User-Bound Tokens

Each token impersonates a real Odoo user. ACLs and record rules apply automatically — no parallel permission system to maintain.

Three Roles

Read, Write, and Admin roles, each with a per-token model whitelist and per-model method gating for exec_method.

Full Audit Trail

Every call logged with arguments, latency, and outcome. Graph + pivot views ship out of the box under MS Analytics.

Rate Limiting

Per-token token-bucket throttle, default 60 calls / minute, configurable — or disabled entirely.

Live Dashboards

Build multi-tile dashboards from one natural-language prompt with build_dashboard — persisted in Odoo, refreshable on demand.

Multi-Worker Safe

Sessions live in Postgres — SSE GET and POST can land on different prefork workers without dropping state.

Discovery

list_models · list_fields

Read

search_records · get_record · search_read_group

Compose

get_record_pack — head + lines + partner + invoices in one call

Write

create_record · update_record · delete_record · exec_method

Documents

scan_document — relays attachments to the client's vision model

Web

fetch_web — main-content extraction with SSRF guard

Charts

query_chart — one-shot graph generation

Dashboards

build_dashboard — persisted multi-tile dashboards

Works With Every MCP Client

We don't lock you to any one vendor. Use Claude Desktop, Claude Code, Cursor, Windsurf, VS Code, or anything else that speaks the Model Context Protocol. The scan_document tool hands attachments to whichever vision model your client is configured with.

5–10× Smaller Payloads

We ship curated field-priority lists for 15 head models — so the AI sees what matters first, not every junk column. Composite packers fold a sale order with its lines, partner, invoices and deliveries into one tool call. Lower token cost. Cleaner answers.

Hashed Storage

Plaintext shown once; only SHA-256 hashes persist.

Multi-Company

Tokens respect company scoping. Multi-DB aware.

SSRF Guard

fetch_web blocks private IP ranges by default.

Savepoint Writes

Write tools wrap each call in a Postgres savepoint — one bad call won't corrupt a session.

Install Module

Drop the addon into your Odoo, install, and open MS Claude · Odoo from the apps drawer.

Generate Token

Configuration → Generate Token. Pick the user to impersonate, choose role & model whitelist, copy the plaintext.

Wire Your Client

Point Claude Desktop / Code / Cursor at /mcp/sse with the bearer token. Done.

Ask Naturally

“Show me sale orders over $5,000 confirmed this month.” Audit log captures every call.

Generate a Token

Open MS Claude · Odoo → Configuration → Generate Token. Pick the user to impersonate, set the role and an optional model whitelist.

One-Time Reveal

The plaintext token is shown exactly once. After that only the SHA-256 hash is stored — even an admin can't recover it.

Manage Tokens

Browse, filter, revoke, or expire tokens from MS Tokens. Each row shows the impersonated user, role, last-used time, and current state.

General Settings

Tune session timeout, rate limit, retention, and toggle whether tokens are required — all from Settings → MS Claude · Odoo.

Wire Up Your Client

Paste the MCP server URL and the bearer token into claude_desktop_config.json (or your client of choice). One-time setup, then forget about it.

Talk to Your Data

Ask Claude natural-language questions. It picks the right tool, calls Odoo, and answers with the actual records — no SQL, no XML-RPC.

Audit Every Call

Every tool invocation lands in MS Audit Log with arguments, latency, outcome, and token. Investigate any session end-to-end.

Live Analytics

Out-of-the-box graph and pivot views over the audit log — spot slow tools, hot models, and noisy clients in seconds.

Persistent Dashboards

Ask Claude to “build a sales dashboard” — build_dashboard writes a multi-tile dashboard you can reopen, refresh, and share inside Odoo.

Curated Skills

Edit the system prompt and field-priority skills served to the assistant — teach Claude your Odoo's conventions in plain text.