diff --git a/README.md b/README.md
index 6f09134e..34028262 100644
--- a/README.md
+++ b/README.md
@@ -22,6 +22,7 @@ Available addons
 ----------------
 addon | version | maintainers | summary
 --- | --- | --- | ---
+[ai_oca_mcp](ai_oca_mcp/) | 19.0.1.0.0 |  | MCP Interface for Odoo
 [ai_tool](ai_tool/) | 19.0.1.0.0 |  | We want to generate some specific AI Tools that might be used in other places, like MCP or native.
 
 [//]: # (end addons)
diff --git a/ai_oca_mcp/README.rst b/ai_oca_mcp/README.rst
new file mode 100644
index 00000000..0045b2e6
--- /dev/null
+++ b/ai_oca_mcp/README.rst
@@ -0,0 +1,194 @@
+.. image:: https://odoo-community.org/readme-banner-image
+   :target: https://odoo-community.org/get-involved?utm_source=readme
+   :alt: Odoo Community Association
+
+==========
+Ai Oca Mcp
+==========
+
+.. 
+   !!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!
+   !! This file is generated by oca-gen-addon-readme !!
+   !! changes will be overwritten.                   !!
+   !!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!
+   !! source digest: sha256:3d96a5eaf8e647e8ed470a84e39780908086610d1c72402ea1a85830b2d0e709
+   !!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!
+
+.. |badge1| image:: https://img.shields.io/badge/maturity-Beta-yellow.png
+    :target: https://odoo-community.org/page/development-status
+    :alt: Beta
+.. |badge2| image:: https://img.shields.io/badge/license-AGPL--3-blue.png
+    :target: http://www.gnu.org/licenses/agpl-3.0-standalone.html
+    :alt: License: AGPL-3
+.. |badge3| image:: https://img.shields.io/badge/github-OCA%2Fai-lightgray.png?logo=github
+    :target: https://github.com/OCA/ai/tree/19.0/ai_oca_mcp
+    :alt: OCA/ai
+.. |badge4| image:: https://img.shields.io/badge/weblate-Translate%20me-F47D42.png
+    :target: https://translation.odoo-community.org/projects/ai-19-0/ai-19-0-ai_oca_mcp
+    :alt: Translate me on Weblate
+.. |badge5| image:: https://img.shields.io/badge/runboat-Try%20me-875A7B.png
+    :target: https://runboat.odoo-community.org/builds?repo=OCA/ai&target_branch=19.0
+    :alt: Try me on Runboat
+
+|badge1| |badge2| |badge3| |badge4| |badge5|
+
+Expose Odoo as an MCP (Model Context Protocol) server, allowing external
+AI clients — such as n8n, custom agents, or any MCP-compatible tool — to
+invoke Odoo functions through the standardized MCP protocol.
+
+Each MCP server publishes a set of **AI tools** (defined by the
+``ai_tool`` module). Clients exchange JSON-RPC 2.0 messages with Odoo
+over HTTP POST: ``tools/list`` returns the tool catalogue and
+``tools/call`` executes a tool.
+
+Key characteristics:
+
+- **Authentication**: per-client API keys sent as Bearer tokens. Keys
+  are stored hashed and are shown only once, at creation.
+- **Per-user permissions**: every key is bound to an Odoo user and calls
+  execute with that user's permissions — a client can only do what its
+  key's user can do.
+- **Key lifecycle**: keys can carry an expiration date or be expired
+  manually at any time.
+- **Audit log**: every tool invocation is recorded with its parameters
+  and result or error.
+
+Notes:
+
+- Transport is plain JSON-RPC over HTTP POST. SSE/streaming transports
+  and notifications are not supported.
+- Claude Desktop requires OAuth 2.0 authorization. Odoo does not act as
+  an OAuth authorization server, so clients that mandate OAuth need an
+  extension (for example, validating externally-issued tokens via
+  ``auth_jwt`` from OCA/server-auth).
+
+**Table of contents**
+
+.. contents::
+   :local:
+
+Usage
+=====
+
+Configure an MCP server
+-----------------------
+
+1. Activate developer mode and go to
+   ``Settings > Technical > AI > MCP Server``.
+2. Create a server, give it a name, and select the ``generic`` tools you
+   want to expose.
+3. The ``URL`` field shows the client endpoint — it already includes the
+   server's unique path key.
+4. Optionally fill ``Instructions``: the ``initialize`` handshake always
+   returns an auto-generated capability summary (the server's purpose
+   and its tool list); this field appends extra guidance to it — domain
+   context, conventions, which tools to prefer. Per-tool ``description``
+   and input schemas remain the primary channel agents rely on, so write
+   them as if they were documentation for the model.
+
+Create a client key
+-------------------
+
+1. Click **Add Key** on the server form.
+2. Choose the user the client will act as and, optionally, an expiration
+   date.
+3. Copy the generated key — it is stored hashed and **shown only once**.
+
+Configure your client with:
+
+- **URL**: the server's ``URL`` field
+- **Authentication**: Bearer token
+- **Token**: the generated API key
+
+Connecting from n8n
+~~~~~~~~~~~~~~~~~~~
+
+Use the *MCP Client* node with:
+
+- **Endpoint**: the server's ``URL`` field
+- **Authentication**: Bearer Token
+- **Token**: the generated API key
+- **Transport**: HTTP — the endpoint expects POST requests; SSE is not
+  supported
+
+Tool limitations
+----------------
+
+Only tools of kind ``generic`` are exposed. Tools requiring a record
+context (``generic_model``, ``record``) cannot be called via MCP.
+
+``ai_tool`` itself ships only demo tools (``get_date``,
+``post_message``), of which just ``get_date`` is callable via MCP.
+Generic read access to Odoo data — listing models, describing fields and
+``search_read`` — is provided by the ``ai_tool_read`` addon, which also
+adds a per-field AI opt-out for sensitive data. Other capabilities —
+creating documents, triggering actions — come from extension modules
+that define their own ``@aitool``-decorated methods and ``ai.tool``
+records (see the ``ai_tool`` documentation). Whatever a tool can do is
+limited by the permissions of the user bound to the API key.
+
+Tools are not limited to reading data: a tool method runs real ORM code
+and can also create or update records and call actions, always within
+the key owner's permissions. Results must be JSON-serializable — return
+plain dicts and convert dates, recordsets and binary values yourself —
+otherwise the call is logged and returns a JSON-RPC error.
+
+Security and auditing
+---------------------
+
+- Create one key per client, so a compromised client can be revoked
+  without affecting the others.
+- Calls execute with the key owner's permissions: prefer a dedicated
+  user with minimal access rights to limit what clients can reach.
+- Internal users can view their own keys and the related servers, but
+  only administrators can create or modify servers and keys.
+- Keys can be expired manually from the server form, or automatically
+  once they reach their expiration date.
+- ``AI > MCP Server Log`` records every tool invocation with its
+  parameters and result or error — use it to audit client activity.
+
+Bug Tracker
+===========
+
+Bugs are tracked on `GitHub Issues <https://github.com/OCA/ai/issues>`_.
+In case of trouble, please check there if your issue has already been reported.
+If you spotted it first, help us to smash it by providing a detailed and welcomed
+`feedback <https://github.com/OCA/ai/issues/new?body=module:%20ai_oca_mcp%0Aversion:%2019.0%0A%0A**Steps%20to%20reproduce**%0A-%20...%0A%0A**Current%20behavior**%0A%0A**Expected%20behavior**>`_.
+
+Do not contact contributors directly about support or help with technical issues.
+
+Credits
+=======
+
+Authors
+-------
+
+* Dixmit
+
+Contributors
+------------
+
+- `Dixmit <https://www.dixmit.com>`__
+
+  - Enric Tobella
+
+- Pierre Verkest pierre@verkest.fr
+- Angel Moya amoyapardo@gmail.com
+- Daniel Reis dreis.pt@gmail.com
+
+Maintainers
+-----------
+
+This module is maintained by the OCA.
+
+.. image:: https://odoo-community.org/logo.png
+   :alt: Odoo Community Association
+   :target: https://odoo-community.org
+
+OCA, or the Odoo Community Association, is a nonprofit organization whose
+mission is to support the collaborative development of Odoo features and
+promote its widespread use.
+
+This module is part of the `OCA/ai <https://github.com/OCA/ai/tree/19.0/ai_oca_mcp>`_ project on GitHub.
+
+You are welcome to contribute. To learn how please visit https://odoo-community.org/page/Contribute.
diff --git a/ai_oca_mcp/__init__.py b/ai_oca_mcp/__init__.py
new file mode 100644
index 00000000..ada0b87b
--- /dev/null
+++ b/ai_oca_mcp/__init__.py
@@ -0,0 +1,3 @@
+from . import controllers
+from . import models
+from . import wizards
diff --git a/ai_oca_mcp/__manifest__.py b/ai_oca_mcp/__manifest__.py
new file mode 100644
index 00000000..1a37524b
--- /dev/null
+++ b/ai_oca_mcp/__manifest__.py
@@ -0,0 +1,23 @@
+# Copyright 2026 Dixmit
+# License AGPL-3.0 or later (https://www.gnu.org/licenses/agpl).
+
+{
+    "name": "Ai Oca Mcp",
+    "summary": """MCP Interface for Odoo""",
+    "version": "19.0.1.0.0",
+    "license": "AGPL-3",
+    "author": "Dixmit,Odoo Community Association (OCA)",
+    "website": "https://github.com/OCA/ai",
+    "depends": [
+        "ai_tool",
+    ],
+    "data": [
+        "views/mcp_server_log.xml",
+        "security/ir.model.access.csv",
+        "security/security.xml",
+        "views/mcp_server_key.xml",
+        "wizards/mcp_server_key_add.xml",
+        "views/mcp_server.xml",
+    ],
+    "demo": [],
+}
diff --git a/ai_oca_mcp/controllers/__init__.py b/ai_oca_mcp/controllers/__init__.py
new file mode 100644
index 00000000..350e2127
--- /dev/null
+++ b/ai_oca_mcp/controllers/__init__.py
@@ -0,0 +1 @@
+from . import mcp_controller
diff --git a/ai_oca_mcp/controllers/mcp_controller.py b/ai_oca_mcp/controllers/mcp_controller.py
new file mode 100644
index 00000000..4fa3ad5b
--- /dev/null
+++ b/ai_oca_mcp/controllers/mcp_controller.py
@@ -0,0 +1,78 @@
+import json
+import re
+
+from odoo import fields, http
+from odoo.http import request
+
+
+class McpController(http.Controller):
+    @http.route(
+        "/mcp/<string:key>",
+        type="http",
+        auth="none",
+        methods=["POST"],
+        csrf=False,
+        readonly=False,
+    )
+    def mcp_endpoint(self, key, **kwargs):
+        match = re.match(
+            r"Bearer (.+)", request.httprequest.headers.get("Authorization", "")
+        )
+        payload = json.loads(request.httprequest.data.decode("utf-8"))
+        if not match:
+            return request.make_json_response(
+                {
+                    "jsonrpc": "2.0",
+                    "id": payload.get("id"),
+                    "error": {"code": -32000, "message": "Connection failed"},
+                },
+                status=401,
+            )
+        security_key = match.group(1).strip()
+        server_id, expiration_date = (
+            request.env["mcp.server.key"]
+            .sudo()
+            ._get_mcp_server_by_key(key, security_key)
+        )
+        if expiration_date and expiration_date < fields.Datetime.now():
+            request.env["mcp.server.key"].sudo().browse(server_id).expire_key()
+            server_id = False
+        if not server_id:
+            return request.make_json_response(
+                {
+                    "jsonrpc": "2.0",
+                    "id": payload.get("id"),
+                    "error": {"code": -32000, "message": "Connection failed"},
+                }
+            )
+        mcp_server_key = request.env["mcp.server.key"].sudo().browse(server_id)
+        mcp_server_key = mcp_server_key.with_user(mcp_server_key.user_id.id)
+        method = payload.get("method")
+        if method == "initialize":
+            result = {
+                "protocolVersion": "2025-03-26",
+                "capabilities": {"tools": {}},
+                "serverInfo": {"name": "odoo-mcp", "version": "0.1.0"},
+                "instructions": mcp_server_key.server_id._get_instructions(),
+            }
+            return request.make_json_response(
+                {
+                    "jsonrpc": "2.0",
+                    "id": payload.get("id"),
+                    "result": result,
+                }
+            )
+
+        if method == "tools/list":
+            return request.make_json_response(mcp_server_key._tools_list(payload))
+
+        if method == "tools/call":
+            return request.make_json_response(mcp_server_key._tools_call(payload))
+
+        return request.make_json_response(
+            {
+                "jsonrpc": "2.0",
+                "id": payload.get("id"),
+                "error": {"code": -32601, "message": "Method not found"},
+            }
+        )
diff --git a/ai_oca_mcp/i18n/ai_oca_mcp.pot b/ai_oca_mcp/i18n/ai_oca_mcp.pot
new file mode 100644
index 00000000..2cc42540
--- /dev/null
+++ b/ai_oca_mcp/i18n/ai_oca_mcp.pot
@@ -0,0 +1,269 @@
+# Translation of Odoo Server.
+# This file contains the translation of the following modules:
+# 	* ai_oca_mcp
+#
+msgid ""
+msgstr ""
+"Project-Id-Version: Odoo Server 16.0\n"
+"Report-Msgid-Bugs-To: \n"
+"Last-Translator: \n"
+"Language-Team: \n"
+"MIME-Version: 1.0\n"
+"Content-Type: text/plain; charset=UTF-8\n"
+"Content-Transfer-Encoding: \n"
+"Plural-Forms: \n"
+
+#. module: ai_oca_mcp
+#: model:ir.model.fields,field_description:ai_oca_mcp.field_mcp_server__key_ids
+msgid "Access Keys"
+msgstr ""
+
+#. module: ai_oca_mcp
+#: model:ir.model.fields,field_description:ai_oca_mcp.field_mcp_server__active
+#: model:ir.model.fields.selection,name:ai_oca_mcp.selection__mcp_server_key__state__active
+msgid "Active"
+msgstr ""
+
+#. module: ai_oca_mcp
+#: model_terms:ir.ui.view,arch_db:ai_oca_mcp.mcp_server_form_view
+msgid "Add Key"
+msgstr ""
+
+#. module: ai_oca_mcp
+#: model:ir.actions.act_window,name:ai_oca_mcp.mcp_server_key_add_act_window
+msgid "Add Security Key"
+msgstr ""
+
+#. module: ai_oca_mcp
+#: model_terms:ir.ui.view,arch_db:ai_oca_mcp.mcp_server_form_view
+msgid "Archived"
+msgstr ""
+
+#. module: ai_oca_mcp
+#: model_terms:ir.ui.view,arch_db:ai_oca_mcp.mcp_server_key_add_form_view
+msgid "Cancel"
+msgstr ""
+
+#. module: ai_oca_mcp
+#: model:ir.model.fields,field_description:ai_oca_mcp.field_mcp_server__create_uid
+#: model:ir.model.fields,field_description:ai_oca_mcp.field_mcp_server_key__create_uid
+#: model:ir.model.fields,field_description:ai_oca_mcp.field_mcp_server_key_add__create_uid
+#: model:ir.model.fields,field_description:ai_oca_mcp.field_mcp_server_log__create_uid
+msgid "Created by"
+msgstr ""
+
+#. module: ai_oca_mcp
+#: model:ir.model.fields,field_description:ai_oca_mcp.field_mcp_server__create_date
+#: model:ir.model.fields,field_description:ai_oca_mcp.field_mcp_server_key__create_date
+#: model:ir.model.fields,field_description:ai_oca_mcp.field_mcp_server_key_add__create_date
+#: model:ir.model.fields,field_description:ai_oca_mcp.field_mcp_server_log__create_date
+msgid "Created on"
+msgstr ""
+
+#. module: ai_oca_mcp
+#: model:ir.model.fields,field_description:ai_oca_mcp.field_mcp_server_log__date
+msgid "Date"
+msgstr ""
+
+#. module: ai_oca_mcp
+#: model:ir.model.fields,field_description:ai_oca_mcp.field_mcp_server__description
+msgid "Description"
+msgstr ""
+
+#. module: ai_oca_mcp
+#: model:ir.model.fields,field_description:ai_oca_mcp.field_mcp_server__display_name
+#: model:ir.model.fields,field_description:ai_oca_mcp.field_mcp_server_key__display_name
+#: model:ir.model.fields,field_description:ai_oca_mcp.field_mcp_server_key_add__display_name
+#: model:ir.model.fields,field_description:ai_oca_mcp.field_mcp_server_log__display_name
+msgid "Display Name"
+msgstr ""
+
+#. module: ai_oca_mcp
+#: model:ir.model.fields,field_description:ai_oca_mcp.field_mcp_server_log__error
+#: model_terms:ir.ui.view,arch_db:ai_oca_mcp.mcp_server_log_form_view
+msgid "Error"
+msgstr ""
+
+#. module: ai_oca_mcp
+#: model:ir.model.fields,field_description:ai_oca_mcp.field_mcp_server_key__expiration_date
+#: model:ir.model.fields,field_description:ai_oca_mcp.field_mcp_server_key_add__expiration_date
+msgid "Expiration Date"
+msgstr ""
+
+#. module: ai_oca_mcp
+#: model_terms:ir.ui.view,arch_db:ai_oca_mcp.mcp_server_key_form_view
+#: model_terms:ir.ui.view,arch_db:ai_oca_mcp.mcp_server_key_tree_view
+msgid "Expire Key"
+msgstr ""
+
+#. module: ai_oca_mcp
+#: model:ir.model.fields.selection,name:ai_oca_mcp.selection__mcp_server_key__state__expired
+msgid "Expired"
+msgstr ""
+
+#. module: ai_oca_mcp
+#: model:ir.model.fields,field_description:ai_oca_mcp.field_mcp_server_key__expired_on
+#: model:ir.model.fields,field_description:ai_oca_mcp.field_mcp_server_key_add__expired_on
+msgid "Expired On"
+msgstr ""
+
+#. module: ai_oca_mcp
+#: model_terms:ir.ui.view,arch_db:ai_oca_mcp.mcp_server_key_add_form_view
+msgid "Generate Key"
+msgstr ""
+
+#. module: ai_oca_mcp
+#: model:ir.model.fields,field_description:ai_oca_mcp.field_mcp_server_key__hashed_key
