I’m working on a mobile app and want to use n8n to automate some backend tasks. For example, I’d like to trigger workflows when users submit forms, place orders, or update their profiles.
What would be the best way to connect a mobile app with n8n? Should I use webhooks directly from the app, or is it better to have a separate backend API between the app and n8n?
Hi @robertwilliam Put a backend between the app and n8n. Calling webhooks directly from a mobile app has two problems:
The webhook URL and any secret in the app can be extracted. Anyone can decompile the app or watch its network traffic, then call your webhook directly with fake requests.
No user validation. n8n can’t tell whether a request really comes from a logged-in user.
A safer flow:
Mobile App
│ (user token)
▼
Your Backend / Serverless Function
│ • verify user token
│ • validate + rate limit
│ • add Header Auth secret (server-side only)
▼
n8n Webhook (Header Auth, Respond Immediately)
│
▼
Workflow → DB / Email / Notifications
If n8n is down, your backend can queue and retry. If you don’t want a full backend, a small serverless function (Firebase or Supabase functions, for example) works fine in the middle.