MCP Odoo

by erpipe-org• 426•• Scanned•Claim this listing•Request removal
Otheragent skillschatgptclaude codeerpipemcp

Odoo MCP for AI agents — gated writes, multi-instance. Hosted product: https://erpipe.com

MCP Odoo is an open-source mcp server by erpipe-org, written mainly in Python, with 426 GitHub stars and the MIT license. Its code was last updated Aug 25, 2026.

Scan summary: scanned Nov 5, 2026 at commit 76ec136. Seen able to run shell commands, read environment and secrets, touch money or trading. Scan policy

aboutREADMEsecurityreviews
Scanned
Full scan at 76ec136 · Nov 5, 2026
Scanned Builds Boots No undeclared egress Reproducible
Static code scanpass
Secrets scanpass
Dependency audit158 known vulnerabilitiesfail
Manifestserver.jsonpass
Buildpass
Boot & handshake41 toolspass
Network egresspass
Reproducible (×3)pass

Findings (28)

  • high
    dependencies issue
    Details are available to the maintainer after claiming this listing.
  • high
    dependencies issue
    Details are available to the maintainer after claiming this listing.
  • high
    dependencies issue
    Details are available to the maintainer after claiming this listing.
  • high
    dependencies issue
    Details are available to the maintainer after claiming this listing.
  • high
    dependencies issue
    Details are available to the maintainer after claiming this listing.
  • high
    dependencies issue
    Details are available to the maintainer after claiming this listing.
  • high
    dependencies issue
    Details are available to the maintainer after claiming this listing.
  • high
    dependencies issue
    Details are available to the maintainer after claiming this listing.
  • medium
    crewai-tools@1.6.1: 1 known vulnerability
    PYSEC-2026-3819
    examples/crewai/requirements.txt
  • medium
    json-repair@0.25.2: 1 known vulnerability
    GHSA-xf7x-x43h-rpqh
    examples/crewai/requirements.txt
  • medium
    mcp@1.23.3: 7 known vulnerabilities
    PYSEC-2026-3481, PYSEC-2026-3482, PYSEC-2026-3483, GHSA-5h93-6whr-6q8j, GHSA-84m7-p3x7-pcfv +2 more
    examples/crewai/requirements.txt
  • medium
    orjson@3.9.15: 1 known vulnerability
    PYSEC-2026-107
    examples/crewai/requirements.txt
  • medium
    python-multipart@0.0.9: 8 known vulnerabilities
    PYSEC-2026-1851, PYSEC-2026-1852, PYSEC-2026-3036, PYSEC-2026-3037, PYSEC-2026-3038 +3 more
    examples/crewai/requirements.txt
  • medium
    virtualenv@21.9.1: 15 known vulnerabilities
    GHSA-394h-qwmc-48pf, GHSA-43mp-35q3-x3fq, GHSA-494p-63j8-28p3, GHSA-558c-9hv2-4prj, GHSA-5vjq-rrrf-7h2q +10 more
    examples/crewai/requirements.txt
  • medium
    httpcore2@2.9.1: 2 known vulnerabilities
    PYSEC-2026-3844, PYSEC-2026-3844
    examples/langgraph/requirements.txt
  • medium
    httpx2@2.9.1: 10 known vulnerabilities
    PYSEC-2026-3845, PYSEC-2026-3846, PYSEC-2026-3847, PYSEC-2026-3848, PYSEC-2026-3849 +5 more
    examples/langgraph/requirements.txt
  • medium
    black@26.3.1: 1 known vulnerability
    GHSA-cg8m-r9f2-5wm2
    uv.lock
  • medium
    cryptography@47.0.0: 4 known vulnerabilities
    PYSEC-2026-3552, PYSEC-2026-3553, PYSEC-2026-3554, GHSA-537c-gmf6-5ccf
    uv.lock
  • medium
    mcp@2.0.0: 4 known vulnerabilities
    GHSA-5h93-6whr-6q8j, GHSA-84m7-p3x7-pcfv, GHSA-rwrf-2pqf-9j8j, GHSA-w4fh-qvv9-3v23
    uv.lock
  • medium
    python-multipart@0.0.27: 4 known vulnerabilities
    PYSEC-2026-3036, PYSEC-2026-3037, PYSEC-2026-3040, PYSEC-2026-3041
    uv.lock
  • medium
    starlette@1.0.0: 5 known vulnerabilities
    PYSEC-2026-161, PYSEC-2026-2280, PYSEC-2026-2281, PYSEC-2026-248, PYSEC-2026-249
    uv.lock
  • medium
    urllib3@2.6.3: 5 known vulnerabilities
    PYSEC-2026-141, PYSEC-2026-142, PYSEC-2026-4175, PYSEC-2026-4176, PYSEC-2026-4177
    uv.lock
  • low
    filelock@3.19.1: 4 known vulnerabilities
    PYSEC-2026-1374, PYSEC-2026-1375, GHSA-69hj-f68j-2879, GHSA-8mx5-7m5m-r77g
    examples/crewai/requirements.txt
  • low
    idna@3.9.0: 1 known vulnerability
    PYSEC-2026-215
    examples/crewai/requirements.txt
  • low
    opentelemetry-api@1.34.1: 1 known vulnerability
    GHSA-xcq7-p3pf-p88h
    examples/crewai/requirements.txt
  • low
    python-dotenv@1.1.1: 1 known vulnerability
    PYSEC-2026-2270
    examples/crewai/requirements.txt
  • low
    opentelemetry-api@1.44.0: 1 known vulnerability
    GHSA-xcq7-p3pf-p88h
    uv.lock
  • low
    Reads environment variables not listed in the manifest
    ODOO_MCP_EXAMPLE_LLM, OPENAI_MODEL, OPENAI_BASE_URL, OPENAI_API_KEY, ODOO_TRANSPORT, ODOO_MCP_LOG_LEVEL, ODOO_MCP_LOG_JSON, ODOO_MCP_LOG_FILE, MCP_TRANSPORT, MCP_HTTP_HOST, MCP_HTTP_PORT, MCP_HTTP_PATH, MCP_LOG_LEVEL, MCP_ALLOW_REMOTE_HTTP, MCP_ALLOWED_HOSTS

