惯性聚合 高效追踪和阅读你感兴趣的博客、新闻、科技资讯
阅读原文 在惯性聚合中打开

推荐订阅源

Threat Intelligence Blog | Flashpoint
Threat Intelligence Blog | Flashpoint
Microsoft Azure Blog
Microsoft Azure Blog
Cloudbric
Cloudbric
I
InfoQ
V
V2EX
博客园_首页
The Register - Security
The Register - Security
cs.CV updates on arXiv.org
cs.CV updates on arXiv.org
S
Secure Thoughts
Vercel News
Vercel News
Forbes - Security
Forbes - Security
云风的 BLOG
云风的 BLOG
PCI Perspectives
PCI Perspectives
L
LINUX DO - 最新话题
D
DataBreaches.Net
H
Hacker News: Front Page
Application and Cybersecurity Blog
Application and Cybersecurity Blog
B
Blog RSS Feed
A
About on SuperTechFans
N
News and Events Feed by Topic
Apple Machine Learning Research
Apple Machine Learning Research
Help Net Security
Help Net Security
Attack and Defense Labs
Attack and Defense Labs
N
Netflix TechBlog - Medium
Spread Privacy
Spread Privacy
F
Full Disclosure
Recorded Future
Recorded Future
AWS News Blog
AWS News Blog
博客园 - 【当耐特】
The Cloudflare Blog
T
Threatpost
T
Tor Project blog
Google DeepMind News
Google DeepMind News
C
CXSECURITY Database RSS Feed - CXSecurity.com
CTFtime.org: upcoming CTF events
CTFtime.org: upcoming CTF events
Recent Announcements
Recent Announcements
M
MIT News - Artificial intelligence
A
Arctic Wolf
C
Check Point Blog
Stack Overflow Blog
Stack Overflow Blog
T
Threat Research - Cisco Blogs
Security Archives - TechRepublic
Security Archives - TechRepublic
Hacker News - Newest:
Hacker News - Newest: "LLM"
WordPress大学
WordPress大学
Cyberwarzone
Cyberwarzone
小众软件
小众软件
C
Cyber Attacks, Cyber Crime and Cyber Security
P
Proofpoint News Feed
Security Latest
Security Latest
The Last Watchdog
The Last Watchdog

