Guide · updated August 2026
Odoo MCP servers, compared honestly.
MCP gave every AI client one way to reach Odoo, and the field responded: a native server from Odoo, strong open-source gateways, paid installed modules, platforms. Connectivity is solved. What separates the options now is execution assurance: what happens when the AI writes, and what you can prove afterwards. Here is how to choose, criteria first.
Written by nanti.ai. We build one of the entries below (feature-complete and in final hardening, marked as such and not yet distributed), so read us knowing that. Every other project is treated generously, volatile facts are dated, and corrections are welcome at hello@nanti.ai.
How to evaluate
Judge them on execution, not connection.
Every server on this page can connect an AI to Odoo; that part is the protocol’s gift. These ten questions are where the answers diverge, and they only start to matter the day the AI writes to the database your business runs on.
- 01
Read-back verification
After a write, is the record read back from the database and compared against the intent, or is a success response simply trusted? A write that is reported is not a write that is proven.
- 02
Idempotency keys
If a request times out and the client retries, does the write execute once or twice? Retry safety has to be designed in; it never happens by accident.
- 03
Atomic batches
When the AI writes ten lines and the seventh fails, are the first six rolled back? Half-applied batches are the hardest failures to notice and to clean up.
- 04
Approval workflows
Can destructive actions require a human approval before execution, ideally a different person, with the approval bound to the exact staged change?
- 05
Before-and-after audit
Does the audit keep the values, not just the event? “Something wrote to this record at 14:03” is a log line; “30 days became 45 days” is evidence.
- 06
Audit alerting
Does the log notify a person over email, webhook, or an Odoo activity when something worth attention happens, or does it wait to be opened?
- 07
Role-scoped tool bundles
Can you control which tools even exist per role? A delete tool the salesperson’s AI cannot see is a delete that cannot happen.
- 08
Semantics and disambiguation
When two employees are named John, does the server refuse with candidates, or does the model guess? Deterministic refusal beats a confident coin flip.
- 09
Per-user identity
Does each person connect as themselves, or does everyone share one key? A shared key means one blast radius and an audit that cannot say who.
- 10
Hosting fit
Odoo Online cannot install custom server modules, so it needs Odoo’s native MCP server or an external gateway. Self-hosted and Odoo.sh can run installed servers.
The landscape
The field, as of August 2026.
Six kinds of answer, each right for someone. Facts below were checked against the live repositories, the Odoo Apps Store, and release coverage in August 2026; they will age, so treat the dates as part of the data.
- Built into Odoo
Odoo’s native MCP server
- Shipped with Odoo 19.4 (July 2026), the rolling release that runs on Odoo Online: one native /mcp endpoint and a scoped MCP key, no gateway to install
- Works with MCP clients such as Claude, ChatGPT, and Cursor
- Calls run under the key’s scope and Odoo’s own access rights; approvals, read-back verification, and before-and-after audit are not part of the published feature set as of August 2026
A good fit whenYou are on Odoo Online. Start here: it is the path Odoo maintains, and no third-party server can be installed there anyway.
- Open source · gateway
erpipe-org/mcp-odoo
- MIT-licensed external gateway, about 390 GitHub stars as of August 2026; 41 tools, multi-instance, runs against Odoo 16+ with your existing credentials
- Writes are gated: a preview, validate, execute sequence with confirmation tokens, an optional write audit log, and an optional confirmation form before execution
- Idempotency keys and automatic batch rollback are not part of the design as of August 2026; a hosted option exists from the same author
A good fit whenA technical team that wants free, gated writes today and is comfortable running a gateway.
- Open source · gateway
ivnvxd/mcp-server-odoo
- MPL-licensed external gateway, about 370 GitHub stars as of August 2026, with a free companion Odoo module for access control
- Solid reading and writing: search, CRUD, server-side aggregation, and invoking public Odoo methods, with per-model permissions configured in Odoo
- Approvals, read-back verification, and before-and-after audit are not part of the published feature set as of August 2026
A good fit whenA clean, popular way to get reading and basic writing working, with permissions managed where your admin already works.
