how MCP protocols work with AI tools. Prior experience with n8n workflows and REST APIs is beneficial but not strictly required.

    This workflow template is shared under the n8n fair-code license. Free to use and modify.

  • Automate Sales Tax Calculation With Sales Tax Calculator Api & Google Sheets 8046 – n8n Workflows – Free Template

    What This Workflow Does

    This automation workflow streamlines sales tax calculation by capturing address information through a form submission, querying a Sales Tax API for accurate tax rates, and automatically storing the results in Google Sheets. It eliminates manual tax rate lookups and ensures consistent, accurate tax data for your business operations.

    How It Works

    The workflow begins when a user submits a form with address details. These details are sent to the Sales Tax Calculator API, which returns the applicable tax rate for that location. The code node processes and formats this data, and finally stores it in a Google Sheet for centralized record-keeping and analysis.

    • Form trigger captures user address information
    • HTTP request sends address data to Sales Tax API
    • Code node transforms and validates the API response
    • Google Sheets node appends calculated tax data to your spreadsheet
    • Sticky notes provide workflow documentation and notes

    Use Cases

    • E-commerce Platforms: Automatically calculate accurate sales tax for customer orders based on shipping address
    • Multi-Location Retail: Maintain updated tax rate records across different jurisdictions and store locations
    • Accounting & Finance: Build a historical database of sales tax calculations for audit trails and compliance
    • Subscription Services: Calculate correct tax rates for recurring charges to different geographic regions
    • Invoice Management: Generate accurate invoices with location-specific tax amounts automatically included

    Nodes Used

    • Form Trigger: Captures form submissions containing customer address data
    • HTTP Request: Communicates with the Sales Tax Calculator API to fetch tax rates
    • Code: Processes, validates, and formats API responses for storage
    • Google Sheets: Stores calculated tax information in a spreadsheet for reporting and analysis
    • Sticky Note: Provides inline documentation and workflow instructions

    Prerequisites

    • An active n8n instance or n8n Cloud account
    • Valid Sales Tax Calculator API credentials and endpoint access
    • Google Account with access to Google Sheets
    • Google Sheets API credentials configured in n8n
    • A Google Sheet created to store tax calculation results
    • Basic understanding of form triggers and API integrations

    Difficulty Level

    Intermediate: This workflow requires knowledge of form triggers, API integration, basic code manipulation, and Google Sheets connectivity. Users should be comfortable with mapping data between nodes and understanding JSON structures.

    This workflow template is shared under the n8n fair-code license. Free to use and modify.

  • Automate Seo Title & Description Updates For WordPress With Yoast Seo Api 7180 – n8n Workflows – Free Template

    What This Workflow Does

    This workflow automates the process of updating SEO metadata for WordPress posts using the Yoast SEO API. It allows you to programmatically modify SEO titles and meta descriptions without manually editing each post in the WordPress dashboard.

    How It Works

    The workflow triggers manually and sends an HTTP request to a custom WordPress API endpoint. It passes the post ID along with new SEO title and meta description values. A custom plugin on your WordPress site receives the request and updates the Yoast SEO fields for the specified post.

    • Manual trigger initiates the workflow
    • Set node prepares the data structure
    • HTTP request sends the update to your WordPress site
    • Custom plugin processes and applies the changes to Yoast SEO fields

    Use Cases

    • Bulk update SEO titles and descriptions across multiple posts based on new content strategy
    • Automatically optimize SEO metadata when importing content from external sources
    • Update SEO information when rebranding or restructuring website content
    • Synchronize SEO metadata from a content management system to WordPress
    • Implement SEO changes programmatically as part of larger content automation workflows

    Nodes Used

    • Manual Trigger: Starts the workflow when executed manually
    • Set: Configures and formats the data to be sent
    • HTTP Request: Sends the update request to the WordPress API endpoint
    • Sticky Note: Provides documentation and instructions within the workflow

    Prerequisites

    • Active WordPress installation with Yoast SEO plugin installed
    • Custom plugin provided with this workflow must be installed and activated
    • WordPress site URL configured in the HTTP Request node
    • Post ID of the target post identified and ready for use
    • API authentication credentials if required by your WordPress setup

    Difficulty Level

    Beginner to Intermediate. The workflow uses basic n8n nodes and straightforward HTTP requests. Users need minimal knowledge of APIs but should be comfortable accessing WordPress administration settings and installing custom plugins.

