diff --git a/.env.example b/.env.example
index 52589c06..61b4dff0 100644
--- a/.env.example
+++ b/.env.example
@@ -1,4 +1,8 @@
 BACKEND_URL="http://localhost:3000"
+
+# Public native OAuth client for the downloadable Admin MCP (not the dashboard's confidential client).
+# Register callback http://127.0.0.1:47322/callback and delegated backend:admin; see docs/mcp.md.
+# ADMIN_MCP_CLIENT_ID=""
 # Local preview: set to true to use a fake administrator without OIDC or Redis.
 # Only works with pnpm dev and a local fake/test backend.
 AGENT_MODE="false"
diff --git a/.github/workflows/test.yml b/.github/workflows/test.yml
index 998ba6b0..fd38e890 100644
--- a/.github/workflows/test.yml
+++ b/.github/workflows/test.yml
@@ -25,6 +25,8 @@ jobs:
         run: pnpm run typecheck
       - name: Run Vite+ checks
         run: pnpm check
+      - name: Tests
+        run: pnpm test
       - name: Build
         run: pnpm run build
         env:
diff --git a/.gitignore b/.gitignore
index 4ac50e3e..ce51b45a 100644
--- a/.gitignore
+++ b/.gitignore
@@ -16,6 +16,7 @@ db.sqlite
 # production
 /build
 /dist
+/public/downloads/
 /.output
 /.tanstack
 
diff --git a/README.md b/README.md
index 4996fc63..aeda4961 100644
--- a/README.md
+++ b/README.md
@@ -23,6 +23,11 @@ come from `me.access`. Identity, Telegram linking, passkeys and session manageme
 
 ## Development
 
+The [downloadable Admin MCP](docs/mcp.md) gives local AI agents the signed-in person's dashboard operations and
+permissions. `pnpm build` includes its public package at `/downloads/polinetwork-admin-mcp.tgz`. Activation requires
+a separate public native OAuth client and `ADMIN_MCP_CLIENT_ID`; the Auth MCP's existing registration policy stays
+unchanged. Downloading is public; accessing data requires each user's own login.
+
 ```bash
 pnpm install
 pnpm dev
diff --git a/docs/mcp.md b/docs/mcp.md
new file mode 100644
index 00000000..b7236919
--- /dev/null
+++ b/docs/mcp.md
@@ -0,0 +1,121 @@
+# PoliNetwork Admin MCP
+
+Downloadable MCP server for the same account and operations as the admin dashboard. It runs locally over stdio,
+signs you in with PoliNetwork Auth using authorization code, PKCE and a verified ID token, and calls the backend
+through a cookie-free gateway on admin. No client secret or administrator account is included in the download.
+
+## Install and connect
+
+Requires Node.js 22 or newer on Windows, macOS or Linux. After deployment, anyone can download the package from
+`https://admin.polinetwork.org/downloads/polinetwork-admin-mcp.tgz` without signing in. API access still requires
+their own account and dashboard permissions.
+
+```sh
+npm install -g https://admin.polinetwork.org/downloads/polinetwork-admin-mcp.tgz
+polinetwork-admin-mcp login
+```
+
+Your browser opens PoliNetwork Auth. Sign in and approve the application's access. If the browser cannot be opened,
+copy the link printed in the terminal. Keep the terminal open until it confirms connection. The loopback callback
+uses `http://127.0.0.1:47322/callback`; port 47322 must be available.
+
+Add this stdio configuration to an MCP client:
+
+```json
+{
+  "mcpServers": {
+    "polinetwork-admin": {
+      "command": "polinetwork-admin-mcp",
+      "args": ["serve"]
+    }
+  }
+}
+```
+
+For example, Claude Code can add the installed executable with:
+
+```sh
+claude mcp add --scope user polinetwork-admin -- polinetwork-admin-mcp serve
+```
+
+On a different admin deployment, pass the same `--admin-url https://admin.example.org` to both `login` and `serve`.
+Each origin has separate credentials. `logout` revokes the refresh token and removes local credentials.
+This is a local stdio server; browser-hosted connectors require a remote HTTP server and cannot run this package.
+
+## What it can do
+
+`whoami` shows the signed-in subject and current permissions. The tool list contains only operations allowed to
+that account, and both the gateway and backend check authorization on every call. Telegram groups, users, messages,
+audit and grants; WhatsApp groups; group labels; website projects, associations, FAQs, Freshman cards and guides;
+reports; Microsoft 365; People, teams, census, linking, fees and receipts; eSign requests and drive rules are included.
+
+Microsoft 365 follows the dashboard's fixed new-member workflow, member-number changes and read-only groups.
+Existing group memberships and arbitrary user properties cannot be changed. People responses use the dashboard's
+contract schemas: a backend that has not implemented a procedure reports an error, without demo data or fallback.
+The Capo Admin and Team Lead views remain scoped by the backend to the caller's own record.
+
+Writes take `{ "input": { ... }, "confirmed": true }`; the agent sets this only after the user has authorized the
+specific change. Deletions, departures, revocations and similar operations are marked destructive. Report actions
+and signing-job cancellation accept a single row. Label renames or deletions may affect descendants: inspect and
+confirm that entire scope first. Never perform destructive operations on multiple records without an explicit
+instruction covering them. Changes are attributed by the backend to the token's user, never an author argument.
+An uncertain network result must be checked before any retry; writes are never retried automatically.
+
+Upload tools accept `fields` (string form values) and `files` entries containing `field`, `name`, `type` and `base64`.
+They never read local paths. Download tools return base64 content or CSV. CIE tools can prepare requests and tickets;
+the person must complete signing with the existing CIE application and hardware. Never give a PIN to the agent.
+The server accepts MCP messages up to 72 MB, enough for a 50 MB signed-receipt batch encoded as base64. MCP clients
+can impose their own smaller limits, including on large download responses.
+
+## Activate on a deployment
+
+The existing Auth MCP was inspected as the reference (`src/auth/mcp-server.ts`, `mcp-token.ts`, `mcp-clients.ts` in
+the auth repository). Its anonymous dynamic registration deliberately grants only `idp:mcp` for its own audience.
+Admin therefore uses a separate, publicly identifiable native client with backend access, rather than widening
+Auth's working registration policy or embedding the dashboard's confidential credentials.
+
+A Master Admin creates one application at `/applications` (granting backend API scopes requires that role):
+
+| Setting              | Value                                                |
+| -------------------- | ---------------------------------------------------- |
+| Name                 | PoliNetwork Admin MCP                                |
+| Usage                | Sign people in; no service/client-credentials access |
+| Application type     | Native (localhost allowed)                           |
+| Authentication       | Public / none (PKCE S256)                            |
+| Redirect URI         | `http://127.0.0.1:47322/callback`                    |
+| Identity scopes      | `openid profile email offline_access`                |
+| Delegated API scopes | `backend:admin`                                      |
+| Resource             | The same backend resource as the dashboard           |
+| Consent              | Required                                             |
+
+Set `ADMIN_MCP_CLIENT_ID` on admin to that public client ID. `IDP_URL` and `BACKEND_RESOURCE` retain their existing
+dashboard meanings. The manifest at `/api/mcp/config` exposes only the public ID, issuer, resource, callback and
+download URL. It returns 503 until configured. The RPC gateway is also disabled until this variable is set.
+The backend remains internal, reached with `BACKEND_URL`; no new backend public ingress is necessary.
+
+Download permission is public. Data permissions are always the person's own; installing the package grants no
+roles. This implementation does not require `idp:mcp`, which governs the separate Auth MCP.
+
+Tokens live on the installing user's computer in `~/.polinetwork/admin-mcp/`: directory mode 0700 and files 0600
+on POSIX, atomic replacements, one refresh at a time across processes (waiting up to five seconds for another
+process's refresh), and no stdout logging. Protect this directory
+as other local application credentials. A refresh marker is saved before contacting the IdP: after a crash or an
+ambiguous refresh response the user signs in again instead of replaying a rotating token. A crashed process can also
+leave a `.lock` directory next to its credential file; remove that directory only after the process has stopped.
+If logout cannot contact Auth, local credentials are still deleted and the user is told to revoke the application's
+consent in Auth. Existing access tokens are subject to the backend's validation and token expiry policy.
+
+## Build and distribute
+
+```sh
+pnpm mcp:build
+node dist/admin-mcp/cli.mjs help
+```
+
+The bundle contains runtime dependencies and needs no separate npm dependency install. `pnpm build` produces the
+package first and includes the public `.tgz` and SHA-256 file in the dashboard's static output. CI tests the MCP
+before publishing the usual dashboard image. Deploying that image makes the download public at the URL above.
+For local development use `--admin-url http://localhost:PORT` with a local Auth native client.
+
+Public installation and a real user login require deployment and the client registration above; creating the
+downloadable artifact alone does not register a production client or publish a deployment.
diff --git a/package.json b/package.json
index b453317e..9f89f861 100644
--- a/package.json
+++ b/package.json
@@ -5,7 +5,8 @@
   "type": "module",
   "scripts": {
     "dev": "vp dev",
-    "build": "vp build",
+    "build": "pnpm mcp:build && vp build",
+    "mcp:build": "node scripts/build-mcp.mjs",
     "start": "NODE_ENV=production node .output/server/index.mjs",
     "preview": "vp preview",
     "test": "node --experimental-strip-types --test tests/*.test.mjs",
@@ -18,6 +19,7 @@
     "@dnd-kit/react": "^0.4.0",
     "@fontsource-variable/dm-sans": "^5.3.0",
     "@fontsource/dm-mono": "^5.3.0",
+    "@modelcontextprotocol/server": "^2.3.1",
     "@polinetwork/backend": "^4.0.0",
     "@t3-oss/env-core": "^0.13.10",
     "@tanstack/charts": "1.1.0",
@@ -47,6 +49,7 @@
     "zod": "^4.3.5"
   },
   "devDependencies": {
+    "@modelcontextprotocol/client": "^2.3.1",
     "@tailwindcss/vite": "^4.3.2",
     "@trpc/server": "11.5.1",
     "@types/node": "^22.10.2",
@@ -54,6 +57,7 @@
     "@types/react-dom": "^19.2.0",
     "@vitejs/plugin-react": "^6.0.1",
     "@zap-studio/oxlint": "^2.2.1",
+    "esbuild": "^0.28.2",
     "tailwindcss": "^4.3.2",
     "typescript": "^6.0.2",
     "vite": "catalog:",
diff --git a/pnpm-lock.yaml b/pnpm-lock.yaml
index 7398e31f..cd6909fb 100644
--- a/pnpm-lock.yaml
+++ b/pnpm-lock.yaml
@@ -31,6 +31,9 @@ importers:
       '@fontsource/dm-mono':
         specifier: ^5.3.0
         version: 5.3.0
+      '@modelcontextprotocol/server':
+        specifier: ^2.3.1
+        version: 2.4.0
       '@polinetwork/backend':
         specifier: ^4.0.0
         version: 4.0.0
@@ -48,7 +51,7 @@ importers:
         version: 1.170.17(react-dom@19.2.7(react@19.2.7))(react@19.2.7)
       '@tanstack/react-start':
         specifier: 1.168.27
-        version: 1.168.27(@voidzero-dev/vite-plus-core@0.2.9(@types/node@22.20.1)(jiti@2.7.0)(typescript@6.0.3)(yaml@2.9.0))(crossws@0.4.9(srvx@0.11.21))(react-dom@19.2.7(react@19.2.7))(react@19.2.7)(rolldown@1.1.5)
+        version: 1.168.27(@voidzero-dev/vite-plus-core@0.2.9(@types/node@22.20.1)(esbuild@0.28.2)(jiti@2.7.0)(typescript@6.0.3)(yaml@2.9.0))(crossws@0.4.9(srvx@0.11.21))(esbuild@0.28.2)(react-dom@19.2.7(react@19.2.7))(react@19.2.7)(rolldown@1.1.5)
       '@tanstack/react-store':
         specifier: ^0.11.0
         version: 0.11.0(react-dom@19.2.7(react@19.2.7))(react@19.2.7)
@@ -75,7 +78,7 @@ importers:
         version: 12.42.2(react-dom@19.2.7(react@19.2.7))(react@19.2.7)
       nitro:
         specifier: 3.0.260610-beta
-        version: 3.0.260610-beta(@voidzero-dev/vite-plus-core@0.2.9(@types/node@22.20.1)(jiti@2.7.0)(typescript@6.0.3)(yaml@2.9.0))(chokidar@5.0.0)(dotenv@17.4.2)(jiti@2.7.0)(mongodb@7.1.0)
+        version: 3.0.260610-beta(@voidzero-dev/vite-plus-core@0.2.9(@types/node@22.20.1)(esbuild@0.28.2)(jiti@2.7.0)(typescript@6.0.3)(yaml@2.9.0))(chokidar@5.0.0)(dotenv@17.4.2)(jiti@2.7.0)(mongodb@7.1.0)
       openid-client:
         specifier: ^6.8.8
         version: 6.8.8
@@ -113,9 +116,12 @@ importers:
         specifier: ^4.3.5
         version: 4.3.5
     devDependencies:
+      '@modelcontextprotocol/client':
+        specifier: ^2.3.1
+        version: 2.4.0
       '@tailwindcss/vite':
         specifier: ^4.3.2
-        version: 4.3.2(@voidzero-dev/vite-plus-core@0.2.9(@types/node@22.20.1)(jiti@2.7.0)(typescript@6.0.3)(yaml@2.9.0))
+        version: 4.3.2(@voidzero-dev/vite-plus-core@0.2.9(@types/node@22.20.1)(esbuild@0.28.2)(jiti@2.7.0)(typescript@6.0.3)(yaml@2.9.0))
       '@trpc/server':
         specifier: 11.5.1
         version: 11.5.1(typescript@6.0.3)
@@ -130,10 +136,13 @@ importers:
         version: 19.2.3(@types/react@19.2.17)
       '@vitejs/plugin-react':
         specifier: ^6.0.1
-        version: 6.0.3(@voidzero-dev/vite-plus-core@0.2.9(@types/node@22.20.1)(jiti@2.7.0)(typescript@6.0.3)(yaml@2.9.0))(babel-plugin-react-compiler@1.0.0)
+        version: 6.0.3(@voidzero-dev/vite-plus-core@0.2.9(@types/node@22.20.1)(esbuild@0.28.2)(jiti@2.7.0)(typescript@6.0.3)(yaml@2.9.0))(babel-plugin-react-compiler@1.0.0)
       '@zap-studio/oxlint':
         specifier: ^2.2.1
-        version: 2.2.1(@oxlint/plugins@1.79.0)(@testing-library/dom@10.4.1)(@typescript-eslint/parser@8.67.0(eslint@10.9.0(jiti@2.7.0))(typescript@6.0.3))(eslint@10.9.0(jiti@2.7.0))(oxlint-tsgolint@7.0.2001)(oxlint@1.79.0(oxlint-tsgolint@7.0.2001)(vite-plus@0.2.9(@types/node@22.20.1)(@voidzero-dev/vite-plus-core@0.2.9(@types/node@22.20.1)(jiti@2.7.0)(typescript@6.0.3)(yaml@2.9.0))(jiti@2.7.0)(typescript@6.0.3)(yaml@2.9.0)))(tailwindcss@4.3.2)(typescript@6.0.3)
+        version: 2.2.1(@oxlint/plugins@1.79.0)(@testing-library/dom@10.4.1)(@typescript-eslint/parser@8.67.0(eslint@10.9.0(jiti@2.7.0))(typescript@6.0.3))(eslint@10.9.0(jiti@2.7.0))(oxlint-tsgolint@7.0.2001)(oxlint@1.79.0(oxlint-tsgolint@7.0.2001)(vite-plus@0.2.9(@types/node@22.20.1)(@voidzero-dev/vite-plus-core@0.2.9(@types/node@22.20.1)(esbuild@0.28.2)(jiti@2.7.0)(typescript@6.0.3)(yaml@2.9.0))(esbuild@0.28.2)(jiti@2.7.0)(typescript@6.0.3)(yaml@2.9.0)))(tailwindcss@4.3.2)(typescript@6.0.3)
+      esbuild:
+        specifier: ^0.28.2
+        version: 0.28.2
       tailwindcss:
         specifier: ^4.3.2
         version: 4.3.2
@@ -142,10 +151,10 @@ importers:
         version: 6.0.3
       vite:
         specifier: npm:@voidzero-dev/vite-plus-core@0.2.9
-        version: '@voidzero-dev/vite-plus-core@0.2.9(@types/node@22.20.1)(jiti@2.7.0)(typescript@6.0.3)(yaml@2.9.0)'
+        version: '@voidzero-dev/vite-plus-core@0.2.9(@types/node@22.20.1)(esbuild@0.28.2)(jiti@2.7.0)(typescript@6.0.3)(yaml@2.9.0)'
       vite-plus:
         specifier: 'catalog:'
-        version: 0.2.9(@types/node@22.20.1)(@voidzero-dev/vite-plus-core@0.2.9(@types/node@22.20.1)(jiti@2.7.0)(typescript@6.0.3)(yaml@2.9.0))(jiti@2.7.0)(typescript@6.0.3)(yaml@2.9.0)
+        version: 0.2.9(@types/node@22.20.1)(@voidzero-dev/vite-plus-core@0.2.9(@types/node@22.20.1)(esbuild@0.28.2)(jiti@2.7.0)(typescript@6.0.3)(yaml@2.9.0))(esbuild@0.28.2)(jiti@2.7.0)(typescript@6.0.3)(yaml@2.9.0)
 
 packages:
 
@@ -426,6 +435,162 @@ packages:
   '@emnapi/wasi-threads@1.2.2':
     resolution: {integrity: sha512-c95qOXkHdydNKhscBTebqEC1CVAZpyqOfVfBzQ1qgzyl3gfeldUjIggDbIZgDKsHLgnsM+igH7TJ/eAasaVuMA==}
 
+  '@esbuild/aix-ppc64@0.28.2':
+    resolution: {integrity: sha512-XExcO+dvLKvVtNTibSTBej1NCAbaGhWn9Ww1ZPx80qsahhPFe/8jgWP0IchNe0F3HwkU7n8ejhH8bjonqht8mQ==}
+    engines: {node: '>=18'}
+    cpu: [ppc64]
+    os: [aix]
+
+  '@esbuild/android-arm64@0.28.2':
+    resolution: {integrity: sha512-5YfKeeI8qWfBZIX+u2xZC3Zlb3Os/gLS2sbEKM+I4ZOcsWmHS2WLysCcQZDAFRslDUU5Oiq44gf6PYN1vGwG5A==}
+    engines: {node: '>=18'}
+    cpu: [arm64]
+    os: [android]
+
+  '@esbuild/android-arm@0.28.2':
+    resolution: {integrity: sha512-kXXoiPVVGQcnIYGOeaovwOURpniDBpSq4A03qkQ+BMQqtGG6HYap3xne9C1O1yo4TR3qxlCX5IqqmX6fFo2Lqg==}
+    engines: {node: '>=18'}
+    cpu: [arm]
+    os: [android]
+
+  '@esbuild/android-x64@0.28.2':
+    resolution: {integrity: sha512-O387ite7SzUyCcy3JQX4P4bLtEA7bLLkx+esve5JHnyYfNTxcVpXZo9jhdB0lTKN44gztELTdU7nS8Nr16Fs1Q==}
+    engines: {node: '>=18'}
+    cpu: [x64]
+    os: [android]
+
+  '@esbuild/darwin-arm64@0.28.2':
+    resolution: {integrity: sha512-n4KqkOQrraxHJcgjM1RvwbigfQKIKJVpM7xp+KsxiyUSrRdIXnt73VhrPAx0fV44hgfmIVKjxMN9J1t5jySVkw==}
+    engines: {node: '>=18'}
+    cpu: [arm64]
+    os: [darwin]
+
+  '@esbuild/darwin-x64@0.28.2':
+    resolution: {integrity: sha512-uq6suIWYP37qzGddBKPw5QEQPi6HiLGsO7UmkpfyaYNQ3D+rN6w6WfwH+nuqcGXWvawGwxOEroO4YGnFh95azw==}
+    engines: {node: '>=18'}
+    cpu: [x64]
+    os: [darwin]
+
+  '@esbuild/freebsd-arm64@0.28.2':
+    resolution: {integrity: sha512-n+I0BTSRIoy+d6RPKnEVwql5UwBJolytvY4mAOIEJorKlqgPII8ix6slVVrfZ5Tnj7glIZvloylbB/EJPMWEXw==}
+    engines: {node: '>=18'}
+    cpu: [arm64]
+    os: [freebsd]
+
+  '@esbuild/freebsd-x64@0.28.2':
+    resolution: {integrity: sha512-78XJTJkvPs0kz2w61301PJjXl4g7q3JqiYMZ/M/yVI73EHBrCRTgkhu9oqG7vPqq+a/yadEW8aD+agKlk5xrmg==}
+    engines: {node: '>=18'}
+    cpu: [x64]
+    os: [freebsd]
+
+  '@esbuild/linux-arm64@0.28.2':
