One security concern I've been thinking about in n8n is how much trust we give to incoming data. Imagine a workflow receives a webhook from an external source, passes the payload to an AI agent, and allows that agent to use tools connected to the workflow. The problem is that the incoming payload isn't necessarily trustworthy. It could contain unexpected fields, malicious instructions, or values designed to trigger actions the workflow wasn't supposed to perform. Prompt instructions alone don't seem like a reliable security boundary. I'm curious how experienced n8n builders approach this: Do you isolate untrusted input before it reaches the agent, validate every tool parameter against a strict schema, or enforce permissions at the individual node level? I'd particularly like to understand how you prevent untrusted input from influencing actions outside the intended scope of a workflow.

I've been thinking about something while learning to build n8n automations. Let's say you build a lead follow-up system for a dental clinic. Everything works as expected, but a month later the client changes their booking process, adds new lead sources, or wants different follow-up rules. How do you usually handle these changes? Do you build workflows in a modular way from the beginning so they're easier to update, or do you treat every change as a separate paid improvement? Also, how do you prevent small client requests from turning into endless scope creep? Would be interested to hear how people with actual agency experience handle this.

Something I've been wondering while learning n8n is how you know when your automation setup has outgrown its original infrastructure. Let's say you're running a few workflows for clients. Everything works fine initially, but as more clients come in, you're handling more leads, API requests, and workflow executions. At what point do you know it's time to upgrade? A few things I'm curious about: - When is a basic VPS no longer enough? - When would you consider moving to a more powerful server? - How do you decide when to introduce tools like Redis? - Is it better to upgrade infrastructure proactively or only when performance starts suffering? - How much infrastructure complexity is actually necessary for a small automation agency? I'd rather understand how to build something that's reliable and scalable without spending money on infrastructure I don't need yet. How do you approach this as an agency grows?

I've been learning n8n and thinking about how I'd architect a lead follow-up system for a dental clinic in the US. Let's say a clinic generates around 100 new enquiries daily through its website, Google Ads, and social media. The automation captures each lead, sends an acknowledgement, qualifies the enquiry, and notifies the front desk so they can arrange an appointment. Now imagine the clinic expands its marketing and starts receiving 1,000–5,000 enquiries daily across multiple locations. At that point, I'm wondering how you'd redesign the workflow to handle the increased volume reliably. A few things I'd like to understand: - Would you keep everything in one n8n workflow or split it into smaller, event-driven workflows? - Would queue mode with Redis make sense for handling incoming leads? - How would you handle API rate limits when integrating with CRMs, email services, and messaging platforms? - How would you prevent duplicate follow-ups if a workflow retries after an API timeout? - Would you use PostgreSQL to track lead status and maintain execution consistency? - What monitoring would you implement to detect failed executions before leads get missed? I'm particularly interested in how experienced n8n builders would approach this architecture before deploying it for a real client. Would you prioritize keeping the system simple or designing for scale from day one?

Something I've been thinking about lately is whether a lot of what we call AI agents are actually autonomous agents or just workflows with an LLM sitting in the middle. There's a pretty big difference between an agent that can dynamically decide which tools to use and a workflow that follows a predefined sequence with a few AI-powered steps. I'm curious about where people draw the line: - Does an agent genuinely need the ability to choose its own tools? - When is a deterministic workflow better than an agent-based architecture? - How much autonomy should you give an agent before reliability becomes a problem? - Should critical business operations always require human approval? - Is there a point where adding more agentic behaviour actually makes the system worse? I feel like the real engineering challenge isn't making agents more autonomous, but making them predictable enough to trust in production. What's your take?