    This workflow template is shared under the n8n fair-code license. Free to use and modify.

  • Automate Salon Appointment Management With Whatsapp, Gpt & Google Calendar 4926 – n8n Workflows – Free Template

    What This Workflow Does

    This comprehensive nail salon automation workflow integrates WhatsApp messaging, AI-powered responses, calendar management, and customer data organization. It enables nail salons to receive appointment requests via WhatsApp, process them with intelligent AI assistants, check availability in Google Calendar, store customer information in Airtable, and send confirmations back through WhatsApp and email.

    How It Works

    The workflow operates through multiple integrated systems:

    • WhatsApp messages trigger the initial workflow when customers contact the salon
    • HTTP requests handle data retrieval and external integrations
    • OpenAI and Google Gemini AI models process customer inquiries and generate contextual responses
    • Google Calendar checks real-time availability for appointment slots
    • Airtable stores and manages customer profiles and booking history
    • Redis caching optimizes performance for frequent queries
    • Gmail sends confirmation emails to customers
    • Scheduled triggers handle time-based tasks and reminders
    • AI agent with memory buffer maintains conversation context across interactions
    • Conditional logic routes messages based on intent and content

    Use Cases

    • Automated appointment booking: Customers text availability preferences, the AI checks the calendar, and confirms appointments instantly
    • Service inquiries: Customers ask about nail services, prices, and availability through WhatsApp with AI-generated responses
    • Reminder system: Scheduled triggers send appointment reminders 24 hours before bookings
    • Customer data management: New and returning customers are automatically added or updated in Airtable database
    • Multi-location coordination: Centralized system manages appointments across multiple salon locations with shared calendar access

    Nodes Used

    • whatsAppTrigger: Initiates workflow on incoming WhatsApp messages
    • httpRequest: Makes API calls to external services
    • @n8n/openAi: Processes natural language with GPT models
    • extractFromFile: Parses data from uploaded files
    • whatsApp: Sends WhatsApp messages to customers
    • if: Conditional branching based on message content
    • code: Custom JavaScript logic for complex operations
    • set: Assigns and transforms data between nodes
    • stickyNote: Provides workflow documentation and notes
    • switch: Routes execution based on multiple conditions
    • @n8n/memoryBufferWindow: Maintains conversation history for context
    • @n8n/agent: Orchestrates AI agent with multi-step reasoning
    • @n8n/lmChatOpenAi: Chat interface with OpenAI models
    • @n8n/lmChatGoogleGemini: Chat interface with Google Gemini
    • googleCalendar: Checks and manages salon appointments
    • airtable: Stores customer and booking records
    • redis: Caches frequently accessed data
    • wait: Introduces delays for rate limiting and timing
    • gmail: Sends email confirmations and notifications
    • scheduleTrigger: Runs workflows on schedule
    • googleCalendarTool: Tool for AI agent to access calendar data
    • airtableTool: Tool for AI agent to query customer database
    • redisTool: Tool for AI agent to access cached information

    Prerequisites

    • Active WhatsApp Business Account with API access configured
    • Google Account with Calendar and Gmail enabled
    • OpenAI API key with GPT model access
    • Google Gemini API key for alternative AI processing
    • Airtable account with base structure for customer and booking data
    • Redis server or cloud instance for caching layer
    • n8n instance with sufficient execution hours for high-volume booking traffic
    • Google Calendar with appointment slots pre-configured
    • Email account configured for transactional messages
    • Basic understanding of workflow orchestration and API authentication

    Difficulty Level

    Advanced. This workflow requires knowledge of multiple third-party integrations, AI model configuration, database management, and n8n’s advanced features including agents, memory buffers, and conditional logic. Setup involves configuring API keys, webhooks, and ensuring proper data mapping across multiple systems.

    This workflow template is shared under the n8n fair-code license. Free to use and modify.

  • Automate Seo Research & Content Gap Analysis With Gpt 4O, Serpapi, And Gmail 11893 – n8n Workflows – Free Template

    What This Workflow Does

    This workflow automates comprehensive SEO keyword research and content gap analysis by combining live Google SERP (Search Engine Results Page) data with AI-powered insights. It analyzes search rankings, competitor content, and identifies opportunities for content creation and optimization. The workflow includes intelligent error handling that automatically alerts your team via Slack when issues occur.

