n8n 2.41.7 adds variable scopes for API keys
n8n 2.41.7 shipped a signed stable release that lets global members grant variable scopes to API keys. The change makes secret-variable access an explicit API credential boundary in automation and agent workflows.
Why it matters: API keys often outlive individual runs and can silently widen automation authority. Explicit variable scopes create a more inspectable least-privilege control, provided existing grants and role paths are audited.