Network activity

During install
files.pythonhosted.orgpypi.org
While running
No connections

Tools exposed (41)

  • data_quality_report

    Run read-only data-quality checks on one Odoo model: duplicates, missing required values, orphaned references, format anomalies

  • diagnose_odoo_call

    Diagnose an Odoo model call without executing it

  • generate_json2_payload

    Build a JSON-2 request preview without network access

  • inspect_model_relationships

    Inspect model relationships and required field metadata

  • diagnose_access

    Diagnose ACL and record-rule visibility for an Odoo model

  • upgrade_risk_report

    Report Odoo upgrade and JSON-2 migration risks

  • analyze_upgrade_log

    Classify Odoo install/update log errors into a migration worklist (no_action / needs_review / needs_script) with fix suggestions

  • lookup_model_history

    Look up Odoo model rename/removal history by old or new model name (e.g. account.invoice -> account.move)

  • fit_gap_report

    Classify Odoo requirements into fit/gap implementation buckets

  • scan_addons_source

    Scan local Odoo addon source without importing addon code

  • build_domain

    Build a validated Odoo domain from structured conditions

  • business_pack_report

    Report expected modules, models, and safe discovery calls for a business pack

  • get_odoo_profile

    Read a bounded profile of the connected Odoo environment

  • schema_catalog

    Build and cache a bounded Odoo model schema catalog

  • health_check

    Report this MCP server's non-secret runtime safety posture

  • list_instances

    List configured Odoo instance names without credentials

  • list_models

    List Odoo models with optional name filtering

  • get_model_fields

    Get field metadata for a specific Odoo model

  • search_records

    Search Odoo records with read-only search_read; optional free-text `query` matches across name/ref/email-like fields

  • read_record

    Read a single Odoo record by model and ID

  • read_attachment

    Read an ir.attachment's metadata and size-capped base64 content

  • aggregate_records

    Aggregate Odoo records server-side using Postgres groupby/sum/count. Uses formatted_read_group on Odoo 19+ and read_group on earlier versions.

  • search_employee

    Search for employees by name

  • search_holidays

    Search for holidays within a date range

  • preview_write

    Preview create, write, or unlink without executing it

  • validate_write

    Validate a standard write payload against optional fields_get metadata

  • execute_approved_write

    Execute a previously previewed and confirmed standard write

  • chatter_post

    Post a chatter message on a mail.thread record. Default mode requires an approval token returned from a preview call; set MCP_CHATTER_DIRECT=1 to bypass and post immediately.

  • execute_method

    Execute a custom method on an Odoo model

  • index_knowledge

    Fetch a bounded slice of records and build a local BM25 knowledge index

  • search_knowledge

    Relevance-ranked local BM25 search over previously indexed records

  • knowledge_stats

    Report local knowledge index sizes and document budget

  • receivable_payable_aging

    Aged receivable/payable report bucketed by days overdue

  • accounting_health_summary

    Open receivable/payable item counts and draft invoice backlog

  • search_across_instances

    Read-only search fanned out across configured Odoo instances, merged and attributed

  • aggregate_across_instances

    Read-only aggregate fanned out across instances with combined grand totals

  • accounting_health_across_instances

    AR/AP aging fanned out across instances — the partner-network sweep

  • submit_async_task

    Run an allowlisted long-running read operation in the background

  • get_async_task

    Poll a background task's status and result

  • cancel_async_task

    Cancel a pending or running background task

  • list_async_tasks

    List recent background tasks newest-first

Automated result for the commit shown. See our scan policy. View the scan log

Maintainers can claim the listing to rescan, or dispute a result.

MCP Odoo alternatives

View more →

Similar mcp servers in Other, ranked by GitHub stars. Compare licence, recent activity and scan status before you choose.

NameStarsLicenceLast updatedScan
MCP Odoo (this page)
erpipe-org
426MITAug 25, 2026Scanned, no flagged issues
Github MCP Server
github
34kMITOct 30, 2026Scanned, no flagged issues
Fastapi MCP
tadata-org
12kMITNov 24, 2025Scanned, no flagged issues
GhidraMCP
LaurieWired
12kApache-2.0Oct 10, 2026Scanned, no flagged issues
MCP Go
mark3labs
9.2kMITOct 30, 2026Scanned, no flagged issues
Git MCP
idosal
8.5kApache-2.0May 8, 2026Scanned, no flagged issues