+    resolution: {integrity: sha512-pW4AC0P3it8c7do9MVM4p51FzHzdM/TZrerurgRcHJ2WTa1VQ1CIq18xncfpBJw4ojkiZZrKW2yIBWBP92j6Ug==}
+    engines: {node: '>=18'}
+    cpu: [arm64]
+    os: [linux]
+
+  '@esbuild/linux-arm@0.28.2':
+    resolution: {integrity: sha512-XlDnu2q5yoqems+xay6wSAcg9DDD7K9RLKZEBOMZm3ckNpJBvOX20tSfby8KfrrhINDyv9V2YVZKY/SpoGJI8w==}
+    engines: {node: '>=18'}
+    cpu: [arm]
+    os: [linux]
+
+  '@esbuild/linux-ia32@0.28.2':
+    resolution: {integrity: sha512-CYbnj78HsIeA+DhgUKgFCfvNsTHFhMMrinUrMZpDXJXKN8T3XViTZ/+wtHeVxEWY8ewSzTFN+nRmSwO2tZaLUQ==}
+    engines: {node: '>=18'}
+    cpu: [ia32]
+    os: [linux]
+
+  '@esbuild/linux-loong64@0.28.2':
+    resolution: {integrity: sha512-buwkd8nsph4R+ajRvw0qM5Hja/TXQow3ptzWO2EbG/cqcIkHloRrdlBtQlshyYGTNFvfkfJ5tpPLVkY4DtsPfQ==}
+    engines: {node: '>=18'}
+    cpu: [loong64]
+    os: [linux]
+
+  '@esbuild/linux-mips64el@0.28.2':
+    resolution: {integrity: sha512-ZVykbDyk7519VwiNb9Lcj9m8XM6v5V9uKPvrEMkkEedVewf+0itkhahp4HDpgERXhwLRpWFypsGbG/J8s0QjJA==}
+    engines: {node: '>=18'}
+    cpu: [mips64el]
+    os: [linux]
+
+  '@esbuild/linux-ppc64@0.28.2':
+    resolution: {integrity: sha512-CAXl+Dtd9UUuJd8pKKdwh6MLm3MUMiqMPmhZ3tTSXPqfyQ3vDl6R5hZdZ/kYojK4ofXtdfSv1tFq8XzWx3heNQ==}
+    engines: {node: '>=18'}
+    cpu: [ppc64]
+    os: [linux]
+
+  '@esbuild/linux-riscv64@0.28.2':
+    resolution: {integrity: sha512-GeXCej4IQtU1B+QlDV8W/RRvbzI3O/Stss+/bCXv4lZls5WGRtu2a+3JkA3i4qIUlMXpcHebWpF8AkJhATowuA==}
+    engines: {node: '>=18'}
+    cpu: [riscv64]
+    os: [linux]
+
+  '@esbuild/linux-s390x@0.28.2':
+    resolution: {integrity: sha512-3H1weTYZPxt/WOhByszQZybS9w5lKzUn1FDMsgEChbHWQwHYQQRfBxgCcZvPhjHfKyJjIievvMmEUawJrdY9Dg==}
+    engines: {node: '>=18'}
+    cpu: [s390x]
+    os: [linux]
+
+  '@esbuild/linux-x64@0.28.2':
+    resolution: {integrity: sha512-4xTZr1FUmSoQW4XIWmit3tzQrUTZM+N3P0XV8xROKYF50XfI7xeO90+1bZvNwxIufQ9hDQVRJH5YhgPVF8A/HQ==}
+    engines: {node: '>=18'}
+    cpu: [x64]
+    os: [linux]
+
+  '@esbuild/netbsd-arm64@0.28.2':
+    resolution: {integrity: sha512-sSATRjPeDBg3pdgHoQfoYBob11Kk1FGa9lui5RIHZCoCkJa9QKlvl3/vKz2usCmYYjs7ymJR/2Nnsqe+Hjt5nw==}
+    engines: {node: '>=18'}
+    cpu: [arm64]
+    os: [netbsd]
+
+  '@esbuild/netbsd-x64@0.28.2':
+    resolution: {integrity: sha512-lqnzCV+mM0gIADaKihiCg6ifgfU2L3h5E33rNQBN1Y4MaVGnzryzmvvf7UHxprpQdE8hpqLolJ9Rl+SkIRDpyw==}
+    engines: {node: '>=18'}
+    cpu: [x64]
+    os: [netbsd]
+
+  '@esbuild/openbsd-arm64@0.28.2':
+    resolution: {integrity: sha512-AL2qJILH7lNjrDmCQDvdxMfAUIv8KMNZOvrwAQ8i8//ntL9FflhOyMJ8OZSMBb8/AWXe3/5v5S20y3zCoZWKoQ==}
+    engines: {node: '>=18'}
+    cpu: [arm64]
+    os: [openbsd]
+
+  '@esbuild/openbsd-x64@0.28.2':
+    resolution: {integrity: sha512-QtiuPytchRyC4rwUKhexJdQKvDuZ6hWloi3igqPQNUJCS1/v9EiO3UTOXR6A3FoMo4fnAKbWJdqaIwhOzh8qEw==}
+    engines: {node: '>=18'}
+    cpu: [x64]
+    os: [openbsd]
+
+  '@esbuild/openharmony-arm64@0.28.2':
+    resolution: {integrity: sha512-WkhYDmpTjLvGlScA1rwjRUmhl4k8oXR3cIbtqWmELgU/dFeHHlEllxDvdWcNJV9rbzCexB5vz8gtNewWLgCT7Q==}
+    engines: {node: '>=18'}
+    cpu: [arm64]
+    os: [openharmony]
+
+  '@esbuild/sunos-x64@0.28.2':
+    resolution: {integrity: sha512-GPMSkTOtMnv2U2F8gxe4Io6qmVs+YKyp832Etqqxr0hFngmXQ3rzwytelm3GIn7T4VviRUlf3sOgBOiTdvaf7g==}
+    engines: {node: '>=18'}
+    cpu: [x64]
+    os: [sunos]
+
+  '@esbuild/win32-arm64@0.28.2':
+    resolution: {integrity: sha512-PIhhEkE9uPBleRBrQEJpUn7MBnibZzbGzYWPmY3x+YoVg/95zbjB4CxPPOQ8l5tYYM4mMaCthF8/1DIfBQQyWQ==}
+    engines: {node: '>=18'}
+    cpu: [arm64]
+    os: [win32]
+
+  '@esbuild/win32-ia32@0.28.2':
+    resolution: {integrity: sha512-YmJbfTlvU7Sdn9BB+4PRES4oB6pxgS37MAONj+hBr/cpXS1aBPKXxNnDbu+QCWPj0o9dgyxeq79g6c5P8KeuYA==}
+    engines: {node: '>=18'}
+    cpu: [ia32]
+    os: [win32]
+
+  '@esbuild/win32-x64@0.28.2':
+    resolution: {integrity: sha512-5ebpxr3nWMzrL/rnUI755Jkuee0bHL/Gq0WTF9lvcpv73wAp5eu8MfBUgWK9bhWvZjj7yX8etf/8tI8Ney695g==}
+    engines: {node: '>=18'}
+    cpu: [x64]
+    os: [win32]
+
   '@eslint-community/eslint-utils@4.10.1':
     resolution: {integrity: sha512-cuadcxVFE8sDK6iWJbs8Sn0av2Nrh2QSGQhVlBW9AaAHqHwjWsZHT8LJ4hFGPh7ASBV2deFdM7H/DPjulmh8rg==}
     engines: {node: ^12.22.0 || ^14.17.0 || >=16.0.0}
@@ -539,6 +704,14 @@ packages:
   '@jridgewell/trace-mapping@0.3.31':
     resolution: {integrity: sha512-zzNR+SdQSDJzc8joaeP8QQoCQr8NuYx2dIIytl1QeBEZHJ9uW6hebsrYgbz8hJwUQao3TWCMtmfV8Nu1twOLAw==}
 
+  '@modelcontextprotocol/client@2.4.0':
+    resolution: {integrity: sha512-LgrD2OphHuG12vfKFKz6SOnq7bKHQmhGJIAYdD+MZBn2npHEyry6uD8zvktodtl5CQM85MO0anUyD9JwmUmxww==}
+    engines: {node: '>=20'}
+
+  '@modelcontextprotocol/core@2.4.0':
+    resolution: {integrity: sha512-z8QBKqdfXLPzkLQuG4xp8hrVEMm1PZ1IgxMN2sMbJiFiAKOWXnAzogXn2W4aqIBlP1ea6U5yiqVquvUNM1Cj6Q==}
+    engines: {node: '>=20'}
+
   '@modelcontextprotocol/sdk@1.29.0':
     resolution: {integrity: sha512-zo37mZA9hJWpULgkRpowewez1y6ML5GsXJPY8FI0tBBCd77HEvza4jDqRKOXgHNn867PVGCyTdzqpz0izu5ZjQ==}
     engines: {node: '>=18'}
@@ -549,6 +722,10 @@ packages:
       '@cfworker/json-schema':
         optional: true
 
+  '@modelcontextprotocol/server@2.4.0':
+    resolution: {integrity: sha512-rgR9yxSaAJ+bcsi/XroT/S2AfPiIWloXAnrdfYSCms9ivVju0ishu/wW0J21Ho6+ZOR1r7RyeRbjiRuF87ix5Q==}
+    engines: {node: '>=20'}
+
   '@mongodb-js/saslprep@1.4.13':
     resolution: {integrity: sha512-E3Sv4eCYAlKYUTx8S3ioQcDUscOif+8zZ5OnW1IzJ+Tt+EO+ke8mn+Y3FX6N1H79picwbdOavVOb1jPi2EOyrg==}
 
@@ -2800,6 +2977,11 @@ packages:
     resolution: {integrity: sha512-yPDz7wqpg1/mmHLmS3tcfTfbw5f1eryXvyghYBffGdERwe+mV7ZcWzTR8LR17Kvqt3qfPurjlonmnq3MKXIOXw==}
     engines: {node: '>= 0.4'}
 
+  esbuild@0.28.2:
+    resolution: {integrity: sha512-HKVLS8dvII+xoKW9kmqxbRKrnWEXfJJr/FZhhJmiqIB0e053QNYFqOBouTMO/k5sID4MvCiUCvv8b9M4h32wIA==}
+    engines: {node: '>=18'}
+    hasBin: true
+
   escalade@3.2.0:
     resolution: {integrity: sha512-WUj2qlxaQtO4g6Pq5c29GTcWGDyd8itL8zTlipgECz3JesAiiOKotd8JU6otB3PACgG6xkJUyVhboMS+bje/jA==}
     engines: {node: '>=6'}
@@ -5519,14 +5701,14 @@ snapshots:
 
   '@dotenvx/primitives@0.8.0': {}
 
-  '@e18e/eslint-plugin@0.8.0(eslint@10.9.0(jiti@2.7.0))(oxlint@1.79.0(oxlint-tsgolint@7.0.2001)(vite-plus@0.2.9(@types/node@22.20.1)(@voidzero-dev/vite-plus-core@0.2.9(@types/node@22.20.1)(jiti@2.7.0)(typescript@6.0.3)(yaml@2.9.0))(jiti@2.7.0)(typescript@6.0.3)(yaml@2.9.0)))':
+  '@e18e/eslint-plugin@0.8.0(eslint@10.9.0(jiti@2.7.0))(oxlint@1.79.0(oxlint-tsgolint@7.0.2001)(vite-plus@0.2.9(@types/node@22.20.1)(@voidzero-dev/vite-plus-core@0.2.9(@types/node@22.20.1)(esbuild@0.28.2)(jiti@2.7.0)(typescript@6.0.3)(yaml@2.9.0))(esbuild@0.28.2)(jiti@2.7.0)(typescript@6.0.3)(yaml@2.9.0)))':
     dependencies:
       empathic: 2.0.1
       module-replacements: 3.2.0
       semver: 7.8.5
     optionalDependencies:
       eslint: 10.9.0(jiti@2.7.0)
-      oxlint: 1.79.0(oxlint-tsgolint@7.0.2001)(vite-plus@0.2.9(@types/node@22.20.1)(@voidzero-dev/vite-plus-core@0.2.9(@types/node@22.20.1)(jiti@2.7.0)(typescript@6.0.3)(yaml@2.9.0))(jiti@2.7.0)(typescript@6.0.3)(yaml@2.9.0))
+      oxlint: 1.79.0(oxlint-tsgolint@7.0.2001)(vite-plus@0.2.9(@types/node@22.20.1)(@voidzero-dev/vite-plus-core@0.2.9(@types/node@22.20.1)(esbuild@0.28.2)(jiti@2.7.0)(typescript@6.0.3)(yaml@2.9.0))(esbuild@0.28.2)(jiti@2.7.0)(typescript@6.0.3)(yaml@2.9.0))
 
   '@emnapi/core@1.11.1':
     dependencies:
@@ -5544,6 +5726,84 @@ snapshots:
       tslib: 2.8.1
     optional: true
 
+  '@esbuild/aix-ppc64@0.28.2':
+    optional: true
+
+  '@esbuild/android-arm64@0.28.2':
+    optional: true
+
+  '@esbuild/android-arm@0.28.2':
+    optional: true
+
+  '@esbuild/android-x64@0.28.2':
+    optional: true
+
+  '@esbuild/darwin-arm64@0.28.2':
+    optional: true
+
+  '@esbuild/darwin-x64@0.28.2':
+    optional: true
+
+  '@esbuild/freebsd-arm64@0.28.2':
+    optional: true
+
+  '@esbuild/freebsd-x64@0.28.2':
+    optional: true
+
+  '@esbuild/linux-arm64@0.28.2':
+    optional: true
+
+  '@esbuild/linux-arm@0.28.2':
+    optional: true
+
+  '@esbuild/linux-ia32@0.28.2':
+    optional: true
+
+  '@esbuild/linux-loong64@0.28.2':
+    optional: true
+
+  '@esbuild/linux-mips64el@0.28.2':
+    optional: true
+
+  '@esbuild/linux-ppc64@0.28.2':
+    optional: true
+
+  '@esbuild/linux-riscv64@0.28.2':
+    optional: true
+
+  '@esbuild/linux-s390x@0.28.2':
+    optional: true
+
+  '@esbuild/linux-x64@0.28.2':
+    optional: true
+
+  '@esbuild/netbsd-arm64@0.28.2':
+    optional: true
+
+  '@esbuild/netbsd-x64@0.28.2':
+    optional: true
+
+  '@esbuild/openbsd-arm64@0.28.2':
+    optional: true
+
+  '@esbuild/openbsd-x64@0.28.2':
+    optional: true
+
+  '@esbuild/openharmony-arm64@0.28.2':
+    optional: true
+
+  '@esbuild/sunos-x64@0.28.2':
+    optional: true
+
+  '@esbuild/win32-arm64@0.28.2':
+    optional: true
+
+  '@esbuild/win32-ia32@0.28.2':
+    optional: true
+
+  '@esbuild/win32-x64@0.28.2':
+    optional: true
+
   '@eslint-community/eslint-utils@4.10.1(eslint@10.9.0(jiti@2.7.0))':
     dependencies:
       eslint: 10.9.0(jiti@2.7.0)
@@ -5658,6 +5918,20 @@ snapshots:
       '@jridgewell/resolve-uri': 3.1.2
       '@jridgewell/sourcemap-codec': 1.5.5
 
+  '@modelcontextprotocol/client@2.4.0':
+    dependencies:
+      '@modelcontextprotocol/core': 2.4.0
+      cross-spawn: 7.0.6
+      eventsource: 3.0.7
+      eventsource-parser: 3.1.0
+      jose: 6.2.12
+      pkce-challenge: 5.0.1
+      zod: 4.4.3
+
+  '@modelcontextprotocol/core@2.4.0':
+    dependencies:
+      zod: 4.4.3
+
   '@modelcontextprotocol/sdk@1.29.0(zod@3.25.76)':
     dependencies:
       '@hono/node-server': 1.19.14(hono@4.12.29)
@@ -5680,6 +5954,11 @@ snapshots:
     transitivePeerDependencies:
       - supports-color
 
+  '@modelcontextprotocol/server@2.4.0':
+    dependencies:
+      '@modelcontextprotocol/core': 2.4.0
+      zod: 4.4.3
+
   '@mongodb-js/saslprep@1.4.13':
     dependencies:
       sparse-bitfield: 3.0.3
@@ -6265,12 +6544,12 @@ snapshots:
       '@tailwindcss/oxide-win32-arm64-msvc': 4.3.2
       '@tailwindcss/oxide-win32-x64-msvc': 4.3.2
 
-  '@tailwindcss/vite@4.3.2(@voidzero-dev/vite-plus-core@0.2.9(@types/node@22.20.1)(jiti@2.7.0)(typescript@6.0.3)(yaml@2.9.0))':
+  '@tailwindcss/vite@4.3.2(@voidzero-dev/vite-plus-core@0.2.9(@types/node@22.20.1)(esbuild@0.28.2)(jiti@2.7.0)(typescript@6.0.3)(yaml@2.9.0))':
     dependencies:
       '@tailwindcss/node': 4.3.2
       '@tailwindcss/oxide': 4.3.2
       tailwindcss: 4.3.2
-      vite: '@voidzero-dev/vite-plus-core@0.2.9(@types/node@22.20.1)(jiti@2.7.0)(typescript@6.0.3)(yaml@2.9.0)'
+      vite: '@voidzero-dev/vite-plus-core@0.2.9(@types/node@22.20.1)(esbuild@0.28.2)(jiti@2.7.0)(typescript@6.0.3)(yaml@2.9.0)'
 
   '@tanstack/charts@1.1.0(react-dom@19.2.7(react@19.2.7))(react@19.2.7)':
     dependencies:
@@ -6351,14 +6630,14 @@ snapshots:
       react: 19.2.7
       react-dom: 19.2.7(react@19.2.7)
 
-  '@tanstack/react-start-rsc@0.1.26(@voidzero-dev/vite-plus-core@0.2.9(@types/node@22.20.1)(jiti@2.7.0)(typescript@6.0.3)(yaml@2.9.0))(crossws@0.4.9(srvx@0.11.21))(react-dom@19.2.7(react@19.2.7))(react@19.2.7)(rolldown@1.1.5)':
+  '@tanstack/react-start-rsc@0.1.26(@voidzero-dev/vite-plus-core@0.2.9(@types/node@22.20.1)(esbuild@0.28.2)(jiti@2.7.0)(typescript@6.0.3)(yaml@2.9.0))(crossws@0.4.9(srvx@0.11.21))(esbuild@0.28.2)(react-dom@19.2.7(react@19.2.7))(react@19.2.7)(rolldown@1.1.5)':
     dependencies:
       '@tanstack/react-router': 1.170.17(react-dom@19.2.7(react@19.2.7))(react@19.2.7)
       '@tanstack/router-core': 1.171.14
       '@tanstack/router-utils': 1.162.2
       '@tanstack/start-client-core': 1.170.13
       '@tanstack/start-fn-stubs': 1.162.0
-      '@tanstack/start-plugin-core': 1.171.19(@tanstack/react-router@1.170.17(react-dom@19.2.7(react@19.2.7))(react@19.2.7))(@voidzero-dev/vite-plus-core@0.2.9(@types/node@22.20.1)(jiti@2.7.0)(typescript@6.0.3)(yaml@2.9.0))(crossws@0.4.9(srvx@0.11.21))(rolldown@1.1.5)
+      '@tanstack/start-plugin-core': 1.171.19(@tanstack/react-router@1.170.17(react-dom@19.2.7(react@19.2.7))(react@19.2.7))(@voidzero-dev/vite-plus-core@0.2.9(@types/node@22.20.1)(esbuild@0.28.2)(jiti@2.7.0)(typescript@6.0.3)(yaml@2.9.0))(crossws@0.4.9(srvx@0.11.21))(esbuild@0.28.2)(rolldown@1.1.5)
       '@tanstack/start-server-core': 1.169.16(crossws@0.4.9(srvx@0.11.21))
       '@tanstack/start-storage-context': 1.167.16
       pathe: 2.0.3
@@ -6388,21 +6667,21 @@ snapshots:
     transitivePeerDependencies:
       - crossws
 
-  '@tanstack/react-start@1.168.27(@voidzero-dev/vite-plus-core@0.2.9(@types/node@22.20.1)(jiti@2.7.0)(typescript@6.0.3)(yaml@2.9.0))(crossws@0.4.9(srvx@0.11.21))(react-dom@19.2.7(react@19.2.7))(react@19.2.7)(rolldown@1.1.5)':
+  '@tanstack/react-start@1.168.27(@voidzero-dev/vite-plus-core@0.2.9(@types/node@22.20.1)(esbuild@0.28.2)(jiti@2.7.0)(typescript@6.0.3)(yaml@2.9.0))(crossws@0.4.9(srvx@0.11.21))(esbuild@0.28.2)(react-dom@19.2.7(react@19.2.7))(react@19.2.7)(rolldown@1.1.5)':
     dependencies:
       '@tanstack/react-router': 1.170.17(react-dom@19.2.7(react@19.2.7))(react@19.2.7)
       '@tanstack/react-start-client': 1.168.15(react-dom@19.2.7(react@19.2.7))(react@19.2.7)
-      '@tanstack/react-start-rsc': 0.1.26(@voidzero-dev/vite-plus-core@0.2.9(@types/node@22.20.1)(jiti@2.7.0)(typescript@6.0.3)(yaml@2.9.0))(crossws@0.4.9(srvx@0.11.21))(react-dom@19.2.7(react@19.2.7))(react@19.2.7)(rolldown@1.1.5)
+      '@tanstack/react-start-rsc': 0.1.26(@voidzero-dev/vite-plus-core@0.2.9(@types/node@22.20.1)(esbuild@0.28.2)(jiti@2.7.0)(typescript@6.0.3)(yaml@2.9.0))(crossws@0.4.9(srvx@0.11.21))(esbuild@0.28.2)(react-dom@19.2.7(react@19.2.7))(react@19.2.7)(rolldown@1.1.5)
       '@tanstack/react-start-server': 1.167.21(crossws@0.4.9(srvx@0.11.21))(react-dom@19.2.7(react@19.2.7))(react@19.2.7)
       '@tanstack/router-utils': 1.162.2
       '@tanstack/start-client-core': 1.170.13
-      '@tanstack/start-plugin-core': 1.171.19(@tanstack/react-router@1.170.17(react-dom@19.2.7(react@19.2.7))(react@19.2.7))(@voidzero-dev/vite-plus-core@0.2.9(@types/node@22.20.1)(jiti@2.7.0)(typescript@6.0.3)(yaml@2.9.0))(crossws@0.4.9(srvx@0.11.21))(rolldown@1.1.5)
+      '@tanstack/start-plugin-core': 1.171.19(@tanstack/react-router@1.170.17(react-dom@19.2.7(react@19.2.7))(react@19.2.7))(@voidzero-dev/vite-plus-core@0.2.9(@types/node@22.20.1)(esbuild@0.28.2)(jiti@2.7.0)(typescript@6.0.3)(yaml@2.9.0))(crossws@0.4.9(srvx@0.11.21))(esbuild@0.28.2)(rolldown@1.1.5)
       '@tanstack/start-server-core': 1.169.16(crossws@0.4.9(srvx@0.11.21))
       pathe: 2.0.3
       react: 19.2.7
       react-dom: 19.2.7(react@19.2.7)
     optionalDependencies:
-      vite: '@voidzero-dev/vite-plus-core@0.2.9(@types/node@22.20.1)(jiti@2.7.0)(typescript@6.0.3)(yaml@2.9.0)'
+      vite: '@voidzero-dev/vite-plus-core@0.2.9(@types/node@22.20.1)(esbuild@0.28.2)(jiti@2.7.0)(typescript@6.0.3)(yaml@2.9.0)'
     transitivePeerDependencies:
       - '@farmfe/core'
       - '@rspack/core'
@@ -6451,7 +6730,7 @@ snapshots:
     transitivePeerDependencies:
       - supports-color
 
-  '@tanstack/router-plugin@1.168.19(@tanstack/react-router@1.170.17(react-dom@19.2.7(react@19.2.7))(react@19.2.7))(@voidzero-dev/vite-plus-core@0.2.9(@types/node@22.20.1)(jiti@2.7.0)(typescript@6.0.3)(yaml@2.9.0))(rolldown@1.1.5)':
+  '@tanstack/router-plugin@1.168.19(@tanstack/react-router@1.170.17(react-dom@19.2.7(react@19.2.7))(react@19.2.7))(@voidzero-dev/vite-plus-core@0.2.9(@types/node@22.20.1)(esbuild@0.28.2)(jiti@2.7.0)(typescript@6.0.3)(yaml@2.9.0))(esbuild@0.28.2)(rolldown@1.1.5)':
     dependencies:
       '@babel/core': 7.29.0
       '@babel/template': 7.29.7
@@ -6460,11 +6739,11 @@ snapshots:
       '@tanstack/router-generator': 1.167.18
       '@tanstack/router-utils': 1.162.2
       chokidar: 5.0.0
-      unplugin: 3.3.0(@voidzero-dev/vite-plus-core@0.2.9(@types/node@22.20.1)(jiti@2.7.0)(typescript@6.0.3)(yaml@2.9.0))(rolldown@1.1.5)
+      unplugin: 3.3.0(@voidzero-dev/vite-plus-core@0.2.9(@types/node@22.20.1)(esbuild@0.28.2)(jiti@2.7.0)(typescript@6.0.3)(yaml@2.9.0))(esbuild@0.28.2)(rolldown@1.1.5)
       zod: 4.4.3
     optionalDependencies:
       '@tanstack/react-router': 1.170.17(react-dom@19.2.7(react@19.2.7))(react@19.2.7)
-      vite: '@voidzero-dev/vite-plus-core@0.2.9(@types/node@22.20.1)(jiti@2.7.0)(typescript@6.0.3)(yaml@2.9.0)'
+      vite: '@voidzero-dev/vite-plus-core@0.2.9(@types/node@22.20.1)(esbuild@0.28.2)(jiti@2.7.0)(typescript@6.0.3)(yaml@2.9.0)'
     transitivePeerDependencies:
       - '@farmfe/core'
       - '@rspack/core'
@@ -6497,14 +6776,14 @@ snapshots:
 
   '@tanstack/start-fn-stubs@1.162.0': {}
 
-  '@tanstack/start-plugin-core@1.171.19(@tanstack/react-router@1.170.17(react-dom@19.2.7(react@19.2.7))(react@19.2.7))(@voidzero-dev/vite-plus-core@0.2.9(@types/node@22.20.1)(jiti@2.7.0)(typescript@6.0.3)(yaml@2.9.0))(crossws@0.4.9(srvx@0.11.21))(rolldown@1.1.5)':
+  '@tanstack/start-plugin-core@1.171.19(@tanstack/react-router@1.170.17(react-dom@19.2.7(react@19.2.7))(react@19.2.7))(@voidzero-dev/vite-plus-core@0.2.9(@types/node@22.20.1)(esbuild@0.28.2)(jiti@2.7.0)(typescript@6.0.3)(yaml@2.9.0))(crossws@0.4.9(srvx@0.11.21))(esbuild@0.28.2)(rolldown@1.1.5)':
     dependencies:
       '@babel/code-frame': 7.27.1
       '@babel/core': 7.29.0
       '@babel/types': 7.29.7
       '@tanstack/router-core': 1.171.14
       '@tanstack/router-generator': 1.167.18
-      '@tanstack/router-plugin': 1.168.19(@tanstack/react-router@1.170.17(react-dom@19.2.7(react@19.2.7))(react@19.2.7))(@voidzero-dev/vite-plus-core@0.2.9(@types/node@22.20.1)(jiti@2.7.0)(typescript@6.0.3)(yaml@2.9.0))(rolldown@1.1.5)