+#: model:ir.model.fields,field_description:ai_oca_mcp.field_mcp_server_key_add__hashed_key
+msgid "Hashed Key"
+msgstr ""
+
+#. module: ai_oca_mcp
+#: model:ir.model.fields,field_description:ai_oca_mcp.field_mcp_server__id
+#: model:ir.model.fields,field_description:ai_oca_mcp.field_mcp_server_key__id
+#: model:ir.model.fields,field_description:ai_oca_mcp.field_mcp_server_key_add__id
+#: model:ir.model.fields,field_description:ai_oca_mcp.field_mcp_server_log__id
+msgid "ID"
+msgstr ""
+
+#. module: ai_oca_mcp
+#: model:ir.model.fields,field_description:ai_oca_mcp.field_mcp_server__key
+#: model:ir.model.fields,field_description:ai_oca_mcp.field_mcp_server_key_add__key_id
+msgid "Key"
+msgstr ""
+
+#. module: ai_oca_mcp
+#: model:ir.model.fields,field_description:ai_oca_mcp.field_mcp_server_key_add__key
+msgid "Key to use"
+msgstr ""
+
+#. module: ai_oca_mcp
+#: model_terms:ir.ui.view,arch_db:ai_oca_mcp.mcp_server_form_view
+msgid "Keys"
+msgstr ""
+
+#. module: ai_oca_mcp
+#: model:ir.model.fields,field_description:ai_oca_mcp.field_mcp_server____last_update
+#: model:ir.model.fields,field_description:ai_oca_mcp.field_mcp_server_key____last_update
+#: model:ir.model.fields,field_description:ai_oca_mcp.field_mcp_server_key_add____last_update
+#: model:ir.model.fields,field_description:ai_oca_mcp.field_mcp_server_log____last_update
+msgid "Last Modified on"
+msgstr ""
+
+#. module: ai_oca_mcp
+#: model:ir.model.fields,field_description:ai_oca_mcp.field_mcp_server__write_uid
+#: model:ir.model.fields,field_description:ai_oca_mcp.field_mcp_server_key__write_uid
+#: model:ir.model.fields,field_description:ai_oca_mcp.field_mcp_server_key_add__write_uid
+#: model:ir.model.fields,field_description:ai_oca_mcp.field_mcp_server_log__write_uid
+msgid "Last Updated by"
+msgstr ""
+
+#. module: ai_oca_mcp
+#: model:ir.model.fields,field_description:ai_oca_mcp.field_mcp_server__write_date
+#: model:ir.model.fields,field_description:ai_oca_mcp.field_mcp_server_key__write_date
+#: model:ir.model.fields,field_description:ai_oca_mcp.field_mcp_server_key_add__write_date
+#: model:ir.model.fields,field_description:ai_oca_mcp.field_mcp_server_log__write_date
+msgid "Last Updated on"
+msgstr ""
+
+#. module: ai_oca_mcp
+#: model:ir.actions.act_window,name:ai_oca_mcp.mcp_server_act_window
+#: model:ir.ui.menu,name:ai_oca_mcp.mcp_server_menu
+msgid "MCP Server"
+msgstr ""
+
+#. module: ai_oca_mcp
+#: model:ir.ui.menu,name:ai_oca_mcp.mcp_server_log_menu
+msgid "MCP Server Log"
+msgstr ""
+
+#. module: ai_oca_mcp
+#: model:ir.model,name:ai_oca_mcp.model_mcp_server
+msgid "Mcp Server"
+msgstr ""
+
+#. module: ai_oca_mcp
+#: model:ir.model,name:ai_oca_mcp.model_mcp_server_key
+msgid "Mcp Server Key"
+msgstr ""
+
+#. module: ai_oca_mcp
+#: model:ir.actions.act_window,name:ai_oca_mcp.mcp_server_log_act_window
+#: model:ir.actions.act_window,name:ai_oca_mcp.mcp_server_log_server_filter_act_window
+#: model:ir.model,name:ai_oca_mcp.model_mcp_server_log
+msgid "Mcp Server Log"
+msgstr ""
+
+#. module: ai_oca_mcp
+#: model:ir.model.fields,field_description:ai_oca_mcp.field_mcp_server__name
+#: model:ir.model.fields,field_description:ai_oca_mcp.field_mcp_server_key__name
+#: model:ir.model.fields,field_description:ai_oca_mcp.field_mcp_server_key_add__name
+msgid "Name"
+msgstr ""
+
+#. module: ai_oca_mcp
+#: model_terms:ir.ui.view,arch_db:ai_oca_mcp.mcp_server_form_view
+msgid "Name..."
+msgstr ""
+
+#. module: ai_oca_mcp
+#: model:ir.model.fields,field_description:ai_oca_mcp.field_mcp_server_log__request
+#: model_terms:ir.ui.view,arch_db:ai_oca_mcp.mcp_server_log_form_view
+msgid "Request"
+msgstr ""
+
+#. module: ai_oca_mcp
+#: model:ir.model.fields,field_description:ai_oca_mcp.field_mcp_server_log__response
+#: model_terms:ir.ui.view,arch_db:ai_oca_mcp.mcp_server_log_form_view
+msgid "Response"
+msgstr ""
+
+#. module: ai_oca_mcp
+#: model:ir.model.fields,field_description:ai_oca_mcp.field_mcp_server_key__server_id
+#: model:ir.model.fields,field_description:ai_oca_mcp.field_mcp_server_key_add__server_id
+#: model:ir.model.fields,field_description:ai_oca_mcp.field_mcp_server_log__server_id
+msgid "Server"
+msgstr ""
+
+#. module: ai_oca_mcp
+#: model:ir.model.fields,field_description:ai_oca_mcp.field_mcp_server_log__server_key_id
+msgid "Server Key"
+msgstr ""
+
+#. module: ai_oca_mcp
+#: model_terms:ir.ui.view,arch_db:ai_oca_mcp.mcp_server_form_view
+msgid "Show logs"
+msgstr ""
+
+#. module: ai_oca_mcp
+#: model:ir.model.fields,field_description:ai_oca_mcp.field_mcp_server_key__state
+#: model:ir.model.fields,field_description:ai_oca_mcp.field_mcp_server_key_add__state
+msgid "State"
+msgstr ""
+
+#. module: ai_oca_mcp
+#: model:ir.model.constraint,message:ai_oca_mcp.constraint_mcp_server_key_key_uniq
+#: model:ir.model.constraint,message:ai_oca_mcp.constraint_mcp_server_key_uniq
+msgid "The key must be unique"
+msgstr ""
+
+#. module: ai_oca_mcp
+#: model:ir.model.fields,field_description:ai_oca_mcp.field_mcp_server__tool_ids
+msgid "Tools"
+msgstr ""
+
+#. module: ai_oca_mcp
+#: model:ir.model.fields,field_description:ai_oca_mcp.field_mcp_server__url
+msgid "Url"
+msgstr ""
+
+#. module: ai_oca_mcp
+#: model:ir.model.fields,field_description:ai_oca_mcp.field_mcp_server_key__user_id
+#: model:ir.model.fields,field_description:ai_oca_mcp.field_mcp_server_key_add__user_id
+msgid "User"
+msgstr ""
+
+#. module: ai_oca_mcp
+#: model:ir.model,name:ai_oca_mcp.model_mcp_server_key_add
+msgid "Wizard used to add a new key to an MCP Server"
+msgstr ""
diff --git a/ai_oca_mcp/i18n/gl.po b/ai_oca_mcp/i18n/gl.po
new file mode 100644
index 00000000..597ef17e
--- /dev/null
+++ b/ai_oca_mcp/i18n/gl.po
@@ -0,0 +1,272 @@
+# Translation of Odoo Server.
+# This file contains the translation of the following modules:
+# 	* ai_oca_mcp
+#
+msgid ""
+msgstr ""
+"Project-Id-Version: Odoo Server 16.0\n"
+"Report-Msgid-Bugs-To: \n"
+"PO-Revision-Date: 2026-07-06 23:46+0000\n"
+"Last-Translator: Cándido Martínez <candido@supermercadoscooperativos.com>\n"
+"Language-Team: none\n"
+"Language: gl\n"
+"MIME-Version: 1.0\n"
+"Content-Type: text/plain; charset=UTF-8\n"
+"Content-Transfer-Encoding: \n"
+"Plural-Forms: nplurals=2; plural=n != 1;\n"
+"X-Generator: Weblate 5.15.2\n"
+
+#. module: ai_oca_mcp
+#: model:ir.model.fields,field_description:ai_oca_mcp.field_mcp_server__key_ids
+msgid "Access Keys"
+msgstr "Chaves de acceso"
+
+#. module: ai_oca_mcp
+#: model:ir.model.fields,field_description:ai_oca_mcp.field_mcp_server__active
+#: model:ir.model.fields.selection,name:ai_oca_mcp.selection__mcp_server_key__state__active
+msgid "Active"
+msgstr "Activo"
+
+#. module: ai_oca_mcp
+#: model_terms:ir.ui.view,arch_db:ai_oca_mcp.mcp_server_form_view
+msgid "Add Key"
+msgstr ""
+
+#. module: ai_oca_mcp
+#: model:ir.actions.act_window,name:ai_oca_mcp.mcp_server_key_add_act_window
+msgid "Add Security Key"
+msgstr ""
+
+#. module: ai_oca_mcp
+#: model_terms:ir.ui.view,arch_db:ai_oca_mcp.mcp_server_form_view
+msgid "Archived"
+msgstr ""
+
+#. module: ai_oca_mcp
+#: model_terms:ir.ui.view,arch_db:ai_oca_mcp.mcp_server_key_add_form_view
+msgid "Cancel"
+msgstr ""
+
+#. module: ai_oca_mcp
+#: model:ir.model.fields,field_description:ai_oca_mcp.field_mcp_server__create_uid
+#: model:ir.model.fields,field_description:ai_oca_mcp.field_mcp_server_key__create_uid
+#: model:ir.model.fields,field_description:ai_oca_mcp.field_mcp_server_key_add__create_uid
+#: model:ir.model.fields,field_description:ai_oca_mcp.field_mcp_server_log__create_uid
+msgid "Created by"
+msgstr ""
+
+#. module: ai_oca_mcp
+#: model:ir.model.fields,field_description:ai_oca_mcp.field_mcp_server__create_date
+#: model:ir.model.fields,field_description:ai_oca_mcp.field_mcp_server_key__create_date
+#: model:ir.model.fields,field_description:ai_oca_mcp.field_mcp_server_key_add__create_date
+#: model:ir.model.fields,field_description:ai_oca_mcp.field_mcp_server_log__create_date
+msgid "Created on"
+msgstr ""
+
+#. module: ai_oca_mcp
+#: model:ir.model.fields,field_description:ai_oca_mcp.field_mcp_server_log__date
+msgid "Date"
+msgstr ""
+
+#. module: ai_oca_mcp
+#: model:ir.model.fields,field_description:ai_oca_mcp.field_mcp_server__description
+msgid "Description"
+msgstr ""
+
+#. module: ai_oca_mcp
+#: model:ir.model.fields,field_description:ai_oca_mcp.field_mcp_server__display_name
+#: model:ir.model.fields,field_description:ai_oca_mcp.field_mcp_server_key__display_name
+#: model:ir.model.fields,field_description:ai_oca_mcp.field_mcp_server_key_add__display_name
+#: model:ir.model.fields,field_description:ai_oca_mcp.field_mcp_server_log__display_name
+msgid "Display Name"
+msgstr ""
+
+#. module: ai_oca_mcp
+#: model:ir.model.fields,field_description:ai_oca_mcp.field_mcp_server_log__error
+#: model_terms:ir.ui.view,arch_db:ai_oca_mcp.mcp_server_log_form_view
+msgid "Error"
+msgstr ""
+
+#. module: ai_oca_mcp
+#: model:ir.model.fields,field_description:ai_oca_mcp.field_mcp_server_key__expiration_date
+#: model:ir.model.fields,field_description:ai_oca_mcp.field_mcp_server_key_add__expiration_date
+msgid "Expiration Date"
+msgstr ""
+
+#. module: ai_oca_mcp
+#: model_terms:ir.ui.view,arch_db:ai_oca_mcp.mcp_server_key_form_view
+#: model_terms:ir.ui.view,arch_db:ai_oca_mcp.mcp_server_key_tree_view
+msgid "Expire Key"
+msgstr ""
+
+#. module: ai_oca_mcp
+#: model:ir.model.fields.selection,name:ai_oca_mcp.selection__mcp_server_key__state__expired
+msgid "Expired"
+msgstr ""
+
+#. module: ai_oca_mcp
+#: model:ir.model.fields,field_description:ai_oca_mcp.field_mcp_server_key__expired_on
+#: model:ir.model.fields,field_description:ai_oca_mcp.field_mcp_server_key_add__expired_on
+msgid "Expired On"
+msgstr ""
+
+#. module: ai_oca_mcp
+#: model_terms:ir.ui.view,arch_db:ai_oca_mcp.mcp_server_key_add_form_view
+msgid "Generate Key"
+msgstr ""
+
+#. module: ai_oca_mcp
+#: model:ir.model.fields,field_description:ai_oca_mcp.field_mcp_server_key__hashed_key
+#: model:ir.model.fields,field_description:ai_oca_mcp.field_mcp_server_key_add__hashed_key
+msgid "Hashed Key"
+msgstr ""
+
+#. module: ai_oca_mcp
+#: model:ir.model.fields,field_description:ai_oca_mcp.field_mcp_server__id
+#: model:ir.model.fields,field_description:ai_oca_mcp.field_mcp_server_key__id
+#: model:ir.model.fields,field_description:ai_oca_mcp.field_mcp_server_key_add__id
+#: model:ir.model.fields,field_description:ai_oca_mcp.field_mcp_server_log__id
+msgid "ID"
+msgstr ""
+
+#. module: ai_oca_mcp
+#: model:ir.model.fields,field_description:ai_oca_mcp.field_mcp_server__key
+#: model:ir.model.fields,field_description:ai_oca_mcp.field_mcp_server_key_add__key_id
+msgid "Key"
+msgstr ""
+
+#. module: ai_oca_mcp
+#: model:ir.model.fields,field_description:ai_oca_mcp.field_mcp_server_key_add__key
+msgid "Key to use"
+msgstr ""
+
+#. module: ai_oca_mcp
+#: model_terms:ir.ui.view,arch_db:ai_oca_mcp.mcp_server_form_view
+msgid "Keys"
+msgstr ""
+
+#. module: ai_oca_mcp
+#: model:ir.model.fields,field_description:ai_oca_mcp.field_mcp_server____last_update
+#: model:ir.model.fields,field_description:ai_oca_mcp.field_mcp_server_key____last_update
+#: model:ir.model.fields,field_description:ai_oca_mcp.field_mcp_server_key_add____last_update
+#: model:ir.model.fields,field_description:ai_oca_mcp.field_mcp_server_log____last_update
+msgid "Last Modified on"
+msgstr ""
+
+#. module: ai_oca_mcp
+#: model:ir.model.fields,field_description:ai_oca_mcp.field_mcp_server__write_uid
+#: model:ir.model.fields,field_description:ai_oca_mcp.field_mcp_server_key__write_uid
+#: model:ir.model.fields,field_description:ai_oca_mcp.field_mcp_server_key_add__write_uid
+#: model:ir.model.fields,field_description:ai_oca_mcp.field_mcp_server_log__write_uid
+msgid "Last Updated by"
+msgstr ""
+
+#. module: ai_oca_mcp
+#: model:ir.model.fields,field_description:ai_oca_mcp.field_mcp_server__write_date
+#: model:ir.model.fields,field_description:ai_oca_mcp.field_mcp_server_key__write_date
+#: model:ir.model.fields,field_description:ai_oca_mcp.field_mcp_server_key_add__write_date
+#: model:ir.model.fields,field_description:ai_oca_mcp.field_mcp_server_log__write_date
+msgid "Last Updated on"
+msgstr ""
+
+#. module: ai_oca_mcp
+#: model:ir.actions.act_window,name:ai_oca_mcp.mcp_server_act_window
+#: model:ir.ui.menu,name:ai_oca_mcp.mcp_server_menu
+msgid "MCP Server"
+msgstr ""
+
+#. module: ai_oca_mcp
+#: model:ir.ui.menu,name:ai_oca_mcp.mcp_server_log_menu
+msgid "MCP Server Log"
+msgstr ""
+
+#. module: ai_oca_mcp
+#: model:ir.model,name:ai_oca_mcp.model_mcp_server
+msgid "Mcp Server"
+msgstr ""
+
+#. module: ai_oca_mcp
+#: model:ir.model,name:ai_oca_mcp.model_mcp_server_key
+msgid "Mcp Server Key"
+msgstr ""
+
+#. module: ai_oca_mcp
+#: model:ir.actions.act_window,name:ai_oca_mcp.mcp_server_log_act_window
+#: model:ir.actions.act_window,name:ai_oca_mcp.mcp_server_log_server_filter_act_window
+#: model:ir.model,name:ai_oca_mcp.model_mcp_server_log
+msgid "Mcp Server Log"
+msgstr ""
+
+#. module: ai_oca_mcp
+#: model:ir.model.fields,field_description:ai_oca_mcp.field_mcp_server__name
+#: model:ir.model.fields,field_description:ai_oca_mcp.field_mcp_server_key__name
+#: model:ir.model.fields,field_description:ai_oca_mcp.field_mcp_server_key_add__name
+msgid "Name"
+msgstr ""
+
+#. module: ai_oca_mcp
+#: model_terms:ir.ui.view,arch_db:ai_oca_mcp.mcp_server_form_view
+msgid "Name..."
+msgstr ""
+
+#. module: ai_oca_mcp
+#: model:ir.model.fields,field_description:ai_oca_mcp.field_mcp_server_log__request
+#: model_terms:ir.ui.view,arch_db:ai_oca_mcp.mcp_server_log_form_view
+msgid "Request"
+msgstr ""
+
+#. module: ai_oca_mcp
+#: model:ir.model.fields,field_description:ai_oca_mcp.field_mcp_server_log__response
+#: model_terms:ir.ui.view,arch_db:ai_oca_mcp.mcp_server_log_form_view
+msgid "Response"
+msgstr ""
+
+#. module: ai_oca_mcp
+#: model:ir.model.fields,field_description:ai_oca_mcp.field_mcp_server_key__server_id
+#: model:ir.model.fields,field_description:ai_oca_mcp.field_mcp_server_key_add__server_id
+#: model:ir.model.fields,field_description:ai_oca_mcp.field_mcp_server_log__server_id
+msgid "Server"
+msgstr ""
+
+#. module: ai_oca_mcp
+#: model:ir.model.fields,field_description:ai_oca_mcp.field_mcp_server_log__server_key_id
+msgid "Server Key"
+msgstr ""
+
+#. module: ai_oca_mcp
+#: model_terms:ir.ui.view,arch_db:ai_oca_mcp.mcp_server_form_view
+msgid "Show logs"
+msgstr ""
+
+#. module: ai_oca_mcp
+#: model:ir.model.fields,field_description:ai_oca_mcp.field_mcp_server_key__state
+#: model:ir.model.fields,field_description:ai_oca_mcp.field_mcp_server_key_add__state
+msgid "State"
+msgstr ""
+
+#. module: ai_oca_mcp
+#: model:ir.model.constraint,message:ai_oca_mcp.constraint_mcp_server_key_key_uniq
+#: model:ir.model.constraint,message:ai_oca_mcp.constraint_mcp_server_key_uniq
+msgid "The key must be unique"
+msgstr ""
+
+#. module: ai_oca_mcp
+#: model:ir.model.fields,field_description:ai_oca_mcp.field_mcp_server__tool_ids
+msgid "Tools"
+msgstr ""
+
+#. module: ai_oca_mcp
+#: model:ir.model.fields,field_description:ai_oca_mcp.field_mcp_server__url
+msgid "Url"
+msgstr ""
+
+#. module: ai_oca_mcp
+#: model:ir.model.fields,field_description:ai_oca_mcp.field_mcp_server_key__user_id
+#: model:ir.model.fields,field_description:ai_oca_mcp.field_mcp_server_key_add__user_id
+msgid "User"
+msgstr ""
+
+#. module: ai_oca_mcp
+#: model:ir.model,name:ai_oca_mcp.model_mcp_server_key_add
+msgid "Wizard used to add a new key to an MCP Server"
+msgstr ""
diff --git a/ai_oca_mcp/i18n/it.po b/ai_oca_mcp/i18n/it.po
new file mode 100644
index 00000000..f4954195
--- /dev/null
+++ b/ai_oca_mcp/i18n/it.po
@@ -0,0 +1,273 @@
+# Translation of Odoo Server.
+# This file contains the translation of the following modules:
+# 	* ai_oca_mcp
+#
+msgid ""
+msgstr ""
+"Project-Id-Version: Odoo Server 16.0\n"
+"Report-Msgid-Bugs-To: \n"
+"PO-Revision-Date: 2026-05-29 13:46+0000\n"
+"Last-Translator: mymage <stefano.consolaro@mymage.it>\n"
+"Language-Team: none\n"
+"Language: it\n"
+"MIME-Version: 1.0\n"
+"Content-Type: text/plain; charset=UTF-8\n"
+"Content-Transfer-Encoding: \n"
+"Plural-Forms: nplurals=2; plural=n != 1;\n"
+"X-Generator: Weblate 5.15.2\n"
+
+#. module: ai_oca_mcp
+#: model:ir.model.fields,field_description:ai_oca_mcp.field_mcp_server__key_ids
+msgid "Access Keys"
+msgstr "Chiavi accesso"
+
+#. module: ai_oca_mcp
+#: model:ir.model.fields,field_description:ai_oca_mcp.field_mcp_server__active
+#: model:ir.model.fields.selection,name:ai_oca_mcp.selection__mcp_server_key__state__active
+msgid "Active"
+msgstr "Attivo"
+
+#. module: ai_oca_mcp
+#: model_terms:ir.ui.view,arch_db:ai_oca_mcp.mcp_server_form_view
+msgid "Add Key"
+msgstr "Aggiungi chiave"
+
+#. module: ai_oca_mcp
+#: model:ir.actions.act_window,name:ai_oca_mcp.mcp_server_key_add_act_window
+msgid "Add Security Key"
