MCP+ for Dolibarr

MCP+ connects AI assistants like Claude and ChatGPT directly to your Dolibarr — secure, fully auditable and without a single additional server process.

The server speaks the Model Context Protocol (MCP), the open standard AI clients use to access business data. Whether Claude Desktop, Claude Code, claude.ai in the browser or ChatGPT: the assistant sees your tickets, customers, invoices and projects — with exactly the permissions you grant, and not one more.

Native Dolibarr module instead of a middle layer

MCP+ runs as a regular Dolibarr module inside your existing installation. There is no external Python or Node server, no bridge, no cloud middle layer — and therefore a whole class of failure points and attack surface less.

• Installed in minutes: enable the module, create a token, done — no extra service to install, monitor and update
• Access through the Dolibarr object classes themselves: business logic, triggers, extrafields and multicompany entity separation apply automatically — no fragile re-implementation on top of the REST API
• No data sharing with third parties: the connection runs directly between your MCP client and your Dolibarr
• Not a single core patch: upgrade-safe on every Dolibarr update

57 tools in 9 categories

Full coverage of the key business objects — reading and (switchable per token) writing:

• Tickets: list, search, read including message history, find unanswered tickets, create, reply, change status
• Customers / third parties: list, search, read, create, update, delete
• Contacts: list, read, create, update, delete
• Products: list, search by label or reference, resolve references, create, update, delete
• Invoices: list, read, create drafts, add/update/delete lines, validate, assign project
• Orders: list, read, create, update, delete
• Projects: list, search, read, create, update, delete
• Users: list, read, create, update, delete
• System: status, connection test and (optional, double-gated) passthrough to the Dolibarr REST API

Security in layers

Every request passes a fixed chain of security checks before a single record is read:

• Per-client tokens: every client gets its own token — the database stores only the SHA-256 hash, the plaintext is visible exactly once
• Permissions on three levels: Dolibarr rights of the service user, tool categories (scopes) per token, and a read-only mode that hides and blocks all write tools
• Two separate IP whitelists (IPv4/IPv6, CIDR): one for static tokens, a dedicated one for OAuth connections — allowing the Anthropic/OpenAI ranges never loosens the restrictive token whitelist
• Correct client IP resolution behind reverse proxies (trusted proxy list, X-Forwarded-For not spoofable)
• Rate limit per token per minute, body size limit, origin check against DNS rebinding
• Token hardening: expiration date, per-token IP restriction, one-click revocation
• Error hygiene: internals never reach the client — they go to the server log only

OAuth 2.1 for claude.ai and ChatGPT

Cloud clients cannot store static headers — so MCP+ ships a complete OAuth 2.1 authorization server:

• Connect straight from the claude.ai connector dialog or from ChatGPT: enter the URL, approve in Dolibarr, done
• Consent page inside Dolibarr: per connection you decide the service user, the scopes and whether it is read-only
• Standards-compliant and secure: mandatory PKCE S256, dynamic client registration (RFC 7591), discovery per RFC 8414/9728, refresh token rotation per OAuth 2.1
• Every OAuth connection shows up as a regular token in the admin — same overview, same revocation, same audit log

Complete traceability

You can always see what an AI client did in your system:

• Audit log of every single request: time, token, client IP, method, tool, parameters, result, duration
• Dedicated log tab with filters (token, IP, tool, status, date range), sorting and paging — rejected access attempts are visible too
• Configurable retention with automatic and manual purge (GDPR-friendly)

Broad compatibility

One code base, many environments:

• Dolibarr 20.0 to 24.0 with one and the same module — including care for every API difference between the versions
• Works with any MCP client: Claude Desktop, Claude Code, claude.ai, ChatGPT and every standards-compliant client (Streamable HTTP, JSON-RPC 2.0)
• Multicompany-ready: tokens are bound to an entity, access stays cleanly separated

Why MCP+ instead of other solutions?

Typical MCP integrations for Dolibarr are external server processes (usually Python/Node) accessing the REST API with a single API key. The difference at a glance: