Skip to content


Use the TheHive node to automate work in TheHive, and integrate TheHive with other applications. n8n has built-in support for a wide range of TheHive features, including creating alerts, counting tasks logs, cases, and observables.

On this page, you'll find a list of operations the TheHive node supports and links to more resources.

TheHive and TheHive 5

n8n provides two nodes for TheHive. Use this node (TheHive) if you want to use TheHive's version 3 or 4 API. If you want to use version 5, use TheHive 5.


Refer to TheHive credentials for guidance on setting up authentication.

Examples and templates

For usage examples and templates to help you get started, take a look at n8n's TheHive integrations list.


The available operations depend on your API version. To see the operations list, create your credentials, including selecting your API version. Then return to the node, select the resource you want to use, and n8n displays the available operations for your API version.

  • Alert
  • Case
  • Log
  • Observable
  • Task

n8n provides a trigger node for TheHive. You can find the trigger node docs here.

View example workflows and related content on n8n's website.

Refer to TheHive's documentation for more information about the service: