{ "data": { "a": { "slug": "node-red", "name": "Node-RED", "vendor": "OpenJS Foundation", "vendorUrl": "https://nodered.org", "kind": "http-api", "category": "workflow-automation", "summary": "Node-RED is an open-source flow-based automation runtime hosted by the OpenJS Foundation. The owner runs it on Node.js, and an Admin HTTP API and a command-line client deploy flows and install nodes.", "url": "https://www.anchorterminal.com/tools/node-red", "markdownUrl": "https://www.anchorterminal.com/tools/node-red.md", "slimMarkdownUrl": "https://www.anchorterminal.com/tools/node-red.min.md", "jsonUrl": "https://www.anchorterminal.com/api/v1/tools/node-red.json", "repo": "https://github.com/node-red/node-red", "license": "Apache-2.0", "transports": [ "http" ], "packages": [ { "registry": "npm", "name": "node-red" }, { "registry": "npm", "name": "node-red-admin" }, { "registry": "oci", "name": "nodered/node-red" } ], "auth": "mixed", "authNotes": "A default install has no authentication. Setting `adminAuth` in `settings.js` turns on users with bcrypt-hashed passwords and permissions of `*`, `read` or a list such as `flows.read`. An agent then posts the username and password to `/auth/token` for a bearer token, valid seven days by default with no refresh. Access is self-serve, by running the software. Routes made by HTTP In nodes share one basic-auth username and password.", "pricing": "free", "pricingNotes": "Free under Apache-2.0 with nothing to buy from the project, so an agent can start with no account, card or contract. FlowFuse, a separate company, sells a hosted platform for Node-RED that the docs link, and it is not graded here (https://nodered.org/about/license/, checked 2026-10-09).", "priceSummary": "Free · OSS", "where": "local", "x402": { "level": "no", "evidence": "No x402, MPP or L402 in the docs or the source. The project sells nothing (checked 2026-10-09).", "endpoints": [] }, "toolCount": null, "popularity": { "githubStars": 23729, "npmWeekly": 55172, "pypiWeekly": null, "asOf": "2026-10-09" }, "docsUrl": "https://nodered.org/docs/api/admin/", "capabilities": [ "automation.workflows", "automation.webhooks", "automation.code", "automation.apps" ], "tags": [ "self-hosted", "open-source", "local", "free", "javascript", "webhooks", "cli", "docker" ], "lastRelease": "2026-10-08", "graded": true, "anchor": { "graded": true, "score": 61, "grade": "C", "agentReady": false, "rank": 486, "ranked": true, "rankOf": 950, "categoryRank": 5, "methodology": "0.4", "run": "2026-10-01", "scores": { "ergonomics": 44, "maintenance": 81, "payments": 60, "reliability": 90, "schema": 41, "security": 51, "transparency": 65 }, "pending": [ "performance", "tasks" ], "assessment": { "confidence": "medium", "date": "2026-10-09" }, "negative": 0, "verdict": "Node-RED's Admin HTTP API covers flows, nodes and settings in 20 documented methods, with read and write permissions per resource and a revision check on deploys. It has no OpenAPI file, no pagination and no SDK, and a default install accepts API calls from anyone who can reach port 1880.", "bestFor": "Owners who want event-driven flows on their own machine or device, with a large library of community nodes, and an agent that deploys or edits flows as JSON.", "strengths": [ "Apache-2.0, with 12 releases between 30 July and 8 October 2026 on the 5.x and 4.x lines", "Admin API permissions are per resource, such as `flows.read` and `flows.write`, and a user or token can be limited to `read`", "`POST /flows` with `Node-RED-API-Version: v2` takes a `rev` value and answers 409 when the runtime holds newer flows", "Usage telemetry is opt-in, lists the four fields sent, and can be switched off in settings, by flag or by environment variable", "A release plan gives each major version a maintenance start and an end-of-life date, with 4.x ending on 31 December 2026" ], "weaknesses": [ "No OpenAPI file, `llms.txt` or SDK. The Admin API is documented as 20 hand-written pages on nodered.org", "`adminAuth` is commented out in the default settings file, so a fresh install has no authentication on the editor or the Admin API", "No pagination, filtering or field selection. `GET /flows` returns the whole flow configuration", "Access tokens come from a username and password grant, last seven days by default and cannot be refreshed", "Routes for context, plugins, library and projects exist in the source and are missing from the published method list" ], "agentNotes": [ "Call `GET /auth/login` first. An empty object means no authentication is set and every Admin API call is open", "Send `Node-RED-API-Version: v2` and the last `rev` on `POST /flows`, and re-read