n8n-io/n8n · error · ForbiddenError

Workflow reviews settings are not enabled in this instance

Error message

Workflow reviews settings are not enabled in this instance

What it means

Workflow reviews require both a license (licenseState.isWorkflowReviewsLicensed()) and feature availability. assertWorkflowReviewsAvailable() throws 403 ForbiddenError 'Workflow reviews settings are not enabled in this instance' when isWorkflowReviewsFeatureAvailable returns false.

Source

Thrown at packages/cli/src/controllers/security-settings.controller.ts:94

				});
			}
		}

		return updatedSettings;
	}

	private isWorkflowReviewsAvailable(): boolean {
		return isWorkflowReviewsFeatureAvailable(this.licenseState.isWorkflowReviewsLicensed());
	}

	private async getWorkflowReviewsIfAvailable() {
		if (!this.isWorkflowReviewsAvailable()) return undefined;
		return await this.workflowReviewPolicyService.get();
	}

	private assertWorkflowReviewsAvailable(): void {
		if (!this.isWorkflowReviewsAvailable()) {
			throw new ForbiddenError('Workflow reviews settings are not enabled in this instance');
		}
	}
}

View on GitHub (pinned to 5ac6606e81)

Solutions

1. Upgrade the license / enable the workflow-reviews entitlement.
2. Omit the workflowReviews field from the request body until the feature is available.
3. Confirm feature-flag/licensing state in the instance before exposing the workflow-reviews UI.

// Only send workflowReviews when the feature is licensed.
function shouldSendWorkflowReviews(dto, featureAvailable) {
  return dto.workflowReviews === undefined ? true : featureAvailable;
}

try {
  await api.post('/security-settings', dto);
} catch (e) {
  if (e.status === 403 && /Workflow reviews settings are not enabled/.test(e.message)) {
    // omit workflowReviews or upgrade license, then retry
  } else { throw e; }
}

When it happens

Trigger: POST /security-settings with a workflowReviews field in the body while the workflow-reviews feature is not licensed/available on the instance.

Common situations: Plan tier without workflow reviews; license not loaded or feature flag off; trying to configure reviews before entitlement is active.

Related errors

• Security settings are managed via environment variables and
• LangSmithTelemetry creates its own tracer — do not use .otlp
• Invalid resume payload: ${parseResult.error}
• Episodic memory requires a resolved embedding model before r
• Invalid credentials for provider "${provider}": ${issues}

AI-assisted analysis of n8n-io/n8n@5ac6606e81 (2026-08-12). Data as JSON: /api/errors/eed7a755efe1f999. Report an issue: GitHub.