n8n Agent gets admin controls for granular action permissions

Admins can now disable the n8n Agent entirely or block specific actions like workflow deletion and credential removal with a new settings page that ships with 15 permission toggles.
n8n administrators can now control n8n Agent at a granular level through a dedicated settings page. The new interface provides an enable/disable toggle that completely gates agent functionality, plus per-action permission dropdowns for 15 different operations including workflow creation, file system access, and credential deletion.
Each action can be set to "Needs approval," "Always allow," or "Blocked." The new blocked mode immediately denies requests without prompting, unlike the existing approval workflow. For example, if an admin blocks the delete-credential action, the agent returns a denied response instantly rather than suspending for human approval.
The settings page was redesigned to match Figma specifications with proper heading hierarchy, consistent spacing, and an orange toggle color. Backend changes ensure the enable toggle actually controls access—previously the toggle existed but didn't gate functionality. The default behavior leaves the agent enabled for backward compatibility.
This gives instance administrators the control needed for production deployments where certain agent actions may pose security or operational risks.
View Original GitHub Description
Summary
<img width="1026" height="646" alt="Screenshot 2026-04-01 at 18 04 57" src="https://github.com/user-attachments/assets/f7c295c0-39b6-4482-90e7-de2376d2f676" /> <img width="1004" height="659" alt="Screenshot 2026-04-01 at 18 06 25" src="https://github.com/user-attachments/assets/409fa19f-6d77-4f62-bac5-e65011a2bd7d" />- Adds the n8n Agent admin settings page with an enable/disable toggle and per-action permission dropdowns (Needs approval / Always allow / Blocked)
- Wires up the enable toggle to actually gate agent functionality —
InstanceAiService.isEnabled()now checks both the admin toggle and model configuration - Aligns the settings page with the Figma designs (typography, spacing, colors, switch color, layout)
Changes
Backend
instance-ai-settings.service.ts: ExposesisAgentEnabled()public getter; defaultsenabledtotruefor backward compatibilityinstance-ai.service.ts:isEnabled()now checkssettingsService.isAgentEnabled() && !!model- Tool runtime (22 tools): Added
blockedpermission mode — tools return denied immediately without prompting
Frontend
SettingsInstanceAiView.vue: Full redesign matching Figma — correct heading sizes (20px/16px), font weights (500), colors (#414244), orange toggle, inset row separators, fixed-width dropdowns, centered layouten.json: i18n keys for all 15 permission labels, toggle text, and section headings
API Types
instance-ai.schema.ts: Addedenabledfield to admin settings response/update request; addedblockedto permission mode enum