MCP Server Pro
The free advanced layer for the native MCP server: field and record level permissions, dry-run write guardrails with caps and confirmation, OAuth 2.1, saved reports and file tools, a safe allow-listed method caller, long-running tasks and live resource subscriptions. All free, all on Odoo 16 to 19.
Why this module
Depth and safety for MCP.
Control what the AI sees, down to the field
Per model, mask sensitive fields on read and reject them on write with allow or deny lists, and restrict the assistant to a record domain it can never see past. This goes well beyond the model-and-operation gate in the base module, all enforced on top of Odoo's own access rules.
Preview, cap and confirm before anything changes
Every write can run as a dry-run that reports the exact effect without committing. Per-model caps stop a bulk change or delete from running away, and high-risk operations require confirmation, offered as an out-of-band URL prompt when the assistant supports elicitation.
OAuth 2.1 and an allow-listed method caller
Verify OAuth 2.1 bearer tokens as a resource server with strict audience validation and no token passthrough. Call model methods only from an administrator's per-model allow-list, with private methods blocked, so there is no unguarded remote execution.
Day in the life
Turn a broad connection into a precise, safe one
An administrator who has connected an assistant with the base module opens the enabled model and, in the Pro policy section, hides the fields the assistant must not see, sets a record domain to scope it to one company or team, caps how many records a single write may touch, and requires confirmation on deletes. From then on the assistant works within a tight, auditable envelope, and can also run reports, read attachments and call a short list of approved actions.
Edge cases
The cases most modules quietly ignore.
In the shipped code today, each one a place where a cheaper module silently does the wrong thing.
A denied field is not just blocked on read; its very existence, label and type are hidden from the model-description and field resources too, so the assistant cannot even learn that it exists.
A batch write runs inside a single transaction; if one item fails the whole batch rolls back, so a partial, inconsistent change is never left behind.
An OAuth token minted for a different resource is rejected even if its signature is valid, following the resource-indicator rule, so a token cannot be replayed against this server.
The method caller refuses anything not on the administrator's allow-list and refuses private methods outright, so there is no way to reach arbitrary code through it.
What is inside
Built to do the job, end to end.
- Policy seam over the base model. Pro inherits the enabled-model configuration and fills hook points the base module already calls, so field masking, record domains, caps and confirmation apply everywhere reads and writes happen without changing core code. Defaults are permissive, so installing Pro never tightens a model you have not configured.
- OAuth resource server. A dependency-free token verifier checks signature, expiry and audience and maps the subject to an Odoo user; the protected-resource metadata document advertises the authorization server. The server never forwards a client token upstream.
- Business tools, tasks and subscriptions. A run-report tool renders to PDF or spreadsheet, binary read and file attach handle documents, a safe caller runs allow-listed methods, durable tasks wrap longer work, and resource subscriptions push updates for changes made through the server.
Honest about the edges
What this does not do, so nothing surprises you.
- This module is a free add-on and requires the base MCP Server module. It is an OAuth resource server, not an authorization server, so bring your own identity provider. Resource subscriptions currently notify on changes made through the server; catching every external change is a later addition. Report rendering uses Odoo's own engines, so a PDF needs the usual rendering support installed.
Odoo MCP field permissions, Odoo MCP record rules AI, MCP write guardrails, Odoo MCP OAuth 2.1, safe method call MCP, Odoo MCP tasks subscriptions, AI data governance Odoo, restrict AI access Odoo
Govern what the AI can do
Field and record level control, write guardrails and safe method calls, configured per model.
Field, record and write policyMask sensitive fields, scope the assistant to a record domain it cannot see past, cap how many records a write or delete may touch, require confirmation, and allow-list callable methods.
Built on the free MCP ServerPro layers governance onto the native endpoint: the same per-model access list, now with field, record and guardrail policy on every row.
Languages
Available in 19 languages
The interface ships translated out of the box. Switch language in Odoo and the fields, menus, and messages follow.
Connect in three steps
Native endpoint, no local bridge. Point any MCP-compatible assistant at one URL with a scoped key.
Full step-by-step setup for Windows, macOS and Linux - Claude Code, Cursor, VS Code, Claude Desktop and n8n - is in the app README.
| Availability |
Odoo Online
Odoo.sh
On Premise
|
| Odoo Apps Dependencies |
Discuss (mail)
|
| Community Apps Dependencies | Show |
| Lines of code | 2900 |
| Technical Name |
eh_mcp_server_pro |
| License | OPL-1 |
| Website | https://erpheritage.com.au |
Odoo Proprietary License v1.0 This software and associated files (the "Software") may only be used (executed, modified, executed after modifications) if you have purchased a valid license from the authors, typically via Odoo Apps, or if you have received a written agreement from the authors of the Software (see the COPYRIGHT file). You may develop Odoo modules that use the Software as a library (typically by depending on it, importing it and using its resources), but without copying any source code or material from the Software. You may distribute those modules under the license of your choice, provided that this license is compatible with the terms of the Odoo Proprietary License (For example: LGPL, MIT, or proprietary licenses similar to this one). It is forbidden to publish, distribute, sublicense, or sell copies of the Software or modified copies of the Software. The above copyright notice and this permission notice must be included in all copies or substantial portions of the Software. THE SOFTWARE IS PROVIDED "AS IS", WITHOUT WARRANTY OF ANY KIND, EXPRESS OR IMPLIED, INCLUDING BUT NOT LIMITED TO THE WARRANTIES OF MERCHANTABILITY, FITNESS FOR A PARTICULAR PURPOSE AND NONINFRINGEMENT. IN NO EVENT SHALL THE AUTHORS OR COPYRIGHT HOLDERS BE LIABLE FOR ANY CLAIM, DAMAGES OR OTHER LIABILITY, WHETHER IN AN ACTION OF CONTRACT, TORT OR OTHERWISE, ARISING FROM, OUT OF OR IN CONNECTION WITH THE SOFTWARE OR THE USE OR OTHER DEALINGS IN THE SOFTWARE.
Please log in to comment on this module