// SCAN REPORT

Qod Ppm Odoo

35 tools. 27 can modify or destroy data without limits.

2 destructive tools with no built-in limits. Policy required.

Last updated: 3 Jul 2026

27 can modify or destroy data

8 read-only

35 tools total

Community server · catalogue entry verified 03/07/2026

How to control Qod Ppm Odoo ↓

TOOL MAP

What Qod Ppm Odoo exposes to your agents

Read (8) Write / Execute (25) Destructive / Financial (2)

Running more than one server? Check your whole stack →

MOST DANGEROUS TOOLS

Critical Risk

The most dangerous Qod Ppm Odoo tools

Destructive · High ppm_milestone_cancel Cancelling a milestone in a project management context is a destructive state transition: it removes the milestone from active workflows and likely cannot be trivially reversed. Destructive · High ppm_role_revoke Revoking a role assignment and removing a user from a security group is an irreversible or difficult-to-undo action that modifies access control. Execute · Medium ppm_change_request_start_review This tool executes a non-trivial workflow action (state transition) rather than simply reading or writing data. Execute · Medium ppm_milestone_start This tool executes a workflow state transition rather than merely reading or writing data.

27 of Qod Ppm Odoo's 35 tools can modify, destroy, or commit something on every call — and an agent calls them with no built-in limits.

POLICY

How to control Qod Ppm Odoo

PolicyLayer is an MCP gateway — it sits between your AI agents and Qod Ppm Odoo, and nothing reaches the server without passing your rules. These are the rules we recommend:

Deny destructive operations

{
  "ppm_milestone_cancel": {
    "deny_if": [
      {
        "conditions": [],
        "on_deny": "Blocked by default. Requires approval."
      }
    ]
  }
}

Destructive tools should never be available to autonomous agents without human approval.

Rate limit write operations

{
  "ppm_change_request_approve": {
    "limits": [
      {
        "counter": "ppm_change_request_approve_per_hour",
        "window": "hour",
        "max": 30,
        "scope": "grant"
      }
    ]
  }
}

Prevents bulk unintended modifications from agents caught in loops.

Cap read operations

{
  "ppm_export_budget": {
    "limits": [
      {
        "counter": "ppm_export_budget_per_minute",
        "window": "minute",
        "max": 60,
        "scope": "grant"
      }
    ]
  }
}

Controls API costs and prevents retry loops from exhausting upstream rate limits.

Create a free account and register Qod Ppm Odoo — nothing to install.
Add these rules — paste them, or build them visually. Tune the limits to your setup.
Point your MCP client (Claude, Cursor, anything) at your gateway URL.

ENFORCE POLICY ON QOD PPM ODOO →

Instant setup, no code required.

FULL CATALOGUE

All 35 Qod Ppm Odoo tools

DESTRUCTIVE 2 tools

Destructive ppm_milestone_cancel Cancel a milestone. Destructive ppm_role_revoke Revoke a role assignment; removes the user from the security group.

EXECUTE 5 tools

Execute ppm_change_request_start_review Start review of a submitted Change Request. Execute ppm_milestone_start Transition a milestone from 'planned' to 'in_progress'. Execute ppm_risk_start_analysis Transition a risk from 'identified' to 'analyzing'. Execute ppm_risk_start_mitigation Transition a risk to 'mitigating'. Execute ppm_risk_start_monitoring Transition a risk to 'monitoring'.

WRITE 20 tools

Write ppm_change_request_approve Approve a Change Request under review; creates a baseline snapshot. Write ppm_change_request_reject Reject a Change Request with a required reason (runs the reject wizard). Write ppm_change_request_reset_draft Return a submitted or rejected Change Request to draft. Write ppm_change_request_submit Submit a draft Change Request for review; assigns a sequence number. Write ppm_create_project_from_template Clone a project template and attach it to a customer (res.partner). Write ppm_issue_assign Move an issue from 'new' to 'assigned'. Write ppm_issue_escalate Escalate an issue to management. Write ppm_issue_resolve Resolve an issue; sets date_resolved. Write ppm_issue_start Move an issue to 'in_progress'. Write ppm_milestone_achieve Mark a milestone as achieved; records today as the actual date. Write ppm_milestone_miss Mark a milestone as missed. Write ppm_milestone_reopen Reopen a milestone back to 'planned'. Write ppm_risk_close Close a risk; sets date_closed. Write ppm_risk_mark_occurred Mark a risk as occurred. Write ppm_risk_move_in_matrix Move a risk in the P×I matrix. Write ppm_risk_reopen Reopen a closed risk back to 'identified'. Write ppm_role_activate Activate a draft role assignment (syncs the security group). Write ppm_role_approve_and_activate Approve and activate in one step. Write ppm_role_reset_draft Return a role assignment to draft. Write ppm_status_report_reset_draft Revert a published status report back to draft.

READ 8 tools

Read ppm_export_budget Export budget lines to XLSX. Returns the download URL action. Read ppm_export_resources Export resource allocations to XLSX. Read ppm_export_risks Export the risk register to XLSX. Read ppm_list_action_tools List every PPM action/wizard tool this server exposes, with a one-line description. Read ppm_ping Verify the MCP server can authenticate to Odoo and hit the PPM models. Read ppm_status_report_generate ppm_status_report_generate Read ppm_status_report_print_url Return the Odoo URL for the PDF render of a status report. Read ppm_status_report_publish Publish a draft status report.

EXPLORE

Related servers

Other MCP servers with similar tools — same risk classification, starter policies for each.

FAQ

Questions about Qod Ppm Odoo

Can an AI agent delete data through the Qod Ppm Odoo MCP server? +

Yes. The Qod Ppm Odoo server exposes 2 destructive tools including ppm_milestone_cancel, ppm_role_revoke. These permanently remove resources with no undo. PolicyLayer blocks destructive tools by default so they never reach the upstream server.

How do I prevent bulk modifications through Qod Ppm Odoo? +

The Qod Ppm Odoo server has 20 write tools including ppm_change_request_approve, ppm_change_request_reject, ppm_change_request_reset_draft. Set a rate limit in your policy -- for example, 10 calls per hour prevents an agent from making more than 10 modifications per hour. PolicyLayer enforces this at the gateway, before calls reach Qod Ppm Odoo.

How many tools does the Qod Ppm Odoo MCP server expose? +

35 tools across 4 categories: Destructive, Execute, Read, Write. 8 are read-only. 27 can modify, create, or delete data.

How do I enforce a policy on Qod Ppm Odoo? +

Register the Qod Ppm Odoo MCP server in PolicyLayer, apply the suggested rules above (adjust the limits to your use case), and point your AI client at the PolicyLayer proxy URL instead of the server directly. Your agents keep the same tools; PolicyLayer evaluates every call against policy before it executes. Nothing to install, live in minutes.

Enforce policy on every Qod Ppm Odoo tool call.

Deterministic rules across all 35 Qod Ppm Odoo tools. Per-identity grants. Full audit log. Live in minutes. Nothing to install.

ENFORCE POLICY ON QOD PPM ODOO →

Instant setup, no code required.

35 Qod Ppm Odoo tools catalogued and risk-classified — across an index of 43,000+ MCP servers.