Security checklist for the Odoo 19 External API
Eight practical checks for API keys, service users, access controls, public methods, and transactions before a JSON-2 integration reaches production.
Read articleIndependent publication / English / Version-aware
Field notes, signals, kits, and experiments from live Odoo systems — version-aware, evidence-backed, independent.
01 / Series
02 / Published 23/07/2026
Eight practical checks for API keys, service users, access controls, public methods, and transactions before a JSON-2 integration reaches production.
Read article03 / Evidence gate
Do not blend major-release behavior or speak of “Odoo” as one immutable block.
Every material conclusion needs a source, retrieval date, and re-checkable scope.
Studio fields, custom modules, and the live registry can make generic docs incomplete.