High-risk tools in Odoo Claude MCP

High severity Odoo Claude MCP MCP Server 52 of 246 tools

52 of the 246 tools in Odoo Claude MCP are classified as high risk. This page profiles those tools specifically, with recommended policy actions and the attack patterns that target them.

Every operation listed below is an action PolicyLayer recommends controlling at the transport layer. Open any tool to see the full profile, risk score, and YAML policy snippet.

Tools at high risk

ai_invoice_pipeline_run Execute

Execute the full registered step pipeline for one move+attachment.
ai_invoice_plugins_reload Execute

Reload plugin steps from the plugins directory (default
ai_pipeline_run Execute

Execute an Odoo-defined pipeline (ai.pipeline.step records for the
ai_pipeline_step_execute Execute

Execute a single ai.pipeline.step by name via Odoo RPC.
ai_tokenize_collection Execute

Tokenize ALL records of a model via the registry entry. Heavy operation —
ee_clone Execute

Clone Odoo Enterprise repository with GitHub token authentication.
ee_deploy Execute

Deploy EE from buffer to target (rsync). Buffered mode only.
ee_link Execute

Create symlink for specific EE modules in the Odoo addons path (selective install).
ee_update Execute

Git pull Enterprise repository.
fleet_rollback Execute

ADMIN: redeploy a stack
fleet_upgrade Execute

ADMIN: canary-upgrade ONE stack to a target image tag.
git_remote Execute

Run git commands on a remote server via SSH.
github_api Execute

Call GitHub REST API directly. Uses the GitHub token from local_profile.json.
google_auth Execute

Authenticate with Google OAuth2 for Gmail and Calendar access.
google_gmail_send Execute

Send an email or reply to an existing message.
identify_verify_totp Execute

Second step of name-identify for a TOTP-protected profile. After
mcp_drop_elevation Execute

End the current elevation window early. Logs to audit.
mcp_elevate Execute

Grant YOUR CURRENT SESSION temporary admin rights (does not
module_deploy Execute

ADMIN: deploy an Odoo addon to a target — rsync the
oca_changelog Execute

Generate CHANGELOG from newsfragments using oca-towncrier.
oca_clone_all Execute

Clone all OCA repositories for a branch using oca-clone-everything.
oca_clone_repo Execute

Clone a specific OCA repository by name.
oca_deploy Execute

Deploy OCA repos from buffer to target (rsync). Only in buffered mode.
oca_fix_website Execute

Fix website URL in addon manifests using oca-fix-manifest-website.
oca_gen_icon Execute

Generate default OCA icon for addon(s) using oca-gen-addon-icon.
oca_gen_readme Execute

Generate README for an OCA addon using oca-gen-addon-readme.
oca_gen_requirements Execute

Generate requirements.txt from addon external_dependencies using oca-gen-external-dependencies.
oca_link Execute

Create symlink for OCA addon module in the Odoo addons path.
oca_migrate Execute

Migrate OCA repos to a new Odoo version branch using oca-migrate-branch.
oca_update Execute

Git pull all OCA repos in the working directory (recursive).
odoo_execute Execute

Execute any model method via execute_kw.
odoo_sql_query Execute

Execute a raw PostgreSQL query against the Odoo database with
odoo_stock_initial_import Execute

Import opening stock balances (initial inventory) via direct SQL INSERT, bypassing
odoo_stock_initial_opening_journal Execute

Book the opening-balance journal entry for a previous SQL-inserted initial stock
odoo_timesheet_timer Execute

Drive Odoo
odoo_translate_context_aware Execute

Translate Odoo records using Claude with rich domain context for natural,
odoo_web_call Execute

Call any Odoo model method via web session (JSON-RPC /web/dataset/call_kw).
odoo_web_login Execute

Login to Odoo web interface with user/password. Creates a persistent
odoo_web_request Execute

Raw HTTP request to any Odoo controller URL via web session.
open_connection_manager Execute

Open the Connection Manager GUI (desktop app).
proxy_call Execute

Forward a tool call to an internal MCP sub-service.
proxy_refresh Execute

Re-discover tools from all internal MCP sub-services.
secrets_rotate Execute

ADMIN: generate a new secret of a kind for a stack and
session_link_provision Execute

Mint a pre-authenticated session link (URL) for a headless
ssh_execute Execute

Execute a command on a remote server via SSH.
supervisor_rebuild Execute

supervisor_rebuild
supervisor_run Execute

ADMIN: run the supervisor in a given mode via Portainer
telegram_auth Execute

Authenticate with Telegram. Two-step process:
telegram_create_group Execute

Create a Telegram supergroup FROM YOUR ACCOUNT (Bot API cannot create groups),
telegram_send_file Execute

Send a file/document to a Telegram chat. The file must live under the
telegram_send_message Execute

Send a Telegram message. Chat can be @username, phone, or numeric ID.
tenant_refresh Execute

Re-discover tools for a single tenant (or the active one if name

Attacks that target this class

High-risk tools in any server share these documented attack patterns. Each links to the full case and the defensive policy.

Destructive Action Autonomy
Runaway Tool Loops
Prompt Injection via Tool Results

High-risk tools in Odoo Claude MCP

Tools at high risk

Attacks that target this class

More on Odoo Claude MCP

Enforce policy on every Odoo Claude MCP tool call.