PraetorX MCP Server
by Syntax & Sabotage https://praetorx.net , Lars Weiler https://praetorx.net$ 51.37
| Availability |
Odoo Online
Odoo.sh
On Premise
|
| Odoo Apps Dependencies |
Discuss (mail)
|
| Community Apps Dependencies | Show |
| Lines of code | 4514 |
| Technical Name |
praetorx_mcp |
| License | OPL-1 |
| Website | https://praetorx.net |
PraetorX MCP Server
Connect Claude, ChatGPT & AI agents to Odoo — natively, in minutes
A native Model Context Protocol server embedded in Odoo. Point Claude.ai,
Claude Code, Cursor or ChatGPT at a single /mcp URL, approve once, and your
agent works with live ERP data — governed by deny-by-default permissions, full audit
logging and OAuth 2.1. No local bridge process. No extra daemon.
praetorx.net | Syntax & Sabotage
API Keys — scoped, hashed, expiring credentials with zero-downtime rotation
Permissions — deny-by-default, per-model read / write / create / delete
Audit Log — every tool call recorded, success and failure, with timing
Security Alerts — threshold alerts on failed-auth bursts and grace-secret use
Settings — one section inside Odoo's Settings: server, limits, retention, infrastructure
The difference: it's the server, not a bridge
Other Odoo "MCP" modules ship a Python process you install and run next to your AI client. PraetorX MCP is the server, embedded in Odoo. Your client connects to a URL and authenticates with OAuth — nothing to install locally.
One-click connect
OAuth 2.1 + PKCE. Paste a URL into Claude.ai or Cursor, approve, done.
Governed by default
Deny-by-default permissions, field allowlists, domain filters, full audit trail.
Workflow-aware
With FlowForge, scope what an agent may do by BPMN process state — a differentiator no competitor offers today.
Authentication
- OAuth 2.1 with mandatory PKCE (S256) — one-click for Claude.ai / Cursor
- Dynamic client registration (RFC 7591) & discovery (RFC 8414/9728)
- API keys (hashed) for machine-to-machine, with expiry
- Zero-downtime key rotation with a configurable grace window
Access control
- Deny-by-default per-model permissions (read / write / create / delete)
- Field allowlists and record-domain filters per model
- Runs as a mapped Odoo user — native ACLs still apply
- IP allow / deny lists (CIDR)
BI & reporting
- Pivot, time-series, top-N, cohort and funnel tools
- CSV / XLSX export as background jobs
- ORM-computed aggregates — no raw SQL
Scale & ops
- Stateless transport — multi-worker safe
- Bulk & async CRUD with a background job queue
- Redis-backed rate limiting (in-memory fallback)
- Schema caching for fast tool discovery
| Family | Tools |
|---|---|
| Discovery | server_info, list_models, get_model_schema |
| Read/Write | search_records, read_records, create_record, update_records, delete_records |
| Bulk / async | bulk_create, bulk_update, bulk_delete, get_job_status, cancel_job |
| Reporting | pivot_table, time_series, top_n, cohort_analysis, funnel_analysis, export_data |
| Workflow FlowForge | list_my_process_tasks, get_process_context, complete_process_task, start_process |
Writes use a two-step confirmation by default and carry correct MCP destructive/read-only hints. Reporting tools require the bi scope.
- Credentials stored hashed (pbkdf2_sha512), never in plaintext
- Every executed tool call audit-logged (success and failure)
- Single-use write-confirmation tokens bound to the exact payload
- Sanitised errors — no tracebacks or SQL leak to clients
- Threshold-based security alerts on failed-auth bursts
- Tool-poisoning posture: static tool descriptions, structured results, no arbitrary method execution
mcp Python package must be available to Odoo (bundled in the PraetorX image; on Odoo.sh it installs from requirements.txt automatically).
claude mcp add --transport http praetorx https://your-odoo/mcp. A browser opens the Odoo consent screen; approve and you're connected.
Support: support@syntaxandsabotage.io
| Availability |
Odoo Online
Odoo.sh
On Premise
|
| Odoo Apps Dependencies |
Discuss (mail)
|
| Community Apps Dependencies | Show |
| Lines of code | 4514 |
| Technical Name |
praetorx_mcp |
| License | OPL-1 |
| Website | https://praetorx.net |
Odoo Proprietary License v1.0 This software and associated files (the "Software") may only be used (executed, modified, executed after modifications) if you have purchased a valid license from the authors, typically via Odoo Apps, or if you have received a written agreement from the authors of the Software (see the COPYRIGHT file). You may develop Odoo modules that use the Software as a library (typically by depending on it, importing it and using its resources), but without copying any source code or material from the Software. You may distribute those modules under the license of your choice, provided that this license is compatible with the terms of the Odoo Proprietary License (For example: LGPL, MIT, or proprietary licenses similar to this one). It is forbidden to publish, distribute, sublicense, or sell copies of the Software or modified copies of the Software. The above copyright notice and this permission notice must be included in all copies or substantial portions of the Software. THE SOFTWARE IS PROVIDED "AS IS", WITHOUT WARRANTY OF ANY KIND, EXPRESS OR IMPLIED, INCLUDING BUT NOT LIMITED TO THE WARRANTIES OF MERCHANTABILITY, FITNESS FOR A PARTICULAR PURPOSE AND NONINFRINGEMENT. IN NO EVENT SHALL THE AUTHORS OR COPYRIGHT HOLDERS BE LIABLE FOR ANY CLAIM, DAMAGES OR OTHER LIABILITY, WHETHER IN AN ACTION OF CONTRACT, TORT OR OTHERWISE, ARISING FROM, OUT OF OR IN CONNECTION WITH THE SOFTWARE OR THE USE OR OTHER DEALINGS IN THE SOFTWARE.
Please log in to comment on this module