odoo_execute

What odoo_execute does on Odoo Claude MCP

AI agents invoke odoo_execute to trigger actions in Odoo Claude MCP. What it does depends on the arguments the agent supplies, and its effects often reach beyond the immediate call: builds kicked off, notifications sent, workflows started.

Why odoo_execute is rated High

This tool permits execution of arbitrary Odoo model methods without constraint on which methods or models can be targeted. An AI agent with access to this tool could trigger any side-effect operation (create records, modify data, send emails, call external APIs, etc.) depending on what methods exist in the Odoo instance. The 'any model method' phrasing means blast radius is very high and unpredictable.

From the tool's definition Tool name is 'odoo_execute' and description states 'Execute any model method via execute_kw' — execute_kw is the RPC method in Odoo that allows arbitrary method execution on any model with the caller's permissions.

The rule that runs odoo_execute safely

PolicyLayer is an MCP gateway: it sits between your AI agents and Odoo Claude MCP, and checks every tool call against a rule you set before the call runs. Nothing changes on the server itself. For odoo_execute, this is the rule to start with:

{
  "version": "1",
  "default": "deny",
  "tools": {
    "odoo_execute": {
      "limits": [
        {
          "counter": "odoo_execute_rate",
          "window": "minute",
          "max": 10,
          "scope": "grant"
        }
      ]
    }
  }
}

Questions about odoo_execute