DEV Community

Authentication Security Deep Dive: From Brute Force to Salted Hashing (With Java Examples) Why AI Systems Don’t Fail — They Drift Spilling beans for how i learn for exam😁"Reinforcement Learning Cheat Sheet" I Replaced Chrome with Safari for AI Browser Automation. Here's What Broke (and What Finally Worked) How Python Borrows Other People's Work The $40 Architecture: Processing 1 Billion API Requests with 99.99% Uptime Vibe Coding: A Workflow Guide (From Zero to SaaS) Most webhook security guides protect the wrong side. The scary part is delivery. Headless CMS for TanStack Start: Build a Blog with Cosmic EU Age Verification App "Hacked in 2 Minutes" — What Actually Happened Comfy Cloud’s delete function does not actually remove files Running AI Models on GPU Cloud Servers: A Beginner Guide Event-driven media intelligence with AWS Step Functions and Bedrock I scored 500 AI prompts across 8 quality dimensions — here's what broke How to Call Google Gemini API from Next.js (Free Tier, No Backend Needed) The Portal Protocol: Reclaiming Human Connection in the Age of AI How to Fix Your Team's Scattered Knowledge Problem With a Self-Hosted Forum Intro to tc Cloud Functors: A Graph-First Mental Model for the Modern Cloud Designing Multi-Tenant Backends With Both Ownership and Team Access I Built a Neumorphic CSS Library with 77+ Components — Here's What I Learned PostgreSQL Performance Optimization: Why Connection Pooling Is Critical at Scale Cómo construí un SaaS multi-rubro para gestionar expensas en Argentina con FastAPI + Vue 3 🚀 I Built an Ethical Hacking Scanner Tool – Open Source Project I Replaced /usage and /context in Claude Code With a Single Statusline A Pythonic Way to Handle Emails (IMAP/SMTP) with Auto-Discovery and AI-Ready Design I Collected 8.9 Million Polymarket Price Points — Here's What I Found About How Markets Really Move EcoTrack AI — Carbon Footprint Tracker & Dashboard Everyone's Using AI. No One Agrees How. 5 self-hosted ebook managers worth trying in 2026 Building Your First AI Agent with LangChain: From Chatbot to Autonomous Assistant Common SOC 2 Failures (Real World) Stop Vibe-Checking Your AI App: A Practical Guide to Evals How to Use SonarQube and SonarScanner Locally to Level Up Your Code Quality Your Next To-Do App Is Dead — I Replaced Mine with an OpenClaw AI Sign a Nostr event in 60 lines of Python using coincurve — no nostr-sdk, no nbxplorer, no rust toolchain ITGC Audit Explained Like You’re in Big 4 Patch Tuesday abril 2026: Microsoft parcha 163 vulnerabilidades y un zero-day en SharePoint Stop scraping everything: a better way to track competitor price changes Listing on MCPize + the Official MCP Registry while routing payments OUTSIDE the marketplace — how I kept 100% of my x402 revenue Building an AI-Powered Risk Intelligence System Using Serverless Architecture Why We Ripped Function Overloading Out of Our AI Toolchain Testing AI-Generated Code: How to Actually Know If It Works SaaS Churn Is Killing Your Business. Here Is What to Do About It (Without a Support Team) The Speed of AI Is No Longer Linear - And Self-Improving Models Are Why How to Implement RBAC for MCP Tools: A Practical Guide for Engineering Teams From Standard Quote to Persuasive Proposal: AI Automation for Arborists I built a CLI that scaffolds complete multi-tenant SaaS apps Axios CVE-2025–62718: The Silent SSRF Bug That Could Be Hiding in Your Node.js App Right Now The dashboard that ended our friendship Data Pipelines Explained Simply (and How to Build Them with Python) The Hidden Cost of AI Systems Nobody Talks About. undefined vs undeclared, and