The team behind workflow automation platform n8n has released Nod, an Apache-2.0 personal AI agent that operates a sandboxed Linux workspace and Chromium browser on the user’s computer. A model plans each job; the local runtime executes the browser and app actions needed to complete it. The release gives developers an inspectable implementation of local agent execution, credential isolation, and server-enforced approval checks.

Approval is part of execution

Nod can gather context from Gmail, Calendar, Slack, and Notion, then prepare work that spans those services and authenticated websites. A scheduled morning task, for example, can assemble a one-page call brief from email threads, calendar entries, internal notes, and recent client news.

Nod drafting a Slack reply and waiting for approval before sending
Nod pauses a proposed Slack message for user approval.

Before an app action or browser step changes external state, Nod’s local server checks the proposal against the current request and stored policies. Actions without authorization pause for approval. Read-only browsing can proceed automatically, while message sends, form submissions, purchases, cancellations, and similar changes require prior authorization or a later confirmation.