+msgstr "Aggiungi chiave di sicurezza"
+
+#. module: ai_oca_mcp
+#: model_terms:ir.ui.view,arch_db:ai_oca_mcp.mcp_server_form_view
+msgid "Archived"
+msgstr "In archivio"
+
+#. module: ai_oca_mcp
+#: model_terms:ir.ui.view,arch_db:ai_oca_mcp.mcp_server_key_add_form_view
+msgid "Cancel"
+msgstr "Annulla"
+
+#. module: ai_oca_mcp
+#: model:ir.model.fields,field_description:ai_oca_mcp.field_mcp_server__create_uid
+#: model:ir.model.fields,field_description:ai_oca_mcp.field_mcp_server_key__create_uid
+#: model:ir.model.fields,field_description:ai_oca_mcp.field_mcp_server_key_add__create_uid
+#: model:ir.model.fields,field_description:ai_oca_mcp.field_mcp_server_log__create_uid
+msgid "Created by"
+msgstr "Creato da"
+
+#. module: ai_oca_mcp
+#: model:ir.model.fields,field_description:ai_oca_mcp.field_mcp_server__create_date
+#: model:ir.model.fields,field_description:ai_oca_mcp.field_mcp_server_key__create_date
+#: model:ir.model.fields,field_description:ai_oca_mcp.field_mcp_server_key_add__create_date
+#: model:ir.model.fields,field_description:ai_oca_mcp.field_mcp_server_log__create_date
+msgid "Created on"
+msgstr "Creato il"
+
+#. module: ai_oca_mcp
+#: model:ir.model.fields,field_description:ai_oca_mcp.field_mcp_server_log__date
+msgid "Date"
+msgstr "Data"
+
+#. module: ai_oca_mcp
+#: model:ir.model.fields,field_description:ai_oca_mcp.field_mcp_server__description
+msgid "Description"
+msgstr "Descrizione"
+
+#. module: ai_oca_mcp
+#: model:ir.model.fields,field_description:ai_oca_mcp.field_mcp_server__display_name
+#: model:ir.model.fields,field_description:ai_oca_mcp.field_mcp_server_key__display_name
+#: model:ir.model.fields,field_description:ai_oca_mcp.field_mcp_server_key_add__display_name
+#: model:ir.model.fields,field_description:ai_oca_mcp.field_mcp_server_log__display_name
+msgid "Display Name"
+msgstr "Nome visualizzato"
+
+#. module: ai_oca_mcp
+#: model:ir.model.fields,field_description:ai_oca_mcp.field_mcp_server_log__error
+#: model_terms:ir.ui.view,arch_db:ai_oca_mcp.mcp_server_log_form_view
+msgid "Error"
+msgstr "Errore"
+
+#. module: ai_oca_mcp
+#: model:ir.model.fields,field_description:ai_oca_mcp.field_mcp_server_key__expiration_date
+#: model:ir.model.fields,field_description:ai_oca_mcp.field_mcp_server_key_add__expiration_date
+msgid "Expiration Date"
+msgstr "Data di scadenza"
+
+#. module: ai_oca_mcp
+#: model_terms:ir.ui.view,arch_db:ai_oca_mcp.mcp_server_key_form_view
+#: model_terms:ir.ui.view,arch_db:ai_oca_mcp.mcp_server_key_tree_view
+msgid "Expire Key"
+msgstr "Chiave scadenza"
+
+#. module: ai_oca_mcp
+#: model:ir.model.fields.selection,name:ai_oca_mcp.selection__mcp_server_key__state__expired
+msgid "Expired"
+msgstr "Scaduta"
+
+#. module: ai_oca_mcp
+#: model:ir.model.fields,field_description:ai_oca_mcp.field_mcp_server_key__expired_on
+#: model:ir.model.fields,field_description:ai_oca_mcp.field_mcp_server_key_add__expired_on
+msgid "Expired On"
+msgstr "Scaduta il"
+
+#. module: ai_oca_mcp
+#: model_terms:ir.ui.view,arch_db:ai_oca_mcp.mcp_server_key_add_form_view
+msgid "Generate Key"
+msgstr "Genera chiave"
+
+#. module: ai_oca_mcp
+#: model:ir.model.fields,field_description:ai_oca_mcp.field_mcp_server_key__hashed_key
+#: model:ir.model.fields,field_description:ai_oca_mcp.field_mcp_server_key_add__hashed_key
+msgid "Hashed Key"
+msgstr "Chiave codificata"
+
+#. module: ai_oca_mcp
+#: model:ir.model.fields,field_description:ai_oca_mcp.field_mcp_server__id
+#: model:ir.model.fields,field_description:ai_oca_mcp.field_mcp_server_key__id
+#: model:ir.model.fields,field_description:ai_oca_mcp.field_mcp_server_key_add__id
+#: model:ir.model.fields,field_description:ai_oca_mcp.field_mcp_server_log__id
+msgid "ID"
+msgstr "ID"
+
+#. module: ai_oca_mcp
+#: model:ir.model.fields,field_description:ai_oca_mcp.field_mcp_server__key
+#: model:ir.model.fields,field_description:ai_oca_mcp.field_mcp_server_key_add__key_id
+msgid "Key"
+msgstr "Chiave"
+
+#. module: ai_oca_mcp
+#: model:ir.model.fields,field_description:ai_oca_mcp.field_mcp_server_key_add__key
+msgid "Key to use"
+msgstr "Chiave da usare"
+
+#. module: ai_oca_mcp
+#: model_terms:ir.ui.view,arch_db:ai_oca_mcp.mcp_server_form_view
+msgid "Keys"
+msgstr "Chiavi"
+
+#. module: ai_oca_mcp
+#: model:ir.model.fields,field_description:ai_oca_mcp.field_mcp_server____last_update
+#: model:ir.model.fields,field_description:ai_oca_mcp.field_mcp_server_key____last_update
+#: model:ir.model.fields,field_description:ai_oca_mcp.field_mcp_server_key_add____last_update
+#: model:ir.model.fields,field_description:ai_oca_mcp.field_mcp_server_log____last_update
+msgid "Last Modified on"
+msgstr "Ultima modifica il"
+
+#. module: ai_oca_mcp
+#: model:ir.model.fields,field_description:ai_oca_mcp.field_mcp_server__write_uid
+#: model:ir.model.fields,field_description:ai_oca_mcp.field_mcp_server_key__write_uid
+#: model:ir.model.fields,field_description:ai_oca_mcp.field_mcp_server_key_add__write_uid
+#: model:ir.model.fields,field_description:ai_oca_mcp.field_mcp_server_log__write_uid
+msgid "Last Updated by"
+msgstr "Ultimo aggiornamento di"
+
+#. module: ai_oca_mcp
+#: model:ir.model.fields,field_description:ai_oca_mcp.field_mcp_server__write_date
+#: model:ir.model.fields,field_description:ai_oca_mcp.field_mcp_server_key__write_date
+#: model:ir.model.fields,field_description:ai_oca_mcp.field_mcp_server_key_add__write_date
+#: model:ir.model.fields,field_description:ai_oca_mcp.field_mcp_server_log__write_date
+msgid "Last Updated on"
+msgstr "Ultimo aggiornamento il"
+
+#. module: ai_oca_mcp
+#: model:ir.actions.act_window,name:ai_oca_mcp.mcp_server_act_window
+#: model:ir.ui.menu,name:ai_oca_mcp.mcp_server_menu
+msgid "MCP Server"
+msgstr "Server MCP"
+
+#. module: ai_oca_mcp
+#: model:ir.ui.menu,name:ai_oca_mcp.mcp_server_log_menu
+msgid "MCP Server Log"
+msgstr "Registro server MCP"
+
+#. module: ai_oca_mcp
+#: model:ir.model,name:ai_oca_mcp.model_mcp_server
+msgid "Mcp Server"
+msgstr "Server MCP"
+
+#. module: ai_oca_mcp
+#: model:ir.model,name:ai_oca_mcp.model_mcp_server_key
+msgid "Mcp Server Key"
+msgstr "Chiave server MCP"
+
+#. module: ai_oca_mcp
+#: model:ir.actions.act_window,name:ai_oca_mcp.mcp_server_log_act_window
+#: model:ir.actions.act_window,name:ai_oca_mcp.mcp_server_log_server_filter_act_window
+#: model:ir.model,name:ai_oca_mcp.model_mcp_server_log
+msgid "Mcp Server Log"
+msgstr "Registro server MCP"
+
+#. module: ai_oca_mcp
+#: model:ir.model.fields,field_description:ai_oca_mcp.field_mcp_server__name
+#: model:ir.model.fields,field_description:ai_oca_mcp.field_mcp_server_key__name
+#: model:ir.model.fields,field_description:ai_oca_mcp.field_mcp_server_key_add__name
+msgid "Name"
+msgstr "Nome"
+
+#. module: ai_oca_mcp
+#: model_terms:ir.ui.view,arch_db:ai_oca_mcp.mcp_server_form_view
+msgid "Name..."
+msgstr "Nome..."
+
+#. module: ai_oca_mcp
+#: model:ir.model.fields,field_description:ai_oca_mcp.field_mcp_server_log__request
+#: model_terms:ir.ui.view,arch_db:ai_oca_mcp.mcp_server_log_form_view
+msgid "Request"
+msgstr "Richiesta"
+
+#. module: ai_oca_mcp
+#: model:ir.model.fields,field_description:ai_oca_mcp.field_mcp_server_log__response
+#: model_terms:ir.ui.view,arch_db:ai_oca_mcp.mcp_server_log_form_view
+msgid "Response"
+msgstr "Risposta"
+
+#. module: ai_oca_mcp
+#: model:ir.model.fields,field_description:ai_oca_mcp.field_mcp_server_key__server_id
+#: model:ir.model.fields,field_description:ai_oca_mcp.field_mcp_server_key_add__server_id
+#: model:ir.model.fields,field_description:ai_oca_mcp.field_mcp_server_log__server_id
+msgid "Server"
+msgstr "Server"
+
+#. module: ai_oca_mcp
+#: model:ir.model.fields,field_description:ai_oca_mcp.field_mcp_server_log__server_key_id
+msgid "Server Key"
+msgstr "Chiave server"
+
+#. module: ai_oca_mcp
+#: model_terms:ir.ui.view,arch_db:ai_oca_mcp.mcp_server_form_view
+msgid "Show logs"
+msgstr "Visualizza registri"
+
+#. module: ai_oca_mcp
+#: model:ir.model.fields,field_description:ai_oca_mcp.field_mcp_server_key__state
+#: model:ir.model.fields,field_description:ai_oca_mcp.field_mcp_server_key_add__state
+msgid "State"
+msgstr "Stato"
+
+#. module: ai_oca_mcp
+#: model:ir.model.constraint,message:ai_oca_mcp.constraint_mcp_server_key_key_uniq
+#: model:ir.model.constraint,message:ai_oca_mcp.constraint_mcp_server_key_uniq
+msgid "The key must be unique"
+msgstr "La chiave deve essere univoca"
+
+#. module: ai_oca_mcp
+#: model:ir.model.fields,field_description:ai_oca_mcp.field_mcp_server__tool_ids
+msgid "Tools"
+msgstr "Strumenti"
+
+#. module: ai_oca_mcp
+#: model:ir.model.fields,field_description:ai_oca_mcp.field_mcp_server__url
+msgid "Url"
+msgstr "URL"
+
+#. module: ai_oca_mcp
+#: model:ir.model.fields,field_description:ai_oca_mcp.field_mcp_server_key__user_id
+#: model:ir.model.fields,field_description:ai_oca_mcp.field_mcp_server_key_add__user_id
+msgid "User"
+msgstr "Utente"
+
+#. module: ai_oca_mcp
+#: model:ir.model,name:ai_oca_mcp.model_mcp_server_key_add
+msgid "Wizard used to add a new key to an MCP Server"
+msgstr ""
+"Procedura guidata utilizzata per aggiungere una nuova chiave ad un server MCP"
diff --git a/ai_oca_mcp/i18n/pt_BR.po b/ai_oca_mcp/i18n/pt_BR.po
new file mode 100644
index 00000000..f19e4f1e
--- /dev/null
+++ b/ai_oca_mcp/i18n/pt_BR.po
@@ -0,0 +1,272 @@
+# Translation of Odoo Server.
+# This file contains the translation of the following modules:
+# 	* ai_oca_mcp
+#
+msgid ""
+msgstr ""
+"Project-Id-Version: Odoo Server 16.0\n"
+"Report-Msgid-Bugs-To: \n"
+"PO-Revision-Date: 2026-06-15 11:07+0000\n"
+"Last-Translator: felipemotter <felipkin@gmail.com>\n"
+"Language-Team: none\n"
+"Language: pt_BR\n"
+"MIME-Version: 1.0\n"
+"Content-Type: text/plain; charset=UTF-8\n"
+"Content-Transfer-Encoding: \n"
+"Plural-Forms: nplurals=2; plural=n > 1;\n"
+"X-Generator: Weblate 5.15.2\n"
+
+#. module: ai_oca_mcp
+#: model:ir.model.fields,field_description:ai_oca_mcp.field_mcp_server__key_ids
+msgid "Access Keys"
+msgstr "Chaves de acesso"
+
+#. module: ai_oca_mcp
+#: model:ir.model.fields,field_description:ai_oca_mcp.field_mcp_server__active
+#: model:ir.model.fields.selection,name:ai_oca_mcp.selection__mcp_server_key__state__active
+msgid "Active"
+msgstr "Ativo"
+
+#. module: ai_oca_mcp
+#: model_terms:ir.ui.view,arch_db:ai_oca_mcp.mcp_server_form_view
+msgid "Add Key"
+msgstr "Adicionar chave"
+
+#. module: ai_oca_mcp
+#: model:ir.actions.act_window,name:ai_oca_mcp.mcp_server_key_add_act_window
+msgid "Add Security Key"
+msgstr "Adicionar chave de segurança"
+
+#. module: ai_oca_mcp
+#: model_terms:ir.ui.view,arch_db:ai_oca_mcp.mcp_server_form_view
+msgid "Archived"
+msgstr "Arquivado"
+
+#. module: ai_oca_mcp
+#: model_terms:ir.ui.view,arch_db:ai_oca_mcp.mcp_server_key_add_form_view
+msgid "Cancel"
+msgstr "Cancelar"
+
+#. module: ai_oca_mcp
+#: model:ir.model.fields,field_description:ai_oca_mcp.field_mcp_server__create_uid
+#: model:ir.model.fields,field_description:ai_oca_mcp.field_mcp_server_key__create_uid
+#: model:ir.model.fields,field_description:ai_oca_mcp.field_mcp_server_key_add__create_uid
+#: model:ir.model.fields,field_description:ai_oca_mcp.field_mcp_server_log__create_uid
+msgid "Created by"
+msgstr "Criado por"
+
+#. module: ai_oca_mcp
+#: model:ir.model.fields,field_description:ai_oca_mcp.field_mcp_server__create_date
+#: model:ir.model.fields,field_description:ai_oca_mcp.field_mcp_server_key__create_date
+#: model:ir.model.fields,field_description:ai_oca_mcp.field_mcp_server_key_add__create_date
+#: model:ir.model.fields,field_description:ai_oca_mcp.field_mcp_server_log__create_date
+msgid "Created on"
+msgstr "Criado em"
+
+#. module: ai_oca_mcp
+#: model:ir.model.fields,field_description:ai_oca_mcp.field_mcp_server_log__date
+msgid "Date"
+msgstr "Data"
+
+#. module: ai_oca_mcp
+#: model:ir.model.fields,field_description:ai_oca_mcp.field_mcp_server__description
+msgid "Description"
+msgstr "Descrição"
+
+#. module: ai_oca_mcp
+#: model:ir.model.fields,field_description:ai_oca_mcp.field_mcp_server__display_name
+#: model:ir.model.fields,field_description:ai_oca_mcp.field_mcp_server_key__display_name
+#: model:ir.model.fields,field_description:ai_oca_mcp.field_mcp_server_key_add__display_name
+#: model:ir.model.fields,field_description:ai_oca_mcp.field_mcp_server_log__display_name
+msgid "Display Name"
+msgstr "Nome exibido"
+
+#. module: ai_oca_mcp
+#: model:ir.model.fields,field_description:ai_oca_mcp.field_mcp_server_log__error
+#: model_terms:ir.ui.view,arch_db:ai_oca_mcp.mcp_server_log_form_view
+msgid "Error"
+msgstr "Erro"
+
+#. module: ai_oca_mcp
+#: model:ir.model.fields,field_description:ai_oca_mcp.field_mcp_server_key__expiration_date
+#: model:ir.model.fields,field_description:ai_oca_mcp.field_mcp_server_key_add__expiration_date
+msgid "Expiration Date"
+msgstr "Data de expiração"
+
+#. module: ai_oca_mcp
+#: model_terms:ir.ui.view,arch_db:ai_oca_mcp.mcp_server_key_form_view
+#: model_terms:ir.ui.view,arch_db:ai_oca_mcp.mcp_server_key_tree_view
+msgid "Expire Key"
+msgstr "Expirar chave"
+
+#. module: ai_oca_mcp
+#: model:ir.model.fields.selection,name:ai_oca_mcp.selection__mcp_server_key__state__expired
+msgid "Expired"
+msgstr "Expirada"
+
+#. module: ai_oca_mcp
+#: model:ir.model.fields,field_description:ai_oca_mcp.field_mcp_server_key__expired_on
+#: model:ir.model.fields,field_description:ai_oca_mcp.field_mcp_server_key_add__expired_on
+msgid "Expired On"
+msgstr "Expirada em"
+
+#. module: ai_oca_mcp
+#: model_terms:ir.ui.view,arch_db:ai_oca_mcp.mcp_server_key_add_form_view
+msgid "Generate Key"
+msgstr "Gerar chave"
+
+#. module: ai_oca_mcp
+#: model:ir.model.fields,field_description:ai_oca_mcp.field_mcp_server_key__hashed_key
+#: model:ir.model.fields,field_description:ai_oca_mcp.field_mcp_server_key_add__hashed_key
+msgid "Hashed Key"
+msgstr "Chave com hash"
+
+#. module: ai_oca_mcp
+#: model:ir.model.fields,field_description:ai_oca_mcp.field_mcp_server__id
+#: model:ir.model.fields,field_description:ai_oca_mcp.field_mcp_server_key__id
+#: model:ir.model.fields,field_description:ai_oca_mcp.field_mcp_server_key_add__id
+#: model:ir.model.fields,field_description:ai_oca_mcp.field_mcp_server_log__id
+msgid "ID"
+msgstr "ID"
+
+#. module: ai_oca_mcp
+#: model:ir.model.fields,field_description:ai_oca_mcp.field_mcp_server__key
+#: model:ir.model.fields,field_description:ai_oca_mcp.field_mcp_server_key_add__key_id
+msgid "Key"
+msgstr "Chave"
+
+#. module: ai_oca_mcp
+#: model:ir.model.fields,field_description:ai_oca_mcp.field_mcp_server_key_add__key
+msgid "Key to use"
+msgstr "Chave a usar"
+
+#. module: ai_oca_mcp
+#: model_terms:ir.ui.view,arch_db:ai_oca_mcp.mcp_server_form_view
+msgid "Keys"
+msgstr "Chaves"
+
+#. module: ai_oca_mcp
+#: model:ir.model.fields,field_description:ai_oca_mcp.field_mcp_server____last_update
+#: model:ir.model.fields,field_description:ai_oca_mcp.field_mcp_server_key____last_update
+#: model:ir.model.fields,field_description:ai_oca_mcp.field_mcp_server_key_add____last_update
+#: model:ir.model.fields,field_description:ai_oca_mcp.field_mcp_server_log____last_update
+msgid "Last Modified on"
+msgstr "Última modificação em"
+
+#. module: ai_oca_mcp
+#: model:ir.model.fields,field_description:ai_oca_mcp.field_mcp_server__write_uid
+#: model:ir.model.fields,field_description:ai_oca_mcp.field_mcp_server_key__write_uid
+#: model:ir.model.fields,field_description:ai_oca_mcp.field_mcp_server_key_add__write_uid
+#: model:ir.model.fields,field_description:ai_oca_mcp.field_mcp_server_log__write_uid
+msgid "Last Updated by"
+msgstr "Última atualização por"
+
+#. module: ai_oca_mcp
+#: model:ir.model.fields,field_description:ai_oca_mcp.field_mcp_server__write_date
+#: model:ir.model.fields,field_description:ai_oca_mcp.field_mcp_server_key__write_date
+#: model:ir.model.fields,field_description:ai_oca_mcp.field_mcp_server_key_add__write_date
+#: model:ir.model.fields,field_description:ai_oca_mcp.field_mcp_server_log__write_date
+msgid "Last Updated on"
+msgstr "Última atualização em"
+
+#. module: ai_oca_mcp
+#: model:ir.actions.act_window,name:ai_oca_mcp.mcp_server_act_window
+#: model:ir.ui.menu,name:ai_oca_mcp.mcp_server_menu
+msgid "MCP Server"
+msgstr "Servidor MCP"
+
+#. module: ai_oca_mcp
+#: model:ir.ui.menu,name:ai_oca_mcp.mcp_server_log_menu
+msgid "MCP Server Log"
+msgstr "Log do servidor MCP"
+
+#. module: ai_oca_mcp
+#: model:ir.model,name:ai_oca_mcp.model_mcp_server
+msgid "Mcp Server"
+msgstr "Servidor MCP"
+
+#. module: ai_oca_mcp
+#: model:ir.model,name:ai_oca_mcp.model_mcp_server_key
+msgid "Mcp Server Key"
+msgstr "Chave do servidor MCP"
+
+#. module: ai_oca_mcp
+#: model:ir.actions.act_window,name:ai_oca_mcp.mcp_server_log_act_window
+#: model:ir.actions.act_window,name:ai_oca_mcp.mcp_server_log_server_filter_act_window
