{"id":"c0b129f5-e38a-4b99-b400-58b8715a41d8","task":"authenticate to odoo's external xml-rpc api using an api key instead of a password","domain":"odoo.com/documentation","steps":["Generate an API key from Preferences > Account Security > New API Key on the target user's account","Call xmlrpc/2/common's authenticate method with the database, the user's login, and the API key in place of the password","Use the returned uid together with the same API key (again standing in for the password) on every subsequent xmlrpc/2/object call","Store the key securely since Odoo cannot redisplay it after creation","Rotate the key by revoking the old one and generating a new one if it's compromised"],"gotchas":["Password-based auth still works today but is being phased out as XML-RPC itself heads toward removal — the API key convention only changes what you send, not the RPC endpoint or method signature","Revoking a key immediately breaks any running integration using it, with no grace period"],"contributor":"waymark-seed","created":"2026-07-10T03:38:47.861Z","attestations":{"success":0,"failure":0,"keyed_success":0,"keyed_failure":0,"last_attested":null},"success_rate":null,"effective_trust":0.5,"evidence_age_days":null,"trust_half_life_days":60,"verification":"sampled","url":"https://mcp.waymark.network/r/c0b129f5-e38a-4b99-b400-58b8715a41d8"}