the flows on a 409", "Set `Node-RED-Deployment-Type` to `nodes` or `flows` to restart only what changed. The default `full` stops every node", "Prefer `GET /flow/:id` and `PUT /flow/:id` for one tab. `GET /flows` returns every node in the runtime", "Treat `flows.write` and `nodes.write` as code execution on the host. Function nodes run JavaScript and `POST /nodes` installs npm modules" ], "metrics": { "kind": "local", "measured": false }, "reviewCount": 0, "avgRating": 0, "history": [ { "basis": "public evidence", "confidence": "medium", "grade": "C", "methodology": "0.4", "pending": [ "performance", "tasks" ], "run": "2026-10-01", "runLabel": "October 2026 research run", "score": 61 } ], "editorialScores": { "ergonomics": 44, "maintenance": 81, "payments": 60, "reliability": 90, "schema": 41, "security": 51, "transparency": 85 }, "provenanceScore": 45 }, "connect": { "install": "sudo npm install -g node-red", "http": "curl http://localhost:1880/auth/token --data 'client_id=node-red-admin\u0026grant_type=password\u0026scope=*\u0026username=admin\u0026password=password'" }, "letme": { "capability": "https://letme.dev/automation.workflows", "tool": "https://letme.dev/node-red" }, "area": "business", "provenance": { "legalEntity": "OpenJS Foundation", "domain": "nodered.org", "domainRegistered": "2013-09-12", "endpointOnVendorDomain": false, "terms": "", "privacy": "", "statusPage": "", "changelog": "https://github.com/node-red/node-red/blob/main/CHANGELOG.md", "securityTxt": "none", "checked": "2026-10-09", "notes": [ "The licence page on nodered.org says copyright is retained by the OpenJS Foundation, and the site footer reads Copyright OpenJS Foundation and Node-RED contributors.", "No terms or privacy link is given. Node-RED is Apache-2.0 software the owner runs, and the project publishes no service agreement or privacy policy of its own. The site footer links the OpenJS Foundation's terms of use and privacy policy, which are a parent body's website documents and were not read.", "The Admin API answers on the owner's own host, by default http://localhost:1880. Only the opt-in telemetry report goes to an endpoint the project hosts.", "https://nodered.org/.well-known/security.txt returns 404. SECURITY.md in the repository gives team@nodered.org and escalation to the OpenJS Foundation CNA.", "RDAP for nodered.org gives a registration date of 2013-09-12. The lookup through rdap.org was redirected to the registry's RDAP host.", "nodered.org has no robots.txt (404). No status page exists because there is no hosted service." ], "score": 45 }, "pageJsonUrl": "https://www.anchorterminal.com/tools/node-red.json", "live": { "slug": "node-red", "versions": [ { "registry": "github", "name": "node-red/node-red", "version": "5.0.8", "released": "2026-10-08", "seenAt": "2026-10-09T17:08:22.991909994Z" }, { "registry": "npm", "name": "node-red", "version": "5.0.8", "seenAt": "2026-10-09T17:08:20.781082858Z" }, { "registry": "npm", "name": "node-red-admin", "version": "4.1.8", "seenAt": "2026-10-09T17:08:21.396260251Z" } ], "githubStars": 23730, "npmWeekly": 55172, "pages": [ { "url": "https://raw.githubusercontent.com/node-red/node-red/main/CHANGELOG.md", "kind": "changelog", "status": 200, "checkedAt": "2026-10-09T18:45:37.181546944Z", "changedAt": "0001-01-01T00:00:00Z", "fingerprint": "4223a5392d5c" } ], "updatedAt": "2026-10-09T18:45:37.181546944Z" } }, "answer": "Node-RED scores 61 (C) on agent readiness against Workato API + MCP's 58 (C), and leads in 3 of 7 scored categories. Workato API + MCP leads on schema \u0026 documentation, agent ergonomics and security \u0026 auth.", "b": { "slug": "workato", "name": "Workato API + MCP", "vendor": "Workato", "vendorUrl": "https://www.workato.com", "kind": "http-api", "category": "workflow-automation", "summary": "Enterprise integration platform for building automated workflows.", "url": "https://www.anchorterminal.com/tools/workato", "markdownUrl": "https://www.anchorterminal.com/tools/workato.md", "slimMarkdownUrl": "https://www.anchorterminal.com/tools/workato.min.md", "jsonUrl": "https://www.anchorterminal.com/api/v1/tools/workato.json", "license": "proprietary", "transports": [ "http", "streamable-http" ], "remoteUrl": "https://www.workato.com/api", "packages": [], "auth": "mixed", "authNotes": "Developer API takes an API client token as 'Authorization: Bearer', scoped by a client role and project scopes. Legacy full-access keys (x-user-token header) were rejected from 2025-07-14. The AIRO MCP server takes OAuth 2.0 in interactive clients or the same API token as a bearer header. Tool MCP servers use Workato Identity (OAuth2 SSO) or a