Back to Home
mah007 icon

odooMCP

by mah007

Overview

Acts as a secure and intelligent bridge for AI agents (like ChatGPT and Google Gemini) to interact with Odoo instances via a JSON-RPC 2.0 compliant API, primarily for automation platforms like n8n.

Installation

Run Command
docker-compose up --build -d

Environment Variables

  • ODOO_URL
  • ODOO_DB
  • ODOO_USERNAME
  • ODOO_API_KEY
  • MCP_API_KEY

Security Notes

The Odoo XML-RPC client connection (configured in `odoo_service.py` and `odoo_client.py`) explicitly disables SSL certificate verification (`ssl.CERT_NONE`, `check_hostname=False`, `verify_mode=ssl.CERT_NONE`). This is a critical vulnerability that makes the connection susceptible to Man-in-the-Middle attacks, allowing an attacker to intercept and manipulate data exchanged with the Odoo instance. While an API key (`MCP_API_KEY`) is implemented for authenticating requests to the MCP server itself, the underlying connection to Odoo remains insecure by default. Example API keys are present in `docker-compose.example.yml` (though marked as placeholders). The server listens on `0.0.0.0` by default, requiring careful firewall configuration.

Similar Servers

Stats

Interest Score0
Security Score4
Cost ClassMedium
Avg Tokens50000
Stars0
Forks1
Last Update2025-12-04

Tags

OdooAI AgentsMiddlewareJSON-RPCFastAPIn8nDocker