MCP+ for Dolibarr

MCP+ connects AI assistants like Claude and ChatGPT directly to your Dolibarr — secure, fully auditable and without a single additional server process.

The server speaks the Model Context Protocol (MCP), the open standard AI clients use to access business data. Whether Claude Desktop, Claude Code, claude.ai in the browser or ChatGPT: the assistant sees your tickets, customers, quotations, orders, invoices, projects, appointments and stock levels — with exactly the permissions you grant, and not one more.

Native Dolibarr module instead of a middle layer

MCP+ runs as a regular Dolibarr module inside your existing installation. There is no external Python or Node server, no bridge, no cloud middle layer — and therefore a whole class of failure points and attack surface less.

• Installed in minutes: enable the module, create a token, done — no extra service to install, monitor and update
• Access through the Dolibarr object classes themselves: business logic, triggers, extrafields and multicompany entity separation apply automatically — no fragile re-implementation on top of the REST API
• No data sharing with third parties: the connection runs directly between your MCP client and your Dolibarr
• Not a single core patch: upgrade-safe on every Dolibarr update

130 tools in 15 categories

Full coverage of the core business objects - reading and (switchable per token) writing:

• Tickets: list, search, read including the message history, find unanswered tickets, create, reply (optionally notifying by email), change status
• Customers / third parties: list, search, read, create, update, delete
• Contacts: list, read, create, update, delete - plus the contact assignments of a document: who is on file as the billing, shipping or project contact, assign and remove
• Products: list, search by label or reference, resolve a reference, create, update, delete
• Quotations: list, search, read, create, add/update/delete lines, validate, close as signed or not signed
• Sales orders: list, read, create, update, delete, maintain lines, validate, close, cancel, link to a project
• Invoices: list, read, create drafts, add/update/delete lines, validate, link to a project - plus payments: look up what is still open, book a payment and post it to the bank account
• Supplier invoices and purchase orders: list, search, read, create, update, maintain lines, validate, approve an order
• Projects and tasks: list, search, read, create, update and delete projects; create and maintain their tasks; record, list and delete time entries
• Calendar: list, search, read, create, update and delete appointments - linked to customer, contact and project
• Stock: list warehouses, look up the current stock of a product per warehouse, read the movement history, book entries and exits
• Categories / tags: list, read, create, update, delete, show their contents, assign and remove records
• Users: list, read, create, update, delete
• System: status, connection test, an overview of the defined custom fields and (optional, double-locked) passthrough to the Dolibarr REST API

Document lines with discounts

A line is built exactly as it would be in the Dolibarr form: description or product, quantity, unit price, tax rate and a discount in percent. The discount can be set when a line is added, changed later on, and it comes back when the document is read - on quotations, sales orders, invoices as well as supplier invoices and purchase orders.

• A complete document including its discounts is therefore written in one go, with nobody having to correct it by hand afterwards
• A discount outside 0 to 100 percent is refused and reported instead of producing a line with a nonsensical amount
• Changing a line without naming a discount leaves the existing discount untouched - exactly like the other fields of a line

Your custom fields included

Custom fields (extrafields) are not second class here: their values come along when a record is read and can be set when creating or updating one - for customers, contacts, products, quotations, orders, invoices, supplier documents, projects, tasks, appointments, tickets, users, warehouses and categories.

• A dedicated tool lists the fields defined for each type of record with key, label, type and allowed values - the assistant looks the field names up instead of guessing them
• An unknown field name is reported back, not silently dropped: what is reported as saved really is saved

Security in layers

Every request passes a fixed chain of security checks before a single record is read:

• Per-client tokens: every client gets its own token — the database stores only the SHA-256 hash, the plaintext is visible exactly once
• Permissions on three levels: Dolibarr rights of the service user, tool categories (scopes) per token, and a read-only mode that hides and blocks all write tools
• Two separate IP whitelists (IPv4/IPv6, CIDR): one for static tokens, a dedicated one for OAuth connections — allowing the Anthropic/OpenAI ranges never loosens the restrictive token whitelist
• Correct client IP resolution behind reverse proxies (trusted proxy list, X-Forwarded-For not spoofable)
• Rate limit per token per minute, body size limit, origin check against DNS rebinding
• Token hardening: expiration date, per-token IP restriction, one-click revocation
• Error hygiene: internals never reach the client — they go to the server log only

OAuth 2.1 for claude.ai and ChatGPT

Cloud clients cannot store static headers — so MCP+ ships a complete OAuth 2.1 authorization server:

• Connect straight from the claude.ai connector dialog or from ChatGPT: enter the URL, approve in Dolibarr, done
• Consent page inside Dolibarr: per connection you decide the service user, the scopes and whether it is read-only
• Standards-compliant and secure: mandatory PKCE S256, dynamic client registration (RFC 7591), discovery per RFC 8414/9728, refresh token rotation per OAuth 2.1
• Every OAuth connection shows up as a regular token in the admin — same overview, same revocation, same audit log

Complete traceability

You can always see what an AI client did in your system:

• Audit log of every single request: time, token, client IP, method, tool, parameters, result, duration
• Dedicated log tab with filters (token, IP, tool, status, date range), sorting and paging — rejected access attempts are visible too
• Configurable retention with automatic and manual purge (GDPR-friendly)

Broad compatibility

One code base, many environments:

• Dolibarr 20.0 to 24.0 with one and the same module — including care for every API difference between the versions
• Works with any MCP client: Claude Desktop, Claude Code, claude.ai, ChatGPT and every standards-compliant client (Streamable HTTP, JSON-RPC 2.0)
• Multicompany-ready: tokens are bound to an entity, access stays cleanly separated

Why MCP+ instead of other solutions?

Typical MCP integrations for Dolibarr are external server processes (usually Python/Node) accessing the REST API with a single API key. The difference at a glance: