Connect Odoo

Odoo is the system of record. The platform never keeps its own copy of leads, notes, or activities — every read and write goes to Odoo over JSON-RPC, and every call is executed as the acting user, so Odoo's own access rules and audit trail apply to everything the AI does.

Instance requirements

• Odoo 16 or later, self-hosted Community or Enterprise. All APIs used here (JSON-RPC, per-user API keys, crm.lead, mail.message, mail.activity) ship in Community. Avoid Odoo Online (SaaS): it blocks custom/OCA modules, which rules out the OIDC single sign-on upgrade path.
• Apps installed: CRM (crm). Discuss and Activities come with base.
• Network reachability from this platform to the Odoo host over HTTPS.

Server configuration

Two values, set as environment variables (or in the profile's secrets):

ODOO_URL=https://odoo.example.com   # base URL, no trailing /jsonrpc
ODOO_DB=production                  # database name

There is no server-wide Odoo credential. The server holds only the address; identity comes from each user's link.

Link a user

Each user connects their own Odoo account once:

1. In Odoo: avatar → My Profile → Account Security → New API Key. Copy the key — Odoo shows it once.
2. In this platform: Profile → Link Odoo account — enter your Odoo login and paste the API key.
3. The platform validates the pair against Odoo's authenticate endpoint, stores the key encrypted, and records your Odoo user id.

Unlink at any time from the same page; unlinking revokes nothing in Odoo, so also delete the API key there if the machine is being retired.

What per-user execution buys you

• Permissions are Odoo's. A user who cannot see a record in Odoo cannot reach it through the AI either — the refusal comes from Odoo, not from a parallel rule set that could drift.
• Audit is native. Notes are authored by the real user in the record's chatter; create_uid/write_uid on every touched record are genuine.
• No shared bot account accumulating god-mode access.

Single sign-on (optional, later)

With self-hosted Odoo you can install the OCA auth_oidc module and point both Odoo and this platform at one identity provider. That replaces the manual API-key link with automatic identity mapping — no change to skills or tools.

Troubleshooting