safe workflow promotion · self-hosted n8n · community edition

Two tiers. One for getting started.
One for not breaking production.

source control · self-hosted n8n 
  n8n Source Control   €800/mo   Business plan
  Chiral Team          $79/mo    Community Edition
  ─────────────────────────────────────────────
  Same job. Priced for CE teams.
  n8n Source Control   €800/mo   Business plan
  Chiral Team          $79/mo    Community Edition
  ─────────────────────────────────────────────
  Same job. Priced for CE teams.

Free

$0 / forever

forever · no card

  • included Environment promotion up to 5 envs, 1 project
  • included Content fingerprinting diffs what changed, not the versionId
  • included Credential remapping maps names across envs — values stay put
  • included Dry-run pushes preview before you write (push --dry-run)
  • included Pre-push snapshots an exact restore point before every write
  • included Git-backed history sync team state through your own remote
  • included One-command onboarding chiral clone <repo-url>
  • included Self-hosted CE runs against the n8n REST API
  • not included Production-push RBAC
  • not included One-command rollback
  • not included Deployment history + audit trail
  • not included Preflight + smoke-test gating
  • not included Multi-instance config
sh -c "$(curl -sSfL https://chiral.sh/install)"

# already running free? chiral license activate <key> unlocks the team tier — no reinstall

recommended

Team

flat per team · no per-seat

$65 / mo

billed annually ($790/yr)

$79 / mo

billed monthly · → $65/mo on annual

$948/yr
$790/yr save $158
  • included Production-push RBAC only permitted developers can push to prod
  • included One-command rollback undo any push in seconds (chiral rollback)
  • included Deployment history + audit trail who pushed what, and when
  • included Preflight + smoke-test gating catch a bad push before it lands (--gated)
  • included Team notification on blocked push the team hears when a push is refused
  • included Multi-instance config one Chiral, every client instance
  • included Credential drift detection flags when a target credential moved or vanished
  • included Audit CSV export
  • included Everything in Free

n8n Source Control

Business plan

€800 / mo

per workspace

  • present Environment promotion
  • present Production-push RBAC
  • present Git-backed history
  • scope difference for CE Self-hosted CE
  • scope difference for CE Content fingerprinting
  • scope difference for CE Credential remapping
  • scope difference for CE One-command rollback
n8n.io/pricing →

n8n's Source Control is good — it's built for Business-plan teams. Chiral brings safe promotion to CE.

≈1/10th the price, built for CE teams.

capability comparison

Capability comparison: Free ($0), Team ($79/mo), n8n Source Control (€800/mo)
Capability Free $0 Team $79/mo n8n Source Control €800/mo
Environment promotion included ≤5 envs, 1 project included present
Git-backed history included included present
Self-hosted CE included included scope difference for CE
Content fingerprinting included included scope difference for CE
Credential remapping included included scope difference for CE
Production-push RBAC not included in this tier included present
One-command rollback not included in this tier included scope difference for CE
Preflight + smoke-test gating not included in this tier included scope difference for CE
Multi-instance config ¹ not included in this tier included scope difference for CE
Team notification on blocked push not included in this tier included scope difference for CE
Credential drift detection not included in this tier included scope difference for CE
Audit CSV export not included in this tier included scope difference for CE

¹ Multi-instance config: one Chiral control plane across many separate client instances. n8n Business has a “Projects” feature — the scope difference is per-instance management, not project grouping.

² Both Chiral Team and n8n Source Control have RBAC, but they operate at different scopes. Chiral’s is production-push RBAC (who can deploy to prod); n8n’s is workspace-level (who can access the instance).

what it prevents

Without a push allowlist, any developer with CLI access can deploy to production. RBAC blocks unlisted accounts at pre-flight — before the first workflow is touched.

A Team admin controls who may push to each environment. If the actor is not on the list, the push fails immediately and names exactly who can grant access.

chiral push · production RBAC pre-flight 
  Production push allowlist:
    alice@agency.com   ✓ permitted
    admin@agency.com   ✓ permitted
    dev@agency.com     ✗ not listed

  Push blocked: dev@agency.com is not in the production allowlist.
  Ask alice@agency.com to run:
  chiral rbac add --env production dev@agency.com
  Production push allowlist:
    alice@agency.com   ✓ permitted
    admin@agency.com   ✓ permitted
    dev@agency.com     ✗ not listed

  Push blocked: dev@agency.com is not in the production allowlist.
  Ask alice@agency.com to run:
  chiral rbac add --env production dev@agency.com

FAQ

One prevented production incident (≈$280–$1,280 in emergency dev hours) pays for the year.

Is the free tier actually free?
Yes. No credit card. No time limit. No trial countdown. The free tier is the full CLI for single-project use — up to 5 environments, 1 project.
What counts as a team?
Any group using a shared .chiral/ config from a git remote. Two developers on one project qualifies.
Can I upgrade from free to paid at any time?
Yes. After purchase, run chiral license activate <key>. Paid features unlock immediately — no reinstall, no restart, no re-init.
How does the license key work?
Polar.sh handles billing and delivers a license key by email. Activate it locally with chiral license activate <key>. The CLI validates once per day and works offline for up to 7 days if Polar is unreachable.
What if n8n ships Source Control for CE?
Chiral's paid tier does things n8n won't build for CE: multi-project config for agencies, production RBAC, one-command rollback, audit CSV export. If n8n ships CE source control, Chiral becomes the auditing and safety layer above it.

Follow CLI releases

Track Chiral releases without polling GitHub.

Feature updates and release notes. No pitch emails. Unsubscribe any time.