n8n 2.41.7 - Variable Scopes for API Keys


n8n 2.41.7 shipped on 2026 10 05 as a small point release on top of 2.41.6. The one change that matters for platform operators is an API fix: global members can now grant variable scopes to API keys through the public API. Everything else in the release is editor UI work.

The full release notes and downloads are on the GitHub release page.

The fix in this release, tracked as PR #40151 with commit cc25c71, touches the API layer. Before this patch, a member with the global member role could not assign variable scopes to an API key via the API. That blocked a common automation pattern: provisioning service accounts with scoped API access entirely from code or IaC, without a human clicking through the editor.

If you provision n8n API keys from an external pipeline, this unblocks variable scoped access without manual steps. Operators running n8n as a shared ETL platform will care, since variables are how most teams pass environment specific configuration into workflows.

The release also adds a Gateway credits promotion display on community nodes in the editor, PR #40109 with commit a509d92. This is a UI and marketing surface change. It does not touch the workflow execution engine, the queue, or the data model. If your instances run with the editor disabled or behind automation only, this has no effect on you.

Worth noting plainly: this is not a change that affects throughput, reliability, or the scheduler. It is a monetization prompt shown inside the editor canvas.

Short answer: yes, and cheaply. The scope fix closes a real gap in API driven provisioning. There are no breaking changes listed, no schema migrations, and no dependency floors moved in the notes. A rolling update from 2.41.6 should be routine. The n8n project publishes these point releases frequently, and 2.41.4 through 2.41.6 each carried operational fixes, so staying current on the 2.41 line is low effort.

One caveat: the release notes are terse. Neither PR description enumerates the exact API endpoint signatures changed. If you have tooling that patches API key scopes, verify against your staging instance before rolling across a fleet.

No breaking changes are called out in the 2.41.7 notes. The diff from [email protected] to [email protected] is small and visible in the compare link on the release page.