+      '@tanstack/router-plugin': 1.168.19(@tanstack/react-router@1.170.17(react-dom@19.2.7(react@19.2.7))(react@19.2.7))(@voidzero-dev/vite-plus-core@0.2.9(@types/node@22.20.1)(esbuild@0.28.2)(jiti@2.7.0)(typescript@6.0.3)(yaml@2.9.0))(esbuild@0.28.2)(rolldown@1.1.5)
       '@tanstack/router-utils': 1.162.2
       '@tanstack/start-server-core': 1.169.16(crossws@0.4.9(srvx@0.11.21))
       exsolve: 1.1.0
@@ -6516,11 +6795,11 @@ snapshots:
       srvx: 0.11.21
       tinyglobby: 0.2.17
       ufo: 1.6.4
-      vitefu: 1.1.3(@voidzero-dev/vite-plus-core@0.2.9(@types/node@22.20.1)(jiti@2.7.0)(typescript@6.0.3)(yaml@2.9.0))
+      vitefu: 1.1.3(@voidzero-dev/vite-plus-core@0.2.9(@types/node@22.20.1)(esbuild@0.28.2)(jiti@2.7.0)(typescript@6.0.3)(yaml@2.9.0))
       xmlbuilder2: 4.0.3
       zod: 4.4.3
     optionalDependencies:
-      vite: '@voidzero-dev/vite-plus-core@0.2.9(@types/node@22.20.1)(jiti@2.7.0)(typescript@6.0.3)(yaml@2.9.0)'
+      vite: '@voidzero-dev/vite-plus-core@0.2.9(@types/node@22.20.1)(esbuild@0.28.2)(jiti@2.7.0)(typescript@6.0.3)(yaml@2.9.0)'
     transitivePeerDependencies:
       - '@farmfe/core'
       - '@rspack/core'
@@ -6748,35 +7027,35 @@ snapshots:
       '@typescript-eslint/types': 8.67.0
       eslint-visitor-keys: 5.0.1
 
-  '@vitejs/plugin-react@6.0.3(@voidzero-dev/vite-plus-core@0.2.9(@types/node@22.20.1)(jiti@2.7.0)(typescript@6.0.3)(yaml@2.9.0))(babel-plugin-react-compiler@1.0.0)':
+  '@vitejs/plugin-react@6.0.3(@voidzero-dev/vite-plus-core@0.2.9(@types/node@22.20.1)(esbuild@0.28.2)(jiti@2.7.0)(typescript@6.0.3)(yaml@2.9.0))(babel-plugin-react-compiler@1.0.0)':
     dependencies:
       '@rolldown/pluginutils': 1.0.1
-      vite: '@voidzero-dev/vite-plus-core@0.2.9(@types/node@22.20.1)(jiti@2.7.0)(typescript@6.0.3)(yaml@2.9.0)'
+      vite: '@voidzero-dev/vite-plus-core@0.2.9(@types/node@22.20.1)(esbuild@0.28.2)(jiti@2.7.0)(typescript@6.0.3)(yaml@2.9.0)'
     optionalDependencies:
       babel-plugin-react-compiler: 1.0.0
 
-  '@vitest/browser-preview@4.1.10(@voidzero-dev/vite-plus-core@0.2.9(@types/node@22.20.1)(jiti@2.7.0)(typescript@6.0.3)(yaml@2.9.0))(vitest@4.1.10)':
+  '@vitest/browser-preview@4.1.10(@voidzero-dev/vite-plus-core@0.2.9(@types/node@22.20.1)(esbuild@0.28.2)(jiti@2.7.0)(typescript@6.0.3)(yaml@2.9.0))(vitest@4.1.10)':
     dependencies:
       '@testing-library/dom': 10.4.1
       '@testing-library/user-event': 14.6.6(@testing-library/dom@10.4.1)
-      '@vitest/browser': 4.1.10(@voidzero-dev/vite-plus-core@0.2.9(@types/node@22.20.1)(jiti@2.7.0)(typescript@6.0.3)(yaml@2.9.0))(vitest@4.1.10)
-      vitest: 4.1.10(@types/node@22.20.1)(@vitest/browser-preview@4.1.10)(@voidzero-dev/vite-plus-core@0.2.9(@types/node@22.20.1)(jiti@2.7.0)(typescript@6.0.3)(yaml@2.9.0))
+      '@vitest/browser': 4.1.10(@voidzero-dev/vite-plus-core@0.2.9(@types/node@22.20.1)(esbuild@0.28.2)(jiti@2.7.0)(typescript@6.0.3)(yaml@2.9.0))(vitest@4.1.10)
+      vitest: 4.1.10(@types/node@22.20.1)(@vitest/browser-preview@4.1.10)(@voidzero-dev/vite-plus-core@0.2.9(@types/node@22.20.1)(esbuild@0.28.2)(jiti@2.7.0)(typescript@6.0.3)(yaml@2.9.0))
     transitivePeerDependencies:
       - bufferutil
       - msw
       - utf-8-validate
       - vite
 
-  '@vitest/browser@4.1.10(@voidzero-dev/vite-plus-core@0.2.9(@types/node@22.20.1)(jiti@2.7.0)(typescript@6.0.3)(yaml@2.9.0))(vitest@4.1.10)':
+  '@vitest/browser@4.1.10(@voidzero-dev/vite-plus-core@0.2.9(@types/node@22.20.1)(esbuild@0.28.2)(jiti@2.7.0)(typescript@6.0.3)(yaml@2.9.0))(vitest@4.1.10)':
     dependencies:
       '@blazediff/core': 1.9.1
-      '@vitest/mocker': 4.1.10(@voidzero-dev/vite-plus-core@0.2.9(@types/node@22.20.1)(jiti@2.7.0)(typescript@6.0.3)(yaml@2.9.0))
+      '@vitest/mocker': 4.1.10(@voidzero-dev/vite-plus-core@0.2.9(@types/node@22.20.1)(esbuild@0.28.2)(jiti@2.7.0)(typescript@6.0.3)(yaml@2.9.0))
       '@vitest/utils': 4.1.10
       magic-string: 0.30.21
       pngjs: 7.0.0
       sirv: 3.0.2
       tinyrainbow: 3.1.1
-      vitest: 4.1.10(@types/node@22.20.1)(@vitest/browser-preview@4.1.10)(@voidzero-dev/vite-plus-core@0.2.9(@types/node@22.20.1)(jiti@2.7.0)(typescript@6.0.3)(yaml@2.9.0))
+      vitest: 4.1.10(@types/node@22.20.1)(@vitest/browser-preview@4.1.10)(@voidzero-dev/vite-plus-core@0.2.9(@types/node@22.20.1)(esbuild@0.28.2)(jiti@2.7.0)(typescript@6.0.3)(yaml@2.9.0))
       ws: 8.21.3
     transitivePeerDependencies:
       - bufferutil
@@ -6793,13 +7072,13 @@ snapshots:
       chai: 6.2.2
       tinyrainbow: 3.1.1
 
-  '@vitest/mocker@4.1.10(@voidzero-dev/vite-plus-core@0.2.9(@types/node@22.20.1)(jiti@2.7.0)(typescript@6.0.3)(yaml@2.9.0))':
+  '@vitest/mocker@4.1.10(@voidzero-dev/vite-plus-core@0.2.9(@types/node@22.20.1)(esbuild@0.28.2)(jiti@2.7.0)(typescript@6.0.3)(yaml@2.9.0))':
     dependencies:
       '@vitest/spy': 4.1.10
       estree-walker: 3.0.3
       magic-string: 0.30.21
     optionalDependencies:
-      vite: '@voidzero-dev/vite-plus-core@0.2.9(@types/node@22.20.1)(jiti@2.7.0)(typescript@6.0.3)(yaml@2.9.0)'
+      vite: '@voidzero-dev/vite-plus-core@0.2.9(@types/node@22.20.1)(esbuild@0.28.2)(jiti@2.7.0)(typescript@6.0.3)(yaml@2.9.0)'
 
   '@vitest/pretty-format@4.1.10':
     dependencies:
@@ -6825,7 +7104,7 @@ snapshots:
       convert-source-map: 2.0.0
       tinyrainbow: 3.1.1
 
-  '@voidzero-dev/vite-plus-core@0.2.9(@types/node@22.20.1)(jiti@2.7.0)(typescript@6.0.3)(yaml@2.9.0)':
+  '@voidzero-dev/vite-plus-core@0.2.9(@types/node@22.20.1)(esbuild@0.28.2)(jiti@2.7.0)(typescript@6.0.3)(yaml@2.9.0)':
     dependencies:
       '@oxc-project/runtime': 0.143.0
       '@oxc-project/types': 0.143.0
@@ -6843,6 +7122,7 @@ snapshots:
       '@voidzero-dev/vite-plus-linux-x64-musl': 0.2.9
       '@voidzero-dev/vite-plus-win32-arm64-msvc': 0.2.9
       '@voidzero-dev/vite-plus-win32-x64-msvc': 0.2.9
+      esbuild: 0.28.2
       fsevents: 2.3.3
       jiti: 2.7.0
       typescript: 6.0.3
@@ -6940,9 +7220,9 @@ snapshots:
 
   '@yuku-toolchain/types@0.5.43': {}
 
-  '@zap-studio/oxlint@2.2.1(@oxlint/plugins@1.79.0)(@testing-library/dom@10.4.1)(@typescript-eslint/parser@8.67.0(eslint@10.9.0(jiti@2.7.0))(typescript@6.0.3))(eslint@10.9.0(jiti@2.7.0))(oxlint-tsgolint@7.0.2001)(oxlint@1.79.0(oxlint-tsgolint@7.0.2001)(vite-plus@0.2.9(@types/node@22.20.1)(@voidzero-dev/vite-plus-core@0.2.9(@types/node@22.20.1)(jiti@2.7.0)(typescript@6.0.3)(yaml@2.9.0))(jiti@2.7.0)(typescript@6.0.3)(yaml@2.9.0)))(tailwindcss@4.3.2)(typescript@6.0.3)':
+  '@zap-studio/oxlint@2.2.1(@oxlint/plugins@1.79.0)(@testing-library/dom@10.4.1)(@typescript-eslint/parser@8.67.0(eslint@10.9.0(jiti@2.7.0))(typescript@6.0.3))(eslint@10.9.0(jiti@2.7.0))(oxlint-tsgolint@7.0.2001)(oxlint@1.79.0(oxlint-tsgolint@7.0.2001)(vite-plus@0.2.9(@types/node@22.20.1)(@voidzero-dev/vite-plus-core@0.2.9(@types/node@22.20.1)(esbuild@0.28.2)(jiti@2.7.0)(typescript@6.0.3)(yaml@2.9.0))(esbuild@0.28.2)(jiti@2.7.0)(typescript@6.0.3)(yaml@2.9.0)))(tailwindcss@4.3.2)(typescript@6.0.3)':
     dependencies:
-      '@e18e/eslint-plugin': 0.8.0(eslint@10.9.0(jiti@2.7.0))(oxlint@1.79.0(oxlint-tsgolint@7.0.2001)(vite-plus@0.2.9(@types/node@22.20.1)(@voidzero-dev/vite-plus-core@0.2.9(@types/node@22.20.1)(jiti@2.7.0)(typescript@6.0.3)(yaml@2.9.0))(jiti@2.7.0)(typescript@6.0.3)(yaml@2.9.0)))
+      '@e18e/eslint-plugin': 0.8.0(eslint@10.9.0(jiti@2.7.0))(oxlint@1.79.0(oxlint-tsgolint@7.0.2001)(vite-plus@0.2.9(@types/node@22.20.1)(@voidzero-dev/vite-plus-core@0.2.9(@types/node@22.20.1)(esbuild@0.28.2)(jiti@2.7.0)(typescript@6.0.3)(yaml@2.9.0))(esbuild@0.28.2)(jiti@2.7.0)(typescript@6.0.3)(yaml@2.9.0)))
       '@oxlint/plugins': 1.79.0
       '@stylexjs/eslint-plugin': 0.19.0
       '@tanstack/eslint-plugin-query': 5.102.1(eslint@10.9.0(jiti@2.7.0))(typescript@6.0.3)
@@ -6957,7 +7237,7 @@ snapshots:
       eslint-plugin-storybook: 10.5.10(eslint@10.9.0(jiti@2.7.0))(typescript@6.0.3)
       eslint-plugin-tailwindcss: 4.4.0(eslint@10.9.0(jiti@2.7.0))(tailwindcss@4.3.2)(typescript@6.0.3)
       eslint-plugin-testing-library: 7.16.2(eslint@10.9.0(jiti@2.7.0))(typescript@6.0.3)
-      oxlint: 1.79.0(oxlint-tsgolint@7.0.2001)(vite-plus@0.2.9(@types/node@22.20.1)(@voidzero-dev/vite-plus-core@0.2.9(@types/node@22.20.1)(jiti@2.7.0)(typescript@6.0.3)(yaml@2.9.0))(jiti@2.7.0)(typescript@6.0.3)(yaml@2.9.0))
+      oxlint: 1.79.0(oxlint-tsgolint@7.0.2001)(vite-plus@0.2.9(@types/node@22.20.1)(@voidzero-dev/vite-plus-core@0.2.9(@types/node@22.20.1)(esbuild@0.28.2)(jiti@2.7.0)(typescript@6.0.3)(yaml@2.9.0))(esbuild@0.28.2)(jiti@2.7.0)(typescript@6.0.3)(yaml@2.9.0))
       oxlint-plugin-react-doctor: 0.9.12
       oxlint-tsgolint: 7.0.2001
     transitivePeerDependencies:
@@ -7627,6 +7907,35 @@ snapshots:
       is-date-object: 1.1.0
       is-symbol: 1.1.1
 
+  esbuild@0.28.2:
+    optionalDependencies:
+      '@esbuild/aix-ppc64': 0.28.2
+      '@esbuild/android-arm': 0.28.2
+      '@esbuild/android-arm64': 0.28.2
+      '@esbuild/android-x64': 0.28.2
+      '@esbuild/darwin-arm64': 0.28.2
+      '@esbuild/darwin-x64': 0.28.2
+      '@esbuild/freebsd-arm64': 0.28.2
+      '@esbuild/freebsd-x64': 0.28.2
+      '@esbuild/linux-arm': 0.28.2
+      '@esbuild/linux-arm64': 0.28.2
+      '@esbuild/linux-ia32': 0.28.2
+      '@esbuild/linux-loong64': 0.28.2
+      '@esbuild/linux-mips64el': 0.28.2
+      '@esbuild/linux-ppc64': 0.28.2
+      '@esbuild/linux-riscv64': 0.28.2
+      '@esbuild/linux-s390x': 0.28.2
+      '@esbuild/linux-x64': 0.28.2
+      '@esbuild/netbsd-arm64': 0.28.2
+      '@esbuild/netbsd-x64': 0.28.2
+      '@esbuild/openbsd-arm64': 0.28.2
+      '@esbuild/openbsd-x64': 0.28.2
+      '@esbuild/openharmony-arm64': 0.28.2
+      '@esbuild/sunos-x64': 0.28.2
+      '@esbuild/win32-arm64': 0.28.2
+      '@esbuild/win32-ia32': 0.28.2
+      '@esbuild/win32-x64': 0.28.2
+
   escalade@3.2.0: {}
 
   escape-html@1.0.3: {}
@@ -8762,7 +9071,7 @@ snapshots:
 
   nf3@0.3.21: {}
 
-  nitro@3.0.260610-beta(@voidzero-dev/vite-plus-core@0.2.9(@types/node@22.20.1)(jiti@2.7.0)(typescript@6.0.3)(yaml@2.9.0))(chokidar@5.0.0)(dotenv@17.4.2)(jiti@2.7.0)(mongodb@7.1.0):
+  nitro@3.0.260610-beta(@voidzero-dev/vite-plus-core@0.2.9(@types/node@22.20.1)(esbuild@0.28.2)(jiti@2.7.0)(typescript@6.0.3)(yaml@2.9.0))(chokidar@5.0.0)(dotenv@17.4.2)(jiti@2.7.0)(mongodb@7.1.0):
     dependencies:
       consola: 3.4.2
       crossws: 0.4.9(srvx@0.11.21)
@@ -8781,7 +9090,7 @@ snapshots:
     optionalDependencies:
       dotenv: 17.4.2
       jiti: 2.7.0
-      vite: '@voidzero-dev/vite-plus-core@0.2.9(@types/node@22.20.1)(jiti@2.7.0)(typescript@6.0.3)(yaml@2.9.0)'
+      vite: '@voidzero-dev/vite-plus-core@0.2.9(@types/node@22.20.1)(esbuild@0.28.2)(jiti@2.7.0)(typescript@6.0.3)(yaml@2.9.0)'
     transitivePeerDependencies:
       - '@azure/app-configuration'
       - '@azure/cosmos'
@@ -8976,7 +9285,7 @@ snapshots:
       '@oxc-parser/binding-win32-ia32-msvc': 0.143.0
       '@oxc-parser/binding-win32-x64-msvc': 0.143.0
 
-  oxfmt@0.62.0(vite-plus@0.2.9(@types/node@22.20.1)(@voidzero-dev/vite-plus-core@0.2.9(@types/node@22.20.1)(jiti@2.7.0)(typescript@6.0.3)(yaml@2.9.0))(jiti@2.7.0)(typescript@6.0.3)(yaml@2.9.0)):
+  oxfmt@0.62.0(vite-plus@0.2.9(@types/node@22.20.1)(@voidzero-dev/vite-plus-core@0.2.9(@types/node@22.20.1)(esbuild@0.28.2)(jiti@2.7.0)(typescript@6.0.3)(yaml@2.9.0))(esbuild@0.28.2)(jiti@2.7.0)(typescript@6.0.3)(yaml@2.9.0)):
     dependencies:
       tinypool: 2.1.0
     optionalDependencies:
@@ -8999,7 +9308,7 @@ snapshots:
       '@oxfmt/binding-win32-arm64-msvc': 0.62.0
       '@oxfmt/binding-win32-ia32-msvc': 0.62.0
       '@oxfmt/binding-win32-x64-msvc': 0.62.0
-      vite-plus: 0.2.9(@types/node@22.20.1)(@voidzero-dev/vite-plus-core@0.2.9(@types/node@22.20.1)(jiti@2.7.0)(typescript@6.0.3)(yaml@2.9.0))(jiti@2.7.0)(typescript@6.0.3)(yaml@2.9.0)
+      vite-plus: 0.2.9(@types/node@22.20.1)(@voidzero-dev/vite-plus-core@0.2.9(@types/node@22.20.1)(esbuild@0.28.2)(jiti@2.7.0)(typescript@6.0.3)(yaml@2.9.0))(esbuild@0.28.2)(jiti@2.7.0)(typescript@6.0.3)(yaml@2.9.0)
 
   oxlint-plugin-react-doctor@0.9.12:
     dependencies:
@@ -9019,7 +9328,7 @@ snapshots:
       '@oxlint-tsgolint/win32-arm64': 7.0.2001
       '@oxlint-tsgolint/win32-x64': 7.0.2001
 
-  oxlint@1.79.0(oxlint-tsgolint@7.0.2001)(vite-plus@0.2.9(@types/node@22.20.1)(@voidzero-dev/vite-plus-core@0.2.9(@types/node@22.20.1)(jiti@2.7.0)(typescript@6.0.3)(yaml@2.9.0))(jiti@2.7.0)(typescript@6.0.3)(yaml@2.9.0)):
+  oxlint@1.79.0(oxlint-tsgolint@7.0.2001)(vite-plus@0.2.9(@types/node@22.20.1)(@voidzero-dev/vite-plus-core@0.2.9(@types/node@22.20.1)(esbuild@0.28.2)(jiti@2.7.0)(typescript@6.0.3)(yaml@2.9.0))(esbuild@0.28.2)(jiti@2.7.0)(typescript@6.0.3)(yaml@2.9.0)):
     optionalDependencies:
       '@oxlint/binding-android-arm-eabi': 1.79.0
       '@oxlint/binding-android-arm64': 1.79.0
@@ -9041,7 +9350,7 @@ snapshots:
       '@oxlint/binding-win32-ia32-msvc': 1.79.0
       '@oxlint/binding-win32-x64-msvc': 1.79.0
       oxlint-tsgolint: 7.0.2001
-      vite-plus: 0.2.9(@types/node@22.20.1)(@voidzero-dev/vite-plus-core@0.2.9(@types/node@22.20.1)(jiti@2.7.0)(typescript@6.0.3)(yaml@2.9.0))(jiti@2.7.0)(typescript@6.0.3)(yaml@2.9.0)
+      vite-plus: 0.2.9(@types/node@22.20.1)(@voidzero-dev/vite-plus-core@0.2.9(@types/node@22.20.1)(esbuild@0.28.2)(jiti@2.7.0)(typescript@6.0.3)(yaml@2.9.0))(esbuild@0.28.2)(jiti@2.7.0)(typescript@6.0.3)(yaml@2.9.0)
 
   p-limit@2.3.0:
     dependencies:
@@ -9784,14 +10093,15 @@ snapshots:
 
   unpipe@1.0.0: {}
 
-  unplugin@3.3.0(@voidzero-dev/vite-plus-core@0.2.9(@types/node@22.20.1)(jiti@2.7.0)(typescript@6.0.3)(yaml@2.9.0))(rolldown@1.1.5):
+  unplugin@3.3.0(@voidzero-dev/vite-plus-core@0.2.9(@types/node@22.20.1)(esbuild@0.28.2)(jiti@2.7.0)(typescript@6.0.3)(yaml@2.9.0))(esbuild@0.28.2)(rolldown@1.1.5):
     dependencies:
       '@jridgewell/remapping': 2.3.5
       picomatch: 4.0.5
       webpack-virtual-modules: 0.6.2
     optionalDependencies:
+      esbuild: 0.28.2
       rolldown: 1.1.5
-      vite: '@voidzero-dev/vite-plus-core@0.2.9(@types/node@22.20.1)(jiti@2.7.0)(typescript@6.0.3)(yaml@2.9.0)'
+      vite: '@voidzero-dev/vite-plus-core@0.2.9(@types/node@22.20.1)(esbuild@0.28.2)(jiti@2.7.0)(typescript@6.0.3)(yaml@2.9.0)'
 
   unstorage@2.0.0-alpha.7(chokidar@5.0.0)(db0@0.3.4)(mongodb@7.1.0)(ofetch@2.0.0-alpha.3):
     optionalDependencies:
@@ -9835,24 +10145,24 @@ snapshots:
 
   vary@1.1.2: {}
 
-  vite-plus@0.2.9(@types/node@22.20.1)(@voidzero-dev/vite-plus-core@0.2.9(@types/node@22.20.1)(jiti@2.7.0)(typescript@6.0.3)(yaml@2.9.0))(jiti@2.7.0)(typescript@6.0.3)(yaml@2.9.0):
+  vite-plus@0.2.9(@types/node@22.20.1)(@voidzero-dev/vite-plus-core@0.2.9(@types/node@22.20.1)(esbuild@0.28.2)(jiti@2.7.0)(typescript@6.0.3)(yaml@2.9.0))(esbuild@0.28.2)(jiti@2.7.0)(typescript@6.0.3)(yaml@2.9.0):
     dependencies:
       '@oxc-project/types': 0.143.0
       '@oxlint/plugins': 1.79.0
-      '@vitest/browser': 4.1.10(@voidzero-dev/vite-plus-core@0.2.9(@types/node@22.20.1)(jiti@2.7.0)(typescript@6.0.3)(yaml@2.9.0))(vitest@4.1.10)
-      '@vitest/browser-preview': 4.1.10(@voidzero-dev/vite-plus-core@0.2.9(@types/node@22.20.1)(jiti@2.7.0)(typescript@6.0.3)(yaml@2.9.0))(vitest@4.1.10)
+      '@vitest/browser': 4.1.10(@voidzero-dev/vite-plus-core@0.2.9(@types/node@22.20.1)(esbuild@0.28.2)(jiti@2.7.0)(typescript@6.0.3)(yaml@2.9.0))(vitest@4.1.10)
+      '@vitest/browser-preview': 4.1.10(@voidzero-dev/vite-plus-core@0.2.9(@types/node@22.20.1)(esbuild@0.28.2)(jiti@2.7.0)(typescript@6.0.3)(yaml@2.9.0))(vitest@4.1.10)
       '@vitest/expect': 4.1.10
-      '@vitest/mocker': 4.1.10(@voidzero-dev/vite-plus-core@0.2.9(@types/node@22.20.1)(jiti@2.7.0)(typescript@6.0.3)(yaml@2.9.0))
+      '@vitest/mocker': 4.1.10(@voidzero-dev/vite-plus-core@0.2.9(@types/node@22.20.1)(esbuild@0.28.2)(jiti@2.7.0)(typescript@6.0.3)(yaml@2.9.0))
       '@vitest/pretty-format': 4.1.10
       '@vitest/runner': 4.1.10
       '@vitest/snapshot': 4.1.10
       '@vitest/spy': 4.1.10
       '@vitest/utils': 4.1.10
-      '@voidzero-dev/vite-plus-core': 0.2.9(@types/node@22.20.1)(jiti@2.7.0)(typescript@6.0.3)(yaml@2.9.0)
-      oxfmt: 0.62.0(vite-plus@0.2.9(@types/node@22.20.1)(@voidzero-dev/vite-plus-core@0.2.9(@types/node@22.20.1)(jiti@2.7.0)(typescript@6.0.3)(yaml@2.9.0))(jiti@2.7.0)(typescript@6.0.3)(yaml@2.9.0))
-      oxlint: 1.79.0(oxlint-tsgolint@7.0.2001)(vite-plus@0.2.9(@types/node@22.20.1)(@voidzero-dev/vite-plus-core@0.2.9(@types/node@22.20.1)(jiti@2.7.0)(typescript@6.0.3)(yaml@2.9.0))(jiti@2.7.0)(typescript@6.0.3)(yaml@2.9.0))
+      '@voidzero-dev/vite-plus-core': 0.2.9(@types/node@22.20.1)(esbuild@0.28.2)(jiti@2.7.0)(typescript@6.0.3)(yaml@2.9.0)
+      oxfmt: 0.62.0(vite-plus@0.2.9(@types/node@22.20.1)(@voidzero-dev/vite-plus-core@0.2.9(@types/node@22.20.1)(esbuild@0.28.2)(jiti@2.7.0)(typescript@6.0.3)(yaml@2.9.0))(esbuild@0.28.2)(jiti@2.7.0)(typescript@6.0.3)(yaml@2.9.0))
+      oxlint: 1.79.0(oxlint-tsgolint@7.0.2001)(vite-plus@0.2.9(@types/node@22.20.1)(@voidzero-dev/vite-plus-core@0.2.9(@types/node@22.20.1)(esbuild@0.28.2)(jiti@2.7.0)(typescript@6.0.3)(yaml@2.9.0))(esbuild@0.28.2)(jiti@2.7.0)(typescript@6.0.3)(yaml@2.9.0))
       oxlint-tsgolint: 7.0.2001
-      vitest: 4.1.10(@types/node@22.20.1)(@vitest/browser-preview@4.1.10)(@voidzero-dev/vite-plus-core@0.2.9(@types/node@22.20.1)(jiti@2.7.0)(typescript@6.0.3)(yaml@2.9.0))
+      vitest: 4.1.10(@types/node@22.20.1)(@vitest/browser-preview@4.1.10)(@voidzero-dev/vite-plus-core@0.2.9(@types/node@22.20.1)(esbuild@0.28.2)(jiti@2.7.0)(typescript@6.0.3)(yaml@2.9.0))
     optionalDependencies:
       '@voidzero-dev/vite-plus-darwin-arm64': 0.2.9
       '@voidzero-dev/vite-plus-darwin-x64': 0.2.9
@@ -9893,14 +10203,14 @@ snapshots:
       - vite
       - yaml
 
-  vitefu@1.1.3(@voidzero-dev/vite-plus-core@0.2.9(@types/node@22.20.1)(jiti@2.7.0)(typescript@6.0.3)(yaml@2.9.0)):