    How It Works

    The workflow begins by accepting a keyword input through a webhook trigger. It then performs the following operations in sequence:

    • Retrieves live SERP data using SerpApi integration to analyze current top-ranking results
    • Processes the search results through AI analysis using OpenAI’s chat model
    • Structures the analysis output using a specialized parser to ensure consistent, actionable data
    • Executes agent-based analysis to identify content gaps and opportunities
    • Stores findings in Google Sheets for tracking and historical reference
    • Sends detailed reports via Gmail to stakeholders
    • Posts notifications to Slack for team awareness
    • Automatically catches and reports any errors that occur during execution

    Use Cases

    • Content Strategy Planning – Identify underserved topics and content gaps in your industry to prioritize your editorial calendar
    • Competitive Analysis – Analyze competitor rankings for target keywords and discover what content strategies are working
    • SEO Opportunity Identification – Find high-value keywords with lower competition that your site could potentially rank for
    • Content Optimization Audits – Determine what existing content needs updating based on current SERP trends and user intent
    • Keyword Monitoring – Regularly track keyword performance changes and receive automated alerts about ranking shifts

    Nodes Used

    • Webhook – Accepts incoming keyword requests to trigger the analysis
    • SerpApi – Retrieves live Google search results and SERP data
    • OpenAI Chat – Processes and analyzes search data using advanced language models
    • Structured Output Parser – Formats AI analysis into structured, usable data
    • Agent – Orchestrates multi-step analysis and decision-making processes
    • Code – Enables custom logic and data transformation between nodes
    • Google Sheets – Stores analysis results for tracking and future reference
    • Gmail – Sends detailed analysis reports to team members
    • Slack – Posts workflow notifications and alerts to your team
    • Error Trigger – Catches workflow failures and sends error notifications
    • Sticky Note – Provides inline documentation and workflow guidance
    • Set – Manages variables and data flow between workflow steps

    Prerequisites

    • Active n8n instance with workflow execution capabilities
    • OpenAI API key with access to chat models
    • SerpApi account and API key for Google search data access
    • Google Sheets document for storing analysis results
    • Gmail account configured for sending reports
    • Slack workspace with a configured webhook or bot token
    • Basic understanding of SEO concepts and keyword research
    • Webhook endpoint configured to receive keyword input

    Difficulty Level

    Intermediate to Advanced – This workflow requires familiarity with n8n node configuration, API integrations, and SEO concepts. While the workflow is built with a user-friendly Loveable UI interface, successful implementation requires understanding how to set up API credentials, configure output parsing, and interpret SEO analysis results. Prior experience with automation workflows is recommended.

    This workflow template is shared under the n8n fair-code license. Free to use and modify.

  • Automate School Lunch Allergy Checks With Google Sheets, Slack & Ai Menu Suggestions 10908 – n8n Workflows – Free Template

    What This Workflow Does

    This AI-powered workflow automatically checks school lunch menus against student allergy records and sends alerts to relevant staff members. It combines data from multiple sources, uses artificial intelligence to analyze potential allergen matches, and delivers notifications through Slack, ensuring student safety during meal times.

    How It Works

    The workflow follows these steps:

    • Reads student allergy information, scheduled menus, and teacher contact details from Google Sheets
    • Formats and structures the data for AI processing
    • Uses an AI model via OpenRouter to intelligently match menu ingredients against student allergies
    • Merges datasets to create a comprehensive view of potential conflicts
    • Routes alerts through conditional logic based on match results
    • Sends notifications to relevant staff via Slack
    • Logs all interactions and stores records in Google Drive for compliance and documentation
    • Handles errors gracefully with dedicated error handling branches

    Use Cases

    • School cafeterias preventing allergic reactions by alerting staff before meals are served
    • Special education programs managing multiple student dietary restrictions simultaneously
    • Multi-school districts coordinating allergy information across different campuses
    • After-school programs checking snack and meal options against enrolled student allergies
    • Summer camp meal planning ensuring all dietary requirements are met before food preparation