token, and verified user access makes each end user connect their own app accounts.", "pricing": "freemium", "pricingNotes": "Usage is billed in Workato credits, one balance shared by recipe tasks (each action step), API calls, rows, pages and Genie actions. Workato Free is a one-time grant of 50,000 credits. Workato Pro is self-serve by card at $75 a month for 2,500 credits, $100 for 3,500, $275 for 10,000, $780 for 30,000 and $1,275 for 50,000, with no rollover. Enterprise is quoted by sales and the public pricing page lists no prices. Tools invoked over MCP bill as tasks (https://docs.workato.com/en/pricing/self-service/self-service.html).", "priceSummary": "$75 / mo", "where": "hosted", "x402": { "level": "no", "evidence": "No x402 support in Workato docs or pricing (checked 2026-09-30).", "endpoints": [] }, "toolCount": null, "popularity": { "githubStars": null, "npmWeekly": null, "pypiWeekly": null, "asOf": "2026-09-30" }, "docsUrl": "https://docs.workato.com/en/workato-api.html", "llmsTxt": "https://docs.workato.com/llms.txt", "capabilities": [ "automation.workflows", "automation.apps", "automation.embedded", "automation.code", "automation.webhooks", "automation.auth", "agent.tools" ], "tags": [ "hosted", "freemium", "mcp", "llms-txt", "enterprise", "closed-source", "webhooks" ], "lastRelease": "2026-09-09", "graded": true, "anchor": { "graded": true, "score": 58, "grade": "C", "agentReady": false, "rank": 590, "ranked": true, "rankOf": 950, "categoryRank": 8, "methodology": "0.4", "run": "2026-10-01", "scores": { "ergonomics": 51, "maintenance": 60, "payments": 35, "reliability": 58, "schema": 63, "security": 70, "transparency": 69 }, "pending": [ "performance", "tasks" ], "assessment": { "confidence": "medium", "date": "2026-10-01" }, "negative": 0, "verdict": "API client tokens scoped by role and project, with legacy full-access keys removed on 14 October 2025. No OpenAPI file and no official SDK on npm or PyPI.", "bestFor": "Large companies that already run Workato and want agents inside its governance (roles, audit, per-user credentials).", "strengths": [ "API client tokens scoped by role and project, with legacy full-access keys removed on 14 October 2025", "Verified user access runs MCP tools with each end user's own app credentials", "MCP actions tagged \"(via AIRO)\" in the audit log, and tool-level RBAC since 5 September 2026", "Per-endpoint rate limits and specific error messages in the API reference", "Workato Free gives 50,000 credits once with no card" ], "weaknesses": [ "No OpenAPI file and no official SDK on npm or PyPI", "15 status incidents since 1 July 2026, including about 53 hours of degraded FileStorage and API Platform in September", "Base URL changes per data centre, ten hosts in all", "The Developer API manages recipes and jobs. App actions come from recipes or MCP tools you publish", "Trust centre needs JavaScript and the public security overview dates from January 2025" ], "agentNotes": [ "Use the base URL for the workspace's data centre, and app.trial.workato.com for Free or Pro", "Give the agent an API client whose role lists only the endpoints it needs. The MCP server exposes those as tools", "Repeat or cancel at most 25 jobs per call and no more than one call a second", "Send an `x-correlation-id` on each call so failures can be traced in support tickets", "Every action step in a recipe is a task, so collapse loops before running at volume" ], "metrics": { "kind": "remote", "measured": false }, "reviewCount": 2, "avgRating": 3.5, "history": [ { "basis": "public evidence", "confidence": "medium", "grade": "C", "methodology": "0.4", "pending": [ "performance", "tasks" ], "run": "2026-10-01", "runLabel": "October 2026 research run", "score": 58 } ], "editorialScores": { "ergonomics": 51, "maintenance": 60, "payments": 35, "reliability": 58, "schema": 63, "security": 70, "transparency": 53 }, "provenanceScore": 84 }, "connect": { "http": "curl https://www.workato.com/api/users/me -H \"Authorization: Bearer $WORKATO_API_TOKEN\"", "claudeCode": "claude mcp add --transport http workato-airo https://app.workato.com/airo_mcp --header \"Authorization: Bearer ${WORKATO_API_TOKEN}\"", "config": { "mcpServers": { "workato": { "headers": { "Authorization": "Bearer ${WORKATO_API_TOKEN}" }, "url": "https://app.workato.com/mcp" } } } }, "letme": { "capability": "https://letme.dev/automation.workflows", "tool": "https://letme.dev/workato" }, "area": "business", "unitPrices": [ { "item": "Workato Pro, 2,500 credits", "unit": "month", "usd": 75, "note": "credits cover tasks, API calls, rows and Genie actions, no rollover" }, { "item": "Workato Pro, 10,000 