Execution data redaction now explicit in API

Public API callers can now explicitly request redacted or revealed execution data instead of relying on workflow defaults. A new query parameter surfaces the `execution:reveal` scope requirement and returns redaction metadata.
When pulling execution data via the n8n public API, callers previously had no way to explicitly request redacted or revealed output — the system applied workflow-level redaction policies with no override. This left developers in a bind when they needed predictable behavior, especially for automation pipelines or compliance audits where data visibility must be consistent.
The public API now accepts a redactExecutionData query parameter on both GET /executions and GET /executions/:id. Passing true forces redaction, false requests revealed data (and fails with a 403 if the caller lacks the execution:reveal scope), and omitting the parameter falls back to workflow policy. The response now includes a redactionInfo object when data has been redacted, exposing whether the data is redacted, the reason, and whether the current user can reveal it.
This matters for developers building integrations that need deterministic output handling — automation scripts can now reliably get redacted data without surprises, and authorized users can pull revealed data without guessing at policy defaults.
View Original GitHub Description
Summary
- Adds
redactExecutionDataquery parameter toGET /executionsandGET /executions/:idpublic API endpoints, allowing callers to explicitly control execution data redaction - Documents the
redactionInfofield insideexecution.datain the OpenAPI spec - Adds proper 403 error handling when a user lacks the
execution:revealscope - Includes integration tests covering redaction, reveal, and scope-forbidden scenarios
Related Linear tickets, Github issues, and Community forum posts
https://linear.app/n8n/issue/IAM-200
Review / Merge checklist
- PR title and summary are descriptive. (conventions)
- Docs updated or follow-up ticket created.
- Tests included.
- PR Labeled with
Backport to Beta,Backport to Stable, orBackport to v1(if the PR is an urgent fix that needs to be backported)