+  vitefu@1.1.3(@voidzero-dev/vite-plus-core@0.2.9(@types/node@22.20.1)(esbuild@0.28.2)(jiti@2.7.0)(typescript@6.0.3)(yaml@2.9.0)):
     optionalDependencies:
-      vite: '@voidzero-dev/vite-plus-core@0.2.9(@types/node@22.20.1)(jiti@2.7.0)(typescript@6.0.3)(yaml@2.9.0)'
+      vite: '@voidzero-dev/vite-plus-core@0.2.9(@types/node@22.20.1)(esbuild@0.28.2)(jiti@2.7.0)(typescript@6.0.3)(yaml@2.9.0)'
 
-  vitest@4.1.10(@types/node@22.20.1)(@vitest/browser-preview@4.1.10)(@voidzero-dev/vite-plus-core@0.2.9(@types/node@22.20.1)(jiti@2.7.0)(typescript@6.0.3)(yaml@2.9.0)):
+  vitest@4.1.10(@types/node@22.20.1)(@vitest/browser-preview@4.1.10)(@voidzero-dev/vite-plus-core@0.2.9(@types/node@22.20.1)(esbuild@0.28.2)(jiti@2.7.0)(typescript@6.0.3)(yaml@2.9.0)):
     dependencies:
       '@vitest/expect': 4.1.10
-      '@vitest/mocker': 4.1.10(@voidzero-dev/vite-plus-core@0.2.9(@types/node@22.20.1)(jiti@2.7.0)(typescript@6.0.3)(yaml@2.9.0))
+      '@vitest/mocker': 4.1.10(@voidzero-dev/vite-plus-core@0.2.9(@types/node@22.20.1)(esbuild@0.28.2)(jiti@2.7.0)(typescript@6.0.3)(yaml@2.9.0))
       '@vitest/pretty-format': 4.1.10
       '@vitest/runner': 4.1.10
       '@vitest/snapshot': 4.1.10
@@ -9917,11 +10227,11 @@ snapshots:
       tinyexec: 1.3.0
       tinyglobby: 0.2.17
       tinyrainbow: 3.1.1
-      vite: '@voidzero-dev/vite-plus-core@0.2.9(@types/node@22.20.1)(jiti@2.7.0)(typescript@6.0.3)(yaml@2.9.0)'
+      vite: '@voidzero-dev/vite-plus-core@0.2.9(@types/node@22.20.1)(esbuild@0.28.2)(jiti@2.7.0)(typescript@6.0.3)(yaml@2.9.0)'
       why-is-node-running: 2.3.0
     optionalDependencies:
       '@types/node': 22.20.1
-      '@vitest/browser-preview': 4.1.10(@voidzero-dev/vite-plus-core@0.2.9(@types/node@22.20.1)(jiti@2.7.0)(typescript@6.0.3)(yaml@2.9.0))(vitest@4.1.10)
+      '@vitest/browser-preview': 4.1.10(@voidzero-dev/vite-plus-core@0.2.9(@types/node@22.20.1)(esbuild@0.28.2)(jiti@2.7.0)(typescript@6.0.3)(yaml@2.9.0))(vitest@4.1.10)
     transitivePeerDependencies:
       - msw
 
diff --git a/scripts/build-mcp.mjs b/scripts/build-mcp.mjs
new file mode 100644
index 00000000..08b6e6ac
--- /dev/null
+++ b/scripts/build-mcp.mjs
@@ -0,0 +1,61 @@
+import { execFileSync } from "node:child_process"
+import { createHash } from "node:crypto"
+import { chmod, copyFile, mkdir, readFile, writeFile } from "node:fs/promises"
+
+import { build } from "esbuild"
+
+const destination = new URL("../dist/admin-mcp/", import.meta.url)
+await mkdir(destination, { recursive: true })
+await build({
+  entryPoints: ["src/mcp/cli.ts"],
+  outfile: new URL("cli.mjs", destination).pathname,
+  bundle: true,
+  platform: "node",
+  format: "esm",
+  target: "node22",
+  banner: {
+    js: 'import { createRequire as __mcpCreateRequire } from "node:module"; const require = __mcpCreateRequire(import.meta.url);',
+  },
+  legalComments: "linked",
+  logLevel: "warning",
+})
+await chmod(new URL("cli.mjs", destination), 0o755)
+await writeFile(
+  new URL("package.json", destination),
+  `${JSON.stringify(
+    {
+      name: "@polinetwork/admin-mcp",
+      version: "0.1.0",
+      description: "PoliNetwork Admin tools with the signed-in user's dashboard permissions",
+      type: "module",
+      bin: { "polinetwork-admin-mcp": "cli.mjs" },
+      engines: { node: ">=22" },
+      files: ["cli.mjs", "cli.mjs.LEGAL.txt", "README.md"],
+      license: "UNLICENSED",
+      repository: { type: "git", url: "https://github.com/PoliNetworkOrg/admin.git" },
+    },
+    null,
+    2
+  )}\n`
+)
+await copyFile("docs/mcp.md", new URL("README.md", destination))
+const downloads = new URL("../public/downloads/", import.meta.url)
+await mkdir(downloads, { recursive: true })
+// npm pack only packages this generated directory, never the workspace or its .env files.
+const packages = JSON.parse(
+  execFileSync("npm", ["pack", "--json", "--ignore-scripts", "--pack-destination", downloads.pathname], {
+    cwd: destination,
+    encoding: "utf8",
+  })
+)
+// npm 11+ keys its JSON result by package name; earlier versions return an array.
+const packed = Object.values(packages)[0]
+if (!packed?.filename) throw new Error("npm pack did not return an archive filename.")
+const archive = new URL("polinetwork-admin-mcp.tgz", downloads)
+await copyFile(new URL(packed.filename, downloads), archive)
+const bytes = await readFile(archive)
+await writeFile(
+  new URL("polinetwork-admin-mcp.tgz.sha256", downloads),
+  `${createHash("sha256").update(bytes).digest("hex")}  polinetwork-admin-mcp.tgz\n`
+)
+console.error(`Built public admin MCP download (${Math.round(bytes.length / 1024)} KB).`)
diff --git a/src/features/account/account-page.tsx b/src/features/account/account-page.tsx
index 43acce4c..03743374 100644
--- a/src/features/account/account-page.tsx
+++ b/src/features/account/account-page.tsx
@@ -1,5 +1,6 @@
 import {
   Cloud,
+  Download,
   ExternalLink,
   Globe,
   Info,
@@ -21,6 +22,7 @@ import { PageBar, PageContent, useSignOut } from "@/components/shell"
 import { Avatar, AvatarFallback, AvatarImage } from "@/components/ui/avatar"
 import { Button } from "@/components/ui/button"
 import type { DashboardUser } from "@/lib/auth"
+import { MCP_DOWNLOAD } from "@/mcp/protocol"
 
 type AccountPageProps = {
   user: DashboardUser
@@ -39,6 +41,7 @@ export function AccountPage({ user, permissions, accountUrl }: AccountPageProps)
           <div className="flex flex-col gap-6">
             <ProfileCard user={user} accountUrl={accountUrl} />
             <TelegramCard telegramId={user.telegramId} accountUrl={accountUrl} />
+            <McpCard />
             <PermissionsCard permissions={permissions} />
           </div>
           <SignOutCard />
@@ -48,6 +51,34 @@ export function AccountPage({ user, permissions, accountUrl }: AccountPageProps)
   )
 }
 
+function McpCard() {
+  return (
+    <SectionCard
+      title="AI agents"
+      padding="settings"
+      action={
+        <Button variant="outline" size="sm" nativeButton={false} render={<a href={MCP_DOWNLOAD} download />}>
+          <Download aria-hidden data-icon="inline-start" />
+          Download MCP
+        </Button>
+      }
+    >
+      <div className="flex flex-col gap-4">
+        <p className="text-sm text-(--pn-fg-muted)">
+          Connect a local AI agent to the dashboard with your account and permissions. Requires Node.js 22 or newer.
+        </p>
+        <pre className="overflow-x-auto rounded-md border border-(--pn-line) p-3 font-mono text-xs leading-6">
+          {"npm install -g ./polinetwork-admin-mcp.tgz\npolinetwork-admin-mcp login"}
+        </pre>
+        <p className="text-xs text-(--pn-fg-muted)">
+          Then configure your agent to run <code className="font-mono">polinetwork-admin-mcp serve</code>. Installation
+          instructions are included in the download.
+        </p>
+      </div>
+    </SectionCard>
+  )
+}
+
 function IdpLink({ href, children }: { href: string; children: string }) {
   return (
     <Button
diff --git a/src/mcp/auth.ts b/src/mcp/auth.ts
new file mode 100644
index 00000000..48ebf134
--- /dev/null
+++ b/src/mcp/auth.ts
@@ -0,0 +1,266 @@
+import { createHash, randomUUID } from "node:crypto"
+import { chmod, lstat, mkdir, open, readFile, rename, rm } from "node:fs/promises"
+import { createServer } from "node:http"
+import { homedir } from "node:os"
+import { dirname, join } from "node:path"
+import { setTimeout as delay } from "node:timers/promises"
+
+import * as oidc from "openid-client"
+import { z } from "zod"
+
+import { MCP_CALLBACK, mcpConfigSchema, type McpConfig, publicOrigin, signerProfileSchema } from "./protocol"
+
+const storedSchema = z.object({
+  origin: z.string(),
+  config: mcpConfigSchema,
+  accessToken: z.string().min(1),
+  refreshToken: z.string().min(1),
+  expiresAt: z.number(),
+  sub: z.string().min(1),
+  profile: signerProfileSchema,
+  /** Written before refreshing: an interrupted refresh must never replay a rotating refresh token. */
+  refreshing: z.boolean().default(false),
+})
+type StoredSession = z.infer<typeof storedSchema>
+
+async function configuration(config: McpConfig) {
+  const issuer = new URL(config.issuer)
+  publicOrigin(issuer.origin)
+  return oidc.discovery(issuer, config.clientId, { token_endpoint_auth_method: "none" }, oidc.None(), {
+    execute:
+      issuer.protocol === "http:"
+        ? [oidc.allowInsecureRequests, oidc.enableNonRepudiationChecks]
+        : [oidc.enableNonRepudiationChecks],
+    timeout: 10,
+  })
+}
+
+/** This public, downloadable native client has no client secret or dashboard session. */
+export class AdminMcpAuth {
+  readonly origin: string
+  readonly file: string
+  private pendingToken: Promise<string> | null = null
+
+  constructor(origin: string, directory = join(homedir(), ".polinetwork", "admin-mcp")) {
+    this.origin = publicOrigin(origin)
+    const key = createHash("sha256").update(this.origin).digest("hex").slice(0, 24)
+    this.file = join(directory, `${key}.json`)
+  }
+
+  private async lock(waitMs = 0) {
+    const directory = dirname(this.file)
+    await mkdir(directory, { recursive: true, mode: 0o700 })
+    const stat = await lstat(directory)
+    if (!stat.isDirectory() || stat.isSymbolicLink())
+      throw new Error("The credential directory must be a real directory.")
+    await chmod(directory, 0o700)
+    const deadline = Date.now() + waitMs
+    for (;;) {
+      try {
+        await mkdir(`${this.file}.lock`, { mode: 0o700 })
+        break
+      } catch (error) {
+        const remaining = deadline - Date.now()
+        if (error instanceof Error && "code" in error && error.code === "EEXIST" && remaining > 0) {
+          await delay(Math.min(100, remaining))
+          continue
+        }
+        console.error(new Error(error instanceof Error ? error.name : "The credential store is locked."))
+        throw new Error(
+          "Another admin MCP process is signing in or refreshing. Try again after it finishes. If it crashed, remove the .lock directory next to the credential file.",
+          { cause: error }
+        )
+      }
+    }
+    return () => rm(`${this.file}.lock`, { recursive: true, force: true })
+  }
+
+  private async read(): Promise<StoredSession> {
+    const stat = await lstat(this.file)
+    if (!stat.isFile() || stat.isSymbolicLink() || stat.size > 64 * 1024) throw new Error("Invalid credential file.")
+    if (process.platform !== "win32" && (stat.mode & 0o077) !== 0)
+      throw new Error("Credential file must have mode 0600.")
+    const session = storedSchema.parse(JSON.parse(await readFile(this.file, "utf8")))
+    if (session.origin !== this.origin) throw new Error("The stored session belongs to another admin server.")
+    return session
+  }
+
+  private async save(session: StoredSession) {
+    const temporary = `${this.file}.${randomUUID()}.tmp`
+    try {
+      const file = await open(temporary, "wx", 0o600)
+      try {
+        await file.writeFile(JSON.stringify(session))
+        await file.sync()
+      } finally {
+        await file.close()
+      }
+      await rename(temporary, this.file)
+    } finally {
+      await rm(temporary, { force: true })
+    }
+  }
+
+  async login(onAuthorization: (url: URL) => void | Promise<void>) {
+    const unlock = await this.lock()
+    const callback = new URL(MCP_CALLBACK)
+    const state = oidc.randomState()
+    const nonce = oidc.randomNonce()
+    const verifier = oidc.randomPKCECodeVerifier()
+    const listener = createServer()
+    let timer: ReturnType<typeof setTimeout> | undefined
+    try {
+      const response = await fetch(`${this.origin}/api/mcp/config`, {
+        redirect: "error",
+        signal: AbortSignal.timeout(10_000),
+        credentials: "omit",
+      })
+      if (!response.ok)
+        throw new Error(
+          "Admin MCP is not configured on this server. An administrator must register its public OAuth client."
+        )
+      const config = mcpConfigSchema.parse(await response.json())
+      const discovered = await configuration(config)
+      await new Promise<void>((resolve, reject) => {
+        listener.once("error", reject)
+        listener.listen(Number(callback.port), callback.hostname, () => {
+          listener.removeListener("error", reject)
+          resolve()
+        })
+      })
+      const authorization = oidc.buildAuthorizationUrl(discovered, {
+        redirect_uri: MCP_CALLBACK,
+        scope: "openid profile email offline_access backend:admin",
+        resource: config.resource,
+        state,
+        nonce,
+        code_challenge: await oidc.calculatePKCECodeChallenge(verifier),
+        code_challenge_method: "S256",
+      })
+      const completed = new Promise<URL>((resolve, reject) => {
+        timer = setTimeout(() => reject(new Error("Sign-in timed out. Run login again.")), 5 * 60_000)
+        listener.on("request", (request, reply) => {
+          const target = request.url ?? "/"
+          const url = URL.canParse(target, callback) ? new URL(target, callback) : null
+          const valid =
+            url !== null &&
+            request.method === "GET" &&
+            request.headers.host === callback.host &&
+            url.origin === callback.origin &&
+            url.pathname === callback.pathname &&
+            url.searchParams.get("state") === state
+          reply.writeHead(valid ? 200 : 400, {
+            "content-type": "text/plain; charset=utf-8",
+            "cache-control": "no-store",
+            "content-security-policy": "default-src 'none'",
+            "referrer-policy": "no-referrer",
+          })
+          reply.end(
+            valid ? "Return to the terminal to finish connecting PoliNetwork Admin." : "Invalid sign-in callback."
+          )
+          if (valid && url) resolve(url)
+        })
+      })
+      // Attach the callback waiter before opening the browser, including for fast local test providers.
+      const [url] = await Promise.all([completed, onAuthorization(authorization)])
+      const requestedAt = Date.now()
+      const tokens = await oidc.authorizationCodeGrant(
+        discovered,
+        url,
+        {
+          pkceCodeVerifier: verifier,
+          expectedState: state,
+          expectedNonce: nonce,
+          idTokenExpected: true,
+        },
+        { resource: config.resource }
+      )
+      const sub = z.string().min(1).parse(tokens.claims()?.sub)
+      const profile = signerProfileSchema.parse({
+        name: tokens.claims()?.name ?? "",
+        email: tokens.claims()?.email ?? null,
+      })
+      if (!tokens.refresh_token || !tokens.expires_in)
+        throw new Error("The IdP must issue refresh tokens and an access-token lifetime.")
+      await this.save({
+        origin: this.origin,
+        config,
+        sub,
+        profile,
+        accessToken: tokens.access_token,
+        refreshToken: tokens.refresh_token,
+        expiresAt: requestedAt + tokens.expires_in * 1000,
+        refreshing: false,
+      })
+    } catch (error) {
+      console.error(new Error(error instanceof Error ? error.name : "Sign-in failed"))
+      throw new Error(
+        "Sign-in failed. Check the public client's callback, scopes and backend resource, then run login again."
+      )
+    } finally {
+      clearTimeout(timer)
+      listener.closeAllConnections()
+      if (listener.listening) await new Promise<void>((resolve) => listener.close(() => resolve()))
+      await unlock()
+    }
+  }
+
+  accessToken() {
+    this.pendingToken ??= this.freshToken().finally(() => {
+      this.pendingToken = null
+    })
+    return this.pendingToken
+  }
+
+  async signerProfile() {
+    return (await this.read()).profile
+  }
+
+  private async freshToken() {
+    const current = await this.read()
+    if (!current.refreshing && current.expiresAt > Date.now() + 30_000) return current.accessToken
+    const unlock = await this.lock(5_000)
+    try {
+      const stored = await this.read()
+      if (stored.refreshing) throw new Error("The last refresh was interrupted. Run login again.")
+      if (stored.expiresAt > Date.now() + 30_000) return stored.accessToken
+      const discovered = await configuration(stored.config)
+      await this.save({ ...stored, refreshing: true })
+      const requestedAt = Date.now()
+      const tokens = await oidc.refreshTokenGrant(discovered, stored.refreshToken, { resource: stored.config.resource })
+      if (!tokens.expires_in || (tokens.id_token && tokens.claims()?.sub !== stored.sub))
+        throw new Error("Invalid refreshed identity.")
+      const session = {
+        ...stored,
+        accessToken: tokens.access_token,
+        refreshToken: tokens.refresh_token ?? stored.refreshToken,
+        expiresAt: requestedAt + tokens.expires_in * 1000,
+        refreshing: false,
+      }
+      await this.save(session)
+      return session.accessToken
+    } catch (error) {
+      console.error(new Error(error instanceof Error ? error.name : "Session unavailable"))
+      throw new Error("Admin MCP session unavailable. Run login again if sign-in expired or refresh was interrupted.")
+    } finally {
+      await unlock()
+    }
+  }
+
+  async logout() {
+    const unlock = await this.lock()
+    try {
+      const stored = await this.read()
+      const discovered = await configuration(stored.config)
+      await oidc.tokenRevocation(discovered, stored.refreshToken, { token_type_hint: "refresh_token" })
+    } catch (error) {
+      console.error(new Error(error instanceof Error ? error.name : "Revocation failed"))
+      throw new Error(
+        "Remote revocation failed; local credentials were removed. Revoke this application's consent in PoliNetwork Auth."
