n8n on a mailbox or a CRM is useful. It is also dangerous. A flow that reads email and writes records can save work. Or it can send, tag and overwrite data with nobody watching. You bound what it touches. You put a human where the flow goes out into the world.
A list of verbs
Before the graph, a list: which mailbox, which folder, which CRM objects, which fields it may read, which it may write, whom it may email. Anything not on the list does not exist for the flow.
- A service account. Not the personal inbox of whoever sets up n8n.
- One type of message or lead. “All of sales email” is not a bounded case.
- Secrets in the environment store. Not in a node copied to Make or a JSON file in the repo.
- The flow does not delete or merge contacts unless that is written down and reviewed.
Where human review goes
Human review is not “we will look at the log later”. It is a step that stops the flow: a queue, an approval, or a CRM state a person changes. It fits when the next step is sending, creating a record, changing an amount or publishing outwards.
- Classify and propose: the model or the node tags. The human confirms.
- Draft reply: n8n leaves the text. Someone presses send.
- CRM create: it is created as “pending” until operations moves it live.
What is internal and reversible (move to a folder, add a harmless tag) can go without waiting. What is hard to undo, cannot.
Operating the flow
- Each run leaves a trace: message or lead id, decision, error.
- Idempotence: the same email does not create two records. Without that, the first retry is an incident.
- Alerts when the connector fails. A silent n8n is not a healthy n8n.
- Who edits the graph. An n8n with no owner ends up in the account of someone who left.
Make works for the same pattern if the team already lives there. Python or Node, when the connector or the idempotence does not fit on the canvas. Docker or the n8n the company already runs. Not a trial n8n with production secrets.
To choose between this and an agent, agent, chatbot or n8n. If you want me to set it up: RAG and agents. Madrid.