ChatFlowGate

n8n's built-in chat widget puts your production webhook URL directly in the page source. Anyone can open dev tools, copy it, and post to your workflow from outside your site — with no rate limit and no authentication in front of it. That's fine for internal testing, and a real liability on a public page. ChatFlowGate sits between your visitors and n8n. The browser only ever talks to ChatFlowGate; ChatFlowGate talks to your workflow. What it does:

• Hidden webhook — your n8n URL is a server-side field, never sent to the browser
• Signed sessions — HMAC tokens bound to a single bot, expiring in 24 hours, issued only after the page's origin is checked against that bot's domain allowlist
• Rate limiting — token-bucket limits per session and per IP, tunable per bot, resistant to spoofed X-Forwarded-For headers
• SSRF protection — webhook targets are DNS-resolved and refused if they point at loopback, private, link-local or cloud metadata addresses
• Abuse controls — org-scoped IP bans, per-bot country allow/block lists, and hidden spam traps that catch automated form and chat posts
• No message storage — chat content is never written to the database; only session metadata (approximate location, browser, message count) is kept for analytics
• Streaming — replies stream back token by token as your workflow produces them
• White-label widget — per-bot colour, logo, greeting, suggested prompts, RTL, consent screen, custom CSS, and a language picker
• Lead capture — collect name and email before the conversation starts, forwarded to your workflow as a chat_started event
• Multi-tenant — run many bots from one workspace, each pointing at a different n8n workflow, with team members and org-scoped API keys Built for agencies and developers who deliver n8n chatbots to clients and need them to be safe on a public site. Embedding is one script tag. Free tier available, no card required. Try the live demo on the homepage — it's a real bot running through the real gateway.