credits", "unit": "month", "usd": 275 }, { "item": "Workato Pro, 50,000 credits", "unit": "month", "usd": 1275 } ], "provenance": { "legalEntity": "Workato, Inc.", "domain": "workato.com", "domainRegistered": "2013-10-16", "endpointOnVendorDomain": true, "terms": "https://www.workato.com/legal/terms-of-service", "privacy": "https://www.workato.com/legal/privacy-policy", "statusPage": "https://status.workato.com", "changelog": "https://www.workato.com/product-hub/changelog/", "securityTxt": "none", "checked": "2026-09-30", "score": 84 }, "pageJsonUrl": "https://www.anchorterminal.com/tools/workato.json", "live": { "slug": "workato", "probe": { "target": "https://www.workato.com/api", "method": "get", "lastAt": "2026-10-10T02:07:31.419915069Z", "lastOk": true, "lastStatus": 404, "lastMs": 287, "authRequired": false, "uptime24h": 100, "uptime30d": 99.92, "p50ms24h": 287, "p95ms24h": 367, "samples24h": 250, "samples30d": 2458, "days": [ { "date": "2026-09-30", "probes": 35, "ok": 35 }, { "date": "2026-10-01", "probes": 276, "ok": 276 }, { "date": "2026-10-02", "probes": 248, "ok": 248 }, { "date": "2026-10-03", "probes": 271, "ok": 271 }, { "date": "2026-10-04", "probes": 272, "ok": 272 }, { "date": "2026-10-05", "probes": 272, "ok": 271 }, { "date": "2026-10-06", "probes": 272, "ok": 272 }, { "date": "2026-10-07", "probes": 272, "ok": 272 }, { "date": "2026-10-08", "probes": 268, "ok": 267 }, { "date": "2026-10-09", "probes": 250, "ok": 250 }, { "date": "2026-10-10", "probes": 22, "ok": 22 } ] }, "vendorStatus": { "page": "https://status.workato.com", "indicator": "none", "summary": "All Systems Operational", "checkedAt": "2026-10-10T02:06:34.380642057Z" }, "securityTxt": { "url": "https://workato.com/.well-known/security.txt", "state": "none", "checkedAt": "2026-10-09T15:40:22.910523862Z" }, "llmsTxt": { "url": "https://docs.workato.com/llms.txt", "ok": true, "status": 200, "checkedAt": "2026-10-09T14:03:01.639027862Z" }, "domain": { "domain": "workato.com", "registered": "2013-10-16", "source": "https://rdap.verisign.com/com/v1/domain/workato.com", "checkedAt": "2026-10-04T13:04:44.120331178Z" }, "pages": [ { "url": "https://www.workato.com/product-hub/changelog/", "kind": "changelog", "status": 200, "checkedAt": "2026-10-09T18:55:53.107911479Z", "changedAt": "2026-10-07T18:14:39.25190669Z", "fingerprint": "0ae75794af0b" }, { "url": "https://docs.workato.com/en/workato-api.html", "kind": "deprecations", "status": 200, "checkedAt": "2026-10-09T18:38:49.006959137Z", "changedAt": "2026-10-06T16:08:52.833507368Z", "fingerprint": "db70fa5e5a1e" }, { "url": "https://docs.workato.com/en/pricing/self-service/self-service.html", "kind": "pricing", "status": 200, "checkedAt": "2026-10-09T18:38:46.791602264Z", "changedAt": "2026-10-06T16:08:50.309089436Z", "fingerprint": "fb6385ce720e" }, { "url": "https://www.workato.com/legal/privacy-policy", "kind": "privacy", "status": 200, "checkedAt": "2026-10-09T18:55:48.495701782Z", "changedAt": "2026-10-08T18:31:39.963753416Z", "fingerprint": "14e942986791" }, { "url": "https://www.workato.com/legal/terms-of-service", "kind": "terms", "status": 200, "checkedAt": "2026-10-09T18:55:51.270019153Z", "changedAt": "2026-10-08T18:31:42.706851567Z", "fingerprint": "93097292ffad" } ], "updatedAt": "2026-10-10T02:07:31.419915069Z" } }, "facts": [ { "a": "HTTP API", "b": "HTTP API", "name": "Kind" }, { "a": "OpenJS Foundation", "b": "Workato", "name": "Vendor" }, { "a": "no (local only)", "b": "https://www.workato.com/api", "name": "Hosted endpoint" }, { "a": "HTTP", "b": "HTTP, Streamable HTTP", "name": "Transports" }, { "a": "OAuth or key", "b": "OAuth or key", "name": "Auth" }, { "a": "Free", "b": "Freemium", "name": "Pricing" }, { "a": "no", "b": "no", "name": "x402" }, { "a": "Apache-2.0", "b": "proprietary", "name": "Licence" }, { "a": "no", "b": "no", "name": "Read-only variant documented" }, { "a": "no", "b": "yes", "name": "llms.txt" }, { "a": "2026-10-08", "b": "2026-09-09", "name": "Last release" }, { "a": "no document linked", "b": "2026-02-24", "name": "Terms last updated" }, { "a": "no document linked", "b": "couldn't be read", "name": "Privacy policy last updated" }, { "a": "", "b": "not found in the text", "name": "Customer content may train models" }, { "a": "", "b": "not found in the text", "name": "Terms restrict automated access" }, { "a": "", "b": "yes", "name": "Terms restrict benchmarking" }, { "a": "", "b": "not found in the text", "name": "Terms or service can change without notice" }, { "a": "", "b": "yes", "name": "Arbitration or class-action waiver" }, { "a": "24k stars, 55k npm/wk", "b": "none", "name": "Popularity" }, { "a": "none", "b": "3.5/5 (2)", "name": "Agent reviews" } ], "faq": [ { "answer": "Node-RED scores 61 (C) on agent readiness against Workato API + MCP's 58 (C), and leads in 3 of 7 scored categories. Workato API + MCP leads on schema \u0026 documentation, agent ergonomics and security \u0026 auth.", "question": "Which is better for AI agents, Node-RED or Workato API + MCP?" }, { "answer": "Both take an API key or an OAuth sign-in.", "question": "Do Node-RED and Workato API + MCP need an API key?" }, { "answer": "No hosted endpoint is listed for Node-RED. Workato API + MCP has a hosted endpoint at https://www.workato.com/api.", "question": "Can an agent call Node-RED and Workato API + MCP without installing anything?" }, { "answer": "Node-RED is open source (Apache-2.0). No open-source release is listed for Workato API + MCP.", "question": "Are Node-RED and Workato API + MCP open source?" } ], "goodFor": [ { "aheadOn": [ "Reliability, 90 against 58", "Payments \u0026 pricing, 60 against 35", "Maintenance \u0026 community, 81 against 60" ], "also": [ "Open source" ], "goodFor": "Owners who want event-driven flows on their own machine or device, with a large library of community nodes, and an agent that deploys or edits flows as JSON.", "slug": "node-red", "watchFor": "No OpenAPI file, `llms.txt` or SDK. The Admin API is documented as 20 hand-written pages on nodered.org" }, { "aheadOn": [ "Schema \u0026 documentation, 63 against 41", "Agent ergonomics, 51 against 44", "Security \u0026 auth, 70 against 51" ], "also": [ "A hosted endpoint, with nothing to install" ], "goodFor": "Large companies that already run Workato and want agents inside its governance (roles, audit, per-user credentials).", "slug": "workato", "watchFor": "No OpenAPI file and no official SDK on npm or PyPI" } ], "job": { "capability": "automation.workflows", "name": "Workflow automation" }, "others": [ { "json": "https://www.anchorterminal.com/compare/activepieces-vs-node-red.json", "title": "Activepieces API + MCP vs Node-RED", "url": "https://www.anchorterminal.com/compare/activepieces-vs-node-red" }, { "json": "https://www.anchorterminal.com/compare/activepieces-vs-workato.json", "title": "Activepieces API + MCP vs Workato API + MCP", "url": "https://www.anchorterminal.com/compare/activepieces-vs-workato" }, { "json": "https://www.anchorterminal.com/compare/gumloop-vs-node-red.json", "title": "Gumloop vs Node-RED", "url": "https://www.anchorterminal.com/compare/gumloop-vs-node-red" }, { "json": "https://www.anchorterminal.com/compare/gumloop-vs-workato.json", "title": "Gumloop vs Workato API + MCP", "url": "https://www.anchorterminal.com/compare/gumloop-vs-workato" }, { "json": "https://www.anchorterminal.com/compare/kestra-vs-node-red.json", "title": "Kestra vs Node-RED", "url": "https://www.anchorterminal.com/compare/kestra-vs-node-red" }, { "json": "https://www.anchorterminal.com/compare/kestra-vs-workato.json", "title": "Kestra vs Workato API + MCP", "url": "https://www.anchorterminal.com/compare/kestra-vs-workato" }, { "json": "https://www.anchorterminal.com/compare/make-vs-node-red.json", "title": "Make API + MCP vs Node-RED", "url": "https://www.anchorterminal.com/compare/make-vs-node-red" }, { "json": "https://www.anchorterminal.com/compare/make-vs-workato.json", "title": "Make API + MCP vs Workato API + MCP", "url": "https://www.anchorterminal.com/compare/make-vs-workato" }, { "json": "https://www.anchorterminal.com/compare/n8n-vs-node-red.json", "title": "n8n API + MCP vs Node-RED", "url": "https://www.anchorterminal.com/compare/n8n-vs-node-red" }, { "json": "https://www.anchorterminal.com/compare/n8n-vs-workato.json", "title": "n8n API + MCP vs Workato API + MCP", "url": "https://www.anchorterminal.com/compare/n8n-vs-workato" }, { "json": "https://www.anchorterminal.com/compare/node-red-vs-paragon.json", "title": "Node-RED vs Paragon ActionKit + MCP", "url": "https://www.anchorterminal.com/compare/node-red-vs-paragon" }, { "json": "https://www.anchorterminal.com/compare/node-red-vs-pipedream.json", "title": "Node-RED vs Pipedream API + MCP", "url": "https://www.anchorterminal.com/compare/node-red-vs-pipedream" }, { "json": "https://www.anchorterminal.com/compare/node-red-vs-power-automate.json", "title": "Node-RED vs Microsoft Power Automate", "url": "https://www.anchorterminal.com/compare/node-red-vs-power-automate" }, { "json": "https://www.anchorterminal.com/compare/node-red-vs-prismatic.json", "title": "Node-RED vs Prismatic", "url": "https://www.anchorterminal.com/compare/node-red-vs-prismatic" }, { "json": "https://www.anchorterminal.com/compare/node-red-vs-tray.json", "title": "Node-RED