High-risk tools in Odoo Claude MCP

High severity Odoo Claude MCP MCP Server 37 of 180 tools

37 of the 180 tools in Odoo Claude MCP are classified as high risk. This page profiles those tools specifically, with recommended policy actions and the attack patterns that target them.

Every operation listed below is an action PolicyLayer recommends controlling at the transport layer. Open any tool to see the full profile, risk score, and YAML policy snippet.

Tools at high risk

ai_invoice_pipeline_run Execute

Execute the full registered step pipeline for one move+attachment.
ai_pipeline_run Execute

Execute an Odoo-defined pipeline (ai.pipeline.step records for the
ai_pipeline_step_execute Execute

Execute a single ai.pipeline.step by name via Odoo RPC.
ee_deploy Execute

Deploy EE from buffer to target (rsync). Buffered mode only.
git_remote Execute

Run git commands on a remote server via SSH.
oca_deploy Execute

Deploy OCA repos from buffer to target (rsync). Only in buffered mode.
odoo_execute Execute

Execute any model method via execute_kw.
ssh_execute Execute

Execute a command on a remote server via SSH.
ai_invoice_plugins_reload Execute

Reload plugin steps from the plugins directory (default
ai_tokenize_collection Execute

Tokenize ALL records of a model via the registry entry. Heavy operation —
ee_clone Execute

Clone Odoo Enterprise repository with GitHub token authentication.
github_api Execute

Call GitHub REST API directly. Uses the GitHub token from local_profile.json.
google_auth Execute

Authenticate with Google OAuth2 for Gmail and Calendar access.
oca_changelog Execute

Generate CHANGELOG from newsfragments using oca-towncrier.
oca_clone_all Execute

Clone all OCA repositories for a branch using oca-clone-everything.
oca_clone_repo Execute

Clone a specific OCA repository by name.
oca_fix_website Execute

Fix website URL in addon manifests using oca-fix-manifest-website.
oca_gen_icon Execute

Generate default OCA icon for addon(s) using oca-gen-addon-icon.
oca_gen_readme Execute

Generate README for an OCA addon using oca-gen-addon-readme.
oca_gen_requirements Execute

Generate requirements.txt from addon external_dependencies using oca-gen-external-dependencies.
odoo_stock_initial_opening_journal Execute

Book the opening-balance journal entry for a previous SQL-inserted initial stock
odoo_translate_context_aware Execute

Translate Odoo records using Claude with rich domain context for natural,
odoo_web_call Execute

Call any Odoo model method via web session (JSON-RPC /web/dataset/call_kw).
odoo_web_request Execute

Raw HTTP request to any Odoo controller URL via web session.
proxy_call Execute

Forward a tool call to an internal MCP sub-service.
proxy_refresh Execute

Re-discover tools from all internal MCP sub-services.
telegram_auth Execute

Authenticate with Telegram. Two-step process:
ee_link Execute

Create symlink for specific EE modules in the Odoo addons path (selective install).
ee_update Execute

Git pull Enterprise repository.
google_gmail_send Execute

Send an email or reply to an existing message.
oca_link Execute

Create symlink for OCA addon module in the Odoo addons path.
oca_migrate Execute

Migrate OCA repos to a new Odoo version branch using oca-migrate-branch.
oca_update Execute

Git pull all OCA repos in the working directory (recursive).
odoo_stock_initial_import Execute

Import opening stock balances (initial inventory) via direct SQL INSERT, bypassing
odoo_web_login Execute

Login to Odoo web interface with user/password. Creates a persistent
open_connection_manager Execute

Open the Connection Manager GUI (desktop app).
telegram_send_message Execute

Send a Telegram message. Chat can be @username, phone, or numeric ID.

Attacks that target this class

High-risk tools in any server share these documented attack patterns. Each links to the full case and the defensive policy.

High-risk tools in Odoo Claude MCP

Tools at high risk

Attacks that target this class

More on Odoo Claude MCP

Enforce policy on every Odoo Claude MCP tool call.