how typeof behaves Switching from file-based jobs to NATS/Kafka in Rust without changing code io_uring Adventures: Rust Servers That Love Syscalls Why Agentic AI is Killing the Traditional Database The POUR principles of web accessibility for developers and designers Quantum Neural Network 3D — A Deep Dive into Interactive WebGL Visualization How To Install Caveman In Codex On macOS And Windows Automation Pipeline Reliability: Why Your Workflow Breaks When Nobody Is Watching I Built an 'Open World' AI Coding Agent — It Works From ANY Folder From Freelancing to Product: A Tech Service Company's SaaS Transformation China's AI Giants: Adding Tencent Hunyuan & ByteDance Doubao to AI University (74 Providers) On the Vibe Coders and Their Lies clerk: Auto-Summarize Your Claude Code Sessions AI Weekly — 2026/04/10–04/17 | The Model Lockdown Is Here, but the Toolchain Is the Real Battleground AI 週報 — 2026/04/10–2026/04/17 模型封鎖潮來了,但工具鏈才是真戰場 Maybe this is how Open-Source apps are born... 🚀 Fine-Tune LLMs with LoRA and QLoRA: 2026 Guide tRPC v11 + Next.js App Router: End-to-End Type Safety Without the Boilerplate ShadCN UI in 2026: Why I Stopped Installing Component Libraries and Started Owning My Components SaaS Billing in React Server Components: Stripe + Supabase Without a Single `useEffect` Join our DEV Weekend Challenge — $1,000 in Prizes Across TEN winners! Submissions Due April 20 at 6:59 AM UTC. Implementing FSRS Spaced Repetition in Flutter + Supabase — Adding Memory Science to an AI Learning App "I Texted My Localhost From the Train — Claude Code Fixed the Bug Before I Got Home" I Built a Sales Prep AI and It Went Deeper Than Expected Design to Code #2: One JSON, Eleven Outputs Solving the 100M-Row Problem: A Summary Table Pattern for High-Volume Push Notification Logs Flutter Web With Wasm: What Actually Changes For Developers I Built 50 Royalty-Free Soundtracks for My Side Project in a Weekend Using AI Music Generation The Vibe Coding Security Checklist: 7 Things to Check Before You Ship Stop Letting Googlebot Guess Fix Your React App's SEO Right Desconstruindo o Streaming do LinkedIn: Como Criar um Engine de Extração de Vídeo de Alta Performance com HLS e FFmpeg (EDA Part-1) EDA (Exploratory Data Analysis) Explained With Real Life — Why Looking at Your Data Is the Most Important Step in Machine Learning Brand Relationship Management at Scale: Our 4-Touch Outreach System for 200+ Brands Why String.fromEnvironment() Might Return an Empty String in Dart JGuardrails 1.0.0 — Hardening Java LLM Apps Against Jailbreaks, Toxicity, and Prompt Injection Plan and Schedule a Full Week of Threads Content From One Claude Conversation Coding Cat Oran Ep3, Five Tables Changed Everything Updated: BFF Pattern I'm done watching freelancers get buried by 200 proposals. So I'm building the alternative. This is my first post BFS Algorithm in Java Step by Step Tutorial with Examples Tracking LLM Pricing Monthly: An Open Dataset for 22 AI Models How We Measure Content ROI on a Comparison Site: Revenue Attribution Without Perfect Data Introducing Nova AI Ops: The AI-Native Operating System for SRE Teams I built a free desktop video downloader for Windows — Grabbit How Talkie OCR Helps Vision-Impaired & Dyslexic Users Read the World Around Them VRCFaceTracking安装和iPhone面捕配置教程,有bug Even CrowdStrike Can't See Your Agents The Automation Gold Rush: What n8n Workflows and Claude Are Opening Up for Developers Right Now
How I Wired 7 n8n Agents Into How I Wired 7 n8n Agents Into a Pipeline That Doesn't Require a Single Line of Glue Code
Sameer Vediu · 2026-05-18 · via DEV Community

