Merged
Size
M
Change Breakdown
Feature85%
Docs10%
Testing5%
#27743feat(core): Add redactExecutionData query param to public API executions

Execution data redaction now explicit in API

Execution data redaction now explicit in API

Public API callers can now explicitly request redacted or revealed execution data instead of relying on workflow defaults. A new query parameter surfaces the `execution:reveal` scope requirement and returns redaction metadata.

When pulling execution data via the n8n public API, callers previously had no way to explicitly request redacted or revealed output — the system applied workflow-level redaction policies with no override. This left developers in a bind when they needed predictable behavior, especially for automation pipelines or compliance audits where data visibility must be consistent.

The public API now accepts a redactExecutionData query parameter on both GET /executions and GET /executions/:id. Passing true forces redaction, false requests revealed data (and fails with a 403 if the caller lacks the execution:reveal scope), and omitting the parameter falls back to workflow policy. The response now includes a redactionInfo object when data has been redacted, exposing whether the data is redacted, the reason, and whether the current user can reveal it.

This matters for developers building integrations that need deterministic output handling — automation scripts can now reliably get redacted data without surprises, and authorized users can pull revealed data without guessing at policy defaults.

View Original GitHub Description

Summary

  • Adds redactExecutionData query parameter to GET /executions and GET /executions/:id public API endpoints, allowing callers to explicitly control execution data redaction
  • Documents the redactionInfo field inside execution.data in the OpenAPI spec
  • Adds proper 403 error handling when a user lacks the execution:reveal scope
  • Includes integration tests covering redaction, reveal, and scope-forbidden scenarios

Related Linear tickets, Github issues, and Community forum posts

https://linear.app/n8n/issue/IAM-200

Review / Merge checklist

  • PR title and summary are descriptive. (conventions)
  • Docs updated or follow-up ticket created.
  • Tests included.
  • PR Labeled with Backport to Beta, Backport to Stable, or Backport to v1 (if the PR is an urgent fix that needs to be backported)
© 2026 · via Gitpulse