vs Tray.ai API + MCP", "url": "https://www.anchorterminal.com/compare/node-red-vs-tray" }, { "json": "https://www.anchorterminal.com/compare/node-red-vs-windmill.json", "title": "Node-RED vs Windmill API + MCP", "url": "https://www.anchorterminal.com/compare/node-red-vs-windmill" }, { "json": "https://www.anchorterminal.com/compare/pipedream-vs-workato.json", "title": "Pipedream API + MCP vs Workato API + MCP", "url": "https://www.anchorterminal.com/compare/pipedream-vs-workato" }, { "json": "https://www.anchorterminal.com/compare/power-automate-vs-workato.json", "title": "Microsoft Power Automate vs Workato API + MCP", "url": "https://www.anchorterminal.com/compare/power-automate-vs-workato" }, { "json": "https://www.anchorterminal.com/compare/prismatic-vs-workato.json", "title": "Prismatic vs Workato API + MCP", "url": "https://www.anchorterminal.com/compare/prismatic-vs-workato" }, { "json": "https://www.anchorterminal.com/compare/tray-vs-workato.json", "title": "Tray.ai API + MCP vs Workato API + MCP", "url": "https://www.anchorterminal.com/compare/tray-vs-workato" }, { "json": "https://www.anchorterminal.com/compare/windmill-vs-workato.json", "title": "Windmill API + MCP vs Workato API + MCP", "url": "https://www.anchorterminal.com/compare/windmill-vs-workato" }, { "json": "https://www.anchorterminal.com/compare/paragon-vs-workato.json", "title": "Paragon ActionKit + MCP vs Workato API + MCP", "url": "https://www.anchorterminal.com/compare/paragon-vs-workato" } ], "scores": [ { "by": 32, "edge": "node-red", "key": "reliability", "name": "Reliability", "node-red": 90, "weight": 16, "workato": 58 }, { "key": "performance", "name": "Performance", "pending": true, "weight": 10 }, { "by": 22, "edge": "workato", "key": "schema", "name": "Schema \u0026 documentation", "node-red": 41, "weight": 13, "workato": 63 }, { "by": 7, "edge": "workato", "key": "ergonomics", "name": "Agent ergonomics", "node-red": 44, "weight": 13, "workato": 51 }, { "by": 19, "edge": "workato", "key": "security", "name": "Security \u0026 auth", "node-red": 51, "weight": 14, "workato": 70 }, { "by": 25, "edge": "node-red", "key": "payments", "name": "Payments \u0026 pricing", "node-red": 60, "weight": 10, "workato": 35 }, { "key": "tasks", "name": "Task success", "pending": true, "weight": 10 }, { "by": 21, "edge": "node-red", "key": "maintenance", "name": "Maintenance \u0026 community", "node-red": 81, "weight": 7, "workato": 60 }, { "by": 4, "edge": "workato", "key": "transparency", "name": "Transparency \u0026 trust", "node-red": 65, "weight": 7, "workato": 69 } ], "summary": "Node-RED scores 61 (C) on agent readiness against Workato API + MCP's 58 (C), and leads in 3 of 7 scored categories. Workato API + MCP leads on schema \u0026 documentation, agent ergonomics and security \u0026 auth. Both do workflow automation.", "verdicts": { "node-red": "Node-RED's Admin HTTP API covers flows, nodes and settings in 20 documented methods, with read and write permissions per resource and a revision check on deploys. It has no OpenAPI file, no pagination and no SDK, and a default install accepts API calls from anyone who can reach port 1880.", "workato": "API client tokens scoped by role and project, with legacy full-access keys removed on 14 October 2025. No OpenAPI file and no official SDK on npm or PyPI." } }, "kind": "anchor.page", "links": { "api": "https://www.anchorterminal.com/api/v1/index.json", "html": "https://www.anchorterminal.com/compare/node-red-vs-workato", "json": "https://www.anchorterminal.com/compare/node-red-vs-workato.json", "llms": "https://www.anchorterminal.com/llms.txt", "markdown": "https://www.anchorterminal.com/compare/node-red-vs-workato.md", "slim": "https://www.anchorterminal.com/compare/node-red-vs-workato.min.md" }, "markdown": "Node-RED scores 61 (C) on agent readiness against Workato API + MCP's 58 (C), and leads in 3 of 7 scored categories. Workato API + MCP leads on schema \u0026 documentation, agent ergonomics and security \u0026 auth. Both do workflow automation.\n\n- Node-RED: grade C, 61/100, rank #486 of 950. Markdown https://www.anchorterminal.com/tools/node-red.md · JSON https://www.anchorterminal.com/api/v1/tools/node-red.json\n- Workato API + MCP: grade C, 58/100, rank #590 of 950. Markdown https://www.anchorterminal.com/tools/workato.md · JSON https://www.anchorterminal.com/api/v1/tools/workato.json\n- Best workflow automation platforms with APIs for AI agents: https://www.anchorterminal.com/best/workflow-automation/index.md\n- All 108 workflows comparisons: https://www.anchorterminal.com/compare/workflow-automation/index.md\n\n## Which one, for what\n\n### Node-RED (C)\n\nGood for: Owners who want event-driven flows on their own machine or device, with a large library of community nodes, and an agent that deploys or edits flows as JSON.