n8n Approval Workflow: Webhook Risk Decision + HTTP Approvers

Instant Webhook-Based Approvals with Risk Scoring (n8n)

Automate authorization decisions in n8n with a webhook-driven approval workflow that evaluates policy risk, then calls external HTTP approvers for up to three steps—returning an approve/reject result plus a complete audit trail.

What this workflow does

• Receives an approval request via an HTTP POST webhook.
• Validates and normalizes the payload, loads policy thresholds, and prepares Level 1–3 approver endpoint URLs.
• Evaluates policy rules to calculate a risk score and decide whether the request is auto-approved or requires sequential approvals.
• Calls Level 1 approver using an HTTP request, records the returned status code, and determines whether to continue to Level 2.
• Calls Level 2 approver via HTTP, records the Level 2 decision, and checks whether to proceed to Level 3.
• Calls Level 3 approver via HTTP, records the Level 3 decision, aggregates required decisions into a final approve/reject status, and returns the result to the webhook caller with an audit trail.

Use cases

• Route requests based on calculated risk (e.g., low-risk auto-approve, higher risk requires multiple approvers).
• Implement standardized authorization flows for SaaS operations using your own approver services.
• Provide compliance-friendly decision logging by returning per-step outcomes in the webhook response.

Technical details (n8n nodes)

• Webhook (to receive approval requests)
• Code (payload validation/normalization, policy evaluation, aggregation)
• HTTP Request (calls Level 1–3 approver endpoints and captures status codes)
• Wait (supports controlled progression through approval steps)
• Respond to Webhook (returns final decision + audit trail)
• Sticky Note (workflow documentation)

Setup: Configure the webhook path, update Level 1–3 approver URLs (currently set to httpbin.org) to your real endpoints, and review/adjust in-workflow policy thresholds (e.g., approval limits and high-risk rules).