Name: BreznFlow
Author: mifupa

BreznFlow turns n8n workflow JSON exports into interactive, zoomable SVG diagrams inside WordPress. Paste your workflow, and the plugin renders every node with brand-accurate colors, connection lines, and clickable detail panels — directly in your posts and pages.

The plugin was built for mifupa.com, a personal blog where n8n automations are documented regularly. Screenshots get outdated. Embedding the n8n editor is impractical. BreznFlow solves this: one shortcode, one interactive diagram, zero external dependencies.

Learn more

At a glance

Renders n8n workflow JSON as interactive SVG diagrams with zoom, pan, and click
86 node types with brand-accurate colors and icons (OpenAI, Slack, GitHub, Telegram, and more)
Click any node to inspect its parameters in a detail panel below the diagram
Automatically masks API keys, tokens, and secrets before storage — the raw JSON is never saved
3-step import wizard: paste JSON, configure display, preview and publish
5 built-in themes (Dark, Light, Minimal, Tech, Brezn) plus custom theme import
Shortcode [breznflow id="X"] with 13 attributes for per-instance configuration
Action bar with share, embed, get JSON, and download actions
Standalone embed page for iframe integration
Related workflows by shared node types
View counter and AI detection badges
Zero dependencies — vanilla JavaScript, no external CDN, no tracking

What makes BreznFlow different

No external services. Everything runs locally inside WordPress. No CDN, no SaaS, no API calls during page loads.
Security first. Sensitive data (API keys, tokens, secrets) is automatically detected and replaced with [REDACTED] before storage. The raw workflow JSON is never saved.
Real interactivity. Not a static image — visitors can zoom, pan, and click nodes to see their configuration.
Vanilla JavaScript. No React, no jQuery, no build step. The renderer is a single JS file that generates SVG elements directly.
Built for real sites. Running on the developer’s own production sites since version 1.0.

Display modes

Visual — full diagram with toolbar, detail panel, and action bar
Info — node counts only (InfoBox summary like “3× HTTP Request, 2× Code”) — no diagram
Compact — diagram without toolbar or action bar

Theme system

5 built-in themes: Dark (default), Light, Minimal, Tech, and Brezn. Custom themes can be imported as .breznflow.json files containing 41 CSS color tokens. Themes are selectable globally, per workflow, or per shortcode.

Node type registry

86 predefined node types across 10 categories: Triggers, Core Logic, Data Transformation, Databases, Communication, Google, Dev Tools, AI, Storage, and CRM/Marketing. Unknown node types get a deterministic fallback with auto-generated colors — the same unknown type always looks the same.

Sensitive data masking

Before saving, BreznFlow runs a two-pass sanitization:

All strings pass through WordPress sanitization
Secret detection scans for API keys in URL parameters, sensitive header values (Authorization, Bearer, X-API-Key), and high-entropy condition values

A masking log records every redaction with reason and context — visible in the wizard preview.

Action bar

Below the diagram, the action bar provides four configurable actions:

Share — article link and anchor link for hash navigation
Embed — iframe embed code for standalone embedding
Get JSON — formatted JSON display with file size
Download — sanitized JSON file download

Each action can be enabled/disabled globally, per workflow, or per shortcode. Embed and Download use dual-gate security (global setting AND per-post permission).

External Services

This plugin optionally connects to external services only when you explicitly use the “Import from URL” feature in the workflow import wizard.

Import from URL

If you choose to import a workflow by pasting a URL instead of uploading or pasting JSON directly, the plugin makes an HTTP request to that URL using WordPress’s built-in wp_remote_get() function.

When: Only when you click the “Fetch” button in the Add Workflow wizard
What is sent: Only the URL you provide — no WordPress data, no user data, no cookies
To whom: Whatever server hosts the URL you provide
Privacy policy: Depends on the server you connect to

No data is transmitted automatically. No data is sent during normal page loads or to visitors browsing your site.

For security, requests to private and internal network addresses are blocked: localhost, 127.0.0.0/8, 10.0.0.0/8, 172.16.0.0/12, 192.168.0.0/16, and cloud metadata endpoints (e.g. 169.254.169.254).