OdooSAFE
MCP server to manage Odoo account with AI
Overview
From the repository's own README, as read at the audited commit. Badges and raw HTML are left out.
A hybrid Model Context Protocol (MCP) server that enables AI assistants to interact with Odoo ERP systems. Supports both HTTP streaming (for web AI agents) and stdio (for local AI assistants) modes.
📺 Demo
stdio Mode Demo (Claude Desktop)
HTTP Mode Demo (AI Agents & Remote Access)
Example Output
🚀 Quick Start
HTTP Mode (AI Agents & Remote Access)
# Clone the repository git clone https://github.com/vzeman/odoo-mcp-server.git cd odoo-mcp-server # Copy example and configure cp docker-compose.example.yml docker-compose.yml # Edit docker-compose.yml with your Odoo credentials # Start with Docker Compose docker-compose up -d # Access the server curl http://localhost:8000/health
stdio Mode (Claude Desktop)
Option 1: Install from PyPI (recommended)
# Install pip install odoo-mcp-server
Option 2: Install from source
# Clone the repository git clone https://github.com/vzeman/odoo-mcp-server.git cd odoo-mcp-server # Install in development mode pip install -e .
Configure Claude Desktop
Add to your Claude Desktop config file:
macOS: ~/Library/Application Support/Claude/claude_desktop_config.json Windows: %APPDATA%/Claude/claude_desktop_config.json
{
"mcpServers": {
"odoo": {
"command": "python",
"args": ["-m", "mcp_server_odoo"],
"env": {
"ODOO_URL": "https://your-instance.odoo.com",
"ODOO_DB": "your-database",
"ODOO_USERNAME": "[email protected]",
"ODOO_API_KEY": "your-api-key"
}
}
}
}Local Development
# Clone the repository git clone https://github.com/vzeman/odoo-mcp-server.git cd odoo-mcp-server # Install dependencies pip install -e . # Set environment variables export ODOO_URL="https://your-inst
05dc419c3ccfOBSERVED · 2026-10-09Connect
Built from this server's own package name, version and transport as found in its source — not copied from anyone's documentation, so it cannot drift against a page we do not control. Replace the environment placeholders with a token scoped to the least it needs.
claude mcp add odoo-mcp-server --env ODOO_API_KEY=${ODOO_API_KEY} --env ODOO_PASSWORD=${ODOO_PASSWORD} -- uvx odoo-mcp-server{
"mcpServers": {
"odoo-mcp-server": {
"command": "uvx",
"args": [
"odoo-mcp-server"
],
"env": {
"ODOO_API_KEY": "${ODOO_API_KEY}",
"ODOO_PASSWORD": "${ODOO_PASSWORD}"
}
}
}
}Exposed tools (12)
8 read · 3 write · 1 destructive. Blast radius: 1 tool can delete or overwrite — an agent that can be talked into calling a tool can be talked into calling this one.
| Tool | Risk | Description |
|---|---|---|
cache_stats | read | Get cache statistics and management |
create_record | write | Create new records in Odoo |
delete_record | destructive | Delete records from Odoo (use with caution) |
execute_method | write | Execute custom methods on Odoo models |
get_model_fields | read | Get field definitions for a model |
get_record | read | Get detailed information about specific records |
list_models | read | Discover available models in your Odoo instance |
model_info | read | Get comprehensive information about a model |
search_count | read | Count records matching search criteria |
search_records | read | Search for records in any Odoo model |
server_status | read | Get server status and health information |
update_record | write | Update existing records |
Trust audit
SAFEgrade B · trust 89/100 Nothing in the source contradicts what it says it does. Grade A is reserved for packages that have also passed the behavioural sandbox.
| Layer | What it checks | Result |
|---|---|---|
| L0 | Provenance & inventory | PASS |
| L1 | Static analysis of the code | PASS |
| L2 | Instruction surface (what it tells the agent) | PASS |
| L3 | Class-specific surface | WARN |
| L4 | Behavioural (sandbox) | SKIPPED |
What the source does
- Filesystem
- declared (2 observation(s))
- Network
- declared (1 observation(s))
- Shell
- none-observed
- Dependencies
- pinned
- Secrets in source
- none-found
Findings (5)
delete_record
# Web Interface http://127.0.0.1:4040
# Open http://127.0.0.1:4040 in your browser
docs/images/demo.gif
docs/images/odoo-demo.gif
Gates applied: no_behavioural_pass.
05dc419c3ccffull audit observations/trust-audit/mcp-server/vzeman__odoo-3.json · Report an issue / request a re-scanAudit history
Every audit this server has had. A grade with a past is a grade somebody is still checking.
| Date | Source | Verdict | Grade | Score | Change |
|---|---|---|---|---|---|
| 2026-10-09 | 05dc419c3ccf | SAFE | B | 89 | first audit |
Questions
What is the Odoo MCP server?
MCP server to manage Odoo account with AI
What tools does Odoo expose?
12 in total: 8 read-only, 3 that write, and 1 that can delete or overwrite (delete_record). Every one is listed on this page with its risk.
Is Odoo safe to connect to an agent?
The audit found nothing in the source that contradicts what it says it does, and graded it B (89/100). Grade A is held back for packages that have also passed a sandboxed behavioural run, which is why a clean server reads B. Separately from the audit: 1 of its tools can destroy data, so scope the token you give it to what you actually need.
What credentials does Odoo need?
It reads ODOO_API_KEY and ODOO_PASSWORD from the environment. Give it a token scoped to the least it needs — an agent that can be talked into calling a tool can be talked into calling it with your credentials.
How does Odoo run?
It speaks stdio, so it runs as a local process your client starts. It is published on PyPI as odoo-mcp-server.
How current is this page?
The grade is for one exact copy of the source (05dc419c3ccf), read on 2026-10-09. The repository is watched and re-audited when it changes.