    Nodes Used

    • Manual Trigger: Initiates workflow execution on demand
    • Google Sheets: Retrieves student, menu, and teacher data
    • Code Node: Processes and formats data for AI analysis
    • LM Chat OpenRouter: AI-powered analysis using language models to match allergies with menu items
    • Agent Node: Orchestrates complex decision-making processes
    • Merge: Combines multiple data streams into cohesive datasets
    • If: Routes workflow based on conditional logic and allergy match results
    • Set: Establishes variables and data structures for downstream nodes
    • Slack: Sends real-time notifications to school staff
    • Google Drive: Archives documentation and maintains audit trails
    • Error Trigger: Captures and handles workflow errors
    • Sticky Note: Provides inline documentation and workflow guidance

    Prerequisites

    • Active n8n account and workspace
    • Google Sheets containing student allergy data, menu items, and staff contact information
    • Google Drive folder for storing workflow logs and documentation
    • Slack workspace with appropriate channels for staff notifications
    • OpenRouter API credentials or alternative AI model access
    • Specific Google Sheets file IDs configured in the workflow
    • Slack channel names or user IDs identified for alert routing

    Difficulty Level

    Advanced. This workflow requires familiarity with n8n’s agent nodes, AI model integration, conditional logic routing, and multi-service API connections. Users should have experience working with Google Sheets data structures and Slack integrations. Configuration of the AI prompt engineering and allergy matching logic may require customization based on specific school requirements.

    This workflow template is shared under the n8n fair-code license. Free to use and modify.

  • Automate Seo Optimized Blog Creation With Gpt 4O, Perplexity Ai & Multi Language Support 7962 – n8n Workflows – Free Template

    What This Workflow Does

    WordPress Blog Automation Pro is an advanced content creation and publishing system that leverages artificial intelligence to research topics, generate high-quality blog posts, and automatically publish them to WordPress. The workflow combines AI-powered research, content generation, image processing, and multi-platform distribution to streamline your entire blogging operation.

    How It Works

    The workflow initiates through multiple trigger points including scheduled automation, form submissions, and manual execution. It uses AI agents powered by OpenAI to conduct deep research on topics using Perplexity, generates structured content using language models, processes and optimizes images, and distributes the final articles to WordPress while simultaneously logging data to Google Sheets and storing assets in Google Drive. The system includes intelligent batching, conditional logic, and error handling to ensure reliable operation.

    Use Cases

    • Content Marketing Agencies: Automate blog post creation for multiple client websites with consistent quality and SEO optimization
    • E-commerce Businesses: Generate product-related blog content that drives organic traffic and improves search engine rankings
    • News and Publishing Sites: Rapidly research and publish timely articles across multiple categories with minimal manual intervention
    • Digital Marketing Teams: Create a steady stream of content for lead generation campaigns while tracking performance metrics in spreadsheets
    • Niche Bloggers: Build authority in your subject matter through consistent, well-researched content without time-intensive writing processes

    Nodes Used

    • Schedule Trigger and Form Trigger: Multiple entry points for workflow initiation
    • Perplexity Tool: Conducts deep web research on specified topics
    • AI Agent and Language Model Nodes: Generates content using OpenAI integration with ChatGPT
    • Image Processing: Edit Image node for content optimization
    • Google Integration: Sheets for logging, Drive for asset storage, Docs for content drafting
    • WordPress Node: Direct publishing to WordPress sites
    • Data Processing: Split In Batches, Merge, Aggregate, Filter, and Code nodes for intelligent workflow control
    • File Handling: Convert To File and XML processing for format conversion
    • Conditional Logic: Switch and If nodes for branching and decision-making
    • Structured Output Parser: Ensures consistent data formatting throughout the workflow

    Prerequisites

    • Active WordPress site with admin access and REST API enabled
    • OpenAI API key for ChatGPT language model integration
    • Perplexity API credentials for research functionality
    • Google account with access to Sheets, Drive, and Docs
    • n8n account with sufficient execution time and AI node access
    • Basic knowledge of WordPress publishing workflows and SEO best practices
    • Familiarity with workflow automation concepts and JSON data structures

    Difficulty Level

    Advanced. This workflow requires intermediate to advanced understanding of n8n node configuration, API integrations, and workflow logic. Users should be comfortable with authentication setup, conditional branching, data transformation, and troubleshooting API responses. While the workflow is production-ready for experienced users, beginners may require additional learning time and support documentation.

    This workflow template is shared under the n8n fair-code license. Free to use and modify.

  • Automate School Notice Distribution Via Whatsapp, Email And Excel 7035 – n8n Workflows – Free Template

    What This Workflow Does

    This n8n workflow automates the distribution of school notices to students, parents, and staff through multiple communication channels. It runs daily at 9 AM, retrieves notices from an Excel database, validates the information, and sends them via WhatsApp and email to the appropriate recipients based on predefined groups.

    How It Works

    The workflow begins with a scheduled trigger that activates every day at 9 AM. It then reads notice data from an Excel spreadsheet, validates that all required information is present and properly formatted. Once validated, the system matches each notice with its intended audience and automatically sends distributions through both WhatsApp messaging and email channels simultaneously. The HTTP request node enables integration with external services, while conditional logic ensures only properly formatted notices are processed.

    Use Cases

    • Daily attendance alerts and class schedule updates sent automatically to parents and students each morning
    • Emergency announcements about school closures, weather delays, or safety updates distributed instantly to all stakeholders
    • Assignment deadlines and exam schedule notifications delivered to specific grade levels or classes
    • Event reminders for school functions, parent-teacher conferences, and extracurricular activities
    • Fee payment reminders and administrative notices sent to parents on a regular scheduled basis

    Nodes Used

    • Schedule Trigger – Initiates the workflow daily at 9 AM
    • If Node – Validates notice data completeness and format requirements
    • Code Node – Processes and transforms notice data for distribution
    • Email Send – Delivers notices via email to recipients
    • HTTP Request – Connects to WhatsApp API for message delivery
    • Microsoft Excel – Reads and manages notice data from spreadsheets
    • Sticky Note – Documents workflow steps and configuration notes

    Prerequisites

    • Active n8n instance with scheduler enabled for daily triggers
    • Microsoft Excel file containing notices with columns for date, content, recipient groups, and status
    • Email service credentials configured in n8n (SMTP or email provider integration)
    • WhatsApp Business API account or Twilio WhatsApp integration setup
    • Contact lists or databases containing student and parent phone numbers and email addresses
    • Proper permissions to access and modify Excel files from n8n

    Difficulty Level

    Intermediate. This workflow requires basic understanding of n8n node configuration, Excel data structures, and API integrations. Users should be comfortable setting up email and WhatsApp credentials, creating conditional logic, and testing HTTP requests. Prior experience with automation platforms is recommended but not essential.

    This workflow template is shared under the n8n fair-code license. Free to use and modify.

  • Automate Seo Optimized WordPress Posts With Ai & Google Sheets 3085 – n8n Workflows – Free Template

    What This Workflow Does

    This n8n workflow automates the entire WordPress blog optimization process using artificial intelligence. It fetches article context from Google Sheets, generates optimized blog post content and titles using OpenAI, creates WordPress posts with featured images, and automatically generates SEO-optimized meta titles and descriptions through AI analysis.

    How It Works

    The workflow begins with a manual trigger that initiates the process. It retrieves article topics and context from Google Sheets, then uses OpenAI to generate compelling post content and titles. The generated content is automatically published to WordPress with proper formatting. An AI-powered SEO expert analyzes the created article and generates optimized meta titles and meta descriptions. Finally, images are uploaded to WordPress media and associated with the published posts, and all generated metadata is applied to enhance search engine visibility.

    Use Cases

    • Content marketing agencies managing multiple client blogs and needing consistent, SEO-optimized post generation at scale
    • Digital marketing teams automating blog content creation while maintaining brand voice and SEO best practices
    • E-commerce businesses creating product-related blog content to improve organic search traffic and rankings
    • SaaS companies building content libraries for educational blog posts and customer resources automatically
    • Publishers and bloggers streamlining their editorial workflow from ideation to publication with AI assistance

    Nodes Used

    • Manual Trigger – Initiates the workflow execution
    • Google Sheets – Fetches article topics and context data
    • Set – Prepares and formats data for subsequent nodes
    • OpenAI – Generates blog post content and titles using GPT models
    • WordPress – Creates and publishes posts to WordPress sites
    • HTTP Request – Handles API calls and data transfers
    • Chain LLM – Chains multiple language model operations together
    • LM Chat OpenRouter – Provides access to multiple AI models via OpenRouter
    • Output Parser Structured – Parses and structures AI-generated responses
    • Sticky Note – Documents workflow steps and instructions