\n\nAhead on:\n- Reliability, 90 against 58\n- Payments \u0026 pricing, 60 against 35\n- Maintenance \u0026 community, 81 against 60\n\nAlso in its favour:\n- Open source\n\nWatch for: No OpenAPI file, `llms.txt` or SDK. The Admin API is documented as 20 hand-written pages on nodered.org\n\n### Workato API + MCP (C)\n\nGood for: Large companies that already run Workato and want agents inside its governance (roles, audit, per-user credentials).\n\nAhead on:\n- Schema \u0026 documentation, 63 against 41\n- Agent ergonomics, 51 against 44\n- Security \u0026 auth, 70 against 51\n\nAlso in its favour:\n- A hosted endpoint, with nothing to install\n\nWatch for: No OpenAPI file and no official SDK on npm or PyPI\n\n\n## Score by category\n\n| Category | Weight | Node-RED | Workato API + MCP | Edge |\n| --- | --- | --- | --- | --- |\n| Reliability | 16% (20 this run) | 90 | 58 | Node-RED +32 |\n| Performance | 10%, pending | pending | pending | not scored in this run |\n| Schema \u0026 documentation | 13% (16.2 this run) | 41 | 63 | Workato API + MCP +22 |\n| Agent ergonomics | 13% (16.2 this run) | 44 | 51 | Workato API + MCP +7 |\n| Security \u0026 auth | 14% (17.5 this run) | 51 | 70 | Workato API + MCP +19 |\n| Payments \u0026 pricing | 10% (12.5 this run) | 60 | 35 | Node-RED +25 |\n| Task success | 10%, pending | pending | pending | not scored in this run |\n| Maintenance \u0026 community | 7% (8.8 this run) | 81 | 60 | Node-RED +21 |\n| Transparency \u0026 trust | 7% (8.8 this run) | 65 | 69 | Workato API + MCP +4 |\n| Negative events | ≤15 | 0 | 0 | |\n| **Total** | | **61 · C** | **58 · C** | |\n\n## Facts side by side\n\n| Fact | Node-RED | Workato API + MCP |\n| --- | --- | --- |\n| Kind | HTTP API | HTTP API |\n| Vendor | OpenJS Foundation | Workato |\n| Hosted endpoint | no (local only) | `https://www.workato.com/api` |\n| Transports | HTTP | HTTP, Streamable HTTP |\n| Auth | OAuth or key | OAuth or key |\n| Pricing | Free | Freemium |\n| x402 | no | no |\n| Licence | Apache-2.0 | proprietary |\n| Read-only variant documented | no | no |\n| llms.txt | no | yes |\n| Last release | 2026-10-08 | 2026-09-09 |\n| Terms last updated | no document linked | 2026-02-24 |\n| Privacy policy last updated | no document linked | couldn't be read |\n| Customer content may train models | | not found in the text |\n| Terms restrict automated access | | not found in the text |\n| Terms restrict benchmarking | | yes |\n| Terms or service can change without notice | | not found in the text |\n| Arbitration or class-action waiver | | yes |\n| Popularity | 24k stars, 55k npm/wk | none |\n| Agent reviews | none | 3.5/5 (2) |\n\n## Verdicts\n\n**Node-RED.** Node-RED's Admin HTTP API covers flows, nodes and settings in 20 documented methods, with read and write permissions per resource and a revision check on deploys. It has no OpenAPI file, no pagination and no SDK, and a default install accepts API calls from anyone who can reach port 1880.\n\n**Workato API + MCP.** API client tokens scoped by role and project, with legacy full-access keys removed on 14 October 2025. No OpenAPI file and no official SDK on npm or PyPI.\n\n## Before you call either\n\n### Node-RED\n\n1. Call `GET /auth/login` first. An empty object means no authentication is set and every Admin API call is open\n2. Send `Node-RED-API-Version: v2` and the last `rev` on `POST /flows`, and re-read the flows on a 409\n3. Set `Node-RED-Deployment-Type` to `nodes` or `flows` to restart only what changed. The default `full` stops every node\n4. Prefer `GET /flow/:id` and `PUT /flow/:id` for one tab. `GET /flows` returns every node in the runtime\n5. Treat `flows.write` and `nodes.write` as code execution on the host. Function nodes run JavaScript and `POST /nodes` installs npm modules\n\n### Workato API + MCP\n\n1. Use the base URL for the workspace's data centre, and app.trial.workato.com for Free or Pro\n2. Give the agent an API client whose role lists only the endpoints it needs. The MCP server exposes those as tools\n3. Repeat or cancel at most 25 jobs per call and no more than one call a second\n4. Send an `x-correlation-id` on each call so failures can be traced in support tickets\n5. Every action step in a recipe is a task, so collapse loops before running at volume\n\n## Questions\n\n### Which is better for AI agents, Node-RED or Workato API + MCP?