**Secure API** is a no-code REST API builder for Odoo that turns any model — standard or custom — into a fully functional, production-ready API in minutes. Point, click, publish. No Python, no controllers, no deployment scripts.

![Secure API Screenshot](https://firebasestorage.googleapis.com/v0/b/kyzlab-blog.firebasestorage.app/o/posts%2Fodoo%2Fsecure-api-interface.jpg?alt=media&token=d8b7ad9c-67f7-4918-ab18-7f8ed7186f98){:style="display: block; width: 100%; height: auto; aspect-ratio: 1556 / 749; object-fit: cover;"}

*Secure API interface — configure and publish APIs entirely from the Odoo UI*

## The Problem: Building Custom APIs is Painful

If you've ever tried to expose Odoo data to a mobile app or external system, you know the struggle:

- **Writing custom controllers** for every endpoint
- **Managing authentication** yourself (session tokens, API keys)
- **Handling security** — CORS, field access control
- **Maintaining documentation** that stays in sync with your code
- **Testing APIs** requires external tools and complex setup

Sound familiar? You're not alone. Most Odoo developers spend days or weeks building API layers just to connect a mobile app or integrate with a third-party service.

## The Solution: Secure API

**Secure API** solves all of these problems with a single, production-ready module:

![Secure API List](https://firebasestorage.googleapis.com/v0/b/kyzlab-blog.firebasestorage.app/o/posts%2Fodoo%2Fsecure-api-management.jpg?alt=media&token=63f62681-5d3b-47ca-9d43-9766a9f762f4){:style="display: block; width: 100%; height: auto; aspect-ratio: 1082 / 748; object-fit: cover;"}

*Secure API features at a glance*

### Key Benefits

✓ **No Code Required** — Select a model, choose fields, set permissions — your REST API is live in minutes — no need to restart Odoo server  
✓ **Enterprise Security** — OAuth 2.0, JWT, ID obfuscation, field-level access control  
✓ **Instant Integration** — Export to Postman or Swagger with one click  
✓ **Production Monitoring** — Built-in usage statistics and lifecycle management  
✓ **Fully Documented** — OpenAPI/Swagger compatible for seamless integration  

## Production Use Cases

### Mobile App Integration

Connect your Odoo backend to iOS/Android apps without writing a single line of backend code:

![Secure API - Mobile App Integration](https://firebasestorage.googleapis.com/v0/b/kyzlab-blog.firebasestorage.app/o/posts%2Fodoo%2Fsecure-api-mobile-integration-oauth2.jpg?alt=media&token=95f8aced-dd11-46d3-8ce9-c4eb8d477041){:style="display: block; width: 100%; height: auto; aspect-ratio: 1544 / 896; object-fit: cover;"}

*Connect mobile apps to Odoo securely with OAuth 2.0*

**How it works:**
1. Install Secure API in your Odoo instance
2. Select the `res.partner` model (or any custom model)
3. Choose which fields to expose
4. Set up OAuth 2.0 client credentials
5. Export Postman collection for your mobile team
6. Done — your mobile app can now read/write Odoo data securely

**Real example:** A retail company connected their Odoo inventory system to a customer-facing mobile app in under 2 hours using Secure API — compared to an estimated 3-5 days of custom development.

### Third-Party Service Integration

Connect Odoo to external services like payment gateways, shipping providers, or CRM systems.

**Example workflow:**
```bash
# Authenticate with OAuth 2.0
curl -X POST \
  -F client_id=your_client_id \
  -F client_secret=your_secret \
  https://your-odoo.com/api/oauth2/token

# Use the access token
curl -X GET \
  -H "Authorization: Bearer your_token" \
  https://your-odoo.com/api/sale.order/rest
```

<!-- 
### Business Intelligence Dashboards

Expose Odoo data to BI tools like Power BI, Tableau, or custom dashboards:

[![BI Dashboard Integration](img/bi-dashboard.jpg)](img/bi-dashboard.jpg)

*Connect BI tools to Odoo with secure, read-only API access*

**Benefits:**
- No database connections to manage
- Field-level security controls what data is exposed
- Pagination and ordering built-in
- Export to Swagger for automatic documentation
-->

## Security Features That Matter

### OAuth 2.0 & JWT Authentication

Industry-standard authentication with configurable token expiry and scoped permissions. Configure OAuth 2.0 & JWT Authentication clients from the _Odoo UI entirely_.

- _OAuth 2.0 Opaque Tokens_ — Industry-standard OAuth 2.0 authentication out of the box. Create client applications with unique `client_id` and `client_secret` credentials, configurable token expiry, and scoped permissions — all managed from the Odoo UI.
- _JWT (JSON Web Tokens)_ — For stateless authentication, use JWT tokens. Tokens are signed with configurable algorithms (HS256, HS384, HS512) and contain embedded payload data. No database lookup required for validation.

