Odoo Community Edition gives you a full ERP without per-user licensing fees. Hermes Agent gives you AI-powered automation. Together they let startups run enterprise-grade operations on a bootstrap budget — with granular access control so your agent only sees what it needs to see.
Most business platforms charge per user, per month. As a startup, that cost adds up fast — every new team member, every integration bot, every API client adds another seat to the bill. The agent itself counts as a user.
Odoo Community Edition (CE) is different. It's the same powerful ERP — CRM, Sales, Inventory, Accounting, Project Management — but completely free in terms of user licensing. You can add as many users as you need, including your AI agent, without paying a cent in seat fees.
With Odoo Enterprise, a dedicated agent user costs you a monthly license fee. With Odoo Community Edition, your agent is just another user — zero additional cost. This is what makes CE the most fruitful and practical choice for startups building AI-powered operations. You get the full ERP without the per-user tax.
And since your Derez.ai agent runs on its own Linux instance with full SSH access, there's no overlap between your Odoo hosting and your agent hosting. Each component scales independently as your startup grows.
Security is about least privilege: your agent should only see and do what it needs to. Odoo Community Edition makes this easy because you create a dedicated user for your agent with custom access rights.
In your Odoo instance, go to Settings → Users & Companies → Users and click Create. Set up a user specifically for your agent:
Under the Access Rights tab, you control exactly what the agent can see and do. Don't give full administrator access — instead, enable only the modules your agent will work with:
Everything else stays locked. Your agent cannot read your payroll data, modify accounting configurations, or access inventory unless you explicitly grant those rights.
Why this matters: A human employee needs broad access because they context-switch all day. Your agent doesn't. By creating a restricted, dedicated user you eliminate the single biggest risk of AI integrations — giving the agent unfettered access to everything. You don't give all access to all your data. You give exactly the access the task requires.
Once your restricted agent user is set up, connecting Hermes Agent to Odoo takes one integration prompt from the dashboard. The agent uses Odoo's REST API to authenticate and execute actions under the agent user's rights.
https://odoo4projects.com)When you select the Odoo integration from your Derez.ai dashboard, the agent receives a prepared prompt that authenticates it against your Odoo instance using the agent user credentials. Every API call the agent makes runs under that user's permission scope — meaning it can only read or write what you explicitly allowed in Step 2.
This is fundamentally different from giving an AI agent an admin API key. Your agent operates within a defined permission boundary just like any other employee in your Odoo system.
For a full step-by-step walkthrough with real credentials, see our Odoo Hermes Agent integration guide and the speed-run blog post.
Here's what this combination unlocks for a startup — all running on Odoo Community Edition with zero per-user costs:
Agent reads new leads from CRM, researches company info via web search, enriches the contact record, and moves qualified leads to the next stage — all before you open your inbox.
Agent queries today's opportunities, checks email for new inquiries, and delivers a formatted morning briefing to your Slack or email — pulled entirely from Odoo under its restricted user.
Customer sends an inquiry → agent checks inventory in Odoo → creates a draft quotation → sends a follow-up email. The agent works in Sales but never touches Accounting or HR.
Agent combines Odoo Contacts with web research to enrich customer profiles, updates the CRM with new data, and saves the research report to Nextcloud — one prompt, multiple modules, all within its granted rights.
Running an AI agent backed by your ERP is powerful — and it demands thoughtful security. Here's how to keep your startup safe:
Never connect your agent using an admin account. Create a separate Odoo user for the agent with the minimum rights needed. If the agent's credentials are ever compromised, the blast radius is limited to what that user can access.
Odoo logs all user activity. Periodically check the agent user's history — what records did it read? What did it write? This gives you visibility into whether your agent is behaving as expected.
Treat your agent's Odoo password like any service account — rotate it periodically. The Derez.ai dashboard makes it easy to update integration credentials without rebuilding your agent.
If your agent only needs to read data (reports, dashboards, briefings), grant read-only access rights. Reserve write permissions for workflows that genuinely need them — like updating lead stages or creating contacts.
The Bottom Line: Odoo Community Edition + Derez.ai Hermes Agent = enterprise ERP automation at startup prices. The Community Edition's flexible user model means your agent costs nothing to licence, and Odoo's granular permission system means you control exactly what your agent can access. No per-user fees, no all-or-nothing access. Just a scalable, secure AI operations stack.
Use coupon code BLOG950 for $9.50 off your first month. Full Odoo Community API access, dedicated agent user, and granular rights — all included.
Buy Agent →Derez.ai — Deploy your AI agent in 5 minutes. · Blog · Focus Topics