ivnvxd/mcp-server-odoo

v0.7.1 Feature

This release adds 2 notable features for engineering teams evaluating rollout.

Published 1mo MCP Developer Tools

✓ No known CVEs patched

✓ No known CVEs patched in this version

Topics

ai erp llm mcp mcp-server mcp-servers

+3 more

model-context-protocol odoo odoo-mcp

Affected surfaces

auth

Summary

AI summary

Added configurable host validation and session idle timeout for streamable-http transport.

Type	Severity	Summary	CVE
Feature	Low	Adds ODOO_MCP_ALLOWED_HOSTS config for DNS-rebinding protection in streamable-http transport Adds ODOO_MCP_ALLOWED_HOSTS config for DNS-rebinding protection in streamable-http transport Source: llm_adapter@2026-06-12 Confidence: high	—
Feature	Low	Adds ODOO_MCP_SESSION_IDLE_TIMEOUT config to set streamable-http session idle timeout Adds ODOO_MCP_SESSION_IDLE_TIMEOUT config to set streamable-http session idle timeout Source: llm_adapter@2026-06-12 Confidence: high	—
Dependency	Low	Updates dependencies: mcp 1.26.0 → 1.27.2, pydantic 2.11 → 2.13, starlette 0.47 → 1.3; adds dev tooling updates (ruff, ty, pytest 9) Updates dependencies: mcp 1.26.0 → 1.27.2, pydantic 2.11 → 2.13, starlette 0.47 → 1.3; adds dev tooling updates (ruff, ty, pytest 9) Source: llm_adapter@2026-06-12 Confidence: high	—

Full changelog

ODOO_MCP_ALLOWED_HOSTS: comma-separated Host headers to accept for the streamable-http transport (DNS-rebinding protection). Needed when running behind a reverse proxy that forwards an external host; unset preserves the prior default (no host validation) (#45, @Miriup).
ODOO_MCP_SESSION_IDLE_TIMEOUT: seconds of inactivity before a streamable-http session is closed and its server-side state freed; unset preserves the prior behavior (sessions never expire).

Dependencies: refreshed the lockfile — mcp 1.26.0 → 1.27.2 (streamable-http idle timeout, mid-request transport-close handling, pydantic 2.13 compat), pydantic 2.11 → 2.13, starlette 0.47 → 1.3, plus dev tooling (ruff, ty, pytest 9).

Weekly OSS security release digest.

The CVE patches and breaking changes that affected production tools this week. One email, every Sunday.

No spam, unsubscribe anytime.

Share this release

Track ivnvxd/mcp-server-odoo

Get notified when new releases ship.

About ivnvxd/mcp-server-odoo

Connect AI assistants to Odoo ERP systems for business data access, record management, and workflow automation.