Dashboards, Prompt Templates, and Safe Module Builder

Advanced features use declarative specifications and the same Odoo user, ACL, record-rule, bundle, field, domain, and limit controls as normal MCP requests.

Governed dashboards

• Supported widget types include KPI, table, bar, line, and pie.
• Specifications are JSON declarations. Python, SQL, HTML, and JavaScript are rejected.
• A normal MCP user can create private dashboards or share them with selected users and groups.
• Only an MCP Administrator can choose another execution user, publish a public token link, or rotate its token.
• A dashboard can contain up to 24 widgets, and widget result limits remain bounded.

Prompt templates

• Give each template a stable technical name for MCP prompt discovery.
• Define JSON arguments and use named placeholder values for safe substitution.
• No Python or expression evaluation is performed.
• Templates can be private, shared with selected users or groups, or published to all MCP users by an administrator.
• Shared recipients can read the template; only owners or administrators can modify it.

Safe data-only module builder

• Available to MCP Administrators and Odoo system administrators.
• Builds between one and twenty custom models using the Odoo custom-model prefix.
• Safe field types include char, text, integer, float, boolean, date, datetime, selection, and many-to-one.
• Generates metadata, fields, access CSV, list and form views, actions, and menus.
• Produces an installable ZIP and SHA-256 checksum.
• Installs through Odoo base_import_module.
• Does not generate executable Python model logic or JavaScript.

Recommended use

Treat these features as controlled application assets. Keep ownership clear, use purpose-specific execution users, review model specifications, test generated modules on staging, and avoid public dashboard links for sensitive data.