+#: model:ir.model,name:ai_oca_mcp.model_mcp_server_log
+msgid "Mcp Server Log"
+msgstr "Log do servidor MCP"
+
+#. module: ai_oca_mcp
+#: model:ir.model.fields,field_description:ai_oca_mcp.field_mcp_server__name
+#: model:ir.model.fields,field_description:ai_oca_mcp.field_mcp_server_key__name
+#: model:ir.model.fields,field_description:ai_oca_mcp.field_mcp_server_key_add__name
+msgid "Name"
+msgstr "Nome"
+
+#. module: ai_oca_mcp
+#: model_terms:ir.ui.view,arch_db:ai_oca_mcp.mcp_server_form_view
+msgid "Name..."
+msgstr "Nome..."
+
+#. module: ai_oca_mcp
+#: model:ir.model.fields,field_description:ai_oca_mcp.field_mcp_server_log__request
+#: model_terms:ir.ui.view,arch_db:ai_oca_mcp.mcp_server_log_form_view
+msgid "Request"
+msgstr "Requisição"
+
+#. module: ai_oca_mcp
+#: model:ir.model.fields,field_description:ai_oca_mcp.field_mcp_server_log__response
+#: model_terms:ir.ui.view,arch_db:ai_oca_mcp.mcp_server_log_form_view
+msgid "Response"
+msgstr "Resposta"
+
+#. module: ai_oca_mcp
+#: model:ir.model.fields,field_description:ai_oca_mcp.field_mcp_server_key__server_id
+#: model:ir.model.fields,field_description:ai_oca_mcp.field_mcp_server_key_add__server_id
+#: model:ir.model.fields,field_description:ai_oca_mcp.field_mcp_server_log__server_id
+msgid "Server"
+msgstr "Servidor"
+
+#. module: ai_oca_mcp
+#: model:ir.model.fields,field_description:ai_oca_mcp.field_mcp_server_log__server_key_id
+msgid "Server Key"
+msgstr "Chave do servidor"
+
+#. module: ai_oca_mcp
+#: model_terms:ir.ui.view,arch_db:ai_oca_mcp.mcp_server_form_view
+msgid "Show logs"
+msgstr "Mostrar logs"
+
+#. module: ai_oca_mcp
+#: model:ir.model.fields,field_description:ai_oca_mcp.field_mcp_server_key__state
+#: model:ir.model.fields,field_description:ai_oca_mcp.field_mcp_server_key_add__state
+msgid "State"
+msgstr "Estado"
+
+#. module: ai_oca_mcp
+#: model:ir.model.constraint,message:ai_oca_mcp.constraint_mcp_server_key_key_uniq
+#: model:ir.model.constraint,message:ai_oca_mcp.constraint_mcp_server_key_uniq
+msgid "The key must be unique"
+msgstr "A chave deve ser única"
+
+#. module: ai_oca_mcp
+#: model:ir.model.fields,field_description:ai_oca_mcp.field_mcp_server__tool_ids
+msgid "Tools"
+msgstr "Ferramentas"
+
+#. module: ai_oca_mcp
+#: model:ir.model.fields,field_description:ai_oca_mcp.field_mcp_server__url
+msgid "Url"
+msgstr "URL"
+
+#. module: ai_oca_mcp
+#: model:ir.model.fields,field_description:ai_oca_mcp.field_mcp_server_key__user_id
+#: model:ir.model.fields,field_description:ai_oca_mcp.field_mcp_server_key_add__user_id
+msgid "User"
+msgstr "Usuário"
+
+#. module: ai_oca_mcp
+#: model:ir.model,name:ai_oca_mcp.model_mcp_server_key_add
+msgid "Wizard used to add a new key to an MCP Server"
+msgstr "Assistente usado para adicionar uma nova chave a um servidor MCP"
diff --git a/ai_oca_mcp/models/__init__.py b/ai_oca_mcp/models/__init__.py
new file mode 100644
index 00000000..9370d8c8
--- /dev/null
+++ b/ai_oca_mcp/models/__init__.py
@@ -0,0 +1,3 @@
+from . import mcp_server
+from . import mcp_server_key
+from . import mcp_server_log
diff --git a/ai_oca_mcp/models/mcp_server.py b/ai_oca_mcp/models/mcp_server.py
new file mode 100644
index 00000000..6c5698a7
--- /dev/null
+++ b/ai_oca_mcp/models/mcp_server.py
@@ -0,0 +1,57 @@
+# Copyright 2026 Dixmit
+# License AGPL-3.0 or later (https://www.gnu.org/licenses/agpl).
+
+from uuid import uuid4
+
+from odoo import api, fields, models
+
+
+class McpServer(models.Model):
+    _name = "mcp.server"
+    _description = "Mcp Server"
+
+    name = fields.Char()
+    description = fields.Text()
+    instructions = fields.Text(
+        help="Extra guidance appended to the capability summary returned to"
+        " MCP clients in the initialize handshake."
+    )
+    active = fields.Boolean(default=True)
+    key = fields.Char(
+        required=True,
+        copy=False,
+        default=lambda self: uuid4(),
+        groups="base.group_system",
+    )
+    tool_ids = fields.Many2many(
+        "ai.tool", string="Tools", domain=[("kind", "=", "generic")]
+    )
+    url = fields.Char(
+        compute="_compute_url",
+        groups="base.group_system",
+    )
+    key_ids = fields.One2many("mcp.server.key", "server_id", string="Access Keys")
+
+    _key_uniq = models.Constraint("unique (key)", "The key must be unique")
+
+    @api.depends("key")
+    def _compute_url(self):
+        base_url = self.env["ir.config_parameter"].sudo().get_param("web.base.url")
+        for record in self:
+            record.url = f"{base_url}/mcp/{record.key}"
+
+    def _get_instructions(self):
+        self.ensure_one()
+        lines = [
+            "This MCP server exposes Odoo AI tools. Calls execute with the"
+            " permissions of the user bound to the API key.",
+        ]
+        if self.tool_ids:
+            lines.append("")
+            lines.append("Available tools:")
+            for tool in self.tool_ids:
+                suffix = f": {tool.description}" if tool.description else ""
+                lines.append(f"- {tool.name}{suffix}")
+        if self.instructions:
+            lines += ["", self.instructions]
+        return "\n".join(lines)
diff --git a/ai_oca_mcp/models/mcp_server_key.py b/ai_oca_mcp/models/mcp_server_key.py
new file mode 100644
index 00000000..36ce4839
--- /dev/null
+++ b/ai_oca_mcp/models/mcp_server_key.py
@@ -0,0 +1,102 @@
+# Copyright 2026 Dixmit
+# License AGPL-3.0 or later (https://www.gnu.org/licenses/agpl).
+
+import json
+from hashlib import sha256
+
+from odoo import api, fields, models, tools
+
+
+class McpServerKey(models.Model):
+    _name = "mcp.server.key"
+    _description = "Mcp Server Key"
+
+    name = fields.Char(required=True)
+    server_id = fields.Many2one("mcp.server", required=True, ondelete="cascade")
+    hashed_key = fields.Char(copy=False)
+    state = fields.Selection(
+        [("active", "Active"), ("expired", "Expired")], default="active"
+    )
+    user_id = fields.Many2one("res.users", default=lambda self: self.env.user)
+    expiration_date = fields.Datetime()
+    expired_on = fields.Datetime(readonly=True)
+
+    def expire_key(self):
+        self.filtered(lambda key: key.state == "active").write(
+            {
+                "state": "expired",
+                "expired_on": fields.Datetime.now(),
+            }
+        )
+        self.env.registry.clear_cache()
+
+    _key_uniq = models.Constraint("unique (hashed_key)", "The key must be unique")
+
+    @api.model
+    def _hash_key(self, key):
+        return sha256(key.encode()).hexdigest()
+
+    @tools.ormcache("key", "security_key")
+    def _get_mcp_server_by_key(self, key, security_key):
+        key = self.sudo().search(
+            [
+                ("server_id.key", "=", key),
+                ("server_id.active", "=", True),
+                ("hashed_key", "=", self._hash_key(security_key)),
+                "|",
+                ("expiration_date", "=", False),
+                ("expiration_date", ">", fields.Datetime.now()),
+                ("state", "=", "active"),
+            ],
+            limit=1,
+        )
+        return (key.id, key.expiration_date) if key else (False, False)
+
+    def _tools_list(self, payload):
+        tools = self.server_id.tool_ids
+        result = []
+        for tool in tools:
+            result.append(tool._get_tool_definition())
+        return {"jsonrpc": "2.0", "id": payload.get("id"), "result": {"tools": result}}
+
+    def _tools_call(self, payload):
+        params = payload.get("params", {})
+        tool_name = params.get("name")
+        args = params.get("arguments", {})
+        result_vals = {
+            "request": json.dumps(params),
+            "server_id": self.server_id.id,
+            "server_key_id": self.id,
+        }
+
+        tool = self.server_id.tool_ids.filtered(lambda t: t.name == tool_name)
+
+        if not tool:
+            self._add_log(**result_vals, error="Tool not found")
+            return {
+                "jsonrpc": "2.0",
+                "id": payload.get("id"),
+                "error": {"code": -32000, "message": "Unknown tool"},
+            }
+        try:
+            with self.env.cr.savepoint(flush=False):
+                result = tool._execute_tool(**args) or {}
+                self._add_log(**result_vals, response=json.dumps(result))
+            return {
+                "jsonrpc": "2.0",
+                "id": payload.get("id"),
+                "result": {
+                    "structuredContent": result,
+                    "content": [{"type": "text", "text": json.dumps(result)}],
+                },
+            }
+        except Exception as e:
+            self._add_log(**result_vals, error=str(e))
+            return {
+                "jsonrpc": "2.0",
+                "id": payload.get("id"),
+                "error": {"code": -32000, "message": str(e)},
+            }
+
+    def _add_log(self, **log_vals):
+        return self.env["mcp.server.log"].sudo().create(log_vals)
diff --git a/ai_oca_mcp/models/mcp_server_log.py b/ai_oca_mcp/models/mcp_server_log.py
new file mode 100644
index 00000000..5bd6103a
--- /dev/null
+++ b/ai_oca_mcp/models/mcp_server_log.py
@@ -0,0 +1,16 @@
+# Copyright 2026 Dixmit
+# License AGPL-3.0 or later (https://www.gnu.org/licenses/agpl).
+
+from odoo import fields, models
+
+
+class McpServerLog(models.Model):
+    _name = "mcp.server.log"
+    _description = "Mcp Server Log"
+
+    server_id = fields.Many2one("mcp.server", required=True, ondelete="cascade")
+    server_key_id = fields.Many2one("mcp.server.key", required=True, ondelete="cascade")
+    request = fields.Text()
+    response = fields.Text()
+    error = fields.Text()
+    date = fields.Datetime(default=fields.Datetime.now, index=True)
diff --git a/ai_oca_mcp/pyproject.toml b/ai_oca_mcp/pyproject.toml
new file mode 100644
index 00000000..4231d0cc
--- /dev/null
+++ b/ai_oca_mcp/pyproject.toml
@@ -0,0 +1,3 @@
+[build-system]
+requires = ["whool"]
+build-backend = "whool.buildapi"
diff --git a/ai_oca_mcp/readme/CONTRIBUTORS.md b/ai_oca_mcp/readme/CONTRIBUTORS.md
new file mode 100644
index 00000000..ef7aa6da
--- /dev/null
+++ b/ai_oca_mcp/readme/CONTRIBUTORS.md
@@ -0,0 +1,5 @@
+- [Dixmit](https://www.dixmit.com)
+  - Enric Tobella
+- Pierre Verkest <pierre@verkest.fr>
+- Angel Moya <amoyapardo@gmail.com>
+- Daniel Reis <dreis.pt@gmail.com>
diff --git a/ai_oca_mcp/readme/DESCRIPTION.md b/ai_oca_mcp/readme/DESCRIPTION.md
new file mode 100644
index 00000000..895b0ee6
--- /dev/null
+++ b/ai_oca_mcp/readme/DESCRIPTION.md
@@ -0,0 +1,28 @@
+Expose Odoo as an MCP (Model Context Protocol) server, allowing external AI
+clients — such as n8n, custom agents, or any MCP-compatible tool — to invoke
+Odoo functions through the standardized MCP protocol.
+
+Each MCP server publishes a set of **AI tools** (defined by the `ai_tool`
+module). Clients exchange JSON-RPC 2.0 messages with Odoo over HTTP POST:
+`tools/list` returns the tool catalogue and `tools/call` executes a tool.
+
+Key characteristics:
+
+- **Authentication**: per-client API keys sent as Bearer tokens. Keys are stored
+  hashed and are shown only once, at creation.
+- **Per-user permissions**: every key is bound to an Odoo user and calls execute
+  with that user's permissions — a client can only do what its key's user can
+  do.
+- **Key lifecycle**: keys can carry an expiration date or be expired manually at
+  any time.
+- **Audit log**: every tool invocation is recorded with its parameters and
+  result or error.
+
+Notes:
+
+- Transport is plain JSON-RPC over HTTP POST. SSE/streaming transports and
+  notifications are not supported.
+- Claude Desktop requires OAuth 2.0 authorization. Odoo does not act as an
+  OAuth authorization server, so clients that mandate OAuth need an extension
+  (for example, validating externally-issued tokens via `auth_jwt` from
+  OCA/server-auth).
diff --git a/ai_oca_mcp/readme/USAGE.md b/ai_oca_mcp/readme/USAGE.md
new file mode 100644
index 00000000..52ea580f
--- /dev/null
+++ b/ai_oca_mcp/readme/USAGE.md
@@ -0,0 +1,67 @@
+## Configure an MCP server
+
+1. Activate developer mode and go to `Settings > Technical > AI > MCP Server`.
+2. Create a server, give it a name, and select the `generic` tools you want to
+   expose.
+3. The `URL` field shows the client endpoint — it already includes the server's
+   unique path key.
+4. Optionally fill `Instructions`: the `initialize` handshake always returns an
+   auto-generated capability summary (the server's purpose and its tool list);
+   this field appends extra guidance to it — domain context, conventions, which
+   tools to prefer. Per-tool `description` and input schemas remain the primary
+   channel agents rely on, so write them as if they were documentation for the
+   model.
+
+## Create a client key
+
+1. Click **Add Key** on the server form.
+2. Choose the user the client will act as and, optionally, an expiration date.
+3. Copy the generated key — it is stored hashed and **shown only once**.
+
+Configure your client with:
+
+- **URL**: the server's `URL` field
+- **Authentication**: Bearer token
+- **Token**: the generated API key
+
+### Connecting from n8n
+
+Use the *MCP Client* node with:
+
+- **Endpoint**: the server's `URL` field
+- **Authentication**: Bearer Token
+- **Token**: the generated API key
+- **Transport**: HTTP — the endpoint expects POST requests; SSE is not supported
+
+## Tool limitations
+
+Only tools of kind `generic` are exposed. Tools requiring a record context
+(`generic_model`, `record`) cannot be called via MCP.
+
+`ai_tool` itself ships only demo tools (`get_date`, `post_message`), of which
+just `get_date` is callable via MCP. Generic read access to Odoo data —
+listing models, describing fields and `search_read` — is provided by the
+`ai_tool_read` addon, which also adds a per-field AI opt-out for sensitive data. Other capabilities — creating documents,
+triggering actions — come from extension modules that define their own
+`@aitool`-decorated methods and `ai.tool` records (see the `ai_tool`
+documentation). Whatever a tool can do is limited by the permissions of the
+user bound to the API key.
+
+Tools are not limited to reading data: a tool method runs real ORM code and can
+also create or update records and call actions, always within the key owner's
+permissions. Results must be JSON-serializable — return plain dicts and convert
+dates, recordsets and binary values yourself — otherwise the call is logged and
+returns a JSON-RPC error.
+
+## Security and auditing
+
+- Create one key per client, so a compromised client can be revoked without
+  affecting the others.
+- Calls execute with the key owner's permissions: prefer a dedicated user with
+  minimal access rights to limit what clients can reach.
+- Internal users can view their own keys and the related servers, but only
+  administrators can create or modify servers and keys.
+- Keys can be expired manually from the server form, or automatically once they
+  reach their expiration date.
+- `AI > MCP Server Log` records every tool invocation with its parameters and
+  result or error — use it to audit client activity.
diff --git a/ai_oca_mcp/security/ir.model.access.csv b/ai_oca_mcp/security/ir.model.access.csv
new file mode 100644
index 00000000..a5a53a0f
--- /dev/null
+++ b/ai_oca_mcp/security/ir.model.access.csv
@@ -0,0 +1,7 @@
+id,name,model_id:id,group_id:id,perm_read,perm_write,perm_create,perm_unlink
+access_mcp_server,access_mcp_server,model_mcp_server,base.group_system,1,1,1,1
+access_mcp_server_key,access_mcp_server_key,model_mcp_server_key,base.group_system,1,1,1,1
+access_mcp_server_user,access_mcp_server_user,model_mcp_server,base.group_user,1,0,0,0
+access_mcp_server_key_user,access_mcp_server_key_user,model_mcp_server_key,base.group_user,1,0,0,0
+access_mcp_server_key_add,access_mcp_server_key_add,model_mcp_server_key_add,base.group_system,1,1,1,1
+access_mcp_server_log,access_mcp_server_log,model_mcp_server_log,base.group_system,1,0,0,0
diff --git a/ai_oca_mcp/security/security.xml b/ai_oca_mcp/security/security.xml
new file mode 100644
index 00000000..01c95faf
--- /dev/null
+++ b/ai_oca_mcp/security/security.xml
@@ -0,0 +1,27 @@
+<?xml version="1.0" encoding="utf-8" ?>
+<odoo noupdate="1">
+    <record id="mcp_server_key_rule_user" model="ir.rule">
+        <field name="name">Mcp Server Key: own keys</field>
+        <field name="model_id" ref="model_mcp_server_key" />
+        <field name="domain_force">[('user_id', '=', user.id)]</field>
+        <field name="groups" eval="[Command.link(ref('base.group_user'))]" />
+    </record>
+    <record id="mcp_server_key_rule_admin" model="ir.rule">
+        <field name="name">Mcp Server Key: all (admin)</field>
