Can Claude access Odoo?
Yes — through an MCP server or a conventional API integration. Anthropic’s custom remote MCP connectors are the usual path.
Architecture: Claude → MCP → Odoo. The server translates tool calls into searches, reads, and maybe writes. Customers, contacts, sales, CRM, inventory, accounting, products, projects — only the models you publish.
Claude querying live Odoo
Same MCP idea, Claude as the client. Watch a real question hit sample ERP data.
Writes, Online, developers
MCP tools can create, modify or delete if you ship those tools. Anthropic is explicit: understand permissions before you click allow.
Odoo Online is possible when an external server can call a supported API. Odoo 19's JSON-2 is the modern HTTP interface. Plan limits still apply — Odoo MCP for Odoo Online.
Developers also use Claude on module code and logs. That is not the same as production ERP access. Full steps: how to connect Odoo to Claude.
Claude sees tools, not your Odoo backend
Claude does not speak JSON-2. It speaks MCP (and whatever custom connectors Anthropic exposes in that product). When a connector is attached, Claude sees tool names, descriptions and argument schemas. It does not see your PostgreSQL password, your Settings app, or every model in the registry.
That is the feature. A well-built Odoo MCP server offers search_overdue_invoices, not execute_any_odoo_method. Claude then has to work inside that list. If the list is huge and poorly described, Claude will guess; if it is small and named for the business, it will ask better questions.
Desktop, Cowork, claude.ai and API-hosted agents are different products. Confirm that your Claude surface supports custom remote MCP before you promise the finance team a live ERP chat. The Odoo side of the story is the same regardless: dedicated user, read-only tools first. Client steps: connect Odoo to Claude.
Claude on Odoo Online is a plan question
If Claude’s MCP server calls Odoo from outside — JSON-2 on Odoo 19 — Odoo Online still documents the external API as Custom-only. Standard and One App Free are not an integration tier. A module that runs inside Odoo and talks to the ORM does not use that gate, which is why in-Odoo MCP exists as a product category.
Self-hosted Community has the external API without that commercial lock. That does not make Community “more official”; it makes the hosting contract different. Pick the door that matches where the database lives, then attach Claude to the MCP URL.
Odoo 19.4 lists native MCP connectivity in the July 2026 release notes. That does not automatically mean every Online database, every edition, and every Claude plan are wired. Verify on the tenant you actually run. Flagship notes: Odoo 19.4 MCP.
Let Claude read before it posts
Read questions are cheap to get wrong: a bad search still leaves invoices untouched. Writes are not. Creating a contact, confirming a quotation, or reconciling a payment is an operational event. Keep write tools off until the read tools are boring, then add named writes with a human in the loop.
Anthropic’s own MCP guidance treats servers as powerful. An untrusted MCP endpoint is a prompt-injection surface. Host the server yourself, or review the vendor the way you would review a payment gateway — not the way you install a Chrome extension.
Stack detail if Claude is only the client and JSON-2 is the ERP API: Claude + JSON-2 + MCP.
FAQ
Can Claude access Odoo?
Yes. Claude calls MCP tools; your server performs Odoo operations as a dedicated user. Anthropic documents this as custom remote MCP connectors. Setup: connect Odoo to Claude.
Can Claude write to Odoo?
If you expose write tools and approve those permissions. Anthropic tells you to understand connector effects before enabling them — see the remote MCP docs.
Can Claude use Odoo Online?
If the MCP server can reach an API your Online plan provides. Standard does not include the external API. Odoo MCP for Odoo Online.
Is it safe?
Dedicated user, least privilege, read-only first, staging, logging, human approval for sensitive actions. Not admin on production. Odoo MCP security.
The rest of the MCP cluster
Start read-only. Ask a real question.
Sandbox on sample data, or we put MCP on your instance.