n8n Integration

Overview

The ood.ooo n8n webhook integration allows you to trigger Odoo operations from your n8n workflows. Whether you want to create records, query data, or send natural language requests to AI, you can do it all through a simple HTTP endpoint.

Getting Started

Authentication

Choose one of two authentication methods:

Authorization: Bearer sk_live_xxxxxxxxxxxxx

X-API-Key: sk_live_xxxxxxxxxxxxx

X-HMAC-Signature: <hex_signature_using_sha256>

Supported Actions

{
  "action": "execute_method",
  "model": "res.partner",
  "method": "search_read",
  "args": [[["is_company", "=", true]]],
  "kwargs": {
    "fields": ["name", "email", "phone"],
    "limit": 10
  }
}

{
  "action": "chat",
  "message": "List all customers with outstanding invoices over $1000"
}

{
  "action": "get_config"
}

{
  "action": "test_connection"
}

Common Odoo Operations

{
  "action": "execute_method",
  "model": "res.partner",
  "method": "create",
  "args": [{
    "name": "New Customer",
    "email": "customer@example.com"
  }]
}

{
  "action": "execute_method",
  "model": "res.partner",
  "method": "write",
  "args": [
    [123],
    {"phone": "+1234567890"}
  ]
}

{
  "action": "execute_method",
  "model": "res.partner",
  "method": "unlink",
  "args": [[123, 124, 125]]
}

{
  "action": "execute_method",
  "model": "sale.order",
  "method": "search_read",
  "args": [[
    ["state", "=", "sale"],
    ["date_order", ">=", "2025-01-01"]
  ]],
  "kwargs": {
    "fields": ["name", "partner_id", "amount_total"],
    "order": "date_order desc",
    "limit": 50
  }
}

Example Use Cases

Best Practices

• Use API Keys for Production: Never use session cookies in production workflows. Generate API keys with proper scopes and enable HMAC verification for sensitive operations
• Test Connection First: Always test with test_connection before complex workflows
• Use Batch Operations: Prefer search_read over multiple read calls
• Limit Results: Always set limit in kwargs to avoid large responses
• Error Handling: Add error handling nodes in your n8n workflow
• Logging: Enable logging in n8n to debug webhook calls
• Rate Limiting: Monitor the X-RateLimit-Remaining header to avoid hitting rate limits
• Secure API Keys: Store API keys in n8n credentials or environment variables, never hard-code them

Error Handling

All responses include a success field. On error:

{
  "success": false,
  "error": "Error message",
  "details": "Detailed error information"
}

Common Errors

• 401 Unauthorized - Not authenticated, check session cookie
• 404 Not Found - No Odoo configuration, configure at Settings
• 500 Internal Server Error - Check error details in response

HMAC Signature Verification

For production webhooks, enable HMAC signature verification to ensure requests are authentic and haven't been tampered with.

Generate HMAC Signature (Node.js)

const crypto = require('crypto');

// Your request body
const requestBody = {
  action: "execute_method",
  model: "res.partner",
  method: "search_read",
  args: [[["is_company", "=", true]]],
  kwargs: { fields: ["name", "email"], limit: 10 }
};

// Your HMAC secret from API key settings
const hmacSecret = "your_hmac_secret_here";

// Generate signature
const bodyString = JSON.stringify(requestBody);
const signature = crypto
  .createHmac('sha256', hmacSecret)
  .update(bodyString)
  .digest('hex');

// Add to headers
const headers = {
  'Authorization': 'Bearer sk_live_xxxxxxxxxxxxx',
  'X-HMAC-Signature': signature,
  'Content-Type': 'application/json'
};

Generate HMAC Signature (Python)

import hmac
import hashlib
import json

# Your request body
request_body = {
    "action": "execute_method",
    "model": "res.partner",
    "method": "search_read",
    "args": [[["is_company", "=", True]]],
    "kwargs": {"fields": ["name", "email"], "limit": 10}
}

# Your HMAC secret from API key settings
hmac_secret = "your_hmac_secret_here"

# Generate signature
body_string = json.dumps(request_body, separators=(',', ':'))
signature = hmac.new(
    hmac_secret.encode('utf-8'),
    body_string.encode('utf-8'),
    hashlib.sha256
).hexdigest()

# Add to headers
headers = {
    'Authorization': 'Bearer sk_live_xxxxxxxxxxxxx',
    'X-HMAC-Signature': signature,
    'Content-Type': 'application/json'
}

Rate Limits

When using API keys, requests are rate-limited to prevent abuse:

• •100 requests per minute per API key

Rate Limit Headers

When rate limited (429 status), the response includes:

HTTP/1.1 429 Too Many Requests
X-RateLimit-Remaining: 0
X-RateLimit-Reset: 2025-01-28T12:00:00.000Z

{
  "error": "Rate limit exceeded",
  "limit": 100,
  "resetAt": "2025-01-28T12:00:00.000Z"
}

Session cookie authentication does not have rate limits but is not recommended for production.