Every multi-agent system I'd seen before VORTEX had the same problem: the agents were smart, but the wiring between them was custom code that nobody wanted to maintain. HTTP calls between services, retry logic scattered across files, error handling that was really just console.log with extra steps. I built VORTEX's seven agents entirely in n8n — no glue code, no custom orchestration layer, no message broker. The connections between agents are just webhook calls declared in the workflow graph, and the failure handling comes for free.



Why n8n for Agent Orchestration

The alternative was building the orchestration layer in code — a Node.js service that received webhook events, called Groq, wrote to Firestore, and triggered downstream agents. I built a prototype of this. It was about 400 lines and immediately became the thing nobody wanted to touch.

The problems:

  • Retry logic for Groq API calls had to be written manually
  • Adding a new downstream step meant modifying the orchestrator and redeploying
  • There was no visual representation of what the pipeline actually did
  • Debugging a failed run meant reading logs, not looking at a graph

n8n solves all of these. Each agent is a workflow. Each workflow is a graph of nodes. Adding a step means dragging a node onto the canvas and connecting it. Retries are a checkbox on the HTTP node. The entire flow is visible without opening a file.

The Agent Structure

Each of the seven agents follows the same basic pattern:

  1. Trigger node — either a Webhook node (Agents 1, 2, 3, 7) or a Schedule node (Agents 4, 5, 6)
  2. Processing nodes — Code nodes for transformation, HTTP Request nodes for external API calls
  3. Output node — either a Firestore write, a Respond to Webhook node, or both

Here's Agent 1 — the Behavioral Scout — which is the simplest and most important because everything flows through it:

Webhook Trigger
      ↓
Normalize Activity Atom (Code node)
      ↓
Write to Firestore (HTTP Request → Firestore REST API)
      ↓
Respond to Webhook (200 OK + atom_id)

Enter fullscreen mode Exit fullscreen mode

The Code node does the normalization:

// Agent 1 — Normalize Activity Atom
const payload = $input.first().json;

const atom = {
  user_id:           payload.user_id,
  event_type:        payload.event || payload.event_type,
  feature:           payload.feature || payload.feature_name,
  session_mins:      payload.session_duration_mins ?? payload.session_mins ?? 0,
  teammates_invited: payload.teammates_invited ?? 0,
  api_calls_today:   payload.api_calls_today ?? 0,
  call_consent:      payload.call_consent === true,
  email_consent:     payload.email_consent !== false,
  plan:              payload.plan ?? 'unknown',
  timestamp:         new Date().toISOString(),
};

return [{ json: atom }];

Enter fullscreen mode Exit fullscreen mode

After normalization, Agent 1 fires Agent 7's webhook URL synchronously and waits for the response before returning. Agent 7 handles all downstream routing.

Agent 7 — The Router

Agent 7 is the most complex workflow in the system. It's the only agent that calls other agents.

Webhook Trigger (from Agent 1)
      ↓
Decision Logic (Code node)
      ↓
      ├─ HOT_LEAD ──→ Call Agent 2 (HTTP Request)
      │               Call Agent 3 (HTTP Request)
      │               Fire Slack Alert (HTTP Request → Slack API)
      │               [if call_consent + HIGH urgency]
      │               Write VAPI flag to Firestore
      │
      └─ WARM_LEAD ─→ Call Agent 3 (HTTP Request)

      ↓ (both paths)
Update Lead in Firestore (HTTP Request)

Enter fullscreen mode Exit fullscreen mode

The Decision Logic node reads intent_score and urgency from the atom, assigns a tier, and sets flags for which downstream agents to call. n8n's IF nodes handle the branching — one branch for HOT_LEAD, one for WARM_LEAD, the rest falls through to a simple Firestore status update.

One thing worth knowing about this pattern: Agent 7 calls Agents 2 and 3 via their webhook URLs synchronously. It waits for each response before continuing. This means the total pipeline latency is Agent 2 latency + Agent 3 latency + Firestore write time. With Groq running llama3-70b-8192, each LLM call takes roughly 1–1.5 seconds. Total pipeline time is around 4 seconds for a HOT lead.



The Scheduled Agents

Agents 4, 5, and 6 are structurally different from the webhook-triggered agents. They don't receive input — they pull data from Firestore on a timer, process it, and write results back.

Agent 4 — VAPI Voice Caller:

Schedule Trigger (every 30 minutes)
      ↓
Fetch Leads from Firestore (HTTP Request)
      ↓
Filter Eligible (Code node)
  - status: HOT_LEAD
  - call_consent: true
  - call_status: not 'called'
  - intent_score ≥ 80
      ↓
Fire VAPI Call (HTTP Request → api.vapi.ai)
      ↓
Outcome Webhook (waits for VAPI callback)
      ↓
Parse Outcome (Code node)
      ↓
Update Firestore (call_status + disposition notes)

Enter fullscreen mode Exit fullscreen mode

The VAPI integration requires a call_consent: true flag in the Firestore lead document. Agent 7 sets this based on whether the original webhook payload included consent. If it's not set, Agent 4's filter step drops the lead silently — no call fires.

Agent 5 — Data Custodian — is the simplest workflow in the system:

TTL Cron (daily at 02:00 UTC)
      ↓
Fetch All Leads from Firestore
      ↓
Filter Expired (Code node — created_at > 30 days)
      ↓
Delete Lead (HTTP Request → Firestore DELETE)

Enter fullscreen mode Exit fullscreen mode

It runs once per day, touches nothing else, and has no output other than the deletes. Agent 5 never interacts with Agent 4 or Agent 6 — all three scheduled agents are completely independent of each other.

