RXed AI News

AI to the bone.
LatestMethodologyUpcoming & requests
SCORE 7/10 10/10 criteria · Strong Assessed 2026-08-20 · ARI rubric v1.0

Odoo — can an agent use it?

Visit odoo.com
“Open-source ERP and CRM suite with 80+ business apps covering accounting, inventory, CRM, HR, manufacturing, eCommerce, and more. Belgian-founded, 28 million users, Community (free LGPL) and Enterprise editions.” — the vendor’s own words

Odoo scores Strong (7) thanks to full ORM API coverage, excellent documentation with the new JSON-2 API, and an open-source core that gives self-hosted agents unrestricted access. The main drag is the absence of any agent payment protocol and the Odoo Online plan gate that locks the external API behind the Custom tier.

Service
www.odoo.com
Category
ERP / CRM
Agent protocol
Community only
Agent payment rails
None published
Site Scan
C (67/100) · crawl-level, 20/08

FIND & RETRIEVE · 7.5

Sf7
Machine-readable surface
Iq7.5
Information retrieval quality
Dx8
Documentation for machines

ACT & TRANSACT · 6.2

Ac9
Action coverage
Pt6
Agent protocol support
Au7.5
Access & auth friction
Py2.5
Agent payment capability
Cf6
Cost & rate fairness

TRUST & DURABILITY · 7.2

Ts8
Permission & ToS stance
Rl6.5
Reliability & continuity
Tap or hover any criterion to see why it scored that.
FIND & RETRIEVE7.5/10Can an agent get correct information?

Machine-readable surface7/10

Server-rendered HTML with 943 words visible without JS. Sitemap present and referenced in robots.txt. Schema.org JSON-LD present but no high-value types (no Organization, Product, or Offer markup). No llms.txt, no markdown negotiation. Auto-generated /doc API explorer on every instance partially compensates. Robots.txt permissive to AI crawlers (only PetalBot blocked). source

Information retrieval quality7.5/10

Pricing published clearly: free One App plan, Standard at EUR 24.90/user/month, Custom at EUR 37.40/user/month (discounted first year). Feature comparison visible. IAP credit costs (SMS, AI bill scanning) mentioned but not individually priced on the pricing page. 80+ app descriptions with feature lists on dedicated pages. source

Documentation for machines8/10

Public documentation versioned per release (13.0 through 19.0). New JSON-2 API (Odoo 19) has auto-generated interactive /doc endpoint on every instance with browsable fields, methods, module filtering, and live code execution in Python and JavaScript. Deprecation timeline published (XML-RPC/JSON-RPC removed fall 2028). Weakness: rate limits not on the API reference page, scattered across AUP and forum posts; error codes not comprehensively documented. source

ACT & TRANSACT6.2/10Can an agent do the job?

Action coverage9/10

Full ORM access via the external API — every installed model, every public method. CRUD on all 80+ modules including invoicing (account.move), payments (account.payment), inventory (stock.picking), CRM (crm.lead), HR, manufacturing, purchase orders. Business logic methods callable directly (action_confirm on sale.order, action_post on invoices). Test environments available via free trial, Runbot, and database duplication. API parity with UI is essentially complete. source

Agent protocol support6/10

No official Odoo S.A. MCP server. Four mature community options: mcp-server-odoo (372 stars, MPL-2.0, free, stdio+HTTP), mcp-odoo/ERPipe (390 stars, MIT, 41 tools, field-level access control, gated writes), MuK MCP Server (LGPL-3, native Odoo module, 18 tools, 7.5k LOC, covers Odoo 15-19), and mcp_server (Apps Store, OAuth 2.1). Coverage is comprehensive — full CRUD, method execution, chatter, reports. Community-maintained but comprehensive = mid-band per rubric. source

Access & auth friction7.5/10

Self-serve API keys from user preferences (Odoo 14+), used as Bearer token in Authorization header. Mandatory for JSON-2 API. Keys revocable, 90-day max lifetime with rotation. Bot/service users officially recommended and documented for machine-to-machine integrations. Scoping is user-based (ACLs + record rules), not per-endpoint. No OAuth flow for external API consumers. Keys obtainable in minutes. source

Agent payment capability2.5/10

No support for ACP, AP2, MPP, or x402. Odoo integrates payment acquirers (Stripe, PayPal, Mollie, Adyen, etc.) but these serve human-facing checkout pages. An agent can create invoices and register payments via the ORM API (account.payment model), but this is internal bookkeeping — not a delegated, spend-capped agent transaction protocol. No programmatic checkout flow an agent can complete on a customer's behalf. source

Cost & rate fairness6/10

External API access on Odoo Online requires the Custom plan (EUR 37.40/user/month) — blocked on One App Free and Standard. Self-hosted Community Edition has unlimited free API access with no rate limits. Cloud rate limit approximately 1 request/second, no parallel calls per AUP. Bot/service users count as billable licensed users. No agent-vs-human price discrimination, but the plan gate is real friction for cloud-hosted SMBs on Standard. source

TRUST & DURABILITY7.2/10Will it still work next quarter?

Permission & ToS stance8/10

AUP does not ban bots, agents, or automation. Restricts unthrottled API calls and crawling that impacts performance — throttled agent usage at approximately 1 req/sec is explicitly acceptable. Enterprise agreement silent on automated access. LGPL Community edition carries zero restrictions on programmatic use. No hostile enforcement history against integrators. Privacy policy has no AI-specific clauses. Open-source nature means self-hosted users cannot be retroactively locked out. source

Reliability & continuity6.5/10

Public status page at status.odoo.com with incident history and component breakdown (SaaS, Odoo.sh, website, IAP). Feb 2026 had a 6h50m unacknowledged outage; multiple incidents in Mar 2026 also went unreported per third-party monitors. External API protocol was stable 10+ years (XML-RPC since v6.1); now transitioning to JSON-2 with generous deprecation timeline (removal fall 2028). Annual major versions break internal ORM APIs but external API has been backward-compatible. Self-hosted avoids cloud reliability concerns entirely. source

Sources

Point-in-time assessment — services change terms, prices and APIs often. That volatility is itself scored under Reliability & continuity. Re-verified at least quarterly.

RELATED ON RXED
AI AUDIT Pipedream — audited 6.1/10 The shortest path from an OAuth account to an agent-callable tool: 10,000+ tools across 3,000+ APIs behind one static OAuth MCP URL, with re AI AUDIT monday.com — audited 6.1/10 A genuinely rebuilt agent platform bolted onto a mature work-management core — strong governance and MCP support, but the AI still runs on b LEARN Protocols (Pc) Open standards so agents plug into your tools — write once, no lock-in.