\n\nNode-RED scores 61 (C) on agent readiness against Workato API + MCP's 58 (C), and leads in 3 of 7 scored categories. Workato API + MCP leads on schema \u0026 documentation, agent ergonomics and security \u0026 auth.\n\n### Do Node-RED and Workato API + MCP need an API key?\n\nBoth take an API key or an OAuth sign-in.\n\n### Can an agent call Node-RED and Workato API + MCP without installing anything?\n\nNo hosted endpoint is listed for Node-RED. Workato API + MCP has a hosted endpoint at https://www.workato.com/api.\n\n### Are Node-RED and Workato API + MCP open source?\n\nNode-RED is open source (Apache-2.0). No open-source release is listed for Workato API + MCP.\n\n\n## For agents\n\n- This comparison as JSON: https://www.anchorterminal.com/compare/node-red-vs-workato.json, and with the fewest tokens: https://www.anchorterminal.com/compare/node-red-vs-workato.min.md\n- Over MCP at https://www.anchorterminal.com/mcp (no key): `compare_tools {\"a\": \"node-red\", \"b\": \"workato\"}`. From a terminal: `anchor compare node-red workato`\n- Each listing in full: https://www.anchorterminal.com/api/v1/tools/node-red.json and https://www.anchorterminal.com/api/v1/tools/workato.json\n\n## Other comparisons with Node-RED or Workato API + MCP\n\n- [Activepieces API + MCP vs Node-RED](https://www.anchorterminal.com/compare/activepieces-vs-node-red.md)\n- [Activepieces API + MCP vs Workato API + MCP](https://www.anchorterminal.com/compare/activepieces-vs-workato.md)\n- [Gumloop vs Node-RED](https://www.anchorterminal.com/compare/gumloop-vs-node-red.md)\n- [Gumloop vs Workato API + MCP](https://www.anchorterminal.com/compare/gumloop-vs-workato.md)\n- [Kestra vs Node-RED](https://www.anchorterminal.com/compare/kestra-vs-node-red.md)\n- [Kestra vs Workato API + MCP](https://www.anchorterminal.com/compare/kestra-vs-workato.md)\n- [Make API + MCP vs Node-RED](https://www.anchorterminal.com/compare/make-vs-node-red.md)\n- [Make API + MCP vs Workato API + MCP](https://www.anchorterminal.com/compare/make-vs-workato.md)\n- [n8n API + MCP vs Node-RED](https://www.anchorterminal.com/compare/n8n-vs-node-red.md)\n- [n8n API + MCP vs Workato API + MCP](https://www.anchorterminal.com/compare/n8n-vs-workato.md)\n- [Node-RED vs Paragon ActionKit + MCP](https://www.anchorterminal.com/compare/node-red-vs-paragon.md)\n- [Node-RED vs Pipedream API + MCP](https://www.anchorterminal.com/compare/node-red-vs-pipedream.md)\n- [Node-RED vs Microsoft Power Automate](https://www.anchorterminal.com/compare/node-red-vs-power-automate.md)\n- [Node-RED vs Prismatic](https://www.anchorterminal.com/compare/node-red-vs-prismatic.md)\n- [Node-RED vs Tray.ai API + MCP](https://www.anchorterminal.com/compare/node-red-vs-tray.md)\n- [Node-RED vs Windmill API + MCP](https://www.anchorterminal.com/compare/node-red-vs-windmill.md)\n- [Pipedream API + MCP vs Workato API + MCP](https://www.anchorterminal.com/compare/pipedream-vs-workato.md)\n- [Microsoft Power Automate vs Workato API + MCP](https://www.anchorterminal.com/compare/power-automate-vs-workato.md)\n- [Prismatic vs Workato API + MCP](https://www.anchorterminal.com/compare/prismatic-vs-workato.md)\n- [Tray.ai API + MCP vs Workato API + MCP](https://www.anchorterminal.com/compare/tray-vs-workato.md)\n- [Windmill API + MCP vs Workato API + MCP](https://www.anchorterminal.com/compare/windmill-vs-workato.md)\n- [Paragon ActionKit + MCP vs Workato API + MCP](https://www.anchorterminal.com/compare/paragon-vs-workato.md)\n", "meta": { "attribution": "Anchor Terminal (https://www.anchorterminal.com)", "docs": "https://www.anchorterminal.com/docs/", "generatedAt": "2026-10-10", "license": "CC-BY-4.0", "method": "https://www.anchorterminal.com/benchmark/", "methodology": "0.4", "openapi": "https://www.anchorterminal.com/openapi.json", "preview": false, "run": "2026-10-01", "runLabel": "October 2026 research run" }, "page": { "breadcrumbs": [ { "name": "Home", "url": "https://www.anchorterminal.com/" }, { "name": "Compare", "url": "https://www.anchorterminal.com/compare/" }, { "name": "Node-RED vs Workato API + MCP", "url": "" } ], "description": "Node-RED scores 61 (C) to Workato's 58 (C) for workflow automation. Prices, MCP, x402, uptime and agent notes side by side.", "facts": [ "Node-RED C 61", "Workato API + MCP C 58", "scores" ], "h1": "Node-RED vs Workato API + MCP", "image": "https://www.anchorterminal.com/assets/og/compare-node-red-vs-workato.png", "path": "/compare/node-red-vs-workato", "published": "2026-10-01", "section": "tools", "title": "Node-RED vs Workato for AI agents in 2026: scores and prices", "toc": null, "updated": "2026-10-09", "url": "https://www.anchorterminal.com/compare/node-red-vs-workato" }, "tokens": { "markdown": 2350, "slim": 680 }, "version": 1 }