MCP.Market

Odoo Gateway MCP server

by parth-unjiya·io.github.parth-unjiya/odoo-mcp-gateway·v0.1.1·4 stars
No reviews yet

Security-first MCP gateway for Odoo 17/18/19 — YAML-driven security, 27 tools

B82/100grade B
Write a reviewInstall
What users say
No reviews yet
Be the first
Safety scan
B82/100

full report

Adoption
New

4 stars21 downloads/wk

Reviews

Write one

Nobody has reviewed Odoo Gateway yet.

If you have run it, two minutes of your experience saves the next person an afternoon.

Odoo Gateway tools (27, 10 write)

write = sends, deletes, buys or posts

Read from the package source without running it. The installed server may list more.

  • check_in

    Record attendance check-in for the current user.

  • check_out

    Record attendance check-out for the current user.

  • confirm_orderwrite action

    Confirm a quotation, turning it into a sale order.

  • create_recordwrite action

    Create a new record in an Odoo model.

  • create_ticketwrite action

    Create a new helpdesk ticket.

  • delete_recordwrite action

    Delete a record from an Odoo model.

  • execute_methodwrite action

    Execute a method on an Odoo model.

  • get_model_fields

    Get field definitions for an Odoo model.

  • get_my_attendance

    Get attendance records for the current user.

  • get_my_leaves

    Get leave requests for the current user.

  • get_my_profile

    Get the current user's employee profile.

  • get_my_quotations

    Get quotations/orders where the current user is the salesperson.

  • get_my_tasks

    Get tasks assigned to the current user.

  • get_my_tickets

    Get helpdesk tickets assigned to the current user.

  • get_order_detailswrite action

    Get full order details with lines, totals, and partner info.

  • get_project_summary

    Get project stats: task counts by stage, overdue, recent activity.

  • get_record

    Read a single record by ID from any Odoo model.

  • get_sales_summary

    Get aggregated sales stats for the current user.

  • list_models

    List available Odoo models. Optionally filter by keyword.

  • login

    Authenticate with Odoo. Methods: 'api_key', 'password', or 'session'.

  • read_group

    Read grouped/aggregated data from an Odoo model.

  • request_leavewrite action

    Submit a leave request.

  • search_count

    Count records matching a domain in an Odoo model.

  • search_read

    Search and read records from any Odoo model.

  • update_recordwrite action

    Update an existing record in an Odoo model.

  • update_task_stagewrite action

    Move a task to a different stage.

  • update_ticket_stagewrite action

    Move a helpdesk ticket to a different stage.

Public scan report

scanner v0.1.10 · 2026-09-27 · same rubric, same numbers if you re-run it

no findings
  • Code scan55 source files scanned25/25
  • –Live reliabilityno gateway calls yet and no remote to proben/a
  • –Tool poisoningtools not inspected (local package is not executed); not countedn/a
  • Auth qualitylocal package, no credentials required12/15
  • Maintenancelast push 130 days ago8/15
  • Maintainer identityregistry namespace matches repository owner; GitHub account older than a year8/10
Overall 82/100. Components that don't apply are left out of the denominator. Any critical finding is an F.RubricAppeal a findingJSON

How Odoo Gateway compares

Against every graded Security MCP server, from our own scans and uptime checks. Updated after each scan run.

Safety score
82/100
higher than 66% of 915 Security servers
Tools
27
the typical Security server has 6
Tools that change things
37%
typical: 0%. Fewer write tools means less an agent can break
GitHub stars
4
more than 85% of 587 Security servers
Downloads a week
21
more than 5% of 248 Security servers with a package

What its tools let an agent do: 17 read · 2 create · 6 change · 1 delete · 1 run or deploy

Install Odoo Gateway in Claude Code, Cursor or VS Code

claude mcp add odoo-mcp-gateway -- uvx odoo-mcp-gateway
Add to Cursor

What the publisher says

From the Odoo Gateway repository's README, as published. We do not edit it. Read it on GitHub

odoo-mcp-gateway

Security-first, version-agnostic MCP gateway for Odoo 17/18/19. Works with stock and custom modules via YAML configuration. Zero Odoo-side code required.