+      )
+    } finally {
+      await rm(this.file, { force: true })
+      await unlock()
+    }
+  }
+}
diff --git a/src/mcp/catalog.ts b/src/mcp/catalog.ts
new file mode 100644
index 00000000..505cc1d1
--- /dev/null
+++ b/src/mcp/catalog.ts
@@ -0,0 +1,684 @@
+import { z } from "zod"
+
+import { associationLinksInput } from "../features/associations/associations.validation"
+import { azureEmailSchema } from "../features/azure/email"
+import * as faq from "../features/faqs/faqs.validation"
+import * as freshman from "../features/freshman/freshman.validation"
+import * as labels from "../features/group-labels/group-labels.validation"
+import * as p from "../features/people/people.contract"
+import { whatsappInviteLink } from "../features/whatsapp/whatsapp.validation"
+import type { Permission } from "../server/permissions"
+
+export type ToolDefinition = {
+  path: string
+  description: string
+  method: "query" | "mutation"
+  permissions: readonly Permission[]
+  /** Self and team views also admit people:self without admin:access; the backend scopes the records. */
+  self?: boolean
+  team?: boolean
+  destructive?: boolean
+  input: z.ZodType
+  output?: z.ZodType
+  multipart?: boolean
+}
+
+const empty = z.object({}).strict()
+const id = z.object({ id: z.number().int().positive() }).strict()
+const uuid = z.object({ id: z.uuid() }).strict()
+const userId = z.object({ userId: z.number().int().positive() }).strict()
+const person = p.personRefInputSchema
+const sign = ["esign:sign"] as const
+const requests = ["esign:sign", "esign:requests:manage"] as const
+const writeWeb = ["web:content:write"] as const
+
+function read(
+  path: string,
+  description: string,
+  input: z.ZodType = empty,
+  permissions: readonly Permission[] = []
+): ToolDefinition {
+  return { path, description, method: "query", permissions, input }
+}
+
+function write(
+  path: string,
+  description: string,
+  input: z.ZodType,
+  permissions: readonly Permission[],
+  destructive = false
+): ToolDefinition {
+  return { path, description, method: "mutation", permissions, input, destructive }
+}
+
+const file = z
+  .object({
+    name: z
+      .string()
+      .min(1)
+      .max(200)
+      .regex(/^[^/\\]+$/),
+    type: z.string().min(1).max(100),
+    base64: z
+      .string()
+      .max(40 * 1024 * 1024)
+      .regex(/^[A-Za-z0-9+/]*={0,2}$/)
+      .refine((value) => value.length % 4 === 0, "Use padded base64."),
+  })
+  .strict()
+
+export const multipartInput = z
+  .object({
+    fields: z.record(z.string().max(100), z.string().max(20_000)).default({}),
+    files: z.array(file.extend({ field: z.string().min(1).max(100) })).max(50),
+  })
+  .strict()
+
+function upload(path: string, description: string, permissions: readonly Permission[]): ToolDefinition {
+  return { ...write(path, description, multipartInput, permissions), multipart: true }
+}
+
+const tag = z.object({ groupId: z.number().int(), type: z.enum(["tg", "wa"]), label: z.string().min(1).max(128) })
+const waFields = z.object({
+  title: z.string().trim().min(1).max(200),
+  link: whatsappInviteLink,
+  hide: z.boolean().optional(),
+})
+const place = z.object({
+  page: z.number().int().min(0),
+  x: z.number().min(0).max(1),
+  y: z.number().min(0).max(1),
+  width: z.number().gt(0).max(1),
+  height: z.number().gt(0).max(1),
+})
+const jobs = z.object({ jobIds: z.array(z.uuid()).min(1).max(10) })
+const accessRule = z.object({
+  roles: z.array(z.string().regex(/^[A-Za-z0-9:._-]{1,100}$/)).max(50),
+  permissions: z.array(z.string().regex(/^[A-Za-z0-9:._-]{1,100}$/)).max(50),
+})
+
+/** Explicit dashboard operations only. No arbitrary RPC, actor overrides, or Microsoft 365 membership edits. */
+export const tools: ToolDefinition[] = [
+  read("tg.groups.getAll", "List Telegram groups, including hidden groups."),
+  write(
+    "tg.groups.setHide",
+    "Change one Telegram group's visibility.",
+    z.object({ telegramId: z.number().int(), hide: z.boolean() }),
+    ["tg:groups:manage"]
+  ),
+  write(
+    "tg.groups.leaveChat",
+    "Make the bot leave one Telegram group. Ask the person first.",
+    z.object({ chatId: z.number().int() }),
+    ["tg:groups:manage"],
+    true
+  ),
+  read("tg.users.getAll", "List Telegram users.", empty, ["tg:users:read"]),
+  read("tg.users.get", "Find a Telegram user by numeric ID.", userId, ["tg:users:read"]),
+  read(
+    "tg.users.getByUsername",
+    "Find a Telegram user by username without @.",
+    z.object({ username: z.string().trim().min(1).max(32) }),
+    ["tg:users:read"]
+  ),
+  read("tg.users.getCreationHistory", "Read daily Telegram user counts.", empty, ["tg:users:read"]),
+  read(
+    "tg.messages.getLastByUser",
+    "Read the latest messages of a Telegram user.",
+    userId.extend({ limit: z.number().int().min(1).max(100).default(15) }),
+    ["tg:messages:read"]
+  ),
+  read(
+    "tg.auditLog.getById",
+    "Read a Telegram user's audit trail.",
+    z.object({ targetId: z.number().int().positive() }),
+    ["tg:audit:read"]
+  ),
+  read("tg.grants.getOngoing", "List ongoing Telegram grants.", empty, ["tg:grants:read"]),
+  read("tg.grants.getScheduled", "List scheduled Telegram grants.", empty, ["tg:grants:read"]),
+  read("tg.grants.checkUser", "Read a Telegram user's ongoing grant.", userId, ["tg:grants:read"]),
+  write(
+    "tg.grants.create",
+    "Create a Telegram grant. Dates are ISO timestamps; its author is the signed-in person.",
+    userId
+      .extend({
+        since: z.iso.datetime({ offset: true }).transform((s) => new Date(s)),
+        until: z.iso.datetime({ offset: true }).transform((s) => new Date(s)),
+        reason: z.string().trim().max(500).optional(),
+      })
+      .refine((v) => v.until > v.since, "End must follow start")
+      .transform((v) => ({ ...v, sendTgLog: true })),
+    ["tg:grants:manage"]
+  ),
+  write(
+    "tg.grants.interrupt",
+    "Interrupt one Telegram grant.",
+    userId.transform((v) => ({ ...v, sendTgLog: true })),
+    ["tg:grants:manage"],
+    true
+  ),
+  read("wa.groups.getAll", "List WhatsApp groups, including hidden groups."),
+  write("wa.groups.add", "Create a WhatsApp group entry.", waFields, ["wa:groups:manage"]),
+  write("wa.groups.modify", "Edit one WhatsApp group entry.", waFields.extend({ id: z.number().int() }), [
+    "wa:groups:manage",
+  ]),
+  write("wa.groups.delete", "Delete one WhatsApp group entry.", id, ["wa:groups:manage"], true),
+  write("wa.groups.setHide", "Change one WhatsApp group's visibility.", id.extend({ hide: z.boolean() }), [
+    "wa:groups:manage",
+  ]),
+  read("groups.labels.getAll", "List category, tag and publication labels."),
+  read("groups.search.getAll", "List Telegram and WhatsApp groups with their labels."),
+  write("groups.labels.tagGroup", "Add a label to one group.", tag, ["groups:labels:write"]),
+  write("groups.labels.untagGroup", "Remove a label from one group.", tag, ["groups:labels:write"], true),
+  write("groups.labels.create", "Create a category or tag.", labels.createGroupLabelInput, ["groups:labels:write"]),
+  {
+    ...write("groups.labels.create", "Create a publication label.", labels.createReleaseLabelInput, [
+      "groups:labels:write",
+    ]),
+    path: "groups.labels.createRelease",
+  },
+  write("groups.labels.modify", "Edit a label's description and color.", labels.editGroupLabelInput, [
+    "groups:labels:write",
+  ]),
+  {
+    ...write(
+      "groups.labels.modify",
+      "Rename a label and its descendants. Confirm the full scope first.",
+      labels.renameGroupLabelInput,
+      ["groups:labels:write"],
+      true
+    ),
+    path: "groups.labels.rename",
+  },
+  write(
+    "groups.labels.delete",
+    "Delete a label. Confirm the full scope, including descendants, first.",
+    labels.groupLabelIdentifierInput,
+    ["groups:labels:write"],
+    true
+  ),
+  read("web.projects.getAllProjects", "List website projects."),
+  upload(
+    "web.projects.addProject",
+    "Create a project. Multipart fields: title, descriptionIt, descriptionEn, link, category. Optional logo file (PNG/JPEG/SVG, 1 MB).",
+    writeWeb
+  ),
+  upload("web.projects.editProject", "Edit a project. Same fields as creation, plus id. Optional logo file.", writeWeb),
+  write("web.projects.deleteProject", "Delete one website project.", id, writeWeb, true),
+  write(
+    "web.projects.reorderProjects",
+    "Set the project order using the complete ordered ID list.",
+    z.object({ projectIds: z.array(z.number().int().positive()).min(1) }),
+    writeWeb
+  ),
+  read("web.associations.getAllAssociations", "List website associations."),
+  upload(
+    "web.associations.addAssociation",
+    "Create an association. Fields: name, descriptionIt, descriptionEn. Optional logo file (PNG/JPEG/SVG, 1 MB).",
+    writeWeb
+  ),
+  upload("web.associations.editAssociation", "Edit an association. Same fields as creation, plus id.", writeWeb),
+  write("web.associations.editAssociationLinks", "Edit one association's links.", associationLinksInput, writeWeb),
+  write("web.associations.deleteAssociation", "Delete one website association.", id, writeWeb, true),
+  read("web.faqs.getAllFaqs", "List FAQs and categories."),
+  write("web.faqs.addFaqs", "Create a FAQ.", faq.addFAQInput, writeWeb),
+  write("web.faqs.editFaqs", "Edit a FAQ.", faq.editFAQInput, writeWeb),
+  write("web.faqs.deleteFaqs", "Delete one FAQ.", faq.deleteFAQInput, writeWeb, true),
+  write(
+    "web.faqs.addFaqsCategory",
+    "Create a FAQ category.",
+    faq.addFAQCategoryInput.transform((v) => ({ ...v, icon: v.icon ?? null })),
+    writeWeb
+  ),
+  write(
+    "web.faqs.editFaqsCategory",
+    "Edit a FAQ category.",
+    faq.editFAQCategoryInput.transform((v) => ({ ...v, icon: v.icon ?? null })),
+    writeWeb
+  ),
+  write(
+    "web.faqs.deleteFaqsCategory",
+    "Delete one FAQ category. Check its FAQs before confirming.",
+    faq.deleteFAQCategoryInput,
+    writeWeb,
+    true
+  ),
+  read("web.freshman.getContent", "Read the fixed Freshman website slots."),
+  write("web.freshman.updateCard", "Edit a Freshman card.", freshman.updateFreshmanCardInput, writeWeb),
+  write("web.freshman.moveCard", "Move a Freshman card one position.", freshman.moveFreshmanCardInput, writeWeb),
+  write("web.freshman.selectFaq", "Select a FAQ for a Freshman slot.", freshman.selectFreshmanFaqInput, writeWeb),
+  read("web.guides_matricole.getAllGuides", "List freshman guide editions."),
+  upload(
+    "web.guides_matricole.addGuide",
+    "Create a guide edition. Fields: version, date (ISO timestamp); file: PDF up to 2 MB.",
+    writeWeb
+  ),
+  write("web.guides_matricole.deleteGuide", "Delete one guide edition.", id, writeWeb, true),
+  read(
+    "web.reports.list",
+    "List group-link reports.",
+    z.object({ statuses: z.array(z.enum(["pending", "resolved", "dismissed"])).min(1) }),
+    ["web:reports:manage"]
+  ),
+  write(
+    "web.reports.resolve",
+    "Resolve one report. Batch actions require explicit user instruction.",
+    z.object({ ids: z.array(z.number().int()).length(1) }),
+    ["web:reports:manage"]
+  ),
+  write(
+    "web.reports.dismiss",
+    "Dismiss one report.",
+    z.object({ ids: z.array(z.number().int()).length(1) }),
+    ["web:reports:manage"],
+    true
+  ),
+  read("azure.members.getAll", "Read the Microsoft 365 member directory.", empty, ["azure:members:read"]),
+  write(
+    "azure.members.create",
+    "Create a new member through the fixed workflow, including its welcome email. No existing group memberships can be edited.",
+    z.object({
+      firstName: z.string().trim().min(1),
+      lastName: z.string().trim().min(1),
+      assocNumber: z.number().int().positive(),
+      sendEmailTo: azureEmailSchema,
+      mailbox: z.discriminatedUnion("kind", [
+        z.object({ kind: z.literal("standard") }),
+        z.object({ kind: z.literal("custom"), localPart: z.string().trim().min(1) }),
+      ]),
+    }),
+    ["azure:members:create"]
+  ),
+  write(
+    "azure.members.setAssocNumber",
+    "Change one member's ID after confirmation; optionally email them. Duplicate IDs are refused by the backend.",
+    z.object({
+      userId: z.string().min(1),
+      assocNumber: z.number().int().positive(),
+      notifyEmail: azureEmailSchema.optional(),
+    }),
+    ["azure:members:write"]
+  ),
+  read("azure.groups.getAll", "Read Microsoft 365 groups and their members. Membership cannot be changed.", empty, [
+    "azure:groups:read",
+  ]),
+  read("esign.config", "Read the CIE signing configuration.", empty, sign),
+  read(
+    "esign.requests.list",
+    "List signing requests visible to the person.",
+    z.object({ scope: z.enum(["inbox", "mine", "all"]) }),
+    sign
+  ),
+  read("esign.requests.get", "Read a signing request, versions and audit trail.", uuid, sign),
+  read(
+    "esign.documents.get",
+    "Read a document's pages and signature details.",
+    z.object({ documentId: z.uuid() }),
+    sign
+  ),
+  read("esign.documents.content", "Download a document's PDF as base64.", z.object({ documentId: z.uuid() }), sign),
+  read("esign.jobs.statuses", "Read signing job status.", jobs, sign),
+  write(
+    "esign.jobs.create",
+    "Prepare signatures and return single-use tickets. The person must finish in the existing CIE agent; never request a PIN here.",
+    z.object({
+      items: z
+        .array(z.object({ requestId: z.uuid(), places: z.array(place).max(20).optional() }))
+        .min(1)
+        .max(10),
+    }),
+    sign
+  ),
+  write("esign.jobs.cancel", "Cancel one signing job.", z.object({ jobIds: z.array(z.uuid()).length(1) }), sign, true),
+  write(
+    "esign.requests.decline",
+    "Decline one signing request.",
+    uuid.extend({ reason: z.string().trim().max(500).nullable() }),
+    sign,
+    true
+  ),
+  read("esign.signers.list", "List available signers.", empty, requests),
+  read(
+    "esign.drive.list",
+    "Browse an allowed shared drive.",
+    z.object({ driveId: z.string().min(1), folderId: z.string().min(1).optional() }),
+    requests
+  ),
+  upload("esign.documents.upload", "Upload a PDF up to 30 MB, file field: file.", requests),
+  write(
+    "esign.documents.fromDrive",
+    "Import a document from an allowed shared drive.",
+    z.object({ driveId: z.string().min(1), itemId: z.string().min(1) }),
+    requests
+  ),
+  write(
+    "esign.requests.create",
+    "Create a signing request with fixed signers and PDF placements.",
+    z.object({
+      title: z.string().trim().min(1).max(200),
+      documentId: z.uuid(),
+      ordered: z.boolean(),
+      signers: z
+        .array(
+          z.object({
+            sub: z.string().min(1),
+            role: z.string().trim().max(80).nullable(),
+            places: z
+              .array(place.extend({ kind: z.enum(["signature", "mark"]) }))
+              .min(1)
+              .max(20),
+          })
+        )
+        .min(1)
+        .max(10),
+      output: z
+        .object({
+          driveId: z.string().min(1),
+          folderId: z.string().min(1),
+          fileName: z.string().trim().min(1).max(200),
+        })
+        .nullable(),
+      email: z.object({ to: z.array(z.email()).max(20), message: z.string().max(2000).nullable() }).nullable(),
+    }),
+    requests
+  ),
+  write("esign.requests.cancel", "Cancel one signing request.", uuid, requests, true),
+  write("esign.requests.delete", "Delete one signing request.", uuid, requests, true),
+  write("esign.requests.retryDelivery", "Retry delivery without creating another request.", uuid, requests),
+  read("esign.drive.access", "Read shared-drive access rules.", empty, ["esign:sign", "esign:drives:manage"]),
+  write(
+    "esign.drive.setAccess",
+    "Change one drive's request and signing rules.",
+    z.object({ driveId: z.string().min(1), request: accessRule, sign: accessRule }),
+    ["esign:sign", "esign:drives:manage"]
+  ),
+]
+
+function peopleRead(
+  path: string,
+  description: string,
+  input: z.ZodType,
+  output: z.ZodType,
+  permission: Permission
+): ToolDefinition {
+  return { ...read(`people.${path}`, description, input, [permission]), output }
+}
+
+tools.push(
+  peopleRead("persons.list", "List volunteer records.", empty, p.personRowSchema.array(), "people:read"),
+  peopleRead(
+    "persons.get",
+    "Read one person's full record.",
+    z.object({ id: p.personIdSchema }),
+    p.personRecordSchema,
+    "people:read"
+  ),
+  write("people.persons.create", "Create a person record.", p.createPersonInputSchema, ["people:write"]),
+  write("people.persons.update", "Edit a person record.", p.updatePersonInputSchema, ["people:write"]),
+  write("people.persons.setNote", "Set the HR note on one record.", p.setNoteInputSchema, ["people:write"]),
+  peopleRead(
+    "members.list",
+    "Read the restricted member register.",
+    empty,
+    p.memberRegisterRowSchema.array(),
+    "people:members:read"
+  ),
+  write("people.members.create", "Add a member to the register.", p.createMemberInputSchema, ["people:members:write"]),
+  write("people.members.setStatus", "Change a member's status.", p.memberStatusInputSchema, ["people:members:write"]),
+  write("people.members.setNumber", "Change a member's number.", p.memberNumberInputSchema, ["people:members:write"]),
+  {
+    ...write("people.members.export", "Export the register as CSV after confirmation.", empty, [
+      "people:members:write",
+    ]),
+    output: p.exportResultSchema,
+  },
+  write("people.admins.end", "End one admin role.", p.endAdminInputSchema, ["people:write"], true),
+  write(
+    "people.admins.setCapoScope",
+    "Appoint or change a Capo Admin, or end the role with scope=null.",
+    p.capoScopeInputSchema,
+    ["people:appoint"]
+  ),
+  write("people.admins.setCapoOfReference", "Set an admin's Capo Admin of reference.", p.capoRefInputSchema, [
+    "people:write",
+  ]),
+  {
+    ...peopleRead(
+      "teams.list",
+      "Read teams; Team Leads see their own teams.",
+      empty,
+      p.teamSummarySchema.array(),
+      "people:read"
+    ),
+    team: true,
+  },
+  {
+    ...peopleRead(
+      "teams.candidates",
+      "Read team candidates; backend scopes Team Lead access.",
+      p.teamCandidatesInputSchema,
+      p.teamCandidateSchema.array(),
+      "people:read"
+    ),
+    team: true,
+  },
+  {
+    ...write(
+      "people.teams.addMember",
+      "Add a team member. Appointing a Lead also requires people:appoint.",
+      p.addTeamMemberInputSchema,
+      ["people:write"]
+    ),
+    team: true,
+  },
+  {
+    ...write("people.teams.updateFields", "Update team fields for an authorized team.", p.teamFieldsInputSchema, [
+      "people:write",
+    ]),
+    team: true,
+  },
+  {
+    ...write(
+      "people.teams.endMembership",
+      "End one team membership. Ending a Lead also requires people:appoint.",
+      p.endTeamInputSchema,
+      ["people:write"],
+      true
+    ),
+    team: true,
+  },
+  peopleRead("census.campaigns", "List census campaigns.", empty, p.campaignSchema.array(), "people:read"),
+  peopleRead(
+    "census.campaign",
+    "Read a census campaign.",
+    z.object({ id: z.string().min(1).max(128) }),
+    p.campaignDetailSchema,
+    "people:read"
+  ),
+  peopleRead(
+    "census.answers",
+    "Read one person's census answers.",
+    p.answersInputSchema,
+    p.censusAnswersSchema,
+    "people:read"
+  ),
+  write(
+    "people.census.remind",
+    "Send census reminders to one person or unanswered people; backend enforces the reminder interval.",
+    p.remindInputSchema,
+    ["people:write"]
+  ),
+  write("people.census.close", "Close one census campaign.", p.campaignInputSchema, ["people:write"], true),
+  upload(
+    "people.census.importPreview",
+    "Preview a census import without saving. Fields: campaignId; file: UTF-8 CSV or XLSX up to 10 MB and 5,000 responses.",
+    ["people:write"]
+  ),
+  write(
+    "people.census.importCommit",
+    "Apply an inspected census import with its reviewed choices.",
+    p.importCommitInputSchema,
+    ["people:write"]
+  ),
+  peopleRead("linking.reviews", "List account linking reviews.", empty, p.reviewSchema.array(), "people:read"),
+  write("people.linking.resolve", "Resolve one account-linking review.", p.resolveReviewInputSchema, ["people:write"]),
+  write("people.linking.dismiss", "Dismiss one account-linking review.", p.reviewInputSchema, ["people:write"], true),
+  peopleRead("linking.invites", "List account invitations.", empty, p.inviteSchema.array(), "people:read"),
+  write("people.linking.sendInvite", "Email an account invitation to one person.", person, ["people:write"]),
+  write("people.linking.revokeInvite", "Revoke one account invitation.", person, ["people:write"], true),
+  peopleRead(
+    "linking.searchAccounts",
+    "Search account matches for one person.",
+    p.searchAccountsInputSchema,
+    p.accountMatchSchema.array(),
+    "people:write"
+  ),
+  write("people.linking.link", "Link an account after inspecting the match.", p.linkAccountInputSchema, [
+    "people:write",
+  ]),
+  write("people.linking.unlink", "Unlink one person's account.", person, ["people:write"], true),
+  peopleRead("fees.review", "Review a member's fee receipt.", person, p.feeReviewSchema, "people:fees:write"),
+  peopleRead("fees.upload", "Download the fee upload as base64.", person, p.fileSchema, "people:fees:write"),
+  write("people.fees.approve", "Approve one fee and issue its receipt.", person, ["people:fees:write"]),
+  write("people.fees.reject", "Reject one fee upload with a reason.", p.rejectFeeInputSchema, ["people:fees:write"]),
+  write("people.fees.markPaid", "Mark one fee paid and issue its receipt.", p.markPaidInputSchema, [
+    "people:fees:write",
+  ]),
+  write(
+    "people.fees.remind",
+    "Send a fee reminder to one person, or all eligible people with personId=null.",
+    p.feeRemindInputSchema,
+    ["people:fees:write"]
+  ),
+  peopleRead(
+    "receipts.list",
+    "Read the receipts queue.",
+    p.receiptsInputSchema,
+    p.receiptsPageSchema,
+    "people:members:read"
+  ),
+  peopleRead(
+    "receipts.download",
+    "Download one receipt as base64.",
+    p.receiptInputSchema,
+    p.fileSchema,
+    "people:members:read"
+  ),
+  {
+    ...write("people.receipts.toSign", "Download a ZIP of receipts waiting for the caller's signature.", empty, [
+      "people:receipts:sign",
+    ]),
+    output: p.fileSchema,
+  },
+  upload(
+    "people.receipts.previewSigned",
+    "Match signed PDFs or P7M files to receipts without saving. File field: files, max 50 files, 10 MB each, 50 MB total.",
+    ["people:receipts:sign"]
+  ),
+  write(
+    "people.receipts.sendSigned",
+    "Save reviewed signed files and email each receipt to its member.",
+    p.sendSignedInputSchema,
+    ["people:receipts:sign"]
+  ),
+  {
+    ...write(
+      "people.receipts.prepareSignatures",
+      "Prepare durable CIE requests for selected receipts. Finish signing in the existing CIE UI.",
+      p.prepareReceiptSignaturesInputSchema,
+      ["people:receipts:sign", "esign:sign"]
+    ),
+    output: p.receiptSignaturesSchema,
+  },
+  write("people.receipts.retry", "Retry sending one receipt.", p.receiptInputSchema, ["people:fees:write"]),
+  write(
+    "people.receipts.void",
+    "Void one receipt with a reason.",
+    p.voidReceiptInputSchema,
+    ["people:fees:write"],
+    true
+  )
+)
+
+const selfTools = [
+  peopleRead("me.roles", "Read the caller's own People roles.", empty, p.myRolesSchema, "people:self"),
+  peopleRead("me.get", "Read the caller's My area.", empty, p.myAreaSchema, "people:self"),
+  write("people.me.confirmMatch", "Confirm the caller's first-sign-in account match.", empty, ["people:self"]),
+  write("people.me.rejectMatch", "Reject the caller's proposed account match.", empty, ["people:self"]),
+  write("people.me.acceptInvite", "Accept an invitation for the caller.", p.acceptInviteInputSchema, ["people:self"]),
+  write("people.me.askToBeAdded", "Request the caller's volunteer record.", p.askToBeAddedInputSchema, ["people:self"]),
+  write("people.me.answerCensus", "Submit the caller's census answer.", p.answerCensusInputSchema, ["people:self"]),
+  write("people.me.requestCorrection", "Request an HR correction to the caller's record.", p.correctionInputSchema, [
+    "people:self",
+  ]),
+  write("people.me.revokePhotoConsent", "Revoke the caller's photo consent.", empty, ["people:self"], true),
+  upload(
+    "people.me.uploadTransferReceipt",
+    "Upload the caller's transfer receipt. Fields: transferDate, amountCents. File field: file, PDF/JPG/PNG up to 10 MB.",
+    ["people:self"]
+  ),
+  peopleRead("me.receipt", "Download one of the caller's receipts.", p.receiptInputSchema, p.fileSchema, "people:self"),
+  peopleRead(
+    "capo.get",
+    "Read the caller's Capo Admin area; backend checks the role and scope.",
+    empty,
+    p.capoAreaSchema,
+    "people:self"
+  ),
+  write(
+    "people.capo.approve",
+    "Approve one request to join a group in the caller's Capo scope.",
+    p.joinRequestInputSchema,
+    ["people:self"]
+  ),
+  write(
+    "people.capo.decline",
+    "Decline one request to join a group in the caller's Capo scope.",
+    p.joinRequestInputSchema,
+    ["people:self"],
+    true
+  ),
+]
+tools.push(...selfTools.map((tool) => ({ ...tool, self: true })))
+
+const peopleMutationOutputs = new Map<string, z.ZodType>([
+  ["people.persons.create", p.createdSchema],
+  ["people.members.export", p.exportResultSchema],
+  ["people.census.remind", p.remindResultSchema],
+  ["people.census.importPreview", p.importPreviewSchema],
+  ["people.census.importCommit", p.importedSchema],
+  ["people.fees.approve", p.issuedSchema],
+  ["people.fees.markPaid", p.issuedSchema],
+  ["people.fees.remind", p.remindResultSchema],
+  ["people.receipts.previewSigned", p.signedUploadSchema],
+  ["people.receipts.sendSigned", p.sendResultSchema],
+])
+for (const tool of tools) {
+  const output = peopleMutationOutputs.get(tool.path)
+  if (output) tool.output = output
+}
+
+/** Two named tools intentionally use the same backend procedure with different validated inputs. */
+export function backendPath(tool: ToolDefinition) {
+  if (tool.path === "groups.labels.createRelease") return "groups.labels.create"
+  if (tool.path === "groups.labels.rename") return "groups.labels.modify"
+  return tool.path
+}
+
+export function toolName(tool: ToolDefinition) {
+  return tool.path.replaceAll(".", "_")
+}
+
+export function canUseTool(tool: ToolDefinition, permissions: readonly string[]) {
+  if (tool.team && permissions.includes("people:self")) return true
+  if (!tool.self && !permissions.includes("admin:access")) return false
+  return tool.permissions.every((permission) => permissions.includes(permission))
+}
+
+export function rpcMethod(path: string) {
+  if (path === "me.access") return "GET"
+  // Internal display-profile sync, populated from the native client's verified ID token, never a model tool.
