Automate CMDash with n8n
Start an n8n workflow off a CMDash event, or create and update CMDash risks and evaluate the posture gate from any n8n workflow — the same self-hosted or n8n Cloud instance you already run everything else through.
Install the node from source
The n8n-nodes-cmdash package (one trigger node and one action node, built and tested) installs from source: clone the integrations/n8n directory of the CMDash repository, run npm install && npm run build, and point your n8n instance’s N8N_CUSTOM_EXTENSIONS at the built package — or use the public API and outbound webhooks directly with n8n’s generic HTTP Request node.
CMDash Trigger
Start a workflow on a CMDash event
One trigger node with a single dropdown of all 19 outbound webhook events — new/updated risks, posture score changes, compliance milestones, integration sync results, alerts, approvals, evidence and control changes. Turning the node on subscribes it to that event (
POST /v2/webhooks); turning it off unsubscribes (DELETE /v2/webhooks/:id). The delivered body is CMDash’s full event envelope ({event, eventId, sequence, replay, timestamp, data}), unchanged, as one output item — the same shape the webhook events reference documents.
CMDash action node
Risk: Create
POST /v2/risksRisk: Update
PUT /v2/risks/:idGate: Evaluate
POST /v2/gate/evaluate
The same three v2 public-API routes the Zapier app’s three actions call — one action node, a Resource/Operation picker, and the same field set the API accepts.
Prefer Zapier?
The same trigger and actions are also available as a Zapier app for teams running Zapier instead of, or alongside, n8n.
Building your own automation
Every event the CMDash Trigger node can fire on is documented in the outbound webhooks reference, including delivery guarantees, signature verification and replay. Every operation the CMDash action node can run is part of the same public API your own scripts can call directly.