<!-- mcp-name: io.github.parth-unjiya/odoo-mcp-gateway -->

30-Second Quick Start

pip install odoo-mcp-gateway

Add to Claude Desktop config (claudedesktopconfig.json):

{
  "mcpServers": {
    "odoo": {
      "command": "python",
      "args": ["-m", "odoo_mcp_gateway"],
      "env": {
        "ODOO_URL": "http://localhost:8069",
        "ODOO_DB": "your_database"
      }
    }
  }
}

Restart Claude Desktop. In any conversation:

login with method "password", username "admin", credential "your_password"

You're connected. Ask Claude to query, create, or update Odoo records — every call is rate-limited, audit-logged, and runs through two layers of security checks before reaching Odoo.

No Odoo addon required. No Python code to write. Just YAML config for fine-grained access control (optional — secure defaults work out of the box).

What's New in v0.2.1

  • Brute-force protection — per-username (5/5min) + per-source (30/15min) lockout
  • dryrun mode on createrecord, updaterecord, deleterecord, execute_method — validate without executing
  • 2 new tools: getdefaults (preview Odoo defaults), getonchange (preview field side effects)
  • Temporal grouping in readgroup: createdate:month, date:quarter, etc.
  • Hardened blocklists: 32 always-blocked models (was 17), 29 always-blocked methods (was 18), 10 always-blocked write fields, 8 always read-only models
  • Server-side admin verification via hasgroup('base.groupsystem') (was trusted from auth response)
  • Credential wrapper prevents password leakage via repr()/traceback
  • JSON-RPC retry only fires on OdooSessionExpiredError (was retrying on every auth error)

See CHANGELOG.md for the full list of 21 security fixes.

Why This Exists

Existing Odoo MCP servers share common problems: hardcoded model lists that miss custom modules, security as an afterthought, mandatory custom Odoo addons, and single-version targets. This gateway solves all of them:

  • Two-layer security — MCP restrictions (YAML) + Odoo's built-in ACLs (ir.model.access + ir.rule)
  • YAML-driven configuration — model restrictions, RBAC, field-level access, rate limiting, audit logging
  • Custom module support — auto-discovers models via ir.model, add YAML config and it works
  • Version-agnostic — Odoo 17, 18, 19 with version-specific adapters
  • Zero Odoo-side code — pip install + YAML config = done. No custom addon required
  • Full MCP primitives — 31 Tools + 6 Resources + 12 Prompts (most servers only implement Tools)
  • Plugin architecture — extend with pip-installable domain packs via entry_points

Architecture

Shortened. The full README is on GitHub.

Nothing above is checked by us. What we check is on the safety report.

Odoo Gateway: common questions

Is Odoo Gateway MCP server safe?
Mostly: it is graded B (82/100). Read the Odoo Gateway safety report
How do I install Odoo Gateway?
It runs on your machine. Copy the Claude Code, Cursor, VS Code or Claude Desktop config from the install section.
Does Odoo Gateway need an API key?
Not as far as the registry entry and our scan can tell: no credentials are declared or required.
Is Odoo Gateway maintained?
The last commit was 167 days ago (2026-05-21). The latest release is v0.1.1.
What can I use instead of Odoo Gateway?
Servers from other publishers that do the same job: Reversecore MCP server, CodeInspectus MCP server and MCPProxy MCP server.
How does Odoo Gateway compare with other Security MCP servers?
safety score 82/100 (higher than 66% of 915 Security servers); tools 27 (the typical Security server has 6); tools that change things 37% (typical: 0%. Fewer write tools means less an agent can break). Full comparison.

Alternatives to Odoo Gateway

Same job from other publishers: the closest match first, then the best rated.

  • Reversecore MCP
    Security-first MCP server for reverse engineering, malware analysis, forensics, and SAST.
    B
  • CodeInspectus
    Local-first MCP security scanner and CLI for AI-generated applications.
    C
  • MCPProxy
    Local-first MCP proxy with BM25 tool discovery, security scanning, quarantine & ~99% token savings
    B
  • Royal
    Security-first WordPress MCP server. 129 tools for Claude, ChatGPT, Gemini. Free on wp.org.
    A
  • Security Proxy
    MCP gateway: many servers, one policy, lethal-trifecta blocking, PII masking, audit log
    More from GuardBee →
    A