AI Coding Live News

n8n Labs Open-Sources Nod as a Research Preview: A Personal Agent with Its Own Local VM and Browser That Cancels Trials, Watches Prices and Pulls Invoices, Checks Permission Before Acting, and Scores 93.2% on LongMemEval

On November 10, n8n Labs, a new team inside workflow-automation company n8n, released Nod as a research preview. It is a desktop app separate from n8n that works inside a sandboxed virtual machine on your computer with its own browser. It connects to Gmail, Calendar, Drive, Slack, and Notion, can operate websites that have no integration, and takes requests in the app, on Telegram, or on WhatsApp. Nod is open source under Apache 2.0 and uses your own ChatGPT Plus/Pro plan, API key, or a local model. Before it sends, pays, posts, or deletes anything, a separate model checks that you asked for it, and n8n warns that this check can itself make mistakes.

n8n Labs Open-Sources Nod as a Research Preview: A Personal Agent with Its Own Local VM and Browser That Cancels Trials, Watches Prices and Pulls Invoices, Checks Permission Before Acting, and Scores 93.2% on LongMemEval

Key Takeaways

  • Status: research preview for macOS 14+ and Windows 11 (WSL 2 required); the latest build, v0.6.1, shipped November 10 (GitHub Releases)
  • License and cost: Apache 2.0, free app; you pay your own model provider via ChatGPT Plus/Pro, an API key, or a local model, and no n8n account is needed
  • Memory: n8n reports 93.2% on LongMemEval (500 questions about past chats), and no email planted a false memory across 216 WhisperBench attacks (company figures)
  • Safety evals: in an October 17 run with GPT-6.1 Sol in a simulated environment, Nod finished 98% of errands, with 0 unsafe actions in 678 runs and 0 successful traps in 13 tests (vendor figures, no real accounts)
  • Cost guardrails: every task shows its cost and ends with a receipt, you can set a monthly limit, and Nod checks in once a task passes $5
Read full story
Linked Models & Agents:
n
n8nn8n-io·
👀85
🔥90

n8n 2.42.0: Agents on by default; AI Agent Tool nesting; MCP client/registry + Azure AI Foundry rename

n8n shipped [email protected] on 2026-09-29: Agents enabled by default (#39312); AI Agent Tool can use its own tools under a pre-v3 parent agent (#39160); MCP Client terminates sessions before close, MCP Registry flag removed from AI Assistant, editor adds Mistral Vibe to MCP picker; Azure OpenAI Chat Model renamed Azure AI Foundry with project/deployment listing and Entra app sign-in; plus shared Agent context and Agent Builder UX polish.

n8n 2.42.0: Agents on by default; AI Agent Tool nesting; MCP client/registry + Azure AI Foundry rename

Key Takeaways

  • Release [email protected] on 2026-09-29; compare 2.41.0...2.42.0
  • Agents enabled by default (#39312); shared Agent context (#38930)
  • AI Agent Tool nests its own tools under pre-v3 parents (#39160)
  • MCP: terminate session on client close; Registry ungated in AI Assistant; Mistral Vibe in MCP picker
  • Azure OpenAI node renamed Azure AI Foundry Chat Model; docs AI Agents
Read full story

Tencent Zhuque open-sources AI-Infra-Guard: CVE scanning for AI stacks plus MCP/Skill checks

@Ryrenz highlights Tencent Zhuque Lab’s open-source AI-Infra-Guard (github.com/Tencent/AI-Infra-Guard): a full-stack AI red-team/scanner with 146+ AI components and 2000+ CVE rules (a recent drop added 155 rules across 40+ components). Beyond infra such as n8n, vLLM, MLflow, and LangFlow, it scans MCP servers and Agent Skills for prompt-injection and unauthorized file-read risks. Apache-2.0; intended for internal use and currently has no auth gate.

Key Takeaways

  • Scans AI app stacks for known CVEs across components like n8n, vLLM, MLflow, and LangFlow.
  • Also scans MCP servers and Agent Skills for prompt injection and unauthorized file reads.
  • Apache-2.0 from Tencent Zhuque Lab; internal-use positioning with no auth—do not expose publicly.
Read full story
Linked Models & Agents: