ERPipe is a hosted Odoo gateway and governance control plane for MCP-compatible AI agents. Search live records, open documents, prepare governed changes, and keep writes under human approval. Free beta — no credit card.
ERPipe — Connect AI agents to live Odoo
- 43 MCP tools, writes off by default, OAuth S256 PKCE
- Canonical MCP endpoint: https://mcp.erpipe.com/mcp
Last updated: 2026-08-18
FAQ
What exactly is ERPipe?
A hosted, multi-tenant Odoo gateway and control plane for MCP-compatible AI agents. It exposes structured Odoo capability and gives operators controls for identity, actions, approvals, audit, usage, events, and lifecycle.
Can an agent change Odoo records automatically?
Writes start disabled. When write capability is enabled, create, write, and unlink operations can be previewed, validated, and routed to owner approval. Chatter notes and allowlisted methods use separate gates.
Does ERPipe replace Odoo permissions?
No. The connected Odoo user's ACLs and record rules remain authoritative. ERPipe adds scopes, field policy, method allowlists, approval, limits, and operational controls on top.
What happens if a write result is uncertain?
The operation is recorded as unknown and is not retried automatically, avoiding a blind duplicate mutation.
What is stored in the audit trail?
Every tool call is audited with redacted and bounded operational detail. ERPipe does not claim to store complete raw request and response payloads.
Do Odoo webhooks automatically trigger an agent?
No. Signed events enter a bounded queue. An approved client explicitly lists and acknowledges them; the client or orchestrator controls polling and execution.
Which Odoo versions are intended to work?
The intended compatibility path covers Odoo 16–18 through XML-RPC and Odoo 19 through JSON-2. Setup probes the live instance before activation.
How are credentials and workspaces handled?
Credentials are encrypted, OAuth tokens are bound to one workspace, and tenant workspaces remain isolated. Owners can revoke grants, drain sessions, pause individual connections, rotate webhook secrets, or request deletion.