Main Features

• MCP endpoint at /mcp with JSON-RPC support for initialize, tools/list, tools/call, and ping.
• Bearer-token authentication for direct MCP clients.
• OAuth client flow for ChatGPT-style production connections.
• Token access levels: read-only, operator, and admin.
• Per-token and group-aware model policies.
• Optional policy domains for filtered read access.
• Odoo ACL, record-rule, and multi-company aware execution.
• Rate limiting per token.
• Audit logs for every tool call.
• Consultant diagnostic tools for access, views, workflows, migrations, custom modules, and client-ready reports.
• Optional read-only stock and accounting reporting tools.

Search Terms and Positioning

This app is positioned for customers searching for:

• Odoo MCP connector
• Odoo MCP server
• ChatGPT Odoo integration
• Claude Odoo integration
• Cursor Odoo tools
• Odoo AI assistant
• Odoo OAuth API gateway
• Odoo audit logs
• Odoo model policies
• Odoo inventory reporting
• Odoo stock reporting
• Odoo accounting reports
• Odoo diagnostics and migration checks

Installation

1. Copy the odoo_mcp_server_connector addon into an Odoo 19 addons path.
2. Update the apps list.
3. Install Odoo MCP Gateway and Consultant Copilot.
4. Add trusted administrators to the MCP Gateway Manager security group.

The module depends only on base and web. Inventory and Accounting are not hard dependencies. Stock and accounting MCP tools become useful when the related Odoo applications and models are installed in the database.

Basic Token Setup

1. Open MCP Gateway > Configuration > Tokens.
2. Create a token record.
3. Select the Odoo user that MCP calls should run as.
4. Keep the access level as Read Only unless write access is required.
5. Set allowed companies and rate limits.
6. Click Generate Token and copy the token from the notification.
7. Create model policies under MCP Gateway > Configuration > Model Policies.

For a simple read-only test, create read policies for models such as:

• res.partner
• product.product
• sale.order
• account.move

Then call odoo_search_count or odoo_search_read from an MCP client.

MCP Endpoint

Use the endpoint below for production and controlled integrations:

https://your-odoo-domain.com/mcp

Example tools/list request:

curl https://your-odoo-domain.com/mcp \
  -H "Authorization: Bearer mcp_your_token" \
  -H "Content-Type: application/json" \
  -d '{
    "jsonrpc": "2.0",
    "id": 1,
    "method": "tools/list",
    "params": {}
  }'

Example odoo_search_read request:

curl https://your-odoo-domain.com/mcp \
  -H "Authorization: Bearer mcp_your_token" \
  -H "Content-Type: application/json" \
  -d '{
    "jsonrpc": "2.0",
    "id": 2,
    "method": "tools/call",
    "params": {
      "name": "odoo_search_read",
      "arguments": {
        "model": "res.partner",
        "domain": [["customer_rank", ">", 0]],
        "fields": ["name", "email", "phone"],
        "limit": 10
      }
    }
  }'

ChatGPT OAuth Setup

OAuth is recommended for ChatGPT production connections and customer-facing demos.

1. Create a normal MCP token and model policies.
2. Open MCP Gateway > Configuration > OAuth Clients.
3. Create a client named ChatGPT or another clear integration name.
4. Set Mapped MCP Token to the token ChatGPT should use.
5. Add the exact ChatGPT OAuth redirect URI in Allowed Redirect URIs.
6. Keep scopes as mcp:read offline_access openid profile email unless the deployment intentionally needs write or admin scope.
7. Click Generate Client Secret and copy the one-time secret.
8. Configure the MCP client with:
   • Server URL or resource: https://your-odoo-domain.com/mcp
   • Authorization server base: https://your-odoo-domain.com
   • OAuth client id: the Odoo OAuth Client ID
   • OAuth client secret: the generated secret

Discovery endpoints:

• /.well-known/oauth-protected-resource/mcp
• /.well-known/oauth-authorization-server
• /.well-known/openid-configuration

Development No-Auth Endpoint

Some local MCP client setup screens support No Auth but do not provide a place to send a bearer token. For development only, the addon includes:

/mcp/noauth

To use it:

1. Create one normal MCP token.
2. Keep the token tightly scoped.
3. Enable Dev No-Auth Endpoint on that token.
4. Point the development MCP client to /mcp/noauth.