+  if (path === "esign.profile.sync") return "POST"
+  const tool = tools.find((item) => backendPath(item) === path)
+  return tool ? (tool.method === "query" ? "GET" : "POST") : null
+}
diff --git a/src/mcp/cli.ts b/src/mcp/cli.ts
new file mode 100644
index 00000000..67f79179
--- /dev/null
+++ b/src/mcp/cli.ts
@@ -0,0 +1,57 @@
+#!/usr/bin/env node
+import { spawn } from "node:child_process"
+
+import { StdioServerTransport } from "@modelcontextprotocol/server/stdio"
+
+import { AdminMcpAuth } from "./auth"
+import { MCP_MAX_MESSAGE_BYTES } from "./protocol"
+import { createAdminApi, createAdminMcpServer } from "./server"
+
+const args = process.argv.slice(2)
+const command = args.find((arg) => ["login", "logout", "serve", "help"].includes(arg)) ?? "serve"
+const originIndex = args.indexOf("--admin-url")
+const origin = originIndex === -1 ? "https://admin.polinetwork.org" : args[originIndex + 1]
+
+async function main() {
+  if (command === "help" || args.includes("--help")) {
+    console.error(
+      "PoliNetwork Admin MCP\n\n  polinetwork-admin-mcp login [--admin-url https://admin.polinetwork.org]\n  polinetwork-admin-mcp serve [--admin-url ...]\n  polinetwork-admin-mcp logout [--admin-url ...]\n\nLogin in your browser once, then configure your MCP client to run this command with serve. Tokens stay in your private ~/.polinetwork/admin-mcp directory. Requires Node.js 22 or newer."
+    )
+    return
+  }
+  if (!origin) throw new Error("Supply an origin after --admin-url.")
+  const auth = new AdminMcpAuth(origin)
+  if (command === "login") {
+    await auth.login((url) => {
+      console.error(`Sign in to PoliNetwork Admin:\n${url.href}`)
+      const executable = process.platform === "darwin" ? "open" : process.platform === "win32" ? "rundll32" : "xdg-open"
+      const browserArgs = process.platform === "win32" ? ["url.dll,FileProtocolHandler", url.href] : [url.href]
+      const browser = spawn(executable, browserArgs, { detached: true, stdio: "ignore" })
+      browser.on("error", (error) => {
+        console.error(new Error(error.name))
+        console.error("Open the sign-in link above in your browser.")
+      })
+      browser.unref()
+    })
+    console.error("Connected. Your agent can now use your current dashboard permissions.")
+    return
+  }
+  if (command === "logout") {
+    await auth.logout()
+    console.error("Disconnected. Local credentials removed and refresh token revoked.")
+    return
+  }
+  const api = createAdminApi(
+    auth.origin,
+    () => auth.accessToken(),
+    () => auth.signerProfile()
+  )
+  await createAdminMcpServer(api).connect(
+    new StdioServerTransport(process.stdin, process.stdout, { maxBufferSize: MCP_MAX_MESSAGE_BYTES })
+  )
+}
+
+main().catch((error) => {
+  console.error(new Error(error instanceof Error ? error.message : "Admin MCP failed"))
+  process.exitCode = 1
+})
diff --git a/src/mcp/files.ts b/src/mcp/files.ts
new file mode 100644
index 00000000..361aa6b8
--- /dev/null
+++ b/src/mcp/files.ts
@@ -0,0 +1,95 @@
+import { parseCreateAssociationForm, parseEditAssociationForm } from "../features/associations/associations.validation"
+import { parseGuideForm } from "../features/guides/guides.validation"
+import { validateCensusImport } from "../features/people/census-import.server"
+import { campaignInputSchema, transferInputSchema } from "../features/people/people.contract"
+import { parseProjectForm } from "../features/projects/projects.validation"
+import { multipartInput } from "./catalog"
+
+/** Files arrive as explicit bytes, never as paths that could let a model read the user's computer. */
+export async function uploadForm(path: string, input: ReturnType<typeof multipartInput.parse>) {
+  const form = new FormData()
+  for (const [key, value] of Object.entries(input.fields)) form.set(key, value)
+  let total = 0
+  const files = input.files.map((entry) => {
+    const bytes = Buffer.from(entry.base64, "base64")
+    total += bytes.length
+    if (!bytes.length || total > 50 * 1024 * 1024) throw new Error("Choose non-empty files, at most 50 MB total.")
+    const file = new File([bytes], entry.name, { type: entry.type })
+    form.append(entry.field, file)
+    return file
+  })
+  const single = (field: string) => {
+    const entry = form.get(field)
+    if (files.length !== 1 || !(entry instanceof File)) throw new Error(`Choose one file in the ${field} field.`)
+    return entry
+  }
+  const validated = new FormData()
+  if (path.startsWith("web.projects.")) {
+    // The dashboard parser calls this logoFile; the backend multipart field is logo.
+    const logo = form.get("logo")
+    if (logo instanceof File) form.set("logoFile", logo)
+    const parsed = parseProjectForm(form)
+    if (files.length > 1 || input.files.some((entry) => entry.field !== "logo"))
+      throw new Error("Choose at most one logo in the logo field.")
+    if (path.endsWith("editProject")) {
+      if (!/^[1-9]\d*$/.test(input.fields.id ?? "")) throw new Error("INVALID_ID")
+      validated.set("id", input.fields.id)
+    }
+    validated.set("title", parsed.title)
+    validated.set("descriptionIt", parsed.descriptionIt)
+    validated.set("descriptionEn", parsed.descriptionEn)
+    validated.set("link", parsed.link ?? "")
+    validated.set("category", parsed.category)
+    if (parsed.logoFile) validated.set("logo", parsed.logoFile)
+  } else if (path === "web.associations.addAssociation" || path === "web.associations.editAssociation") {
+    const parsed =
+      path === "web.associations.addAssociation" ? parseCreateAssociationForm(form) : parseEditAssociationForm(form)
+    if (files.length > 1 || input.files.some((entry) => entry.field !== "logo"))
+      throw new Error("Choose at most one logo in the logo field.")
+    if ("id" in parsed) validated.set("id", String(parsed.id))
+    validated.set("name", parsed.name)
+    validated.set("descriptionIt", parsed.descriptionIt)
+    validated.set("descriptionEn", parsed.descriptionEn)
+    if (parsed.logo instanceof File) validated.set("logo", parsed.logo)
+  } else if (path === "web.guides_matricole.addGuide") {
+    single("file")
+    const parsed = parseGuideForm(form)
+    validated.set("version", parsed.version)
+    validated.set("date", parsed.date)
+    validated.set("file", parsed.file)
+  } else if (path === "people.census.importPreview") {
+    const parsed = campaignInputSchema.parse({ campaignId: input.fields.campaignId })
+    const file = single("file")
+    await validateCensusImport(file)
+    validated.set("campaignId", parsed.campaignId)
+    validated.set("file", file)
+  } else if (path === "people.me.uploadTransferReceipt") {
+    const receipt = single("file")
+    const parsed = transferInputSchema.parse({
+      transferDate: input.fields.transferDate,
+      amountCents: Number(input.fields.amountCents),
+    })
+    if (!/\.(pdf|jpe?g|png)$/i.test(receipt.name) || receipt.size > 10 * 1024 * 1024) {
+      throw new Error("Choose a PDF, JPG or PNG up to 10 MB.")
+    }
+    validated.set("transferDate", parsed.transferDate)
+    validated.set("amountCents", String(parsed.amountCents))
+    validated.set("file", receipt)
+  } else if (path === "people.receipts.previewSigned") {
+    if (!files.length || input.files.some((entry) => entry.field !== "files"))
+      throw new Error("Choose signed receipt files.")
+    if (files.some((entry) => !/\.(pdf|p7m)$/i.test(entry.name) || entry.size > 10 * 1024 * 1024)) {
+      throw new Error("Choose PDFs or P7M files up to 10 MB each.")
+    }
+    for (const file of files) validated.append("files", file)
+  } else if (path === "esign.documents.upload") {
+    const pdf = single("file")
+    if ((!pdf.name.toLowerCase().endsWith(".pdf") && pdf.type !== "application/pdf") || pdf.size > 30 * 1024 * 1024) {
+      throw new Error("Choose a PDF up to 30 MB.")
+    }
+    validated.set("file", pdf)
+  } else {
+    throw new Error("Unknown upload operation.")
+  }
+  return validated
+}
diff --git a/src/mcp/protocol.ts b/src/mcp/protocol.ts
new file mode 100644
index 00000000..a624a275
--- /dev/null
+++ b/src/mcp/protocol.ts
@@ -0,0 +1,32 @@
+import { z } from "zod"
+
+export const MCP_NAME = "polinetwork-admin"
+export const MCP_VERSION = "0.1.0"
+export const MCP_RPC_PATH = "/api/mcp/rpc"
+export const MCP_CALLBACK = "http://127.0.0.1:47322/callback"
+export const MCP_DOWNLOAD = "/downloads/polinetwork-admin-mcp.tgz"
+/** Covers a 50 MB signed-receipt batch encoded as base64, with room for the JSON envelope. */
+export const MCP_MAX_MESSAGE_BYTES = 72 * 1024 * 1024
+
+/** Only public client metadata: never put the dashboard's client credentials here. */
+export const mcpConfigSchema = z.object({
+  clientId: z.string().min(1),
+  issuer: z.url(),
+  resource: z.url(),
+})
+export type McpConfig = z.infer<typeof mcpConfigSchema>
+
+export const signerProfileSchema = z.object({ name: z.string(), email: z.email().nullable() })
+export type SignerProfile = z.infer<typeof signerProfileSchema>
+
+export function publicOrigin(value: string) {
+  const url = new URL(value)
+  const loopback = ["127.0.0.1", "localhost", "[::1]"].includes(url.hostname)
+  if (url.protocol !== "https:" && !(url.protocol === "http:" && loopback)) {
+    throw new Error("Use HTTPS, or HTTP on localhost for development.")
+  }
+  if (url.username || url.password || url.search || url.hash || url.pathname !== "/") {
+    throw new Error("Use an origin without credentials, a path, query or fragment.")
+  }
+  return url.origin
+}
diff --git a/src/mcp/server.ts b/src/mcp/server.ts
new file mode 100644
index 00000000..8f020f77
--- /dev/null
+++ b/src/mcp/server.ts
@@ -0,0 +1,203 @@
+import { Server, type CallToolResult, type Tool } from "@modelcontextprotocol/server"
+import { createTRPCUntypedClient, httpLink, isNonJsonSerializable } from "@trpc/client"
+import { SuperJSON } from "superjson"
+import { z } from "zod"
+
+import {
+  prepareReceiptSignaturesInputSchema,
+  receiptSignaturesMatchSelection,
+  receiptSignaturesSchema,
+} from "../features/people/people.contract"
+import { backendPath, canUseTool, multipartInput, toolName, tools, type ToolDefinition } from "./catalog"
+import { uploadForm } from "./files"
+import { MCP_NAME, MCP_RPC_PATH, MCP_VERSION, type SignerProfile } from "./protocol"
+
+export interface AdminApi {
+  // The registry parses each heterogeneous RPC's input and output with its own schema at the call boundary.
+  // oxlint-disable-next-line anti-slop/no-unknown-parameters, anti-slop/no-unknown-returns
+  query(path: string, input?: unknown): Promise<unknown>
+  // oxlint-disable-next-line anti-slop/no-unknown-parameters, anti-slop/no-unknown-returns
+  mutation(path: string, input?: unknown): Promise<unknown>
+}
+
+export function createAdminApi(
+  origin: string,
+  token: () => Promise<string>,
+  profile?: () => Promise<SignerProfile>
+): AdminApi {
+  const client = createTRPCUntypedClient({
+    links: [
+      httpLink({
+        url: `${origin}${MCP_RPC_PATH}`,
+        headers: async () => ({ authorization: `Bearer ${await token()}` }),
+        transformer: {
+          serialize: (value) => (isNonJsonSerializable(value) ? value : SuperJSON.serialize(value)),
+          deserialize: (value) => SuperJSON.deserialize(value),
+        },
+        // No cookies, automatic retries or credential-bearing redirects.
+        fetch: (url, init) =>
+          fetch(url, { ...init, credentials: "omit", redirect: "error", signal: AbortSignal.timeout(60_000) }),
+      }),
+    ],
+  })
+  const syncProfile = async (path: string) => {
+    if (profile && path.startsWith("esign.")) await client.mutation("esign.profile.sync", await profile())
+  }
+  return {
+    query: async (path, input) => {
+      await syncProfile(path)
+      return client.query(path, input)
+    },
+    mutation: async (path, input) => {
+      await syncProfile(path)
+      return client.mutation(path, input)
+    },
+  }
+}
+
+const accessSchema = z.object({ sub: z.string().min(1), permissions: z.array(z.string()), stale: z.boolean() })
+const backendErrorSchema = z.object({ error: z.string().nullable().optional() })
+
+function description(tool: ToolDefinition): Tool {
+  const schema = z.toJSONSchema(tool.input, { io: "input" })
+  if (schema.type !== "object") throw new Error(`Tool ${tool.path} must accept an object.`)
+  return {
+    name: toolName(tool),
+    description: tool.description,
+    // SAFETY: Zod generated an object JSON schema; JSON serialization removes its non-JSON helper properties.
+    inputSchema: JSON.parse(JSON.stringify(schema)) as Tool["inputSchema"],
+    annotations: {
+      readOnlyHint: tool.method === "query",
+      destructiveHint: tool.destructive ?? false,
+      idempotentHint: tool.method === "query",
+      openWorldHint: true,
+    },
+  }
+}
+
+// The output of a heterogeneous RPC is serialized only after its optional contract schema has parsed it.
+// oxlint-disable-next-line anti-slop/no-unknown-parameters
+function result(value: unknown): CallToolResult {
+  return { content: [{ type: "text", text: JSON.stringify(SuperJSON.serialize(value)) }] }
+}
+
+/** me.access is read afresh even for tools/list. A stale access snapshot always fails closed. */
+async function currentAccess(api: AdminApi) {
+  const access = accessSchema.parse(await api.query("me.access"))
+  if (access.stale) throw new Error("Permissions are temporarily unavailable. Try again later.")
+  if (!access.permissions.includes("admin:access") && !access.permissions.includes("people:self")) {
+    throw new Error("This account cannot access the admin dashboard.")
+  }
+  return access
+}
+
+export function createAdminMcpServer(api: AdminApi) {
+  const server = new Server(
+    { name: MCP_NAME, version: MCP_VERSION },
+    {
+      capabilities: { tools: { listChanged: true } },
+      instructions:
+        "Act for the signed-in PoliNetwork user, with their dashboard permissions. Read records before editing. Ask before destructive changes; never perform destructive actions on multiple rows without an explicit instruction covering them. Every mutation requires confirmed=true after the user has authorized that exact change. Never retry a mutation automatically: a network failure may follow a successful write. Files use explicit base64 bytes, never local paths. CIE signing still requires the person and the existing signing agent; never ask for their PIN. Some People procedures depend on a backend contract that may not yet be deployed.",
+    }
+  )
+  server.setRequestHandler("tools/list", async () => {
+    const access = await currentAccess(api)
+    return {
+      tools: [
+        {
+          name: "whoami",
+          description: "Read the signed-in subject and current dashboard permissions.",
+          inputSchema: { type: "object", properties: {}, additionalProperties: false },
+          annotations: { readOnlyHint: true },
+        },
+        ...tools
+          .filter((tool) => canUseTool(tool, access.permissions))
+          .map((tool) => {
+            const spec = description(tool)
+            if (tool.method === "mutation") {
+              // SAFETY: This wraps an already checked JSON schema; the SDK's JSON type has a fixed recursion depth.
+              spec.inputSchema = JSON.parse(
+                JSON.stringify({
+                  type: "object",
+                  properties: {
+                    input: spec.inputSchema,
+                    confirmed: { type: "boolean", const: true, description: "The user authorized this exact change." },
+                  },
+                  required: ["input", "confirmed"],
+                  additionalProperties: false,
+                })
+              ) as Tool["inputSchema"]
+            }
+            return spec
+          }),
+      ],
+    }
+  })
+  server.setRequestHandler("tools/call", async (request) => {
+    let writeOutcome: "not-sent" | "submitted" | "received" | "rejected" = "not-sent"
+    try {
+      const access = await currentAccess(api)
+      if (request.params.name === "whoami") return result(access)
+      const tool = tools.find((entry) => toolName(entry) === request.params.name)
+      if (!tool || !canUseTool(tool, access.permissions))
+        throw new Error("This operation is unavailable to your account.")
+      const raw =
+        tool.method === "mutation"
+          ? z
+              .object({ input: z.unknown(), confirmed: z.literal(true) })
+              .strict()
+              .parse(request.params.arguments).input
+          : (request.params.arguments ?? {})
+      const parsed: unknown = tool.input.parse(raw)
+      const input = tool.multipart ? await uploadForm(backendPath(tool), multipartInput.parse(parsed)) : parsed
+      const body = Object.keys(z.record(z.string(), z.unknown()).parse(parsed)).length === 0 ? undefined : input
+      if (tool.method === "mutation") writeOutcome = "submitted"
+      const response = await api[tool.method](backendPath(tool), body)
+      if (tool.method === "mutation") writeOutcome = "received"
+      const error = backendErrorSchema.safeParse(response)
+      if (error.success && error.data.error) {
+        writeOutcome = "rejected"
+        throw new Error(error.data.error)
+      }
+      if (tool.path === "people.receipts.prepareSignatures") {
+        const selection = prepareReceiptSignaturesInputSchema.parse(raw)
+        const signatures = receiptSignaturesSchema.parse(response)
+        if (!receiptSignaturesMatchSelection(selection.receiptIds, signatures)) {
+          throw new Error("The signing requests do not exactly match the selected receipts.")
+        }
+      }
+      if (
+        ["tg.groups.setHide", "wa.groups.setHide", "wa.groups.modify", "wa.groups.delete"].includes(tool.path) &&
+        !response
+      ) {
+        writeOutcome = "rejected"
+        throw new Error("The record was not updated.")
+      }
+      if (
+        [
+          "groups.labels.create",
+          "groups.labels.createRelease",
+          "groups.labels.modify",
+          "groups.labels.rename",
+        ].includes(tool.path) &&
+        (!Array.isArray(response) || response.length === 0)
+      ) {
+        writeOutcome = "rejected"
+        throw new Error("The label was not saved.")
+      }
+      return result(tool.output ? tool.output.parse(response) : response)
+    } catch (error) {
+      // Log the message only: OAuth and HTTP error objects can contain authorization headers.
+      const prefix =
+        writeOutcome === "received"
+          ? "The backend answered after the change was submitted, but its result could not be verified. Inspect the record before retrying. "
+          : writeOutcome === "submitted"
+            ? "The change may already have been applied. Inspect the record before retrying. "
+            : ""
+      const message = prefix + (error instanceof Error ? error.message : "The operation failed.")
+      console.error(new Error(prefix + (error instanceof Error ? error.message : "The operation failed.")))