+        <field name="model_id" ref="model_mcp_server_key" />
+        <field name="domain_force">[(1, '=', 1)]</field>
+        <field name="groups" eval="[Command.link(ref('base.group_system'))]" />
+    </record>
+    <record id="mcp_server_rule_user" model="ir.rule">
+        <field name="name">Mcp Server: servers of own keys</field>
+        <field name="model_id" ref="model_mcp_server" />
+        <field name="domain_force">[('key_ids.user_id', '=', user.id)]</field>
+        <field name="groups" eval="[Command.link(ref('base.group_user'))]" />
+    </record>
+    <record id="mcp_server_rule_admin" model="ir.rule">
+        <field name="name">Mcp Server: all (admin)</field>
+        <field name="model_id" ref="model_mcp_server" />
+        <field name="domain_force">[(1, '=', 1)]</field>
+        <field name="groups" eval="[Command.link(ref('base.group_system'))]" />
+    </record>
+</odoo>
diff --git a/ai_oca_mcp/static/description/icon.png b/ai_oca_mcp/static/description/icon.png
new file mode 100644
index 00000000..3a0328b5
Binary files /dev/null and b/ai_oca_mcp/static/description/icon.png differ
diff --git a/ai_oca_mcp/static/description/index.html b/ai_oca_mcp/static/description/index.html
new file mode 100644
index 00000000..d9b33e0c
--- /dev/null
+++ b/ai_oca_mcp/static/description/index.html
@@ -0,0 +1,552 @@
+<!DOCTYPE html PUBLIC "-//W3C//DTD XHTML 1.0 Transitional//EN" "http://www.w3.org/TR/xhtml1/DTD/xhtml1-transitional.dtd">
+<html xmlns="http://www.w3.org/1999/xhtml" xml:lang="en" lang="en">
+<head>
+<meta http-equiv="Content-Type" content="text/html; charset=utf-8" />
+<meta name="generator" content="Docutils: https://docutils.sourceforge.io/" />
+<title>Ai Oca Mcp</title>
+<style type="text/css">
+
+/*
+:Author: David Goodger (goodger@python.org)
+:Id: $Id: html4css1.css 9511 2024-01-13 09:50:07Z milde $
+:Copyright: This stylesheet has been placed in the public domain.
+
+Default cascading style sheet for the HTML output of Docutils.
+Despite the name, some widely supported CSS2 features are used.
+
+See https://docutils.sourceforge.io/docs/howto/html-stylesheets.html for how to
+customize this style sheet.
+*/
+
+/* used to remove borders from tables and images */
+.borderless, table.borderless td, table.borderless th {
+  border: 0 }
+
+table.borderless td, table.borderless th {
+  /* Override padding for "table.docutils td" with "! important".
+     The right padding separates the table cells. */
+  padding: 0 0.5em 0 0 ! important }
+
+.first {
+  /* Override more specific margin styles with "! important". */
+  margin-top: 0 ! important }
+
+.last, .with-subtitle {
+  margin-bottom: 0 ! important }
+
+.hidden {
+  display: none }
+
+.subscript {
+  vertical-align: sub;
+  font-size: smaller }
+
+.superscript {
+  vertical-align: super;
+  font-size: smaller }
+
+a.toc-backref {
+  text-decoration: none ;
+  color: black }
+
+blockquote.epigraph {
+  margin: 2em 5em ; }
+
+dl.docutils dd {
+  margin-bottom: 0.5em }
+
+object[type="image/svg+xml"], object[type="application/x-shockwave-flash"] {
+  overflow: hidden;
+}
+
+/* Uncomment (and remove this text!) to get bold-faced definition list terms
+dl.docutils dt {
+  font-weight: bold }
+*/
+
+div.abstract {
+  margin: 2em 5em }
+
+div.abstract p.topic-title {
+  font-weight: bold ;
+  text-align: center }
+
+div.admonition, div.attention, div.caution, div.danger, div.error,
+div.hint, div.important, div.note, div.tip, div.warning {
+  margin: 2em ;
+  border: medium outset ;
+  padding: 1em }
+
+div.admonition p.admonition-title, div.hint p.admonition-title,
+div.important p.admonition-title, div.note p.admonition-title,
+div.tip p.admonition-title {
+  font-weight: bold ;
+  font-family: sans-serif }
+
+div.attention p.admonition-title, div.caution p.admonition-title,
+div.danger p.admonition-title, div.error p.admonition-title,
+div.warning p.admonition-title, .code .error {
+  color: red ;
+  font-weight: bold ;
+  font-family: sans-serif }
+
+/* Uncomment (and remove this text!) to get reduced vertical space in
+   compound paragraphs.
+div.compound .compound-first, div.compound .compound-middle {
+  margin-bottom: 0.5em }
+
+div.compound .compound-last, div.compound .compound-middle {
+  margin-top: 0.5em }
+*/
+
+div.dedication {
+  margin: 2em 5em ;
+  text-align: center ;
+  font-style: italic }
+
+div.dedication p.topic-title {
+  font-weight: bold ;
+  font-style: normal }
+
+div.figure {
+  margin-left: 2em ;
+  margin-right: 2em }
+
+div.footer, div.header {
+  clear: both;
+  font-size: smaller }
+
+div.line-block {
+  display: block ;
+  margin-top: 1em ;
+  margin-bottom: 1em }
+
+div.line-block div.line-block {
+  margin-top: 0 ;
+  margin-bottom: 0 ;
+  margin-left: 1.5em }
+
+div.sidebar {
+  margin: 0 0 0.5em 1em ;
+  border: medium outset ;
+  padding: 1em ;
+  background-color: #ffffee ;
+  width: 40% ;
+  float: right ;
+  clear: right }
+
+div.sidebar p.rubric {
+  font-family: sans-serif ;
+  font-size: medium }
+
+div.system-messages {
+  margin: 5em }
+
+div.system-messages h1 {
+  color: red }
+
+div.system-message {
+  border: medium outset ;
+  padding: 1em }
+
+div.system-message p.system-message-title {
+  color: red ;
+  font-weight: bold }
+
+div.topic {
+  margin: 2em }
+
+h1.section-subtitle, h2.section-subtitle, h3.section-subtitle,
+h4.section-subtitle, h5.section-subtitle, h6.section-subtitle {
+  margin-top: 0.4em }
+
+h1.title {
+  text-align: center }
+
+h2.subtitle {
+  text-align: center }
+
+hr.docutils {
+  width: 75% }
+
+img.align-left, .figure.align-left, object.align-left, table.align-left {
+  clear: left ;
+  float: left ;
+  margin-right: 1em }
+
+img.align-right, .figure.align-right, object.align-right, table.align-right {
+  clear: right ;
+  float: right ;
+  margin-left: 1em }
+
+img.align-center, .figure.align-center, object.align-center {
+  display: block;
+  margin-left: auto;
+  margin-right: auto;
+}
+
+table.align-center {
+  margin-left: auto;
+  margin-right: auto;
+}
+
+.align-left {
+  text-align: left }
+
+.align-center {
+  clear: both ;
+  text-align: center }
+
+.align-right {
+  text-align: right }
+
+/* reset inner alignment in figures */
+div.align-right {
+  text-align: inherit }
+
+/* div.align-center * { */
+/*   text-align: left } */
+
+.align-top    {
+  vertical-align: top }
+
+.align-middle {
+  vertical-align: middle }
+
+.align-bottom {
+  vertical-align: bottom }
+
+ol.simple, ul.simple {
+  margin-bottom: 1em }
+
+ol.arabic {
+  list-style: decimal }
+
+ol.loweralpha {
+  list-style: lower-alpha }
+
+ol.upperalpha {
+  list-style: upper-alpha }
+
+ol.lowerroman {
+  list-style: lower-roman }
+
+ol.upperroman {
+  list-style: upper-roman }
+
+p.attribution {
+  text-align: right ;
+  margin-left: 50% }
+
+p.caption {
+  font-style: italic }
+
+p.credits {
+  font-style: italic ;
+  font-size: smaller }
+
+p.label {
+  white-space: nowrap }
+
+p.rubric {
+  font-weight: bold ;
+  font-size: larger ;
+  color: maroon ;
+  text-align: center }
+
+p.sidebar-title {
+  font-family: sans-serif ;
+  font-weight: bold ;
+  font-size: larger }
+
+p.sidebar-subtitle {
+  font-family: sans-serif ;
+  font-weight: bold }
+
+p.topic-title {
+  font-weight: bold }
+
+pre.address {
+  margin-bottom: 0 ;
+  margin-top: 0 ;
+  font: inherit }
+
+pre.literal-block, pre.doctest-block, pre.math, pre.code {
+  margin-left: 2em ;
+  margin-right: 2em }
+
+pre.code .ln { color: gray; } /* line numbers */
+pre.code, code { background-color: #eeeeee }
+pre.code .comment, code .comment { color: #5C6576 }
+pre.code .keyword, code .keyword { color: #3B0D06; font-weight: bold }
+pre.code .literal.string, code .literal.string { color: #0C5404 }
+pre.code .name.builtin, code .name.builtin { color: #352B84 }
+pre.code .deleted, code .deleted { background-color: #DEB0A1}
+pre.code .inserted, code .inserted { background-color: #A3D289}
+
+span.classifier {
+  font-family: sans-serif ;
+  font-style: oblique }
+
+span.classifier-delimiter {
+  font-family: sans-serif ;
+  font-weight: bold }
+
+span.interpreted {
+  font-family: sans-serif }
+
+span.option {
+  white-space: nowrap }
+
+span.pre {
+  white-space: pre }
+
+span.problematic, pre.problematic {
+  color: red }
+
+span.section-subtitle {
+  /* font-size relative to parent (h1..h6 element) */
+  font-size: 80% }
+
+table.citation {
+  border-left: solid 1px gray;
+  margin-left: 1px }
+
+table.docinfo {
+  margin: 2em 4em }
+
+table.docutils {
+  margin-top: 0.5em ;
+  margin-bottom: 0.5em }
+
+table.footnote {
+  border-left: solid 1px black;
+  margin-left: 1px }
+
+table.docutils td, table.docutils th,
+table.docinfo td, table.docinfo th {
+  padding-left: 0.5em ;
+  padding-right: 0.5em ;
+  vertical-align: top }
+
+table.docutils th.field-name, table.docinfo th.docinfo-name {
+  font-weight: bold ;
+  text-align: left ;
+  white-space: nowrap ;
+  padding-left: 0 }
+
+/* "booktabs" style (no vertical lines) */
+table.docutils.booktabs {
+  border: 0px;
+  border-top: 2px solid;
+  border-bottom: 2px solid;
+  border-collapse: collapse;
+}
+table.docutils.booktabs * {
+  border: 0px;
+}
+table.docutils.booktabs th {
+  border-bottom: thin solid;
+  text-align: left;
+}
+
+h1 tt.docutils, h2 tt.docutils, h3 tt.docutils,
+h4 tt.docutils, h5 tt.docutils, h6 tt.docutils {
+  font-size: 100% }
+
+ul.auto-toc {
+  list-style-type: none }
+
+</style>
+</head>
+<body>
+<div class="document">
+
+
+<a class="reference external image-reference" href="https://odoo-community.org/get-involved?utm_source=readme">
+<img alt="Odoo Community Association" src="https://odoo-community.org/readme-banner-image" />
+</a>
+<div class="section" id="ai-oca-mcp">
+<h1>Ai Oca Mcp</h1>
+<!-- !!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!
+!! This file is generated by oca-gen-addon-readme !!
+!! changes will be overwritten.                   !!
+!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!
+!! source digest: sha256:3d96a5eaf8e647e8ed470a84e39780908086610d1c72402ea1a85830b2d0e709
+!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!! -->
+<p><a class="reference external image-reference" href="https://odoo-community.org/page/development-status"><img alt="Beta" src="https://img.shields.io/badge/maturity-Beta-yellow.png" /></a> <a class="reference external image-reference" href="http://www.gnu.org/licenses/agpl-3.0-standalone.html"><img alt="License: AGPL-3" src="https://img.shields.io/badge/license-AGPL--3-blue.png" /></a> <a class="reference external image-reference" href="https://github.com/OCA/ai/tree/19.0/ai_oca_mcp"><img alt="OCA/ai" src="https://img.shields.io/badge/github-OCA%2Fai-lightgray.png?logo=github" /></a> <a class="reference external image-reference" href="https://translation.odoo-community.org/projects/ai-19-0/ai-19-0-ai_oca_mcp"><img alt="Translate me on Weblate" src="https://img.shields.io/badge/weblate-Translate%20me-F47D42.png" /></a> <a class="reference external image-reference" href="https://runboat.odoo-community.org/builds?repo=OCA/ai&amp;target_branch=19.0"><img alt="Try me on Runboat" src="https://img.shields.io/badge/runboat-Try%20me-875A7B.png" /></a></p>
+<p>Expose Odoo as an MCP (Model Context Protocol) server, allowing external
+AI clients — such as n8n, custom agents, or any MCP-compatible tool — to
+invoke Odoo functions through the standardized MCP protocol.</p>
+<p>Each MCP server publishes a set of <strong>AI tools</strong> (defined by the
+<tt class="docutils literal">ai_tool</tt> module). Clients exchange JSON-RPC 2.0 messages with Odoo
+over HTTP POST: <tt class="docutils literal">tools/list</tt> returns the tool catalogue and
+<tt class="docutils literal">tools/call</tt> executes a tool.</p>
+<p>Key characteristics:</p>
+<ul class="simple">
+<li><strong>Authentication</strong>: per-client API keys sent as Bearer tokens. Keys
+are stored hashed and are shown only once, at creation.</li>
+<li><strong>Per-user permissions</strong>: every key is bound to an Odoo user and calls
+execute with that user’s permissions — a client can only do what its
+key’s user can do.</li>
+<li><strong>Key lifecycle</strong>: keys can carry an expiration date or be expired
+manually at any time.</li>
+<li><strong>Audit log</strong>: every tool invocation is recorded with its parameters
+and result or error.</li>
+</ul>
+<p>Notes:</p>
+<ul class="simple">
+<li>Transport is plain JSON-RPC over HTTP POST. SSE/streaming transports
+and notifications are not supported.</li>
+<li>Claude Desktop requires OAuth 2.0 authorization. Odoo does not act as
+an OAuth authorization server, so clients that mandate OAuth need an
+extension (for example, validating externally-issued tokens via
+<tt class="docutils literal">auth_jwt</tt> from OCA/server-auth).</li>
+</ul>
+<p><strong>Table of contents</strong></p>
+<div class="contents local topic" id="contents">
+<ul class="simple">
+<li><a class="reference internal" href="#usage" id="toc-entry-1">Usage</a><ul>
+<li><a class="reference internal" href="#configure-an-mcp-server" id="toc-entry-2">Configure an MCP server</a></li>
+<li><a class="reference internal" href="#create-a-client-key" id="toc-entry-3">Create a client key</a><ul>
+<li><a class="reference internal" href="#connecting-from-n8n" id="toc-entry-4">Connecting from n8n</a></li>
+</ul>
+</li>
+<li><a class="reference internal" href="#tool-limitations" id="toc-entry-5">Tool limitations</a></li>
+<li><a class="reference internal" href="#security-and-auditing" id="toc-entry-6">Security and auditing</a></li>
+</ul>
+</li>
+<li><a class="reference internal" href="#bug-tracker" id="toc-entry-7">Bug Tracker</a></li>
+<li><a class="reference internal" href="#credits" id="toc-entry-8">Credits</a><ul>
+<li><a class="reference internal" href="#authors" id="toc-entry-9">Authors</a></li>
+<li><a class="reference internal" href="#contributors" id="toc-entry-10">Contributors</a></li>
+<li><a class="reference internal" href="#maintainers" id="toc-entry-11">Maintainers</a></li>
+</ul>
+</li>
+</ul>
+</div>
+<div class="section" id="usage">
+<h2><a class="toc-backref" href="#toc-entry-1">Usage</a></h2>
+<div class="section" id="configure-an-mcp-server">
+<h3><a class="toc-backref" href="#toc-entry-2">Configure an MCP server</a></h3>
+<ol class="arabic simple">
+<li>Activate developer mode and go to
+<tt class="docutils literal">Settings &gt; Technical &gt; AI &gt; MCP Server</tt>.</li>
+<li>Create a server, give it a name, and select the <tt class="docutils literal">generic</tt> tools you
+want to expose.</li>
+<li>The <tt class="docutils literal">URL</tt> field shows the client endpoint — it already includes the
+server’s unique path key.</li>
+<li>Optionally fill <tt class="docutils literal">Instructions</tt>: the <tt class="docutils literal">initialize</tt> handshake always
+returns an auto-generated capability summary (the server’s purpose
+and its tool list); this field appends extra guidance to it — domain
+context, conventions, which tools to prefer. Per-tool <tt class="docutils literal">description</tt>
+and input schemas remain the primary channel agents rely on, so write
+them as if they were documentation for the model.</li>
+</ol>
+</div>
+<div class="section" id="create-a-client-key">
+<h3><a class="toc-backref" href="#toc-entry-3">Create a client key</a></h3>
+<ol class="arabic simple">
+<li>Click <strong>Add Key</strong> on the server form.</li>
+<li>Choose the user the client will act as and, optionally, an expiration
+date.</li>
+<li>Copy the generated key — it is stored hashed and <strong>shown only once</strong>.</li>
+</ol>
+<p>Configure your client with:</p>
+<ul class="simple">
+<li><strong>URL</strong>: the server’s <tt class="docutils literal">URL</tt> field</li>
+<li><strong>Authentication</strong>: Bearer token</li>
+<li><strong>Token</strong>: the generated API key</li>
+</ul>
+<div class="section" id="connecting-from-n8n">
+<h4><a class="toc-backref" href="#toc-entry-4">Connecting from n8n</a></h4>
+<p>Use the <em>MCP Client</em> node with:</p>
+<ul class="simple">
+<li><strong>Endpoint</strong>: the server’s <tt class="docutils literal">URL</tt> field</li>
+<li><strong>Authentication</strong>: Bearer Token</li>
+<li><strong>Token</strong>: the generated API key</li>
+<li><strong>Transport</strong>: HTTP — the endpoint expects POST requests; SSE is not
+supported</li>
+</ul>
+</div>
+</div>
+<div class="section" id="tool-limitations">
+<h3><a class="toc-backref" href="#toc-entry-5">Tool limitations</a></h3>
+<p>Only tools of kind <tt class="docutils literal">generic</tt> are exposed. Tools requiring a record
+context (<tt class="docutils literal">generic_model</tt>, <tt class="docutils literal">record</tt>) cannot be called via MCP.</p>
