Description

n8n-nodes-declaw

This is an n8n community node for Declaw — secure Firecracker microVM sandboxes for AI agents and code execution.

Run untrusted code safely, manage files, and control sandbox lifecycles directly from your n8n workflows. Works as both a regular workflow node and as an AI Agent tool.

n8n is a fair-code licensed workflow automation platform.

Nodes

This package provides two nodes:

| Node | Purpose |
|——|———|
| Declaw Code Interpreter | One-shot secure code execution. Paste Python or JavaScript code, get output. Handles sandbox lifecycle automatically. |
| Declaw | Low-level API access. Full control over sandbox CRUD, commands, files, and snapshots for advanced workflows. |

Installation

Self-hosted n8n

Go to Settings > Community Nodes and install:

n8n-nodes-declaw

Or via CLI:

npm install n8n-nodes-declaw

n8n Cloud

Search for “Declaw” in the community nodes catalog.

Credentials

You need a Declaw API key. Get one at declaw.ai or via the CLI:

declaw auth login

Configure the credential with:

• API Key: Your dcl_... key
• API URL: https://api.declaw.ai (default) or your self-hosted endpoint

Declaw Code Interpreter

The simplest way to run code securely. Paste code, get output — no sandbox management needed.

Parameters

| Parameter | Description |
|———–|————-|
| Language | Python or JavaScript |
| Code | The code to execute in the sandbox |

Additional Options

| Option | Description |
|——–|————-|
| Timeout | Execution timeout in seconds (default: 30) |
| Environment Variables | Key-value pairs injected into the sandbox |
| Additional Files | JSON array of {path, data} files to upload before execution |
| Output Files | Comma-separated file paths to download after execution |
| Enable PII Protection | Detect and redact sensitive data (SSN, credit cards, emails) |
| Enable Injection Defense | Block prompt injection attacks |
| Network Egress Allowlist | Restrict outbound access to specific domains |
| Security Policy (JSON) | Raw JSON security policy for full control |

Example

[Webhook] -> [Declaw Code Interpreter (Python)] -> [Respond]

The node automatically: creates a sandbox, writes your code, executes it, downloads output files, kills the sandbox, and returns {stdout, stderr, exitcode, outputfiles}.

As an AI Agent Tool

The Code Interpreter works as an AI Agent tool — an LLM agent can write and execute code securely without any manual sandbox wiring:

[Chat Trigger] -> [AI Agent] -> (tool) [Declaw Code Interpreter Tool]

To enable on self-hosted n8n:

N8NCOMMUNITYPACKAGESALLOWTOOL_USAGE=true

Declaw (Low-Level API)

For advanced workflows that need fine-grained control over sandbox lifecycles.

Sandbox

| Operation | Description |
|———–|————-|
| Create | Create a new Firecracker microVM sandbox |
| Get Info | Get sandbox details |
| List | List all sandboxes |
| Kill | Destroy a sandbox |
| Pause | Freeze a running sandbox |
| Resume | Resume a paused sandbox |
| Set Timeout | Update auto-kill timeout |

Command

| Operation | Description |
|———–|————-|
| Run | Execute a command and wait for stdout/stderr |
| Run Background | Start a command in the background (returns PID) |
| List Processes | List background processes |
| Kill Process | Kill a process by PID |

File

| Operation | Description |
|———–|————-|
| Read | Read text file content |
| Read Binary | Download a binary file (images, archives, etc.) |
| Write | Write text to a file |
| Write Batch | Write multiple files at once |
| List Directory | List files and directories |
| Exists | Check if a path exists |
| Delete | Remove a file or directory |
| Make Directory | Create a directory |

Snapshot

| Operation | Description |
|———–|————-|
| Create | Snapshot the current sandbox state |
| List | List all snapshots |
| Restore | Restore from a snapshot |
| Delete | Delete a snapshot |

Persistent Sandbox Pattern

For AI agents that need to run multiple commands in the same sandbox (e.g., install packages then use them):

[Chat Trigger] -> [Declaw: Create Sandbox] -> [AI Agent] -> [Declaw: Kill Sandbox]
                                                  |
                                            (tool) [Declaw Tool]
                                            (uses sandbox ID from Create)

Security Features

When creating a sandbox (either node), you can enable:

• PII Protection — Detect and redact sensitive data (SSN, credit cards, emails, etc.) in sandbox network traffic
• Injection Defense — Block prompt injection attacks with configurable sensitivity
• Network Policies — Restrict outbound access to specific domains

These can be configured via simple toggles or a raw JSON security policy for full control.

Resources

• Declaw Documentation
• n8n Community Nodes

License

MIT