Odoo 17
RPC & API Key Access Control for Odoo 17
Decide which users may reach the database over XML-RPC, JSON-RPC or an API key: a per-user allowlist that denies by default, an API-key-only mode, a global kill switch, and an audit log of every allowed and blocked API login.

Availability on Odoo 17
Which versions this module supports.
RPC & API Key Access Control runs on Odoo 17. This page covers availability, licensing and how to install it on 17 specifically. For the full feature breakdown, see the main RPC & API Key Access Control page.
| Odoo version | Status | Available |
|---|---|---|
| Odoo 19 | Supported | Yes |
| Odoo 18 | Supported | Yes |
| Odoo 17 | Supported (this page) | Yes |
In short
What it does.
A summary for Odoo 17. The full breakdown is on the main RPC & API Key Access Control page.
- Three operating modes - Disabled, Monitor and Enforce - so you can see the impact before you switch
- Per-user API Access Allowed toggle on every user form, no new groups or complex rules
- API Keys Only mode per user - require an API key and refuse password-based API authentication
- Dual-gate architecture - Gate A catches XML-RPC and JSON-RPC, Gate B catches API key and Outlook authentications

Other Odoo versions
Running something else?
The same module, published per version.
Questions
About RPC & API Key Access Control on Odoo 17.
Does RPC & API Key Access Control work on Odoo 17?
Yes. RPC & API Key Access Control is published for Odoo 17 on the official Odoo Apps Store, and we maintain it across the versions listed above.
How do I install it on Odoo 17?
Buy or download it from the Odoo Store listing for 17, add it to your addons path or install it directly on Odoo.sh or Odoo Online where supported, then update the apps list and install. We can do the install for you if you would rather not.
What happens when I upgrade Odoo?
We maintain the module across current major versions, so an upgrade path exists as long as the target version is listed above. Tell us before you upgrade and we will confirm.
Full details
Everything RPC & API Key Access Control does.
Features, screenshots, setup and FAQs on the main module page.
Open the RPC & API Key Access Control pageReady to make Odoo work the way your business does?
Book a free callCODEerts is a team of certified Odoo experts and full-stack engineers. We implement, customise and support Odoo ERP, then build the software around it.