15/04/2026
I just found a repo that basically turns Odoo into an AI-controlled system… and it’s both impressive and terrifying.
What it does (in simple terms):
It connects Claude (via MCP) directly to Odoo, exposing the ERP as a set of tools the AI can call.
So instead of clicking around Odoo, you can literally say:
* "Show me overdue invoices"
* "Create a new customer"
* "Generate a sales report"
…and the AI executes it.
---
⚙️ Under the hood:
* MCP (Model Context Protocol) acts as the bridge
* A Python/Docker server exposes Odoo functions as tools
* Uses Odoo RPC (JSON/XML-RPC) to interact with models like `res.partner`, `account.move`, etc.
Basically:
AI → MCP → Tool → Odoo → Database
---
🧰 The crazy part: the tools
The repo exposes ~18 tools, including:
* Read data (customers, invoices, products)
* Full CRUD operations (yes, the AI can MODIFY your ERP data)
* Schema inspection (the AI can explore your database structure)
* Business logic queries (reports, analytics)
* Even system-level access via a web terminal
This is not just “AI assistant”
This is **AI with operational control**
---
🚨 And here’s where it gets scary:
Odoo runs everything in the same environment.
That means a malicious module could:
* Inject prompts
* Tamper with tool outputs
* Leak API keys or sensitive data
In other words:
You’re giving an LLM access to your ERP *without true isolation*
---
💡 My takeaway:
This is a glimpse of where enterprise software is heading:
→ Natural language as the interface
→ AI agents replacing dashboards
But also:
→ Massive new attack surface
---
Curious what you all think:
Would you trust an AI with direct CRUD access to your ERP?
Or is this something that should stay strictly in sandboxed environments for now?
---
Repo: https://github.com/rosenvladimirov/odoo-claude-mcp
Also building something in this space: https://instploy.com