+      return { isError: true, content: [{ type: "text", text: message }] }
+    }
+  })
+  return server
+}
diff --git a/src/routeTree.gen.ts b/src/routeTree.gen.ts
index 57b6c4d9..c7ac8496 100644
--- a/src/routeTree.gen.ts
+++ b/src/routeTree.gen.ts
@@ -45,6 +45,7 @@ import { Route as DashboardEsignDrivesRouteImport } from './routes/dashboard/esi
 import { Route as DashboardAzureMembersRouteImport } from './routes/dashboard/azure/members'
 import { Route as DashboardAzureGroupsRouteImport } from './routes/dashboard/azure/groups'
 import { Route as DashboardAccountMeRouteImport } from './routes/dashboard/account/me'
+import { Route as ApiMcpConfigRouteImport } from './routes/api/mcp/config'
 import { Route as DashboardWebGroupsByLabelIndexRouteImport } from './routes/dashboard/web/groups-by-label/index'
 import { Route as DashboardTelegramUsersIndexRouteImport } from './routes/dashboard/telegram/users/index'
 import { Route as DashboardPeopleTeamsIndexRouteImport } from './routes/dashboard/people/teams/index'
@@ -56,6 +57,7 @@ import { Route as DashboardTelegramUsersUserIdRouteImport } from './routes/dashb
 import { Route as DashboardPeopleTeamsTeamIdRouteImport } from './routes/dashboard/people/teams/$teamId'
 import { Route as DashboardPeopleCensusCampaignIdRouteImport } from './routes/dashboard/people/census/$campaignId'
 import { Route as DashboardEsignRequestsRequestIdRouteImport } from './routes/dashboard/esign/requests/$requestId'
+import { Route as ApiMcpRpcSplatRouteImport } from './routes/api/mcp/rpc/$'
 import { Route as ApiEsignAgentSplatRouteImport } from './routes/api/esign/agent/$'
 
 const UnauthorizedRoute = UnauthorizedRouteImport.update({
@@ -241,6 +243,11 @@ const DashboardAccountMeRoute = DashboardAccountMeRouteImport.update({
   path: '/account/me',
   getParentRoute: () => DashboardRoute,
 } as any)
+const ApiMcpConfigRoute = ApiMcpConfigRouteImport.update({
+  id: '/api/mcp/config',
+  path: '/api/mcp/config',
+  getParentRoute: () => rootRouteImport,
+} as any)
 const DashboardWebGroupsByLabelIndexRoute =
   DashboardWebGroupsByLabelIndexRouteImport.update({
     id: '/groups-by-label/',
@@ -306,6 +313,11 @@ const DashboardEsignRequestsRequestIdRoute =
     path: '/esign/requests/$requestId',
     getParentRoute: () => DashboardRoute,
   } as any)
+const ApiMcpRpcSplatRoute = ApiMcpRpcSplatRouteImport.update({
+  id: '/api/mcp/rpc/$',
+  path: '/api/mcp/rpc/$',
+  getParentRoute: () => rootRouteImport,
+} as any)
 const ApiEsignAgentSplatRoute = ApiEsignAgentSplatRouteImport.update({
   id: '/api/esign/agent/$',
   path: '/api/esign/agent/$',
@@ -322,6 +334,7 @@ export interface FileRoutesByFullPath {
   '/auth/logout': typeof AuthLogoutRoute
   '/dashboard/web': typeof DashboardWebRouteWithChildren
   '/dashboard/': typeof DashboardIndexRoute
+  '/api/mcp/config': typeof ApiMcpConfigRoute
   '/dashboard/account/me': typeof DashboardAccountMeRoute
   '/dashboard/azure/groups': typeof DashboardAzureGroupsRoute
   '/dashboard/azure/members': typeof DashboardAzureMembersRoute
@@ -350,6 +363,7 @@ export interface FileRoutesByFullPath {
   '/dashboard/account/': typeof DashboardAccountIndexRoute
   '/dashboard/people/': typeof DashboardPeopleIndexRoute
   '/api/esign/agent/$': typeof ApiEsignAgentSplatRoute
+  '/api/mcp/rpc/$': typeof ApiMcpRpcSplatRoute
   '/dashboard/esign/requests/$requestId': typeof DashboardEsignRequestsRequestIdRoute
   '/dashboard/people/census/$campaignId': typeof DashboardPeopleCensusCampaignIdRoute
   '/dashboard/people/teams/$teamId': typeof DashboardPeopleTeamsTeamIdRoute
@@ -371,6 +385,7 @@ export interface FileRoutesByTo {
   '/auth/logout': typeof AuthLogoutRoute
   '/dashboard/web': typeof DashboardWebRouteWithChildren
   '/dashboard': typeof DashboardIndexRoute
+  '/api/mcp/config': typeof ApiMcpConfigRoute
   '/dashboard/account/me': typeof DashboardAccountMeRoute
   '/dashboard/azure/groups': typeof DashboardAzureGroupsRoute
   '/dashboard/azure/members': typeof DashboardAzureMembersRoute
@@ -399,6 +414,7 @@ export interface FileRoutesByTo {
   '/dashboard/account': typeof DashboardAccountIndexRoute
   '/dashboard/people': typeof DashboardPeopleIndexRoute
   '/api/esign/agent/$': typeof ApiEsignAgentSplatRoute
+  '/api/mcp/rpc/$': typeof ApiMcpRpcSplatRoute
   '/dashboard/esign/requests/$requestId': typeof DashboardEsignRequestsRequestIdRoute
   '/dashboard/people/census/$campaignId': typeof DashboardPeopleCensusCampaignIdRoute
   '/dashboard/people/teams/$teamId': typeof DashboardPeopleTeamsTeamIdRoute
@@ -422,6 +438,7 @@ export interface FileRoutesById {
   '/auth/logout': typeof AuthLogoutRoute
   '/dashboard/web': typeof DashboardWebRouteWithChildren
   '/dashboard/': typeof DashboardIndexRoute
+  '/api/mcp/config': typeof ApiMcpConfigRoute
   '/dashboard/account/me': typeof DashboardAccountMeRoute
   '/dashboard/azure/groups': typeof DashboardAzureGroupsRoute
   '/dashboard/azure/members': typeof DashboardAzureMembersRoute
@@ -450,6 +467,7 @@ export interface FileRoutesById {
   '/dashboard/account/': typeof DashboardAccountIndexRoute
   '/dashboard/people/': typeof DashboardPeopleIndexRoute
   '/api/esign/agent/$': typeof ApiEsignAgentSplatRoute
+  '/api/mcp/rpc/$': typeof ApiMcpRpcSplatRoute
   '/dashboard/esign/requests/$requestId': typeof DashboardEsignRequestsRequestIdRoute
   '/dashboard/people/census/$campaignId': typeof DashboardPeopleCensusCampaignIdRoute
   '/dashboard/people/teams/$teamId': typeof DashboardPeopleTeamsTeamIdRoute
@@ -474,6 +492,7 @@ export interface FileRouteTypes {
     | '/auth/logout'
     | '/dashboard/web'
     | '/dashboard/'
+    | '/api/mcp/config'
     | '/dashboard/account/me'
     | '/dashboard/azure/groups'
     | '/dashboard/azure/members'
@@ -502,6 +521,7 @@ export interface FileRouteTypes {
     | '/dashboard/account/'
     | '/dashboard/people/'
     | '/api/esign/agent/$'
+    | '/api/mcp/rpc/$'
     | '/dashboard/esign/requests/$requestId'
     | '/dashboard/people/census/$campaignId'
     | '/dashboard/people/teams/$teamId'
@@ -523,6 +543,7 @@ export interface FileRouteTypes {
     | '/auth/logout'
     | '/dashboard/web'
     | '/dashboard'
+    | '/api/mcp/config'
     | '/dashboard/account/me'
     | '/dashboard/azure/groups'
     | '/dashboard/azure/members'
@@ -551,6 +572,7 @@ export interface FileRouteTypes {
     | '/dashboard/account'
     | '/dashboard/people'
     | '/api/esign/agent/$'
+    | '/api/mcp/rpc/$'
     | '/dashboard/esign/requests/$requestId'
     | '/dashboard/people/census/$campaignId'
     | '/dashboard/people/teams/$teamId'
@@ -573,6 +595,7 @@ export interface FileRouteTypes {
     | '/auth/logout'
     | '/dashboard/web'
     | '/dashboard/'
+    | '/api/mcp/config'
     | '/dashboard/account/me'
     | '/dashboard/azure/groups'
     | '/dashboard/azure/members'
@@ -601,6 +624,7 @@ export interface FileRouteTypes {
     | '/dashboard/account/'
     | '/dashboard/people/'
     | '/api/esign/agent/$'
+    | '/api/mcp/rpc/$'
     | '/dashboard/esign/requests/$requestId'
     | '/dashboard/people/census/$campaignId'
     | '/dashboard/people/teams/$teamId'
@@ -622,7 +646,9 @@ export interface RootRouteChildren {
   AuthCallbackRoute: typeof AuthCallbackRoute
   AuthLoginRoute: typeof AuthLoginRoute
   AuthLogoutRoute: typeof AuthLogoutRoute
+  ApiMcpConfigRoute: typeof ApiMcpConfigRoute
   ApiEsignAgentSplatRoute: typeof ApiEsignAgentSplatRoute
+  ApiMcpRpcSplatRoute: typeof ApiMcpRpcSplatRoute
 }
 
 declare module '@tanstack/react-router' {
@@ -879,6 +905,13 @@ declare module '@tanstack/react-router' {
       preLoaderRoute: typeof DashboardAccountMeRouteImport
       parentRoute: typeof DashboardRoute
     }
+    '/api/mcp/config': {
+      id: '/api/mcp/config'
+      path: '/api/mcp/config'
+      fullPath: '/api/mcp/config'
+      preLoaderRoute: typeof ApiMcpConfigRouteImport
+      parentRoute: typeof rootRouteImport
+    }
     '/dashboard/web/groups-by-label/': {
       id: '/dashboard/web/groups-by-label/'
       path: '/groups-by-label'
@@ -956,6 +989,13 @@ declare module '@tanstack/react-router' {
       preLoaderRoute: typeof DashboardEsignRequestsRequestIdRouteImport
       parentRoute: typeof DashboardRoute
     }
+    '/api/mcp/rpc/$': {
+      id: '/api/mcp/rpc/$'
+      path: '/api/mcp/rpc/$'
+      fullPath: '/api/mcp/rpc/$'
+      preLoaderRoute: typeof ApiMcpRpcSplatRouteImport
+      parentRoute: typeof rootRouteImport
+    }
     '/api/esign/agent/$': {
       id: '/api/esign/agent/$'
       path: '/api/esign/agent/$'
@@ -1074,7 +1114,9 @@ const rootRouteChildren: RootRouteChildren = {
   AuthCallbackRoute: AuthCallbackRoute,
   AuthLoginRoute: AuthLoginRoute,
   AuthLogoutRoute: AuthLogoutRoute,
+  ApiMcpConfigRoute: ApiMcpConfigRoute,
   ApiEsignAgentSplatRoute: ApiEsignAgentSplatRoute,
+  ApiMcpRpcSplatRoute: ApiMcpRpcSplatRoute,
 }
 export const routeTree = rootRouteImport
   ._addFileChildren(rootRouteChildren)
diff --git a/src/routes/api/mcp/config.ts b/src/routes/api/mcp/config.ts
new file mode 100644
index 00000000..b7d0429e
--- /dev/null
+++ b/src/routes/api/mcp/config.ts
@@ -0,0 +1,21 @@
+import { createFileRoute } from "@tanstack/react-router"
+
+import { mcpPublicConfig } from "@/server/mcp-config"
+
+export const Route = createFileRoute("/api/mcp/config")({
+  server: {
+    handlers: {
+      GET: () => {
+        try {
+          return Response.json(mcpPublicConfig(process.env), { headers: { "cache-control": "no-store" } })
+        } catch (error) {
+          console.error(error)
+          return Response.json(
+            { error: "The admin MCP OAuth client has not been configured." },
+            { status: 503, headers: { "cache-control": "no-store" } }
+          )
+        }
+      },
+    },
+  },
+})
diff --git a/src/routes/api/mcp/rpc/$.ts b/src/routes/api/mcp/rpc/$.ts
new file mode 100644
index 00000000..93345619
--- /dev/null
+++ b/src/routes/api/mcp/rpc/$.ts
@@ -0,0 +1,24 @@
+import { TRPC_PATH } from "@polinetwork/backend"
+import { createFileRoute } from "@tanstack/react-router"
+
+import { env } from "@/env"
+import { resolveAppOrigin } from "@/server/auth-config"
+import { createUntypedBackendClient } from "@/server/backend.server"
+import { mcpAccessSchema, mcpRpcFailure, proxyMcpRpc } from "@/server/mcp-proxy"
+
+function handle(request: Request) {
+  if (!process.env.ADMIN_MCP_CLIENT_ID) {
+    return mcpRpcFailure(503, "Admin MCP is not configured.")
+  }
+  return proxyMcpRpc(request, {
+    origin: resolveAppOrigin(process.env, process.env.NODE_ENV),
+    backendUrl: env.BACKEND_URL,
+    trpcPath: TRPC_PATH,
+    access: async (token) => mcpAccessSchema.parse(await createUntypedBackendClient(token).query("me.access")),
+    fetch,
+  })
+}
+
+export const Route = createFileRoute("/api/mcp/rpc/$")({
+  server: { handlers: { GET: ({ request }) => handle(request), POST: ({ request }) => handle(request) } },
+})
diff --git a/src/server/csrf.ts b/src/server/csrf.ts
index 9baafa92..7bbf4de9 100644
--- a/src/server/csrf.ts
+++ b/src/server/csrf.ts
@@ -15,5 +15,6 @@ export function isTrustedRequest(method: string, origin: string | null, appOrigi
  * cookie and forwards no credential: the single-use ticket in the path is the only authority, so CSRF cannot apply.
  */
 export function isCsrfExemptPath(pathname: string) {
-  return pathname.startsWith("/api/esign/agent/")
+  // MCP RPCs ignore cookies and require a user bearer token. The gateway rejects foreign browser Origins itself.
+  return pathname.startsWith("/api/esign/agent/") || pathname.startsWith("/api/mcp/rpc/")
 }
diff --git a/src/server/mcp-config.ts b/src/server/mcp-config.ts
new file mode 100644
index 00000000..c922045d
--- /dev/null
+++ b/src/server/mcp-config.ts
@@ -0,0 +1,13 @@
+import { MCP_CALLBACK, MCP_DOWNLOAD, mcpConfigSchema } from "../mcp/protocol"
+import { resolveAppOrigin } from "./auth-config"
+
+/** A separate public native OAuth client, provisioned by an IdP administrator. */
+export function mcpPublicConfig(env: NodeJS.ProcessEnv, nodeEnv = env.NODE_ENV) {
+  const origin = resolveAppOrigin(env, nodeEnv)
+  const config = mcpConfigSchema.parse({
+    clientId: env.ADMIN_MCP_CLIENT_ID,
+    issuer: new URL("/api/auth", env.IDP_URL || "https://auth.polinetwork.org").href,
+    resource: env.BACKEND_RESOURCE || "https://backend.internal.polinetwork.org",
+  })
+  return { ...config, download: `${origin}${MCP_DOWNLOAD}`, redirectUri: MCP_CALLBACK }
+}
diff --git a/src/server/mcp-proxy.ts b/src/server/mcp-proxy.ts
new file mode 100644
index 00000000..e5359efd
--- /dev/null
+++ b/src/server/mcp-proxy.ts
@@ -0,0 +1,147 @@
+import { TRPCClientError } from "@trpc/client"
+import { SuperJSON } from "superjson"
+import { z } from "zod"
+
+import { backendPath, canUseTool, rpcMethod, tools } from "../mcp/catalog"
+import { MCP_MAX_MESSAGE_BYTES, MCP_RPC_PATH } from "../mcp/protocol"
+
+const MAX_BODY = MCP_MAX_MESSAGE_BYTES
+export const mcpAccessSchema = z.object({ permissions: z.array(z.string()), stale: z.boolean() })
+export type McpAccess = z.infer<typeof mcpAccessSchema>
+
+export interface McpProxyServices {
+  origin: string
+  backendUrl: string
+  trpcPath: string
+  access: (token: string) => Promise<McpAccess>
+  fetch: typeof fetch
+}
+
+const errorCodes = new Map([
+  [400, { code: -32600, name: "BAD_REQUEST" }],
+  [401, { code: -32001, name: "UNAUTHORIZED" }],
+  [403, { code: -32003, name: "FORBIDDEN" }],
+  [404, { code: -32004, name: "NOT_FOUND" }],
+  [405, { code: -32005, name: "METHOD_NOT_SUPPORTED" }],
+  [413, { code: -32013, name: "PAYLOAD_TOO_LARGE" }],
+  [415, { code: -32015, name: "UNSUPPORTED_MEDIA_TYPE" }],
+  [502, { code: -32052, name: "BAD_GATEWAY" }],
+  [503, { code: -32053, name: "SERVICE_UNAVAILABLE" }],
+])
+
+export function mcpRpcFailure(status: number, message: string) {
+  const error = errorCodes.get(status) ?? { code: -32603, name: "INTERNAL_SERVER_ERROR" }
+  return Response.json(
+    { error: SuperJSON.serialize({ message, code: error.code, data: { code: error.name, httpStatus: status } }) },
+    {
+      status,
+      headers: { "cache-control": "no-store" },
+    }
+  )
+}
+
+const failure = mcpRpcFailure
+
+async function readBody(request: Request) {
+  if (Number(request.headers.get("content-length") ?? 0) > MAX_BODY) throw new Error("Request too large.")
+  const reader = request.body?.getReader()
+  if (!reader) return new Uint8Array()
+  let bytes = 0
+  const chunks: Uint8Array[] = []
+  let timedOut = false
+  const timer = setTimeout(() => {
+    timedOut = true
+    void reader.cancel()
+  }, 10_000)
+  try {
+    for (;;) {
+      const part = await reader.read()
+      if (part.done) break
+      bytes += part.value.length
+      if (bytes > MAX_BODY) {
+        await reader.cancel()
+        throw new Error("Request too large.")
+      }
+      chunks.push(part.value)
+    }
+    if (timedOut) throw new Error("Upload timed out.")
+    return Buffer.concat(chunks)
+  } finally {
+    clearTimeout(timer)
+  }
+}
+
+/** A cookie-free gateway for the local OAuth client, limited to dashboard RPCs and exact HTTP methods. */
+export async function proxyMcpRpc(request: Request, services: McpProxyServices) {
+  const url = new URL(request.url)
+  const path = url.pathname.slice(`${MCP_RPC_PATH}/`.length)
+  if (!url.pathname.startsWith(`${MCP_RPC_PATH}/`) || !/^[A-Za-z][A-Za-z0-9_.]*$/.test(path))
+    return failure(404, "Not found.")
+  const method = rpcMethod(path)
+  if (!method) return failure(404, "Not found.")
+  if (request.method !== method) return failure(405, "Method not allowed.")
+  if ([...url.searchParams.keys()].some((key) => key !== "input"))
+    return failure(400, "Batch requests are not supported.")
+  const origin = request.headers.get("origin")
+  if (origin !== null && origin !== services.origin) return failure(403, "Untrusted origin.")
+  const token = /^Bearer ([A-Za-z0-9._~-]+)$/i.exec(request.headers.get("authorization") ?? "")?.[1]
+  if (!token) return failure(401, "Sign in to use the admin MCP.")
+  try {
+    const access = mcpAccessSchema.parse(await services.access(token))
+    if (access.stale) return failure(503, "Permissions are temporarily unavailable.")
+    const permitted =
+      path === "esign.profile.sync"
+        ? access.permissions.includes("admin:access") && access.permissions.includes("esign:sign")
+        : path === "me.access"
+          ? access.permissions.includes("admin:access") || access.permissions.includes("people:self")
+          : tools.some((tool) => backendPath(tool) === path && canUseTool(tool, access.permissions))
+    if (!permitted) return failure(403, "This account cannot use this operation.")
+  } catch (error) {
+    console.error(new Error(error instanceof Error ? error.message : "Authorization failed"))
+    if (error instanceof TRPCClientError && ["UNAUTHORIZED", "FORBIDDEN"].includes(error.data?.code)) {
+      return failure(error.data.code === "UNAUTHORIZED" ? 401 : 403, "Access denied.")
+    }
+    return failure(503, "Authorization is temporarily unavailable.")
+  }
+  const headers = new Headers({ authorization: `Bearer ${token}`, accept: "application/json" })
+  let body: Uint8Array | undefined
+  if (method === "POST") {
+    const contentType = request.headers.get("content-type") ?? ""
+    if (!/^(?:application\/json|multipart\/form-data)(?:;|$)/i.test(contentType))
+      return failure(415, "Send JSON or multipart form data.")
+    headers.set("content-type", contentType)
+    try {
+      body = await readBody(request)
+    } catch (error) {
+      console.error(error)
+      return failure(413, "Upload is too large or timed out.")
+    }
+  }
+  try {
+    const response = await services.fetch(`${services.backendUrl}${services.trpcPath}/${path}${url.search}`, {
+      method,
+      headers,
+      body: body ? new Uint8Array(body) : undefined,
+      redirect: "manual",
+      signal: AbortSignal.timeout(60_000),
+    })
+    // A backend redirect is never exposed with a credential-bearing destination.
+    if (response.status >= 300 && response.status < 400) {
+      await response.body?.cancel()
+      return failure(502, "Unexpected backend redirect.")
+    }
+    return new Response(response.body, {
+      status: response.status,
+      headers: {
+        "content-type": response.headers.get("content-type") ?? "application/json",
+        "cache-control": "no-store",
+      },
+    })
+  } catch (error) {
+    console.error(new Error(error instanceof Error ? error.message : "Backend unavailable"))
+    return failure(
+      502,
+      "Backend unavailable. A submitted mutation may already have succeeded; inspect the record before retrying."
+    )
+  }
+}
diff --git a/tests/mcp-package.test.mjs b/tests/mcp-package.test.mjs
new file mode 100644
index 00000000..8719b8d7
--- /dev/null
+++ b/tests/mcp-package.test.mjs
@@ -0,0 +1,68 @@
+import assert from "node:assert/strict"
+import { execFileSync } from "node:child_process"
+import { createHash } from "node:crypto"
+import { mkdtemp, readFile, rm } from "node:fs/promises"
+import { tmpdir } from "node:os"
+import { join } from "node:path"
+import test from "node:test"
+
+import { Client } from "@modelcontextprotocol/client"
+import { StdioClientTransport } from "@modelcontextprotocol/client/stdio"
+import { z } from "zod"
+
+void test(
+  "the public download installs without dependencies and starts a real stdio MCP outside the repository",
+  { timeout: 30_000 },
+  async (t) => {
+    const root = new URL("../", import.meta.url).pathname
+    execFileSync(process.execPath, ["scripts/build-mcp.mjs"], { cwd: root, stdio: "pipe" })
+    const archive = join(root, "public/downloads/polinetwork-admin-mcp.tgz")
+    const checksum = await readFile(`${archive}.sha256`, "utf8")
+    assert.equal(
+      checksum.split(" ")[0],
+      createHash("sha256")
+        .update(await readFile(archive))
+        .digest("hex")
+    )
+    const entries = execFileSync("tar", ["-tzf", archive], { encoding: "utf8" }).trim().split("\n").sort()
+    assert.deepEqual(entries, [
+      "package/README.md",
+      "package/cli.mjs",
+      "package/cli.mjs.LEGAL.txt",
+      "package/package.json",
+    ])
+    const directory = await mkdtemp(join(tmpdir(), "admin-mcp-package-"))
+    t.after(() => rm(directory, { recursive: true, force: true }))
+    execFileSync("tar", ["-xzf", archive, "-C", directory])
+    const manifest = JSON.parse(await readFile(join(directory, "package/package.json"), "utf8"))
+    assert.equal(manifest.dependencies, undefined)
+    assert.deepEqual(manifest.bin, { "polinetwork-admin-mcp": "cli.mjs" })
+    const help = execFileSync(process.execPath, [join(directory, "package/cli.mjs"), "help"], {
+      encoding: "utf8",
+      stdio: "pipe",
+    })
+    assert.equal(help, "", "stdout is reserved for MCP protocol messages")
+    const client = new Client({ name: "package-smoke", version: "1" })
+    t.after(() => client.close())
+    await client.connect(
+      new StdioClientTransport({
+        command: process.execPath,
+        args: [join(directory, "package/cli.mjs"), "serve"],
+        cwd: directory,
+        stderr: "pipe",
+      })
+    )
+    assert.equal(client.getServerVersion().name, "polinetwork-admin")
+    assert.ok(client.getServerCapabilities().tools)
+    // Real upload envelopes can exceed the SDK's 10 MB default. Unknown methods exercise transport limits
+    // without reading credentials or calling the API on the machine running the test.
