Requirement: nginx with SSE enabled

If Odoo runs behind an nginx reverse proxy (standard setup), the /mcp endpoint requires the proxy to not buffer the response to support Server-Sent Events (SSE). Without this, claude.ai cannot receive the server response.

Add this block to your nginx domain configuration, before the generic location /:

location = /.well-known/oauth-protected-resource {
    proxy_pass http://127.0.0.1:8069/.well-known/oauth-protected-resource;
    proxy_set_header Host $host;
    proxy_set_header X-Real-IP $remote_addr;
    proxy_set_header X-Forwarded-For $proxy_add_x_forwarded_for;
    proxy_set_header X-Forwarded-Proto $scheme;
}

location /mcp {
    proxy_pass http://127.0.0.1:8069/mcp;
    proxy_http_version 1.1;
    proxy_buffering off;
    proxy_cache off;
    proxy_set_header Host $host;
    proxy_set_header X-Real-IP $remote_addr;
    proxy_set_header X-Forwarded-For $proxy_add_x_forwarded_for;
    proxy_set_header X-Forwarded-Proto $scheme;
    proxy_set_header Connection '';
    proxy_read_timeout 300s;
}

Reload nginx after the change:

sudo nginx -t && sudo systemctl reload nginx

proxy_mode in odoo.conf

If you use nginx as a reverse proxy, make sure your odoo.conf includes:

proxy_mode = True

server_wide_modules

The module must be loaded as server-wide to respond to OAuth routes before Odoo resolves the database. In odoo.conf:

server_wide_modules = base,web,ia_agents_treasury_control

Recommended dbfilter

If your Odoo manages multiple databases, add in odoo.conf:

dbfilter = ^your_database_name$

Python dependencies

pip install anthropic structlog httpx PyJWT cryptography rapidfuzz

Module endpoints

Verify the module is active

curl -s https://yourodoo.com/.well-known/oauth-protected-resource | python3 -m json.tool

If you see a JSON with "resource" and "authorization_servers", the module is active.