Execution Layer for Odoo
Installation.
What the Execution Layer needs to run, how the modules are laid out, and the safe defaults it installs with. The suite is an installed Odoo 19 addon set for self-hosted Odoo and Odoo.sh.
The Execution Layer is an installed Odoo addon suite. You run it inside your own Odoo, so your records never leave your server.
Distribution is at launch
The Execution Layer is feature-complete and in final hardening. There is not yet a public download or an Odoo Apps Store listing: distribution, along with the independent penetration test and the published trust artifacts, lands at launch. This page describes what installing it involves, so you know what to expect. To be told the moment it is available, leave your email.
Requirements
- Odoo 19, Community or Enterprise.
- Self-hosted or Odoo.sh. Not Odoo Online, which does not allow custom server modules.
- One Odoo database per host (
dbfilter/ monodb) is the supported deployment. - HTTPS with a reverse proxy (and
proxy_mode = True) if a cloud AI client, such as ChatGPT or the Claude web app, needs to reach the server. Local clients on a LAN or VPN do not need public reachability. See connecting an AI client.
The modules
| Module | Tier | License | What it adds |
|---|---|---|---|
nanti_mcp_core | Connect | LGPL-3 | The MCP server, per-user OAuth identity, scoped API keys, the twelve core tools, fail-closed writes, structured errors, base action logging |
nanti_mcp_verify | Complete | OPL-1 | Verified writes, idempotency, atomic batch, receipts |
nanti_mcp_governance | Complete | OPL-1 | Bundles and presets, tool policies, hidden and required fields, preconditions, export controls |
nanti_mcp_approvals | Complete | OPL-1 | Risk classes, payload-bound approvals, four-eyes |
nanti_mcp_audit | Complete | OPL-1 | Before and after snapshots, touch history, immutable mode, alerts, dashboard |
nanti_mcp_semantics | Complete | OPL-1 | The semantic registry, injection, disambiguation, provenance, the Context Layer client |
nanti_mcp_devtools | Optional | Separate, never bundled, admin-only developer tools |
nanti_mcp_core is the free, open-source Connect
tier and runs on its own. The Complete modules add the five pillars in full. See
Connect and Complete for what falls where.
Safe defaults
The suite installs conservatively, so the first thing that happens is nothing dangerous:
- Read-only to start. Writes are off until you turn them on.
- Audit on. Every call is recorded from the first one.
- Fail closed. The
execute_actionallowlist is empty by default: no model methods are callable until you add them. - A setup guide. The app opens on a dashboard with a setup guide that walks you through choosing a bundle, connecting a client, and running a first read.
Try it on staging first
Install on a staging copy of your database, connect a client, and run the adversarial test suite before you point anything at production. Watching the layer refuse, roll back, and receipt correctly on your own data is the point.
Next: connecting an AI client.