cd /news/ai-agents/n8n-open-sources-nod-a-local-ai-agen… · home › topics › ai-agents › article
[ARTICLE · art-169585] src=alphasignal.ai ↗ pub= topic=ai-agents verified=true sentiment=↑ positive

n8n Open-Sources Nod, a Local AI Agent That Blocks Unauthorized Actions

N8n released Nod, an Apache-2.0 local-first personal AI agent that runs a sandboxed Linux workspace and Chromium browser on the user's machine, scoring 98% completion with 0 unsafe actions across 678 test runs on 226 errands. Nod's local server checks each proposed app or browser action against the current request and stored policies, pausing unauthorized state changes for approval, and its Vault injects passwords and cards at the browser so they are never exposed to the model. The agent runs on macOS 14 or later, with Windows 11 and Linux in preview, and supports 30+ model providers including OpenAI, Anthropic, Gemini, and local Ollama and vLLM endpoints.

read2 min views2 publishedNov 14, 2026
n8n Open-Sources Nod, a Local AI Agent That Blocks Unauthorized Actions
Image: Alphasignal (auto-discovered)

n8n open-sourced Nod, a local-first personal agent that gets its own sandboxed computer and browser to finish real-world errands across Gmail, Slack, and the open web.

  • n8n open-sourced Nod , a local personal agent with its own sandboxed computer and browser

  • Apache-2.0, free, runs on macOS 14+, Windows 11 preview, Linux preview, or self-hosted

  • Scored 98% completion with 0 unsafe actions across 678 test runs on 226 errands

  • Vault injects passwords and cards at the browser, never exposing them to the model

  • Supports 30+ model providers including OpenAI, Anthropic, Gemini, and local Ollama

  • Details and install guide at nod.n8n.io The team behind workflow automation platform n8n has released Nod, an Apache-2.0 personal AI agent that operates a sandboxed Linux workspace and Chromium browser on the user’s computer. A model plans each job; the local runtime executes the browser and app actions needed to complete it. The release gives developers an inspectable implementation of local agent execution, credential isolation, and server-enforced approval checks.

Nod at launch
Primary platform macOS 14 or later
--- ---
Preview platforms Windows 11 and Linux
Execution Local Node.js process, Docker containers, Linux workspace, and Chromium browser
License Apache-2.0
Model access Cloud providers, supported subscriptions, or local Ollama and vLLM endpoints
Current tenancy Single user

Approval is part of execution #

Nod can gather context from Gmail, Calendar, Slack, and Notion, then prepare work that spans those services and authenticated websites. A scheduled morning task, for example, can assemble a one-page call brief from email threads, calendar entries, internal notes, and recent client news.

Before an app action or browser step changes external state, Nod’s local server checks the proposal against the current request and stored policies. Actions without authorization for approval. Read-only browsing can proceed automatically, while message sends, form submissions, purchases, cancellations, and similar changes require prior authorization or a later confirmation.

This story is for Pro members #

You've reached the end of the free preview. Upgrade to AlphaSignal Pro to read the full article - and everything else behind the paywall.

── more in #ai-agents 4 stories · sorted by recency
── more on @n8n 3 stories trending now
sponsored brought to you by zahid.host 4,200+ EU-deployed projects
reading about agents? ship yours in a single git push.

Run your AI side-project on zahid.host

EU-based hosting, git-push deploys, automatic HTTPS, no cold starts. Free tier with a custom domain — perfect for shipping the agent you just read about.

$git push zahid main
→ Live at https://your-agent.zahid.host ✓
Get free account → Pricing
from €0/mo · no card required
LIVE [news/n8n-open-sources-nod…] indexed:0 read:2min 2026-11-14 · —