+<p><tt class="docutils literal">ai_tool</tt> itself ships only demo tools (<tt class="docutils literal">get_date</tt>,
+<tt class="docutils literal">post_message</tt>), of which just <tt class="docutils literal">get_date</tt> is callable via MCP.
+Generic read access to Odoo data — listing models, describing fields and
+<tt class="docutils literal">search_read</tt> — is provided by the <tt class="docutils literal">ai_tool_read</tt> addon, which also
+adds a per-field AI opt-out for sensitive data. Other capabilities —
+creating documents, triggering actions — come from extension modules
+that define their own <tt class="docutils literal">&#64;aitool</tt>-decorated methods and <tt class="docutils literal">ai.tool</tt>
+records (see the <tt class="docutils literal">ai_tool</tt> documentation). Whatever a tool can do is
+limited by the permissions of the user bound to the API key.</p>
+<p>Tools are not limited to reading data: a tool method runs real ORM code
+and can also create or update records and call actions, always within
+the key owner’s permissions. Results must be JSON-serializable — return
+plain dicts and convert dates, recordsets and binary values yourself —
+otherwise the call is logged and returns a JSON-RPC error.</p>
+</div>
+<div class="section" id="security-and-auditing">
+<h3><a class="toc-backref" href="#toc-entry-6">Security and auditing</a></h3>
+<ul class="simple">
+<li>Create one key per client, so a compromised client can be revoked
+without affecting the others.</li>
+<li>Calls execute with the key owner’s permissions: prefer a dedicated
+user with minimal access rights to limit what clients can reach.</li>
+<li>Internal users can view their own keys and the related servers, but
+only administrators can create or modify servers and keys.</li>
+<li>Keys can be expired manually from the server form, or automatically
+once they reach their expiration date.</li>
+<li><tt class="docutils literal">AI &gt; MCP Server Log</tt> records every tool invocation with its
+parameters and result or error — use it to audit client activity.</li>
+</ul>
+</div>
+</div>
+<div class="section" id="bug-tracker">
+<h2><a class="toc-backref" href="#toc-entry-7">Bug Tracker</a></h2>
+<p>Bugs are tracked on <a class="reference external" href="https://github.com/OCA/ai/issues">GitHub Issues</a>.
+In case of trouble, please check there if your issue has already been reported.
+If you spotted it first, help us to smash it by providing a detailed and welcomed
+<a class="reference external" href="https://github.com/OCA/ai/issues/new?body=module:%20ai_oca_mcp%0Aversion:%2019.0%0A%0A**Steps%20to%20reproduce**%0A-%20...%0A%0A**Current%20behavior**%0A%0A**Expected%20behavior**">feedback</a>.</p>
+<p>Do not contact contributors directly about support or help with technical issues.</p>
+</div>
+<div class="section" id="credits">
+<h2><a class="toc-backref" href="#toc-entry-8">Credits</a></h2>
+<div class="section" id="authors">
+<h3><a class="toc-backref" href="#toc-entry-9">Authors</a></h3>
+<ul class="simple">
+<li>Dixmit</li>
+</ul>
+</div>
+<div class="section" id="contributors">
+<h3><a class="toc-backref" href="#toc-entry-10">Contributors</a></h3>
+<ul class="simple">
+<li><a class="reference external" href="https://www.dixmit.com">Dixmit</a><ul>
+<li>Enric Tobella</li>
+</ul>
+</li>
+<li>Pierre Verkest <a class="reference external" href="mailto:pierre&#64;verkest.fr">pierre&#64;verkest.fr</a></li>
+<li>Angel Moya <a class="reference external" href="mailto:amoyapardo&#64;gmail.com">amoyapardo&#64;gmail.com</a></li>
+<li>Daniel Reis <a class="reference external" href="mailto:dreis.pt&#64;gmail.com">dreis.pt&#64;gmail.com</a></li>
+</ul>
+</div>
+<div class="section" id="maintainers">
+<h3><a class="toc-backref" href="#toc-entry-11">Maintainers</a></h3>
+<p>This module is maintained by the OCA.</p>
+<a class="reference external image-reference" href="https://odoo-community.org">
+<img alt="Odoo Community Association" src="https://odoo-community.org/logo.png" />
+</a>
+<p>OCA, or the Odoo Community Association, is a nonprofit organization whose
+mission is to support the collaborative development of Odoo features and
+promote its widespread use.</p>
+<p>This module is part of the <a class="reference external" href="https://github.com/OCA/ai/tree/19.0/ai_oca_mcp">OCA/ai</a> project on GitHub.</p>
+<p>You are welcome to contribute. To learn how please visit <a class="reference external" href="https://odoo-community.org/page/Contribute">https://odoo-community.org/page/Contribute</a>.</p>
+</div>
+</div>
+</div>
+</div>
+</body>
+</html>
diff --git a/ai_oca_mcp/tests/__init__.py b/ai_oca_mcp/tests/__init__.py
new file mode 100644
index 00000000..cb03ee12
--- /dev/null
+++ b/ai_oca_mcp/tests/__init__.py
@@ -0,0 +1 @@
+from . import test_mcp
diff --git a/ai_oca_mcp/tests/test_mcp.py b/ai_oca_mcp/tests/test_mcp.py
new file mode 100644
index 00000000..26c0e80c
--- /dev/null
+++ b/ai_oca_mcp/tests/test_mcp.py
@@ -0,0 +1,406 @@
+# Copyright 2026 Dixmit
+# License AGPL-3.0 or later (https://www.gnu.org/licenses/agpl).
+
+import json
+
+from freezegun import freeze_time
+
+from odoo.exceptions import AccessError
+from odoo.tests.common import HttpCase
+from odoo.tools import mute_logger
+
+
+class TestMcp(HttpCase):
+    @classmethod
+    def setUpClass(cls):
+        super().setUpClass()
+        cls.server = cls.env["mcp.server"].create(
+            {
+                "name": "Test Server",
+                "tool_ids": [(4, cls.env.ref("ai_tool.current_date").id)],
+            }
+        )
+        wizard = (
+            cls.env["mcp.server.key.add"]
+            .with_context(default_server_id=cls.server.id)
+            .create({"name": "Test Key"})
+        )
+        wizard.generate_key()
+        cls.security_key = wizard.key
+
+    @mute_logger("odoo.http")
+    def test_no_authorization(self):
+        request = self.url_open(
+            f"/mcp/{self.server.key}",
+            data=json.dumps(
+                {
+                    "jsonrpc": "2.0",
+                    "id": "1",
+                    "method": "initialize",
+                }
+            ),
+            headers={"Content-Type": "application/json"},
+        )
+        self.assertEqual(request.status_code, 401)
+
+    def test_wrong_authorization(self):
+        request = self.url_open(
+            f"/mcp/{self.server.key}",
+            data=json.dumps(
+                {
+                    "jsonrpc": "2.0",
+                    "id": "1",
+                    "method": "initialize",
+                }
+            ),
+            headers={
+                "Content-Type": "application/json",
+                "Authorization": "Bearer wrong",
+            },
+        )
+        self.assertEqual(request.status_code, 200)
+        response = json.loads(request.content.decode("utf-8"))
+        self.assertIn("error", response)
+
+    def test_wrong_method(self):
+        request = self.url_open(
+            f"/mcp/{self.server.key}",
+            data=json.dumps(
+                {
+                    "jsonrpc": "2.0",
+                    "id": "1",
+                    "method": "wrong_method",
+                }
+            ),
+            headers={
+                "Content-Type": "application/json",
+                "Authorization": f"Bearer {self.security_key}",
+            },
+        )
+        self.assertEqual(request.status_code, 200)
+        response = json.loads(request.content.decode("utf-8"))
+        self.assertIn("error", response)
+
+    def test_correct_initialize(self):
+        request = self.url_open(
+            f"/mcp/{self.server.key}",
+            data=json.dumps(
+                {
+                    "jsonrpc": "2.0",
+                    "id": "1",
+                    "method": "initialize",
+                }
+            ),
+            headers={
+                "Content-Type": "application/json",
+                "Authorization": f"Bearer {self.security_key}",
+            },
+        )
+        self.assertEqual(request.status_code, 200)
+        response = json.loads(request.content.decode("utf-8"))
+        self.assertIn("result", response)
+        self.assertIn("capabilities", response["result"])
+        self.assertIn("tools", response["result"]["capabilities"])
+        # instructions always carry the auto-generated capability summary
+        instructions = response["result"]["instructions"]
+        self.assertIn("Available tools:", instructions)
+        self.assertIn("get_date", instructions)
+
+    def test_initialize_with_instructions(self):
+        self.server.instructions = "Use the search tools to query data."
+        request = self.url_open(
+            f"/mcp/{self.server.key}",
+            data=json.dumps(
+                {
+                    "jsonrpc": "2.0",
+                    "id": "1",
+                    "method": "initialize",
+                }
+            ),
+            headers={
+                "Content-Type": "application/json",
+                "Authorization": f"Bearer {self.security_key}",
+            },
+        )
+        self.assertEqual(request.status_code, 200)
+        response = json.loads(request.content.decode("utf-8"))
+        instructions = response["result"]["instructions"]
+        self.assertIn("get_date", instructions)
+        self.assertTrue(instructions.endswith("Use the search tools to query data."))
+
+    def test_list_tools(self):
+        request = self.url_open(
+            f"/mcp/{self.server.key}",
+            data=json.dumps(
+                {
+                    "jsonrpc": "2.0",
+                    "id": "1",
+                    "method": "tools/list",
+                }
+            ),
+            headers={
+                "Content-Type": "application/json",
+                "Authorization": f"Bearer {self.security_key}",
+            },
+        )
+        self.assertEqual(request.status_code, 200)
+        response = json.loads(request.content.decode("utf-8"))
+        self.assertIn("result", response)
+        self.assertIn("tools", response["result"])
+        self.assertEqual(1, len(response["result"]["tools"]))
+        self.assertEqual("get_date", response["result"]["tools"][0]["name"])
+
+    def test_execute_wrong_tool(self):
+        with freeze_time("2024-01-01"):
+            request = self.url_open(
+                f"/mcp/{self.server.key}",
+                data=json.dumps(
+                    {
+                        "jsonrpc": "2.0",
+                        "id": "1",
+                        "method": "tools/call",
+                        "params": {
+                            "name": "post_message",
+                            "arguments": {},
+                        },
+                    }
+                ),
+                headers={
+                    "Content-Type": "application/json",
+                    "Authorization": f"Bearer {self.security_key}",
+                },
+            )
+        self.assertEqual(request.status_code, 200)
+        response = json.loads(request.content.decode("utf-8"))
+        self.assertIn("error", response)
+
+    def test_execute_tool(self):
+        with freeze_time("2024-01-01"):
+            request = self.url_open(
+                f"/mcp/{self.server.key}",
+                data=json.dumps(
+                    {
+                        "jsonrpc": "2.0",
+                        "id": "1",
+                        "method": "tools/call",
+                        "params": {
+                            "name": "get_date",
+                            "arguments": {},
+                        },
+                    }
+                ),
+                headers={
+                    "Content-Type": "application/json",
+                    "Authorization": f"Bearer {self.security_key}",
+                },
+            )
+        self.assertEqual(request.status_code, 200)
+        response = json.loads(request.content.decode("utf-8"))
+        self.assertIn("result", response)
+        self.assertIn("structuredContent", response["result"])
+        self.assertEqual(response["result"]["structuredContent"]["date"], "2024-01-01")
+
+    @mute_logger("odoo.models", "odoo.addons.base.models.ir_rule")
+    def test_internal_user_access(self):
+        """A plain internal user can read the key (and its server) it owns,
+        but cannot open records for which it has no key of its own."""
+        group_user = self.env.ref("base.group_user")
+        user_a = self.env["res.users"].create(
+            {
+                "name": "MCP User A",
+                "login": "mcp_user_a",
+                "group_ids": [(6, 0, [group_user.id])],
+            }
+        )
+        user_b = self.env["res.users"].create(
+            {
+                "name": "MCP User B",
+                "login": "mcp_user_b",
+                "group_ids": [(6, 0, [group_user.id])],
+            }
+        )
+        self.assertFalse(user_a.has_group("base.group_system"))
+        # user_a owns a key on self.server
+        key_a = self.env["mcp.server.key"].create(
+            {"name": "Key A", "server_id": self.server.id, "user_id": user_a.id}
+        )
+        # user_b owns a key on another server; user_a has no key anywhere on it
+        other_server = self.env["mcp.server"].create({"name": "Other Server"})
+        key_b = self.env["mcp.server.key"].create(
+            {"name": "Key B", "server_id": other_server.id, "user_id": user_b.id}
+        )
+
+        # --- With a key of its own, the internal user can read it and its server ---
+        self.assertEqual(key_a.with_user(user_a).read(["name"])[0]["name"], "Key A")
+        self.assertEqual(
+            self.server.with_user(user_a).read(["name"])[0]["name"], "Test Server"
+        )
+        self.assertIn(key_a, self.env["mcp.server.key"].with_user(user_a).search([]))
+        self.assertIn(self.server, self.env["mcp.server"].with_user(user_a).search([]))
+
+        # --- Records it has no key for are filtered out and cannot be opened ---
+        self.assertNotIn(key_b, self.env["mcp.server.key"].with_user(user_a).search([]))
+        self.assertNotIn(
+            other_server, self.env["mcp.server"].with_user(user_a).search([])
+        )
+        with self.assertRaises(AccessError):
+            key_b.with_user(user_a).read(["name"])
+        with self.assertRaises(AccessError):
+            other_server.with_user(user_a).read(["name"])
+
+    def _create_non_admin_key(self):
+        """Create an active key on self.server owned by a plain internal user
+        (base.group_user only) and return its security key."""
+        user = self.env["res.users"].create(
+            {
+                "name": "MCP Plain User",
+                "login": "mcp_plain_user",
+                "group_ids": [(6, 0, [self.env.ref("base.group_user").id])],
+            }
+        )
+        self.assertFalse(user.has_group("base.group_system"))
+        key = self.env["mcp.server.key"].create(
+            {"name": "Plain Key", "server_id": self.server.id, "user_id": user.id}
+        )
+        security_key = "plain-user-security-key"
+        key.hashed_key = key._hash_key(security_key)
+        # Refresh the cached key lookup so the new key is resolvable.
+        self.env.registry.clear_cache()
+        return security_key
+
+    def test_list_tools_non_admin_user(self):
+        """A key owned by a plain internal user (no ir.model access) must still
+        be able to list tools -- building the tool definitions must not require
+        Administration/Access Rights."""
+        security_key = self._create_non_admin_key()
+        request = self.url_open(
+            f"/mcp/{self.server.key}",
+            data=json.dumps(
+                {
+                    "jsonrpc": "2.0",
+                    "id": "1",
+                    "method": "tools/list",
+                }
+            ),
+            headers={
+                "Content-Type": "application/json",
+                "Authorization": f"Bearer {security_key}",
+            },
+        )
+        self.assertEqual(request.status_code, 200)
+        response = json.loads(request.content.decode("utf-8"))
+        self.assertNotIn("error", response)
+        self.assertIn("result", response)
+        self.assertEqual(1, len(response["result"]["tools"]))
+        self.assertEqual("get_date", response["result"]["tools"][0]["name"])
+
+    def test_execute_tool_non_admin_user(self):
+        """A generic tool must be callable through a plain internal user's key
+        (its model dispatch must not require ir.model read access)."""
+        security_key = self._create_non_admin_key()
