The flow
Starts it 1Logic 3Service 12
The steps in the order they run, from what starts it.
- 1Vendor/AI-Tool Request WebhookWebhookStarts it
- 2Is AI-Tool Request?IfLogic
- 3RelayShield - Supply Chain Risk (AI Tool)Relay ShieldService
- 4RelayShield - Secret Scan (AI Tool)Http RequestService
- 5RelayShield - OAuth Watchlist (AI Tool)Relay ShieldService
- 6RelayShield - MCP Registry Risk (AI Tool)Http RequestService
- 7RelayShield - Supply Chain Risk (SaaS)Relay ShieldService
- 8RelayShield - Secret Scan (SaaS)Http RequestService
- 9RelayShield - OAuth Watchlist (SaaS)Relay ShieldService
- 10Any AI-Tool Risk Found?IfLogic
- 11Any SaaS Risk Found?IfLogic
- 12Log Flagged Request to NotionNotionService
- 13Alert Security Team in SlackSlackService
- 14Email Requester, Pending ReviewGmailService
- 15Log Clean Result to NotionNotionService
- 16Email Requester, ApprovedGmailService
How it's built
- Starts on
- Another system calling it
- Steps
- 16, with 3 branches
- Size
- Medium: a working afternoon
- Connects to
- Gmail, Notion, Slack
- Model
- None. This is plumbing, not judgement
Questions
What does it need to run?
An n8n account, plus your own Gmail, Notion and Slack accounts. You connect your own accounts after importing it; none are included.
What starts it?
It starts on another system calling it.
Does it use AI?
No. Every step is fixed logic or a call to a service, so it does the same thing every time.
How long does it take to set up?
Plan an afternoon. 16 steps is enough that you should read each one before running it.
How do I import it?
Copy the workflow, open a new workflow in n8n and paste. The steps appear on the canvas, ready for your own accounts.
Before you run itNothing here has been tested by us. It is somebody's working automation, read and described from its own steps. Treat the connections it wants as a list of accounts it will touch, and read the 16 steps before you point it at anything that matters.