### Field-Level Access Control

Control exactly which fields are exposed in API responses:

```json
// Without field-level control
{"id": 42, "name": "John Doe", "salary": 5000, "ssn": "123-45-6789"}

// With field-level control (only name and email exposed)
{"id": 42, "name": "John Doe", "email": "john@example.com"}
```

### ID Obfuscation

Protect sensitive database IDs from enumeration attacks:

```json
// Without obfuscation
{"id": 42, "name": "John Doe"}

// With obfuscation enabled
{"id": "gY5kp8", "name": "John Doe"}
```

### Usage Monitoring

Track API usage with built-in statistics:

![API Usage Statistics](https://firebasestorage.googleapis.com/v0/b/kyzlab-blog.firebasestorage.app/o/posts%2Fodoo%2Fsecure-api-stats.jpg?alt=media&token=9062ee02-f287-45b8-b72b-57a8e4427856){:style="display: block; width: 100%; height: auto; aspect-ratio: 1556 / 779; object-fit: cover;"}

*Monitor API usage, success rates, and performance metrics*

## Advanced Features for Production

### One-Click Export

Export your APIs to Postman or Swagger/OpenAPI 3.0 with a single click:

![API Export](https://firebasestorage.googleapis.com/v0/b/kyzlab-blog.firebasestorage.app/o/posts%2Fodoo%2Fsecure-api-export-docs.jpg?alt=media&token=f73d677e-4e69-4d44-b8fb-830c3054b591){:style="display: block; width: 100%; height: auto; aspect-ratio: 1556 / 779; object-fit: cover;"}

*Export to Postman or Swagger in one click*

### Bulk Operations

Process multiple records in a single API request:

```bash
# Bulk create
POST /api/partners
[
    {"name": "Partner A", "email": "a@example.com"},
    {"name": "Partner B", "email": "b@example.com"}
]

# Bulk update
PATCH /api/partners
{"ids": ["abc123", "def456"], "active": false}
```

### RPC Method Calls

Expose custom model methods as API endpoints — perfect for business logic:

```bash
# Call a custom method
POST /api/sale.order/rest/rpc
{
    "method": "action_confirm",
    "args": [["abc123"]]
}
```

### Field Aliases

Rename fields in API requests/responses without modifying the model:

```json
// Database field: partner_id
// API alias: customer

POST /api/orders
{"customer": "gY5kp8", "order_total": 150.00}
```

## Get Started Today

Stop building and maintaining custom API controllers by hand. **Secure API** gives you a production-ready, secure, and fully documented REST API layer for Odoo — configured entirely from the UI.

### Purchase Options

🛒 **Buy on Gumroad** (instant download):  
[https://kyzlab.gumroad.com/l/secure_api](https://kyzlab.gumroad.com/l/secure_api)

🛍️ **Buy on Odoo Apps Store** (official distribution):  
[https://apps.odoo.com/apps/modules/19.0/secure_api](https://apps.odoo.com/apps/modules/19.0/secure_api)

> ⚠️ **Important:** Select the correct Odoo version before purchasing. Secure API is available for Odoo 14, 15, 16, 17, 18, and 19.

### What's Included

- Full source code with comments
- Comprehensive documentation
- OpenAPI/Swagger export wizard
- Lifetime updates
- Priority support

## Support Policy

We stand behind our products with excellent support:

📧 **Email:**&nbsp;[kyznano@gmail.com](mailto:kyznano@gmail.com)  
💬 **Telegram:**&nbsp;[@minhng92](https://t.me/minhng92)  

**For test purposes before buying**, please contact us — we're happy to help you validate the module against your use case first.

## Why Choose Secure API?

| Feature | Custom Development | Secure API |
|---------|-------------------|------------|
| Setup time | Days to weeks | Minutes |
| Security | Your responsibility | Enterprise-grade built-in |
| Documentation | Manual maintenance | Auto-generated Swagger |
| Testing | External tools required | Built-in test mode |
| Maintenance | Ongoing code updates | One-time purchase + updates |
| Support | On your own | Priority support included |

## Ready to Expose Your Odoo APIs?

![Secure API CTA](https://firebasestorage.googleapis.com/v0/b/kyzlab-blog.firebasestorage.app/o/posts%2Fodoo%2FSecure-API-CTA.jpg?alt=media&token=bd809539-026d-4fad-8bdf-a8df6d51bd7e){:style="display: block; width: 100%; height: auto; aspect-ratio: 1280 / 715; object-fit: cover;"}

**Secure API** — The easiest way to expose Odoo models as secure, production-ready REST APIs.

---

*Have questions about Secure API? Drop a comment on our social or contact us directly!* 🚀