+        with freeze_time("2024-01-01"):
+            request = self.url_open(
+                f"/mcp/{self.server.key}",
+                data=json.dumps(
+                    {
+                        "jsonrpc": "2.0",
+                        "id": "1",
+                        "method": "tools/call",
+                        "params": {
+                            "name": "get_date",
+                            "arguments": {},
+                        },
+                    }
+                ),
+                headers={
+                    "Content-Type": "application/json",
+                    "Authorization": f"Bearer {security_key}",
+                },
+            )
+        self.assertEqual(request.status_code, 200)
+        response = json.loads(request.content.decode("utf-8"))
+        self.assertNotIn("error", response)
+        self.assertIn("result", response)
+        self.assertEqual(response["result"]["structuredContent"]["date"], "2024-01-01")
+
+    def test_execute_tool_returns_error_when_tool_execution_raises_exception(self):
+        from unittest.mock import patch
+
+        with patch(
+            "odoo.addons.ai_tool.models.ai_tool.AiTool._execute_tool",
+            side_effect=Exception("Test execution error"),
+        ):
+            request = self.url_open(
+                f"/mcp/{self.server.key}",
+                data=json.dumps(
+                    {
+                        "jsonrpc": "2.0",
+                        "id": "1",
+                        "method": "tools/call",
+                        "params": {
+                            "name": "get_date",
+                            "arguments": {},
+                        },
+                    }
+                ),
+                headers={
+                    "Content-Type": "application/json",
+                    "Authorization": f"Bearer {self.security_key}",
+                },
+            )
+        self.assertEqual(request.status_code, 200)
+        response = json.loads(request.content.decode("utf-8"))
+        self.assertNotIn("result", response)
+        self.assertIn("error", response)
+        self.assertEqual(response["error"]["message"], "Test execution error")
+
+        log = self.env["mcp.server.log"].search(
+            [("server_id", "=", self.server.id)], order="id desc", limit=1
+        )
+        self.assertTrue(log)
+        self.assertEqual(log.error, "Test execution error")
+
+    def test_url(self):
+        self.server.key = "newkey"
+        self.assertEqual(self.server.url, f"{self.base_url()}/mcp/newkey")
+
+    def test_expiration_handling(self):
+        self.server.key_ids.write({"expiration_date": "2024-01-02 00:00:00"})
+        with freeze_time("2024-01-01"):
+            request = self.url_open(
+                f"/mcp/{self.server.key}",
+                data=json.dumps(
+                    {
+                        "jsonrpc": "2.0",
+                        "id": "1",
+                        "method": "initialize",
+                    }
+                ),
+                headers={
+                    "Content-Type": "application/json",
+                    "Authorization": f"Bearer {self.security_key}",
+                },
+            )
+        self.assertEqual(request.status_code, 200, request.content.decode("utf-8"))
+        response = json.loads(request.content.decode("utf-8"))
+        self.assertIn("result", response)
+        self.assertNotIn("error", response)
+        with freeze_time("2024-01-03"):
+            request = self.url_open(
+                f"/mcp/{self.server.key}",
+                data=json.dumps(
+                    {
+                        "jsonrpc": "2.0",
+                        "id": "1",
+                        "method": "initialize",
+                    }
+                ),
+                headers={
+                    "Content-Type": "application/json",
+                    "Authorization": f"Bearer {self.security_key}",
+                },
+            )
+        self.assertEqual(request.status_code, 200, request.content.decode("utf-8"))
+        response = json.loads(request.content.decode("utf-8"))
+        self.assertNotIn("result", response)
+        self.assertIn("error", response)
diff --git a/ai_oca_mcp/views/mcp_server.xml b/ai_oca_mcp/views/mcp_server.xml
new file mode 100644
index 00000000..fdb3222c
--- /dev/null
+++ b/ai_oca_mcp/views/mcp_server.xml
@@ -0,0 +1,90 @@
+<?xml version="1.0" encoding="utf-8" ?>
+<!-- Copyright 2026 Dixmit
+     License AGPL-3.0 or later (https://www.gnu.org/licenses/agpl). -->
+<odoo>
+    <record model="ir.ui.view" id="mcp_server_form_view">
+        <field name="model">mcp.server</field>
+        <field name="arch" type="xml">
+            <form>
+                <header />
+                <sheet>
+                    <div name="button_box" class="oe_button_box" role="group">
+                        <button
+                            name="%(ai_oca_mcp.mcp_server_key_add_act_window)d"
+                            string="Add Key"
+                            type="action"
+                            class="btn-primary"
+                            icon="fa-key"
+                            context="{'default_server_id': id}"
+                        />
+                        <button
+                            name="%(ai_oca_mcp.mcp_server_log_server_filter_act_window)d"
+                            string="Show logs"
+                            type="action"
+                            icon="fa-list"
+                            class="btn-primary"
+                        />
+                    </div>
+                    <widget
+                        name="web_ribbon"
+                        title="Archived"
+                        bg_color="bg-danger"
+                        invisible="active"
+                    />
+                    <div class="oe_title">
+                        <label for="name" />
+                        <h1>
+                            <field name="name" placeholder="Name..." />
+                        </h1>
+                    </div>
+                    <group>
+                        <field name="active" invisible="1" />
+                        <field name="description" />
+                        <field name="instructions" />
+                        <field name="key" />
+                        <field name="url" widget="CopyClipboardChar" />
+                        <field name="tool_ids" widget="many2many_tags" />
+                    </group>
+                    <notebook>
+                        <page string="Keys">
+                            <field name="key_ids" />
+                        </page>
+                    </notebook>
+                </sheet>
+            </form>
+        </field>
+    </record>
+
+    <record model="ir.ui.view" id="mcp_server_search_view">
+        <field name="model">mcp.server</field>
+        <field name="arch" type="xml">
+            <search>
+                <field name="name" />
+            </search>
+        </field>
+    </record>
+
+    <record model="ir.ui.view" id="mcp_server_tree_view">
+        <field name="model">mcp.server</field>
+        <field name="arch" type="xml">
+            <list>
+                <field name="name" />
+            </list>
+        </field>
+    </record>
+
+    <record model="ir.actions.act_window" id="mcp_server_act_window">
+        <field name="name">MCP Server</field>
+        <field name="res_model">mcp.server</field>
+        <field name="view_mode">list,form</field>
+        <field name="domain">[]</field>
+        <field name="context">{}</field>
+    </record>
+
+    <record model="ir.ui.menu" id="mcp_server_menu">
+        <field name="name">MCP Server</field>
+        <field name="parent_id" ref="ai_tool.ai_menu_root" />
+        <field name="action" ref="mcp_server_act_window" />
+        <field name="sequence" eval="80" />
+    </record>
+</odoo>
diff --git a/ai_oca_mcp/views/mcp_server_key.xml b/ai_oca_mcp/views/mcp_server_key.xml
new file mode 100644
index 00000000..9c2506e4
--- /dev/null
+++ b/ai_oca_mcp/views/mcp_server_key.xml
@@ -0,0 +1,48 @@
+<?xml version="1.0" encoding="utf-8" ?>
+<!-- Copyright 2026 Dixmit
+     License AGPL-3.0 or later (https://www.gnu.org/licenses/agpl). -->
+<odoo>
+    <record model="ir.ui.view" id="mcp_server_key_form_view">
+        <field name="model">mcp.server.key</field>
+        <field name="arch" type="xml">
+            <form edit="false">
+                <header>
+                    <button
+                        name="expire_key"
+                        type="object"
+                        string="Expire Key"
+                        class="oe_highlight"
+                        invisible="state != 'active'"
+                    />
+                    <field name="state" widget="statusbar" />
+                </header>
+                <sheet>
+                    <group>
+                        <field name="name" />
+                        <field name="server_id" />
+                        <field name="user_id" />
+                        <field name="expiration_date" />
+                        <field name="expired_on" />
+                    </group>
+                </sheet>
+            </form>
+        </field>
+    </record>
+
+    <record model="ir.ui.view" id="mcp_server_key_tree_view">
+        <field name="model">mcp.server.key</field>
+        <field name="arch" type="xml">
+            <list create="false" delete="false" decoration-muted="state == 'expired'">
+                <field name="name" />
+                <field name="state" />
+                <button
+                    name="expire_key"
+                    type="object"
+                    string="Expire Key"
+                    class="oe_highlight"
+                    invisible="state != 'active'"
+                />
+            </list>
+        </field>
+    </record>
+</odoo>
diff --git a/ai_oca_mcp/views/mcp_server_log.xml b/ai_oca_mcp/views/mcp_server_log.xml
new file mode 100644
index 00000000..60a3e598
--- /dev/null
+++ b/ai_oca_mcp/views/mcp_server_log.xml
@@ -0,0 +1,76 @@
+<?xml version="1.0" encoding="utf-8" ?>
+<!-- Copyright 2026 Dixmit
+     License AGPL-3.0 or later (https://www.gnu.org/licenses/agpl). -->
+<odoo>
+    <record model="ir.ui.view" id="mcp_server_log_form_view">
+        <field name="model">mcp.server.log</field>
+        <field name="arch" type="xml">
+            <form>
+                <header />
+                <sheet>
+                    <group>
+                        <field name="server_id" />
+                        <field name="server_key_id" />
+                        <field name="date" />
+                    </group>
+                    <notebook>
+                        <page string="Request">
+                            <field name="request" widget="text" />
+                        </page>
+                        <page string="Response">
+                            <field name="response" widget="text" />
+                        </page>
+                        <page string="Error" invisible="not error">
+                            <field name="error" widget="text" />
+                        </page>
+                    </notebook>
+                </sheet>
+            </form>
+        </field>
+    </record>
+
+    <record model="ir.ui.view" id="mcp_server_log_search_view">
+        <field name="model">mcp.server.log</field>
+        <field name="arch" type="xml">
+            <search>
+                <field name="server_id" />
+                <field name="server_key_id" />
+                <field name="date" />
+            </search>
+        </field>
+    </record>
+
+    <record model="ir.ui.view" id="mcp_server_log_tree_view">
+        <field name="model">mcp.server.log</field>
+        <field name="arch" type="xml">
+            <list>
+                <field name="server_id" />
+                <field name="server_key_id" />
+                <field name="date" />
+            </list>
+        </field>
+    </record>
+
+    <record model="ir.actions.act_window" id="mcp_server_log_server_filter_act_window">
+        <field name="name">Mcp Server Log</field>
+        <field name="res_model">mcp.server.log</field>
+        <field name="view_mode">list,form</field>
+        <field name="domain">[('server_id', '=', active_id)]</field>
+        <field name="context">{}</field>
+    </record>
+
+    <record model="ir.actions.act_window" id="mcp_server_log_act_window">
+        <field name="name">Mcp Server Log</field>
+        <field name="res_model">mcp.server.log</field>
+        <field name="view_mode">list,form</field>
+        <field name="domain">[]</field>
+        <field name="context">{}</field>
+    </record>
+
+    <record model="ir.ui.menu" id="mcp_server_log_menu">
+        <field name="name">MCP Server Log</field>
+        <field name="parent_id" ref="ai_tool.ai_menu_root" />
+        <field name="action" ref="mcp_server_log_act_window" />
+        <field name="sequence" eval="90" />
+    </record>
+</odoo>
diff --git a/ai_oca_mcp/wizards/__init__.py b/ai_oca_mcp/wizards/__init__.py
new file mode 100644
index 00000000..d06cbace
--- /dev/null
+++ b/ai_oca_mcp/wizards/__init__.py
@@ -0,0 +1 @@
+from . import mcp_server_key_add
diff --git a/ai_oca_mcp/wizards/mcp_server_key_add.py b/ai_oca_mcp/wizards/mcp_server_key_add.py
new file mode 100644
index 00000000..15cdc16c
--- /dev/null
+++ b/ai_oca_mcp/wizards/mcp_server_key_add.py
@@ -0,0 +1,29 @@
+# Copyright 2026 Dixmit
+# License AGPL-3.0 or later (https://www.gnu.org/licenses/agpl).
+
+import secrets
+
+from odoo import fields, models
+
+
+class McpServerKeyAdd(models.TransientModel):
+    _name = "mcp.server.key.add"
+    _description = "Wizard used to add a new key to an MCP Server"
+    _inherits = {
+        "mcp.server.key": "key_id",
+    }
+    key_id = fields.Many2one("mcp.server.key", ondelete="cascade", required=True)
+    server_id = fields.Many2one("mcp.server", required=True, ondelete="cascade")
+    key = fields.Char(readonly=True, string="Key to use")
+
+    def generate_key(self):
+        self.ensure_one()
+        self.key = secrets.token_urlsafe(32)
+        self.key_id.hashed_key = self.key_id._hash_key(self.key)
+        action = self.get_formview_action()
+        action["target"] = "new"
+        return action
+
+    def expire_key(self):
+        # Dummy function necessary to use the same form view as mcp.server.key
+        return {}
diff --git a/ai_oca_mcp/wizards/mcp_server_key_add.xml b/ai_oca_mcp/wizards/mcp_server_key_add.xml
new file mode 100644
index 00000000..1bebffa7
--- /dev/null
+++ b/ai_oca_mcp/wizards/mcp_server_key_add.xml
@@ -0,0 +1,43 @@
+<?xml version="1.0" encoding="utf-8" ?>
+<!-- Copyright 2026 Dixmit
+     License AGPL-3.0 or later (https://www.gnu.org/licenses/agpl). -->
+<odoo>
+    <record model="ir.ui.view" id="mcp_server_key_add_form_view">
+        <field name="model">mcp.server.key.add</field>
+        <field name="inherit_id" ref="mcp_server_key_form_view" />
+        <field name="mode">primary</field>
+        <field name="arch" type="xml">
+            <form position="attributes">
+                <attribute name="create">false</attribute>
+                <attribute name="edit">false</attribute>
+                <attribute name="delete">false</attribute>
+            </form>
+            <header position="attributes">
+                <attribute name="invisible">1</attribute>
+            </header>
+            <field name="server_id" position="after">
+                <field name="key" widget="CopyClipboardChar" invisible="not key" />
+            </field>
+            <form position="inside">
+                <footer>
+                    <button
+                        name="generate_key"
+                        type="object"
+                        string="Generate Key"
+                        class="btn-primary"
+                        invisible="key"
+                    />
+                    <button string="Cancel" class="btn-secondary" special="cancel" />
+                </footer>
+            </form>
+        </field>
+    </record>
+
+    <record model="ir.actions.act_window" id="mcp_server_key_add_act_window">
+        <field name="name">Add Security Key</field>
+        <field name="res_model">mcp.server.key.add</field>
+        <field name="view_mode">form</field>
+        <field name="context">{}</field>
+        <field name="target">new</field>
+    </record>
+</odoo>
diff --git a/ai_tool/README.rst b/ai_tool/README.rst
index 91c2c455..5a5c42bb 100644
--- a/ai_tool/README.rst
+++ b/ai_tool/README.rst
@@ -32,10 +32,30 @@ Ai Tool
 