Only one active token can enable the development no-auth endpoint at a time. Do not use this endpoint in production or customer databases.

Core Tool Reference

Read tools:

• odoo_search_count
• odoo_search_read
• odoo_read
• odoo_fields_get
• odoo_get_model_metadata
• odoo_list_models
• odoo_list_menus
• odoo_list_actions

Write and method tools:

• odoo_create
• odoo_write
• odoo_unlink
• odoo_call_method

Write, delete, and method-call tools require explicit token level and model policy permissions. They are hidden from read-only tokens.

Stock Reporting Tools

The stock tools are optional read-only tools. They return a clear error if the Inventory models are not installed.

• stock_product_lookup
• stock_inventory_snapshot
• stock_product_movement_report
• stock_low_stock_report
• stock_replenishment_report
• stock_lot_serial_report

Recommended read policies for stock reporting:

• product.product
• product.template
• stock.quant
• stock.location
• stock.warehouse
• stock.move
• stock.move.line
• stock.picking
• stock.lot
• stock.warehouse.orderpoint

These tools intentionally return operational inventory data only: on-hand, reserved, available, incoming, outgoing, forecasted quantities, moves, lots, serials, and reordering rules. They do not read valuation layers, costs, or accounting moves.

Accounting Reporting Tools

Accounting report tools use Odoo's configured account.report engine, so they respect the installed localization, chart of accounts, report formulas, company context, Odoo ACLs, and record rules.

• accounting_list_reports
• accounting_report
• accounting_aged_receivable_report
• accounting_aged_payable_report
• accounting_cash_flow_statement

Recommended read policies for accounting reporting:

• account.report
• account.report.line
• account.report.column
• account.report.expression
• account.move
• account.move.line
• account.account
• account.journal
• res.partner
• res.company

Do not use policy domain_force on accounting models for these tools. Native financial reports are aggregated by account.report and the gateway fails closed when it sees policy domains on accounting lines, partners, accounts, or journals.

Consultant Diagnostic Tools

odoo_health_check is available to every token. The remaining consultant tools require the token's Consultant Tools flag or an admin token.

• audit_custom_modules
• diagnose_access_issue
• diagnose_view_error
• audit_workflow
• migration_readiness_check
• generate_client_report
• create_safe_action_plan

Diagnostic runs, findings, evidence, and generated reports are stored under MCP Gateway > Diagnostic Runs and MCP Gateway > Diagnostic Evidence.

Security Recommendations

• Use one token per MCP client or integration.
• Prefer read-only tokens for AI assistants.
• Use model policies as the primary allowlist.
• Avoid Allow All Models in production unless the mapped Odoo user is already tightly scoped.
• Use OAuth clients instead of /mcp/noauth for production ChatGPT connections.
• Review audit logs regularly.
• Rotate tokens and OAuth secrets when an integration is retired.
• Use normal Odoo groups, record rules, and company access to control the actual data visible to each MCP token.

Troubleshooting

Missing bearer token

Send Authorization: Bearer mcp_your_token or configure OAuth.

Unknown tool

Call tools/list for the token. Read-only tokens hide write tools.

Access denied on a model

Add or adjust the model policy and confirm the mapped Odoo user has normal Odoo access rights.

Stock or accounting tool reports missing models

Install the related Odoo application or use the core generic tools only.

Accounting report blocked by policy domain

Remove domain_force from accounting model policies and control access through Odoo user/company permissions.

Support Notes

Before publishing to Odoo Apps, set the final support email, website, app price, and support policy in the Odoo Apps seller dashboard. Those values are commercial publishing details and are intentionally not hardcoded into this module.