Description
n8n-nodes-tamperlens
This is an n8n community node for Tamperlens — a
Document Trust API that reports structural fraud signals on PDFs, images
and Office documents: revision chains, font anomalies, producer fingerprints,
metadata mismatches, redaction exposure and more. Every signal ships with its
evidence and the benign explanation, and the API never returns an
approve/deny verdict — the judgment stays with your workflow.
n8n is a fair-code licensed
workflow automation platform.
Installation
Follow the installation guide
in the n8n community nodes documentation:
Settings → Community Nodes → Install → n8n-nodes-tamperlens
Operations
| Operation | What it does | Metering |
|—|—|—|
| Inspect Document | Full structural inspection of a PDF, image (JPEG/PNG/WebP/HEIC/AVIF) or Office file. Returns summary.riskScore, summary.riskBand and a signals[] array, each with evidence. Optional issuer baseline via the Issuer field. | 1 document |
| Get Metadata | The metadata a file carries — authors, tools, dates, machine paths, device traces — without a full inspection. | 1 document |
| Compare Documents | Diff a candidate PDF against the original you already trust: the strongest check there is. Takes two binary fields. | 2 documents |
All operations read the document from the incoming item’s binary data, and
Tamperlens parses it in memory. Maximum file size 10 MB.
What is kept. Get Metadata and Compare Documents keep nothing. Inspect
Document follows the retention setting of the account behind the key: for
accounts created since 2026-10-13 the API keeps, by default, a short derived
record of each call (hashes, signal ids and the score; never the file, its name
or its text), and keeps the file itself, encrypted, only if the account opted
in. To keep nothing, set the key to retention: none with
PATCH /api/v1/retention from a signed-in session. Every field is listed at
tamperlens.com/privacy#retention.
Credentials
Create a free API key at tamperlens.com/account
— 50 documents a month, no card. Paste it into the Tamperlens API
credential. The credential test calls a keyed, unmetered endpoint, so testing
never spends quota.
Usage
A typical screening flow:
1. A trigger delivers a document (IMAP attachment, webhook upload, watched folder).
2. Tamperlens → Inspect Document on the binary.
3. An IF node routes on {{$json.summary.riskBand}} — low continues
automatically, elevated/high goes to a human queue with
{{$json.signals}} attached as the reviewer’s evidence.
Branch on signals[].id (stable family ids) when one family matters more to
your flow than the single score does. Store signals[].evidence — it is
small, contains no document content, and is what a human reviewer needs.
> Tamperlens reports risk signals, not authenticity verdicts. Signals can have
> benign causes; combine them with your own decision logic.
Compatibility
Requires n8n 1.x (tested against recent releases) and Node.js ≥ 20. The
package has zero runtime dependencies.
Resources
- n8n community nodes documentation
- Tamperlens API quickstart
- API reference · OpenAPI
- The 19 signal families
- Measured false-positive rate