Agent 6 — Social Intel Scraper

Agent 6 is the most interesting scheduled agent because it uses two external APIs in sequence:

Scraper Cron (every 6 hours)
      ↓
Build Jina URLs (Code node)
  - reddit.com/r/[product] search
  - youtube.com search results
      ↓
Jina Fetch (HTTP Request → r.jina.ai)
  Jina returns clean markdown from the scraped pages
      ↓
Groq Sentiment Analysis (HTTP Request → Groq API)
  llama3-70b-8192 extracts complaints, praise, feature requests
      ↓
Save to Firestore (product_intelligence collection)

Enter fullscreen mode Exit fullscreen mode

Jina AI is doing the heavy lifting on the scraping side — it takes a URL and returns clean, LLM-ready markdown without any HTML parsing. The Groq node then runs sentiment extraction on that markdown. The output lands in a separate product_intelligence Firestore collection that the React dashboard reads independently of the leads data.



What Cascadeflow Added

Managing seven n8n workflows across a shared environment creates a specific problem: the webhook URLs that agents use to call each other are environment-specific. In development, Agent 1's webhook URL for Agent 7 is different from what it is in production. Keeping those in sync manually is how you end up with Agent 1 calling the production Agent 7 from a development environment.

Cascadeflow handles this by treating the agent graph as a first-class artifact. The connections between agents — which agent calls which, on what trigger — are declared in the Cascadeflow graph definition rather than hardcoded into individual workflow nodes. When you promote from dev to prod, the URLs resolve correctly for the target environment without touching the individual workflows.

It also enforces the topology constraint that keeps the system debuggable: leaf agents cannot have outbound edges to sibling agents in the same graph. If I accidentally wired Agent 2 to call Agent 3 directly, Cascadeflow would flag it before it ran.

The n8n Webhook Response Pattern

One non-obvious n8n behavior: when Agent 7 calls Agent 2 via HTTP Request and waits for the response, Agent 2 must use a "Respond to Webhook" node to return data synchronously. Without it, n8n returns a 200 immediately when the webhook fires, before any processing has happened. Agent 7 would then continue routing before Agent 2 had produced a classification.

// Agent 2 — must end with Respond to Webhook
Webhook Trigger
      
Groq Intent Classification (HTTP Request)
      
Parse Intent (Code node)
      
Respond to Webhook    this is the critical node
  { intent_score, tier, urgency, primary_pain }

Enter fullscreen mode Exit fullscreen mode

Every leaf agent that's called synchronously by Agent 7 ends with a Respond to Webhook node. Agents that run on schedule have no response node — they just write to Firestore and stop.

Takeaways

n8n eliminates orchestration glue code. Every HTTP call between agents, every retry, every conditional branch is handled by the workflow graph. The alternative — a custom orchestration service — is 400 lines of code that becomes the system's weakest point.

Scheduled agents should be fully independent. Agents 4, 5, and 6 share nothing with each other. They read from and write to Firestore, and that's their only coupling to the rest of the system. If Agent 5 fails, Agent 4 keeps running.

Consent flags belong in the data, not the calling agent. Agent 7 doesn't check call consent — it writes it to Firestore when it receives it from Agent 1. Agent 4 checks it when it's ready to call. This separation means consent logic is enforced at the point of action, not at the point of routing.

Respond to Webhook is not optional for synchronous chains. If any agent in a synchronous chain returns before processing is complete, the caller gets stale or empty data and the pipeline silently produces wrong outputs.

Closing

Seven agents, zero custom orchestration code. The wiring lives in the workflow graphs, the topology is enforced by Cascadeflow, and adding a new step means dragging a node, not editing a service. The thing I thought would be the hard part — connecting the agents — turned out to be the part that required the least code.