- Paid · installed module
Odoo Apps Store MCP modules
- One-time-purchase modules from established vendors, MuK and Emipro among them, installed inside your own Odoo so every call runs as the key’s owner under Odoo’s record rules
- MuK’s server, for example, ships scoped read-only and read-write keys, a request audit log (30-day default retention), and per-key rate limits as of August 2026
- Request-level audit rather than before-and-after snapshots; approval workflows and verification are not the focus of this generation
A good fit whenSelf-hosted or Odoo.sh teams that want an installed, supported server with a vendor behind it.
- Platform
Automation platforms
- Composio, Zapier MCP, and similar platforms expose Odoo among hundreds of apps through hosted MCP endpoints
- Quick to try and useful for cross-app automations; the Odoo toolsets are generic and shallow compared to dedicated servers, and billing is platform-based
- Governance is the platform’s generic layer, not Odoo-specific, as of August 2026
A good fit whenCross-app automations where Odoo is one stop in a bigger flow, more than deep Odoo work.
- Feature-complete
Execution Layer for Odoo
- Our own entry, held to the harshest reading: it is feature-complete and in final hardening, and nothing is installable or buyable yet (no penetration test published, no distribution)
- It meets every criterion on this page: read-back verification, idempotency keys, atomic batches, payload-bound approvals, an immutable before-and-after audit with alerting, role bundles, disambiguation, and per-user OAuth identity; a 119-case adversarial failure suite is green on Odoo 19 Community and Enterprise
- An installed MCP server for self-hosted Odoo 19 and Odoo.sh; open-source core (Connect) plus a subscription (Complete, one published yearly price by company size, per production database, everything included); it releases complete, with the adversarial failure suite you run on your own staging
A good fit whenThis criteria list is why it exists: as of August 2026 we have not found a server that covers all of it, and that gap is what it closes.
Spotted something out of date or unfair? Write to hello@nanti.ai and we correct it. A comparison is only useful while it is true.
Plain answers
Asked, answered.
Which Odoo MCP server is best?
It depends on your situation, and anyone who answers without asking is selling something. On Odoo Online, Odoo’s own native MCP server (Odoo 19.4) is the natural start, and the only installable path is Odoo’s. For personal and developer use, the free community gateways are excellent engineering. For business use, judge candidates on the execution criteria: verification by database read-back, idempotency on retries, atomic batches, approval workflows, a before-and-after audit, and alerting. Our own Execution Layer for Odoo is feature-complete against exactly those criteria and in final hardening, but it is not distributed yet, so it is not something you can buy today.
What is an MCP server for Odoo?
MCP, the Model Context Protocol, is the open standard that connects AI clients such as Claude, ChatGPT, and Cursor to business systems. An MCP server for Odoo exposes your Odoo as a set of tools those clients can call, so a person can ask questions and act on records in natural language: find the customer, draft the quote, check the stock. The server decides everything else that matters: whose identity the AI acts under, what it may touch, and what evidence remains afterwards.
Do I need one if I am on Odoo Online?
You cannot install third-party server modules on Odoo Online, so the choice is made for you: Odoo’s native MCP server, shipped with Odoo 19.4 in July 2026, with a scoped MCP key. External gateways can also reach a hosted database over its API. For installed alternatives you would need self-hosted Odoo or Odoo.sh.
Are the free community MCP servers safe for business use?
They are good software, and for read-mostly and developer use they are an excellent choice. The honest caution is about writes: as of August 2026, verification by read-back, idempotency keys, and atomic batch rollback are not part of the field’s published feature sets, and approval flows vary from none to a token-gated preview and execute sequence. If an AI will write to the ERP your business runs on, test on a staging copy, start with a read-only key, and check each criterion on this page against the server you pick.
Can I connect Claude or ChatGPT to Odoo today?
Yes. Every route is covered in our step-by-step guides: connect Claude to Odoo (nanti.ai/connect-claude-to-odoo) and connect ChatGPT to Odoo (nanti.ai/connect-chatgpt-to-odoo), including the Odoo Online path, the self-hosted paths, and what to check before business use.
The enterprise bar
Connection is solved. Proof is next.
The criteria on this page are the bar we are building the Execution Layer for Odoo against: the enterprise MCP server where every AI action is verified, governed, and audited. It is feature-complete and in final hardening, and it releases complete. One email at launch, nothing in between.
One email, at release. No newsletters, no spam.