+    await assert.rejects(
+      client.request(
+        { method: "test/large-upload-envelope", params: { padding: "x".repeat(11 * 1024 * 1024) } },
+        z.object({})
+      ),
+      /method not found/i
+    )
+    await client.ping()
+  }
+)
diff --git a/tests/mcp.test.mjs b/tests/mcp.test.mjs
new file mode 100644
index 00000000..14f90d7e
--- /dev/null
+++ b/tests/mcp.test.mjs
@@ -0,0 +1,612 @@
+import assert from "node:assert/strict"
+import { createHash, generateKeyPairSync, sign } from "node:crypto"
+import { chmod, mkdir, mkdtemp, readdir, readFile, rm, stat, writeFile } from "node:fs/promises"
+import { createServer, request as httpRequest } from "node:http"
+import { tmpdir } from "node:os"
+import { join } from "node:path"
+import { after, test } from "node:test"
+import { pathToFileURL } from "node:url"
+
+import { Client, InMemoryTransport } from "@modelcontextprotocol/client"
+import { build } from "esbuild"
+import { SuperJSON } from "superjson"
+
+const directory = await mkdtemp(join(tmpdir(), "admin-mcp-test-"))
+after(() => rm(directory, { recursive: true, force: true }))
+const root = new URL("../", import.meta.url).pathname
+const entry = join(directory, "api.mjs")
+await build({
+  stdin: {
+    contents: [
+      "mcp/server",
+      "mcp/catalog",
+      "mcp/protocol",
+      "mcp/auth",
+      "mcp/files",
+      "server/mcp-proxy",
+      "server/mcp-config",
+    ]
+      .map((file) => `export * from ${JSON.stringify(`${root}src/${file}.ts`)}`)
+      .join("\n"),
+    resolveDir: root,
+    loader: "ts",
+  },
+  outfile: entry,
+  bundle: true,
+  platform: "node",
+  format: "esm",
+  logLevel: "silent",
+  banner: {
+    js: 'import { createRequire as __createRequire } from "node:module"; const require = __createRequire(import.meta.url);',
+  },
+})
+const {
+  createAdminMcpServer,
+  createAdminApi,
+  tools,
+  backendPath,
+  rpcMethod,
+  proxyMcpRpc,
+  uploadForm,
+  multipartInput,
+  AdminMcpAuth,
+  mcpPublicConfig,
+  MCP_CALLBACK,
+} = await import(pathToFileURL(entry).href)
+
+async function connection(t, permissions) {
+  const state = { permissions, stale: false, calls: [], mutationError: null, mutationResult: { error: null } }
+  const api = {
+    query: async (path, input) => {
+      if (path === "me.access") return { sub: "person", permissions: state.permissions, stale: state.stale }
+      state.calls.push({ method: "query", path, input })
+      return []
+    },
+    mutation: async (path, input) => {
+      state.calls.push({ method: "mutation", path, input })
+      if (state.mutationError) throw state.mutationError
+      return state.mutationResult
+    },
+  }
+  const server = createAdminMcpServer(api)
+  const client = new Client({ name: "test", version: "1" })
+  const [clientTransport, serverTransport] = InMemoryTransport.createLinkedPair()
+  await server.connect(serverTransport)
+  await client.connect(clientTransport)
+  t.after(() => client.close())
+  return { client, state }
+}
+
+void test("MCP handshake and schemas cover the complete dashboard allowlist", async (t) => {
+  const permissions = ["admin:access", ...new Set(tools.flatMap((tool) => tool.permissions))]
+  const { client } = await connection(t, permissions)
+  const listed = await client.listTools()
+  assert.equal(listed.tools.length, tools.length + 1)
+  assert.equal(new Set(listed.tools.map((tool) => tool.name)).size, listed.tools.length)
+  for (const tool of listed.tools) assert.equal(tool.inputSchema.type, "object", tool.name)
+  assert.ok(tools.length > 120)
+  assert.equal(rpcMethod("azure.groups.addMember"), null)
+  assert.equal(rpcMethod("azure.groups.removeMember"), null)
+  assert.equal(rpcMethod("azure.members.delete"), null)
+  const features = join(root, "src/features")
+  const files = await readdir(features, { recursive: true })
+  const sources = await Promise.all(
+    files.filter((file) => file.endsWith(".functions.ts")).map((file) => readFile(join(features, file), "utf8"))
+  )
+  const sourcePaths = sources.flatMap((source) =>
+    Array.from(source.matchAll(/context\.backend\.([A-Za-z0-9_.]+)\.(?:query|mutate)/g), ([, path]) => path)
+  )
+  assert.ok(sourcePaths.length > 0, "The dashboard procedure coverage must inspect its server functions")
+  // The dashboard also syncs its signer display profile from the ID token. It is internal, not a model tool.
+  for (const path of sourcePaths.filter((path) => path !== "esign.profile.sync"))
+    assert.ok(
+      tools.some((tool) => backendPath(tool) === path),
+      `Missing dashboard operation: ${path}`
+    )
+})
+
+void test("permissions filter the tools and revocation is enforced before a call", async (t) => {
+  const { client, state } = await connection(t, ["admin:access", "azure:members:read"])
+  assert.ok((await client.listTools()).tools.some((tool) => tool.name === "azure_members_getAll"))
+  assert.ok(!(await client.listTools()).tools.some((tool) => tool.name === "azure_members_create"))
+  state.permissions = ["admin:access"]
+  const denied = await client.callTool({ name: "azure_members_getAll", arguments: {} })
+  assert.equal(denied.isError, true)
+  assert.equal(state.calls.length, 0)
+  state.stale = true
+  assert.equal((await client.callTool({ name: "tg_groups_getAll", arguments: {} })).isError, true)
+  state.stale = false
+  state.permissions = []
+  await assert.rejects(client.listTools())
+})
+
+void test("people:self admits personal and backend-scoped team tools without general admin data", async (t) => {
+  const { client } = await connection(t, ["people:self"])
+  const names = (await client.listTools()).tools.map((tool) => tool.name)
+  assert.ok(names.includes("people_me_get"))
+  assert.ok(names.includes("people_teams_list"))
+  assert.ok(names.includes("people_capo_get"))
+  assert.ok(!names.includes("people_persons_list"))
+  assert.ok(!names.includes("tg_groups_getAll"))
+  assert.ok(!names.includes("azure_members_getAll"))
+})
+
+void test("writes validate confirmation and input, refuse actor overrides, and never repeat", async (t) => {
+  const { client, state } = await connection(t, [
+    "admin:access",
+    "tg:groups:manage",
+    "tg:grants:manage",
+    "web:reports:manage",
+  ])
+  assert.equal(
+    (await client.callTool({ name: "tg_groups_leaveChat", arguments: { input: { chatId: -100 } } })).isError,
+    true
+  )
+  assert.equal(state.calls.length, 0)
+  const forged = await client.callTool({
+    name: "tg_grants_create",
+    arguments: {
+      confirmed: true,
+      input: {
+        userId: 123,
+        since: "2026-10-01T00:00:00Z",
+        until: "2026-11-01T00:00:00Z",
+        grantedBy: 999,
+        grantedBySub: "evil",
+      },
+    },
+  })
+  assert.equal(forged.isError, true)
+  assert.equal(state.calls.length, 0)
+  const granted = await client.callTool({
+    name: "tg_grants_create",
+    arguments: {
+      confirmed: true,
+      input: { userId: 123, since: "2026-10-01T00:00:00Z", until: "2026-11-01T00:00:00Z" },
+    },
+  })
+  assert.ok(!granted.isError)
+  assert.equal(state.calls.length, 1)
+  assert.equal(state.calls[0].input.grantedBy, undefined)
+  assert.equal(state.calls[0].input.grantedBySub, undefined)
+  assert.ok(state.calls[0].input.since instanceof Date)
+  assert.equal(state.calls[0].input.sendTgLog, true)
+  assert.equal(
+    (await client.callTool({ name: "web_reports_dismiss", arguments: { confirmed: true, input: { ids: [1, 2] } } }))
+      .isError,
+    true
+  )
+  assert.equal(state.calls.length, 1)
+})
+
+void test("People output is parsed with the dashboard contract", async (t) => {
+  const { client } = await connection(t, ["people:self"])
+  const invalid = await client.callTool({ name: "people_me_get", arguments: {} })
+  assert.equal(invalid.isError, true)
+})
+
+void test("a failed mutation is sent once and never retried automatically", async (t) => {
+  const { client, state } = await connection(t, ["admin:access", "wa:groups:manage"])
+  state.mutationError = new Error("Connection lost after submitting the change")
+  const failed = await client.callTool({ name: "wa_groups_delete", arguments: { confirmed: true, input: { id: 42 } } })
+  assert.equal(failed.isError, true)
+  assert.match(failed.content[0].text, /inspect.*before retrying/i)
+  assert.equal(state.calls.length, 1)
+  assert.equal(state.calls[0].path, "wa.groups.delete")
+})
+
+void test("a successful write with an unexpected response is reported as uncertain, without a retry", async (t) => {
+  const { client, state } = await connection(t, ["admin:access", "people:fees:write"])
+  state.mutationResult = { unexpected: "receipt was created" }
+  const response = await client.callTool({
+    name: "people_fees_approve",
+    arguments: { confirmed: true, input: { personId: "P-0007" } },
+  })
+  assert.equal(response.isError, true)
+  assert.match(response.content[0].text, /backend answered.*could not be verified/i)
+  assert.match(response.content[0].text, /inspect.*before retrying/i)
+  assert.equal(state.calls.length, 1)
+})
+
+void test("multipart sends normalized dashboard fields and supplies an omitted optional project link", async () => {
+  const project = await uploadForm(
+    "web.projects.addProject",
+    multipartInput.parse({
+      fields: {
+        title: "  Project  ",
+        descriptionIt: "  Italiano  ",
+        descriptionEn: " English ",
+        category: "general",
+        grantedBySub: "forged",
+      },
+      files: [],
+    })
+  )
+  assert.deepEqual(Object.fromEntries(project), {
+    title: "Project",
+    descriptionIt: "Italiano",
+    descriptionEn: "English",
+    category: "general",
+    link: "",
+  })
+  const association = await uploadForm(
+    "web.associations.editAssociation",
+    multipartInput.parse({
+      fields: {
+        id: "7",
+        name: " Name ",
+        descriptionIt: " Italiano ",
+        descriptionEn: " English ",
+        grantedBySub: "forged",
+      },
+      files: [],
+    })
+  )
+  assert.deepEqual(Object.fromEntries(association), {
+    id: "7",
+    name: "Name",
+    descriptionIt: "Italiano",
+    descriptionEn: "English",
+  })
+})
+
+void test("multipart accepts explicit file bytes and enforces the dashboard file limits", async () => {
+  const file = {
+    field: "file",
+    name: "guide.pdf",
+    type: "application/pdf",
+    base64: Buffer.from("%PDF-1.7\n").toString("base64"),
+  }
+  const form = await uploadForm(
+    "web.guides_matricole.addGuide",
+    multipartInput.parse({ fields: { version: "2026", date: "2026-10-01T00:00:00Z" }, files: [file] })
+  )
+  assert.equal(await form.get("file").text(), "%PDF-1.7\n")
+  const maximum = await uploadForm(
+    "web.guides_matricole.addGuide",
+    multipartInput.parse({
+      fields: { version: "2026", date: "2026-10-01T00:00:00Z" },
+      files: [{ ...file, base64: Buffer.alloc(2 * 1024 * 1024).toString("base64") }],
+    })
+  )
+  assert.equal(maximum.get("file").size, 2 * 1024 * 1024)
+  await assert.rejects(
+    uploadForm(
+      "esign.documents.upload",
+      multipartInput.parse({ files: [{ ...file, name: "payload.exe", type: "application/octet-stream" }] })
+    )
+  )
+  assert.throws(() => multipartInput.parse({ files: [{ ...file, path: "/etc/passwd" }] }))
+  assert.throws(() => multipartInput.parse({ files: [{ ...file, name: "../guide.pdf" }] }))
+  await assert.rejects(
+    uploadForm(
+      "people.census.importPreview",
+      multipartInput.parse({
+        fields: { campaignId: "C-2026" },
+        files: [
+          { ...file, name: "export.csv", type: "text/csv", base64: Buffer.from('"unfinished').toString("base64") },
+        ],
+      })
+    )
+  )
+})
+
+function services() {
+  return {
+    origin: "https://admin.example",
+    backendUrl: "http://backend.internal",
+    trpcPath: "/api/trpc",
+    access: async () => ({ permissions: ["admin:access"], stale: false }),
+    fetch: async () => {
+      throw new Error("Unexpected backend call")
+    },
+  }
+}
+
+void test("gateway requires bearer authorization, ignores browser sessions and refuses unlisted RPCs", async () => {
+  for (const path of [
+    "azure.groups.addMember",
+    "azure.groups.removeMember",
+    "tg.groups.getAll,azure.groups.addMember",
+    "tg.groups.getAll%2Cme.access",
+  ]) {
+    assert.equal((await proxyMcpRpc(new Request(`https://admin.example/api/mcp/rpc/${path}`), services())).status, 404)
+  }
+  assert.equal(
+    (
+      await proxyMcpRpc(
+        new Request("https://admin.example/api/mcp/rpc/tg.groups.getAll", {
+          headers: { cookie: "pn-admin-session=not-authority" },
+        }),
+        services()
+      )
+    ).status,
+    401
+  )
+  assert.equal(
+    (
+      await proxyMcpRpc(
+        new Request("https://admin.example/api/mcp/rpc/tg.groups.getAll?batch=1", {
+          headers: { authorization: "Bearer token" },
+        }),
+        services()
+      )
+    ).status,
+    400
+  )
+  assert.equal(
+    (
+      await proxyMcpRpc(
+        new Request("https://admin.example/api/mcp/rpc/tg.groups.getAll", {
+          method: "POST",
+          headers: { authorization: "Bearer token" },
+        }),
+        services()
+      )
+    ).status,
+    405
+  )
+  assert.equal(
+    (
+      await proxyMcpRpc(
+        new Request("https://admin.example/api/mcp/rpc/tg.groups.getAll", {
+          headers: { authorization: "Bearer token", origin: "https://evil.example" },
+        }),
+        services()
+      )
+    ).status,
+    403
+  )
+  assert.equal(
+    (
+      await proxyMcpRpc(
+        new Request("https://admin.example/api/mcp/rpc/azure.members.getAll", {
+          headers: { authorization: "Bearer token" },
+        }),
+        services()
+      )
+    ).status,
+    403
+  )
+})
+
+void test("gateway forwards only the user bearer token, strips cookies/redirects, and fails closed on stale access", async () => {
+  const calls = []
+  const configuration = {
+    ...services(),
+    fetch: async (url, init) => {
+      calls.push({ url, init })
+      return new Response('{"result":{}}', { headers: { "set-cookie": "evil=1", "content-type": "application/json" } })
+    },
+  }
+  const request = new Request("https://admin.example/api/mcp/rpc/tg.groups.getAll", {
+    headers: { authorization: "Bearer user-token", cookie: "private=1", "x-forwarded-host": "evil.example" },
+  })
+  const response = await proxyMcpRpc(request, configuration)
+  assert.equal(response.status, 200)
+  assert.equal(response.headers.get("set-cookie"), null)
+  assert.equal(response.headers.get("cache-control"), "no-store")
+  assert.equal(calls[0].url, "http://backend.internal/api/trpc/tg.groups.getAll")
+  assert.equal(calls[0].init.headers.get("authorization"), "Bearer user-token")
+  assert.equal(calls[0].init.headers.get("cookie"), null)
+  assert.equal(calls[0].init.headers.get("x-forwarded-host"), null)
+  assert.equal(calls[0].init.redirect, "manual")
+  configuration.access = async () => ({ permissions: ["admin:access"], stale: true })
+  assert.equal((await proxyMcpRpc(request, configuration)).status, 503)
+  assert.equal(calls.length, 1)
+  configuration.access = services().access
+  configuration.fetch = async () => new Response(null, { status: 302, headers: { location: "https://evil.example" } })
+  assert.equal((await proxyMcpRpc(request, configuration)).status, 502)
+})
+
+async function http(t, handler) {
+  const server = createServer(async (req, res) => {
+    try {
+      await handler(req, res)
+    } catch (error) {
+      console.error(error)
+      res.statusCode = 500
+      res.end("{}")
+    }
+  })
+  await new Promise((resolve) => server.listen(0, "127.0.0.1", resolve))
+  t.after(
+    () =>
+      new Promise((resolve) => {
+        server.closeAllConnections()
+        server.close(resolve)
+      })
+  )
+  return `http://127.0.0.1:${server.address().port}`
+}
+
+void test("real tRPC HTTP transport preserves dates and multipart without cookies or batch calls", async (t) => {
+  const requests = []
+  const origin = await http(t, async (req, res) => {
+    let body = ""
+    for await (const chunk of req) body += chunk
+    requests.push({ url: req.url, method: req.method, headers: req.headers, body })
+    res.setHeader("content-type", "application/json")
+    res.end(JSON.stringify({ result: { data: SuperJSON.serialize({ at: new Date("2026-10-01T00:00:00Z") }) } }))
+  })
+  const api = createAdminApi(origin, async () => "user-token")
+  const date = await api.query("tg.groups.getAll")
+  assert.ok(date.at instanceof Date)
+  await api.mutation("tg.grants.create", { since: date.at })
+  const form = new FormData()
+  form.set("file", new File(["%PDF"], "file.pdf", { type: "application/pdf" }))
+  await api.mutation("esign.documents.upload", form)
+  assert.equal(requests.length, 3)
+  assert.equal(requests[0].headers.authorization, "Bearer user-token")
+  assert.equal(requests[0].headers.cookie, undefined)
+  assert.ok(!requests[0].url.includes("batch="))
+  assert.equal(SuperJSON.deserialize(JSON.parse(requests[1].body)).since.toISOString(), date.at.toISOString())
+  assert.match(requests[2].headers["content-type"], /^multipart\/form-data;/)
+  assert.match(requests[2].body, /filename="file.pdf"/)
+})
+
+void test("gateway authorization errors remain readable through the real tRPC transformer", async (t) => {
+  const origin = await http(t, async (req, res) => {
+    const response = await proxyMcpRpc(new Request(`https://admin.example${req.url}`, { headers: req.headers }), {
+      ...services(),
+      access: async () => ({ permissions: [], stale: false }),
+    })
+    res.writeHead(response.status, { "content-type": "application/json" })
+    res.end(await response.text())
+  })
+  await assert.rejects(
+    createAdminApi(origin, async () => "token").query("tg.groups.getAll"),
+    /This account cannot use this operation/
+  )
+})
+
+void test("public manifest contains no dashboard secret and is disabled until the native client exists", () => {
+  assert.throws(() => mcpPublicConfig({ APP_URL: "https://admin.example" }, "production"))
+  const config = mcpPublicConfig(
+    { APP_URL: "https://admin.example", ADMIN_MCP_CLIENT_ID: "native-client", OIDC_CLIENT_SECRET: "private-secret" },
+    "production"
+  )
+  assert.equal(config.clientId, "native-client")
+  assert.equal(config.redirectUri, MCP_CALLBACK)
+  assert.ok(!JSON.stringify(config).includes("private-secret"))
+})
+
+void test("native OAuth login verifies state/PKCE/nonce/signatures, rotates once, and revokes without leaking tokens", async (t) => {
+  const keys = generateKeyPairSync("rsa", { modulusLength: 2048 })
+  const jwk = { ...keys.publicKey.export({ format: "jwk" }), kid: "idp", alg: "RS256", use: "sig" }
+  const tokenCalls = []
+  let authorization
+  let issuer
+  let invalidToken = ""
+  const origin = await http(t, async (req, res) => {
+    res.setHeader("content-type", "application/json")
+    let body = ""
+    for await (const chunk of req) body += chunk
+    if (req.url === "/api/mcp/config") {
+      res.end(JSON.stringify({ clientId: "native", issuer, resource: "https://backend.example" }))
+    } else if (req.url.includes(".well-known")) {
+      res.end(
+        JSON.stringify({
+          issuer,
+          authorization_endpoint: `${issuer}/authorize`,
+          token_endpoint: `${issuer}/token`,
+          jwks_uri: `${issuer}/jwks`,
+          revocation_endpoint: `${issuer}/revoke`,
+          response_types_supported: ["code"],
+          subject_types_supported: ["public"],
+          id_token_signing_alg_values_supported: ["RS256"],
+          token_endpoint_auth_methods_supported: ["none"],
+          code_challenge_methods_supported: ["S256"],
+        })
+      )
+    } else if (req.url.endsWith("/jwks")) {
+      res.end(JSON.stringify({ keys: [jwk] }))
+    } else {
+      const parameters = new URLSearchParams(body)
+      tokenCalls.push(parameters)
+      assert.equal(req.headers.authorization, undefined)
+      assert.equal(parameters.get("client_id"), "native")
+      if (req.url.endsWith("/revoke")) {
+        res.end("{}")
+        return
+      }
+      assert.equal(parameters.get("resource"), "https://backend.example")
+      if (parameters.get("grant_type") === "refresh_token") {
+        assert.equal(parameters.get("refresh_token"), "refresh-one")
+        res.end(
+          JSON.stringify({
+            access_token: "access-two",
+            refresh_token: "refresh-two",
+            token_type: "Bearer",
+            expires_in: 300,
+          })
+        )
+        return
+      }
+      assert.equal(
+        createHash("sha256").update(parameters.get("code_verifier")).digest("base64url"),
+        authorization.searchParams.get("code_challenge")
+      )
+      assert.equal(parameters.get("redirect_uri"), MCP_CALLBACK)
+      const now = Math.floor(Date.now() / 1000)
+      const head = Buffer.from(JSON.stringify({ alg: "RS256", kid: "idp" })).toString("base64url")
+      const claims = Buffer.from(
+        JSON.stringify({
+          iss: invalidToken === "issuer" ? "https://evil.example" : issuer,
+          aud: "native",
+          sub: "person",
+          iat: now,
+          exp: now + 300,
+          nonce: invalidToken === "nonce" ? "wrong" : authorization.searchParams.get("nonce"),
+        })
+      ).toString("base64url")
+      const jwt = `${head}.${claims}.${sign("sha256", Buffer.from(`${head}.${claims}`), keys.privateKey).toString("base64url")}`
+      res.end(
+        JSON.stringify({
+          access_token: "access-one",
+          refresh_token: "refresh-one",
+          token_type: "Bearer",
+          expires_in: 10,
+          id_token: invalidToken === "signature" ? `${jwt.slice(0, -8)}abcdefgh` : jwt,
+        })
+      )
+    }
+  })
+  issuer = `${origin}/api/auth`
+  const auth = new AdminMcpAuth(origin, join(directory, "credentials"))
+  const callback = async (url) => {
+    authorization = url
+    assert.equal(url.searchParams.get("code_challenge_method"), "S256")
+    assert.equal(url.searchParams.get("scope"), "openid profile email offline_access backend:admin")
+    const malformed = await new Promise((resolve, reject) => {
+      const request = httpRequest({ hostname: "127.0.0.1", port: 47322, path: "//[" }, (response) => {
+        response.resume()
+        resolve(response.statusCode)
+      })
+      request.once("error", reject)
+      request.end()
+    })
+    assert.equal(malformed, 400)
+    const bad = new URL(MCP_CALLBACK)
+    bad.searchParams.set("state", "wrong")
+    bad.searchParams.set("code", "code")
+    assert.equal((await fetch(bad)).status, 400)
+    const good = new URL(bad)
+    good.searchParams.set("state", url.searchParams.get("state"))
+    assert.equal((await fetch(good)).status, 200)
+  }
+  await auth.login(callback)
+  assert.equal((await stat(auth.file)).mode & 0o777, 0o600)
+  assert.equal((await stat(join(directory, "credentials"))).mode & 0o777, 0o700)
+  assert.deepEqual(await Promise.all([auth.accessToken(), auth.accessToken()]), ["access-two", "access-two"])
+  assert.equal(tokenCalls.filter((call) => call.get("grant_type") === "refresh_token").length, 1)
+  assert.equal(JSON.parse(await readFile(auth.file, "utf8")).refreshToken, "refresh-two")
+  const stored = JSON.parse(await readFile(auth.file, "utf8"))
+  await writeFile(auth.file, JSON.stringify({ ...stored, refreshing: true }))
+  await mkdir(`${auth.file}.lock`)
+  const competing = new AdminMcpAuth(origin, join(directory, "credentials")).accessToken().then(
+    (token) => ({ token }),
+    (error) => ({ error })
+  )
+  // A different serve process is finishing a refresh. Its marker is replaced before it releases the lock.
+  await new Promise((resolve) => setTimeout(resolve, 150))
+  await writeFile(auth.file, JSON.stringify({ ...stored, refreshing: false }))
+  await rm(`${auth.file}.lock`, { recursive: true })
+  assert.deepEqual(await competing, { token: "access-two" })
+  await writeFile(auth.file, JSON.stringify({ ...stored, refreshing: true }))
+  await assert.rejects(auth.accessToken())
+  assert.equal(tokenCalls.filter((call) => call.get("grant_type") === "refresh_token").length, 1)
+  await writeFile(auth.file, JSON.stringify({ ...stored, refreshing: false }))
+  await auth.logout()
+  assert.equal(tokenCalls.at(-1).get("token"), "refresh-two")
+  await assert.rejects(stat(auth.file), { code: "ENOENT" })
+  for (const invalid of ["nonce", "issuer", "signature"]) {
+    invalidToken = invalid
+    await assert.rejects(auth.login(callback))
+    await assert.rejects(stat(auth.file), { code: "ENOENT" })
+  }
+  invalidToken = ""
+  await auth.login(callback)
+  await chmod(auth.file, 0o644)
+  await assert.rejects(auth.accessToken())
+})