Description
n8n-nodes-azure-cosmos-sdk
This is an n8n community node for Azure Cosmos DB. It provides complete SQL query freedom using the official Azure Cosmos DB SDK, enabling advanced features like hybrid search, vector similarity search, and Microsoft Entra ID authentication.
Why Use This Node?
Unlike the native n8n Cosmos DB node (which uses REST API), this implementation:
- ✅ Uses Azure Cosmos DB SDK (not REST API) for full feature support
- ✅ Complete query freedom – write any SQL query including hybrid search
- ✅ Vector similarity search – supports
VectorDistance()and hybrid search queries - ✅ Vector field exclusion – optionally exclude large embedding fields to reduce payload
- ✅ Role-Based Access Control (RBAC) – supports Microsoft Entra ID authentication with granular permissions
- ✅ Modern SDK features – access to latest Cosmos DB capabilities
Note: Hybrid search and vector similarity features (
VectorDistance(),RRF(), etc.) are only available through the SDK. The NoSQL REST API does not support these advanced query capabilities. This is why this node uses the official Azure Cosmos DB SDK instead of REST API.
Azure Cosmos DB is a fully managed NoSQL and relational database for modern app development with vector database support.
n8n is a fair-code licensed workflow automation platform.
Installation
Follow the installation guide in the n8n community nodes documentation.
Development
# Install dependencies
npm install
# Build the node
npm run build
# Run in development mode
npm run dev
Operations
This node supports multiple operations against Azure Cosmos DB containers:
Select (Query Documents)
Execute full SQL queries with complete freedom:
- Any SQL Query: Write any Cosmos DB SQL query
- Hybrid Search: Combine vector similarity search with traditional filters
- Vector Similarity: Use
VectorDistance()function for semantic search - Vector Field Exclusion: Option to exclude vector/embedding fields from results to reduce payload size
Example Queries:
Basic Query:
SELECT * FROM c WHERE c.status = "active"
Vector Similarity Search:
SELECT TOP 10 c.id, c.title, VectorDistance(c.embedding, [0.1, 0.2, ...]) AS similarity
FROM c
ORDER BY VectorDistance(c.embedding, [0.1, 0.2, ...])
Hybrid Search (Vector + Filters):
SELECT TOP 10 c.id, c.title, VectorDistance(c.embedding, [0.1, 0.2, ...]) AS similarity
FROM c
WHERE c.category = "research" AND c.year >= 2023
ORDER BY VectorDistance(c.embedding, [0.1, 0.2, ...])
Insert (Create Document)
Insert new documents into a container:
- JSON Input: Provide document as JSON
- Auto-generated Metadata: Returns document with Cosmos DB metadata (
_rid,_self,_etag, etc.) - Partition Key Support: Automatically handles partition keys
Example:
{
"id": "unique-id-123",
"name": "John Doe",
"email": "john@example.com",
"status": "active"
}
Credentials
This node supports two authentication methods:
Option 1: Master Key Authentication (Default)
- Azure Cosmos DB Account: Sign up at Azure Portal
- Endpoint URL: Your Cosmos DB account endpoint (e.g.,
https://your-account.documents.azure.com:443/) - Access Key: Primary or secondary key from Azure Portal → Your Cosmos DB Account → Keys
The credential test uses HMAC-SHA256 signature authentication with master keys to verify your connection by listing databases.
Option 2: Microsoft Entra ID (Azure AD) Authentication with RBAC
For enhanced security using OAuth2 user delegation and Role-Based Access Control (RBAC):
This credential extends n8n's Microsoft OAuth2 API credential, which handles the OAuth2 authorization code flow and automatic token refresh.
RBAC Benefits:
- ✅ Granular permissions – Assign specific roles (Data Reader, Data Contributor, etc.) instead of full access
- ✅ Auditable – All operations are tied to the authenticated user's identity
- ✅ Revocable – Remove access without changing master keys
- ✅ Secure – No need to share master keys across teams
Setup Steps:
- Create an App Registration in Azure Portal → Microsoft Entra ID
- Add redirect URI:
https://your-n8n-instance/rest/oauth2-credential/callback - Under "API permissions", add delegated permission:
Azure Cosmos DB→user_impersonation - Grant admin consent for the permission
- Assign Cosmos DB RBAC roles to users in Azure Portal → Cosmos DB Account → Access Control (IAM):
- Cosmos DB Built-in Data Reader – Read-only access to data
- Cosmos DB Built-in Data Contributor – Read and write access to data
- Custom roles for fine-grained control
- In n8n, create a "Microsoft OAuth2 API" credential with:
- Scope:
https://cosmos.azure.com/user_impersonation offline_access - Your app's Client ID and Client Secret
- Scope:
- Create "Azure Cosmos DB SDK (Entra ID) API" credential:
- Select your Microsoft OAuth2 credential
- Enter your Cosmos DB endpoint URL
- Configure token refresh buffer (optional, default: 900 seconds)
Scopes Used: https://cosmos.azure.com/user_impersonation with offline_access for token refresh
The node uses user delegation (on-behalf-of the authenticated user) with the Azure Cosmos DB SDK. Access is controlled by the RBAC roles assigned to the user.
Compatibility
- Minimum n8n version: 1.0.0
- Node.js version: >=20.0.0
- Azure Cosmos DB SDK: @azure/cosmos ^4.2.1
Usage
Select Operation
- Add the Azure Cosmos DB (SDK) node to your workflow
- Select or create credentials with your Cosmos DB endpoint and access key
- Choose Select operation
- Enter:
- Database Name: Your Cosmos DB database name
- Container Name: Your container name
- SQL Query: Your SQL query (e.g.,
SELECT * FROM c WHERE c.status = "active")
Excluding Vector Fields:
When working with vector embeddings, you can reduce payload size:
- Expand the Options section
- Enable Exclude Vector Fields
- Optionally customize Vector Field Names (default:
vector,embedding,embeddings)
This is useful when vector data isn't needed in downstream nodes.
Insert Operation
- Add the Azure Cosmos DB (SDK) node to your workflow
- Select or create credentials
- Choose Insert operation
- Enter:
- Database Name: Your Cosmos DB database name
- Container Name: Your container name
- Document: JSON document to insert
Tips:
- The
idfield is required and must be unique - Partition key must be included if your container uses one
- You can use expressions to dynamically generate documents from previous nodes