    Prerequisites

    • Active WordPress site with API access enabled
    • WordPress user account with post creation and media upload permissions
    • Google Sheets account with blog topic data properly organized
    • OpenAI API key with GPT-4 or GPT-3.5 access
    • OpenRouter API key for additional language model options
    • n8n instance with outbound webhooks enabled
    • Featured images or image generation capability for blog posts
    • Understanding of WordPress post structure and metadata

    Difficulty Level

    Intermediate to Advanced. This workflow requires configuration of multiple API connections including WordPress, Google Sheets, and OpenAI. Users should be comfortable setting up API authentication, mapping data between different services, and understanding AI prompt engineering for optimal content generation. Basic knowledge of WordPress metadata and SEO principles is beneficial.

    This workflow template is shared under the n8n fair-code license. Free to use and modify.

  • Automate Siem Alert Enrichment With Mitre Att&Ck, Qdrant & Zendesk In N8N 2840 – n8n Workflows – Free Template

    What This Workflow Does

    This workflow automates SIEM alert enrichment by combining MITRE ATT&CK threat intelligence data with vector database capabilities. It ingests security alerts, enriches them with contextual threat information, and automatically creates tickets in Zendesk for incident response teams. The system uses AI-powered embeddings to match alerts against a searchable vector store of threat patterns and attack techniques.

    How It Works

    The workflow follows a multi-stage enrichment process:

    • Security alerts trigger the workflow through the chat interface or manual trigger
    • Alert data is processed and embedded using OpenAI embeddings for semantic similarity matching
    • A vector database query against Qdrant retrieves relevant MITRE ATT&CK techniques and threat intelligence
    • The AI agent analyzes the alert in context of retrieved threat data
    • Enriched alert information is structured and formatted
    • A Zendesk ticket is automatically created with enrichment details for the security team

    Use Cases

    • Security Operations Centers (SOCs) automating alert triage and enrichment to reduce response time
    • Threat intelligence platforms enriching raw security events with MITRE ATT&CK framework mappings
    • Incident response teams automatically correlating alerts with known attack techniques and creating tracked tickets
    • Security teams building a searchable knowledge base of security events linked to threat tactics and procedures
    • Compliance and forensics teams documenting alert enrichment and automated response actions for audit trails

    Nodes Used

    • Chat Trigger – Receives security alerts and user queries
    • Agent – Orchestrates the enrichment workflow and decision-making
    • LM Chat OpenAI – Provides AI-powered analysis and contextual understanding
    • Embeddings OpenAI – Converts alert data into vector embeddings for similarity matching
    • Vector Store Qdrant – Stores and queries threat intelligence vectors
    • Document Default Data Loader – Ingests threat intelligence documents
    • Text Splitter Token Splitter – Chunks documents for optimal embedding
    • Memory Buffer Window – Maintains conversation context during analysis
    • Split Out – Distributes data across parallel processing paths
    • Split In Batches – Processes large alert volumes efficiently
    • Google Drive – Retrieves threat intelligence files and configuration data
    • Zendesk – Creates and updates incident tickets with enrichment results
    • Output Parser Structured – Formats enriched alert data consistently
    • Manual Trigger – Allows on-demand enrichment requests
    • Sticky Note – Documents workflow logic and configuration notes
    • No Op – Handles conditional branching and flow control

    Prerequisites

    • Active n8n instance with workflow execution capabilities
    • OpenAI API credentials with access to embedding and chat models
    • Qdrant vector database instance with threat intelligence collections configured
    • Zendesk account with API access for ticket creation
    • Google Drive access with stored threat intelligence documents or MITRE ATT&CK data
    • SIEM system configured to send alerts to the n8n workflow endpoint
    • Properly formatted threat intelligence JSON files prepared and stored in Google Drive

    Difficulty Level

    Advanced. This workflow requires familiarity with security concepts including SIEM operations, threat intelligence frameworks, vector database operations, and AI-powered analysis. Setup involves configuring multiple external services (OpenAI, Qdrant, Zendesk, Google Drive) and preparing threat intelligence data in the correct format. Ideal for security engineers and automation specialists with experience in incident response workflows.

    This workflow template is shared under the n8n fair-code license. Free to use and modify.