 |badge1| |badge2| |badge3| |badge4| |badge5|
 
-This technical module provides the base infrastructure for defining AI
-tools in Odoo. It allows other modules to register callable functions as
-AI tools, which can then be used by MCP servers, automation flows, or
-any AI-native integration.
+Base infrastructure for defining **AI tools** in Odoo: a registry that
+turns decorated Odoo methods into structured, schema-described functions
+that AI clients can list and invoke.
+
+A tool is defined by:
+
+- an ``ai.tool`` record (name, description, target model and method),
+  and
+- an ``@aitool``-decorated method declaring JSON input/output schemas.
+
+Three tool kinds describe how the method is invoked:
+
+- ``generic`` — called on the model class; no record context needed;
+- ``generic_model`` — model-level call that still receives a ``record``
+  argument;
+- ``record`` — called on a specific record of the model.
+
+Tools are meant to be consumed by integration modules — e.g.
+``ai_oca_mcp`` exposes ``generic`` tools over the Model Context Protocol
+— or by automation flows. Calls execute with the permissions of the
+calling user.
+
+The module ships two demo tools: ``get_date`` (returns today's date) and
+``post_message`` (posts a message on a record).
 
 **Table of contents**
 
@@ -45,11 +65,16 @@ any AI-native integration.
 Usage
 =====
 
-This module is technical, however, it adds some specific functions that
-might be used in glue modules.
+Tools are managed under ``Settings > Technical > AI > AI Tool``
+(developer mode). End users normally interact with tools through
+integration modules such as ``ai_oca_mcp``; this addon only provides the
+registry and the definition API.
 
-For example, if we want to add on sales a functionality to find the
-sales on a period, we should do:
+Defining a tool in a glue module
+--------------------------------
+
+Example: a ``total_sale_order`` tool that returns the total sales amount
+within a date range, optionally for a specific customer.
 
 .. code:: xml
 
@@ -60,14 +85,17 @@ sales on a period, we should do:
                name="description"
            >Calculate the total amount of sale orders within a date range and optionally for a specific customer.</field>
            <field name="model_id" ref="model_sale_order" />
-           <field name="function_name">_mcp_total_sale_order</field>
+           <field name="function_name">_ai_total_sale_order</field>
+           <field name="kind">generic</field>
        </record>
    </odoo>
 
 .. code:: python
 
+   from odoo import models
    from odoo.addons.ai_tool.tools import aitool
 
+
    class SaleOrder(models.Model):
        _inherit = "sale.order"
 
@@ -82,25 +110,36 @@ sales on a period, we should do:
                "amount_total": {"type": "number"},
            },
        )
-       def _mcp_total_sale_order(self, start_date, end_date, customer_id=None):
+       def _ai_total_sale_order(self, start_date, end_date, customer_id=None):
            domain = [("date_order", ">=", start_date), ("date_order", "<=", end_date)]
            if customer_id:
                domain.append(("partner_id", "=", customer_id))
            orders = self.read_group(domain, ["amount_total"], [])
-           return {
-               "amount_total": (orders[0]["amount_total"] or 0) if orders else 0,
-           }
-
-Be aware that this kind of elements must allways return a dict. All the
-elements will be defined in output_schema.
-
-Also, for the signature of the functions, all fields must be in the
-inputs with the exception of record. This argument is protected and is
-used to define integrations with automation. This argument is required
-in ``generic_model`` and ``record`` tools.
-
-On ``generic_model``\ s we are expecting this value because we want to
-do a specific action with the model.
+           return {"amount_total": (orders[0]["amount_total"] or 0) if orders else 0}
+
+Tool kinds
+----------
+
++-------------------+--------------------------------------------------+
+| Kind              | Invocation                                       |
++===================+==================================================+
+| ``generic``       | ``model.function(**args)`` — no record context   |
++-------------------+--------------------------------------------------+
+| ``generic_model`` | ``model.function(record=record, **args)``        |
++-------------------+--------------------------------------------------+
+| ``record``        | ``record.function(**args)`` — the record must    |
+|                   | match ``model_id``                               |
++-------------------+--------------------------------------------------+
+
+Rules:
+
+- A tool must always return a ``dict``; its keys are declared in
+  ``output_schema``.
+- All method parameters must be declared in ``input_schema``, except
+  ``record``.
+- ``record`` is a protected argument, required for ``generic_model`` and
+  ``record`` tools — it is how integrations pass the record the action
+  applies to.
 
 Bug Tracker
 ===========
diff --git a/ai_tool/models/ai_tool.py b/ai_tool/models/ai_tool.py
index 68cd76d3..b76c8331 100644
--- a/ai_tool/models/ai_tool.py
+++ b/ai_tool/models/ai_tool.py
@@ -36,7 +36,10 @@ class AiTool(models.Model):
     )
 
     def _get_tool_definition(self):
-        func = getattr(self.env[self.model_id.model], self.function_name)
+        # model_id points to ir.model, which non-admin users cannot read.
+        # The model name is only metadata, so resolve it as sudo.
+        model = self.sudo().model_id.model
+        func = getattr(self.env[model], self.function_name)
         return {
             "name": self.name,
             "description": self.description,
@@ -47,7 +50,7 @@ def _get_tool_definition(self):
     @aitool(
         input_schema={},
         output_schema={
-            "date": {"type": "date"},
+            "date": {"type": "string", "format": "date"},
         },
     )
     def _ai_get_date(self):
@@ -76,19 +79,20 @@ def _ai_post_message_parse_body(self, message):
         return plaintext2html(message)
 
     def _execute_tool(self, *args, record=None, **kwargs):
+        # model_id points to ir.model, which non-admin users cannot read.
+        # Resolve the model name as sudo (metadata only); the call below
+        # still runs with the caller's own rights via self.env[model].
+        model = self.sudo().model_id.model
         if self.kind == "generic":
-            return getattr(self.env[self.model_id.model], self.function_name)(
-                *args, **kwargs
-            )
+            return getattr(self.env[model], self.function_name)(*args, **kwargs)
         if not record:
             raise ValueError("Record must be provided for non-generic tools")
         if self.kind == "generic_model":
-            return getattr(self.env[self.model_id.model], self.function_name)(
+            return getattr(self.env[model], self.function_name)(
                 *args, record=record, **kwargs
             )
-        elif record._name != self.model_id.model:
+        elif record._name != model:
             raise ValueError(
-                f"Record model {record._name} does not match tool "
-                f"model {self.model_id.model}"
+                f"Record model {record._name} does not match tool model {model}"
             )
         return getattr(record, self.function_name)(*args, **kwargs) or {}
diff --git a/ai_tool/readme/DESCRIPTION.md b/ai_tool/readme/DESCRIPTION.md
index 71747f87..f76844dd 100644
--- a/ai_tool/readme/DESCRIPTION.md
+++ b/ai_tool/readme/DESCRIPTION.md
@@ -1,3 +1,21 @@
-This technical module provides the base infrastructure for defining AI tools in Odoo. 
-It allows other modules to register callable functions as AI tools, which can then be 
-used by MCP servers, automation flows, or any AI-native integration.
+Base infrastructure for defining **AI tools** in Odoo: a registry that turns
+decorated Odoo methods into structured, schema-described functions that AI
+clients can list and invoke.
+
+A tool is defined by:
+
+- an `ai.tool` record (name, description, target model and method), and
+- an `@aitool`-decorated method declaring JSON input/output schemas.
+
+Three tool kinds describe how the method is invoked:
+
+- `generic` — called on the model class; no record context needed;
+- `generic_model` — model-level call that still receives a `record` argument;
+- `record` — called on a specific record of the model.
+
+Tools are meant to be consumed by integration modules — e.g. `ai_oca_mcp`
+exposes `generic` tools over the Model Context Protocol — or by automation
+flows. Calls execute with the permissions of the calling user.
+
+The module ships two demo tools: `get_date` (returns today's date) and
+`post_message` (posts a message on a record).
diff --git a/ai_tool/readme/USAGE.md b/ai_tool/readme/USAGE.md
index c7f118c5..2a034c9d 100644
--- a/ai_tool/readme/USAGE.md
+++ b/ai_tool/readme/USAGE.md
@@ -1,6 +1,11 @@
-This module is technical, however, it adds some specific functions that might be used in glue modules.
+Tools are managed under `Settings > Technical > AI > AI Tool` (developer mode).
+End users normally interact with tools through integration modules such as
+`ai_oca_mcp`; this addon only provides the registry and the definition API.
 
-For example, if we want to add on sales a functionality to find the sales on a period, we should do:
+## Defining a tool in a glue module
+
+Example: a `total_sale_order` tool that returns the total sales amount within a
+date range, optionally for a specific customer.
 
 ```xml
 <odoo>
@@ -10,14 +15,17 @@ For example, if we want to add on sales a functionality to find the sales on a p
             name="description"
         >Calculate the total amount of sale orders within a date range and optionally for a specific customer.</field>
         <field name="model_id" ref="model_sale_order" />
-        <field name="function_name">_mcp_total_sale_order</field>
+        <field name="function_name">_ai_total_sale_order</field>
+        <field name="kind">generic</field>
     </record>
 </odoo>
 ```
 
 ```python
+from odoo import models
 from odoo.addons.ai_tool.tools import aitool
 
+
 class SaleOrder(models.Model):
     _inherit = "sale.order"
 
@@ -32,21 +40,25 @@ class SaleOrder(models.Model):
             "amount_total": {"type": "number"},
         },
     )
-    def _mcp_total_sale_order(self, start_date, end_date, customer_id=None):
+    def _ai_total_sale_order(self, start_date, end_date, customer_id=None):
         domain = [("date_order", ">=", start_date), ("date_order", "<=", end_date)]
         if customer_id:
             domain.append(("partner_id", "=", customer_id))
         orders = self.read_group(domain, ["amount_total"], [])
-        return {
-            "amount_total": (orders[0]["amount_total"] or 0) if orders else 0,
-        }
-
+        return {"amount_total": (orders[0]["amount_total"] or 0) if orders else 0}
 ```
 
-Be aware that this kind of elements must allways return a dict. All the elements will be defined in output_schema.
+## Tool kinds
+
+| Kind | Invocation |
+| --- | --- |
+| `generic` | `model.function(**args)` — no record context |
+| `generic_model` | `model.function(record=record, **args)` |
+| `record` | `record.function(**args)` — the record must match `model_id` |
 
-Also, for the signature of the functions, all fields must be in the inputs with the exception of record.
-This argument is protected and is used to define integrations with automation.
-This argument is required in `generic_model` and `record` tools.
+Rules:
 
-On `generic_model`s we are expecting this value because we want to do a specific action with the model.
+- A tool must always return a `dict`; its keys are declared in `output_schema`.
+- All method parameters must be declared in `input_schema`, except `record`.
+- `record` is a protected argument, required for `generic_model` and `record`
+  tools — it is how integrations pass the record the action applies to.
diff --git a/ai_tool/static/description/index.html b/ai_tool/static/description/index.html
index 957805b6..419ccbf0 100644
--- a/ai_tool/static/description/index.html
+++ b/ai_tool/static/description/index.html
@@ -3,7 +3,7 @@
 <head>
 <meta http-equiv="Content-Type" content="text/html; charset=utf-8" />
 <meta name="generator" content="Docutils: https://docutils.sourceforge.io/" />
-<title>README.rst</title>
+<title>Ai Tool</title>
 <style type="text/css">
 
 /*
@@ -375,29 +375,55 @@ <h1>Ai Tool</h1>
 !! source digest: sha256:8858e5ec21d3ca3f35e6dd5d74fe8bf41601eac92843a18305b6901b65e04e7c
 !!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!! -->
 <p><a class="reference external image-reference" href="https://odoo-community.org/page/development-status"><img alt="Beta" src="https://img.shields.io/badge/maturity-Beta-yellow.png" /></a> <a class="reference external image-reference" href="http://www.gnu.org/licenses/agpl-3.0-standalone.html"><img alt="License: AGPL-3" src="https://img.shields.io/badge/license-AGPL--3-blue.png" /></a> <a class="reference external image-reference" href="https://github.com/OCA/ai/tree/19.0/ai_tool"><img alt="OCA/ai" src="https://img.shields.io/badge/github-OCA%2Fai-lightgray.png?logo=github" /></a> <a class="reference external image-reference" href="https://translation.odoo-community.org/projects/ai-19-0/ai-19-0-ai_tool"><img alt="Translate me on Weblate" src="https://img.shields.io/badge/weblate-Translate%20me-F47D42.png" /></a> <a class="reference external image-reference" href="https://runboat.odoo-community.org/builds?repo=OCA/ai&amp;target_branch=19.0"><img alt="Try me on Runboat" src="https://img.shields.io/badge/runboat-Try%20me-875A7B.png" /></a></p>
-<p>This technical module provides the base infrastructure for defining AI
-tools in Odoo. It allows other modules to register callable functions as
-AI tools, which can then be used by MCP servers, automation flows, or
-any AI-native integration.</p>
+<p>Base infrastructure for defining <strong>AI tools</strong> in Odoo: a registry that
+turns decorated Odoo methods into structured, schema-described functions
+that AI clients can list and invoke.</p>
+<p>A tool is defined by:</p>
+<ul class="simple">
+<li>an <tt class="docutils literal">ai.tool</tt> record (name, description, target model and method),
+and</li>
+<li>an <tt class="docutils literal">&#64;aitool</tt>-decorated method declaring JSON input/output schemas.</li>
+</ul>
+<p>Three tool kinds describe how the method is invoked:</p>
+<ul class="simple">
+<li><tt class="docutils literal">generic</tt> — called on the model class; no record context needed;</li>
+<li><tt class="docutils literal">generic_model</tt> — model-level call that still receives a <tt class="docutils literal">record</tt>
+argument;</li>
+<li><tt class="docutils literal">record</tt> — called on a specific record of the model.</li>
+</ul>
+<p>Tools are meant to be consumed by integration modules — e.g.
+<tt class="docutils literal">ai_oca_mcp</tt> exposes <tt class="docutils literal">generic</tt> tools over the Model Context Protocol
+— or by automation flows. Calls execute with the permissions of the
+calling user.</p>
+<p>The module ships two demo tools: <tt class="docutils literal">get_date</tt> (returns today’s date) and
+<tt class="docutils literal">post_message</tt> (posts a message on a record).</p>
 <p><strong>Table of contents</strong></p>
 <div class="contents local topic" id="contents">
 <ul class="simple">
-<li><a class="reference internal" href="#usage" id="toc-entry-1">Usage</a></li>
-<li><a class="reference internal" href="#bug-tracker" id="toc-entry-2">Bug Tracker</a></li>
-<li><a class="reference internal" href="#credits" id="toc-entry-3">Credits</a><ul>
-<li><a class="reference internal" href="#authors" id="toc-entry-4">Authors</a></li>
-<li><a class="reference internal" href="#contributors" id="toc-entry-5">Contributors</a></li>
-<li><a class="reference internal" href="#maintainers" id="toc-entry-6">Maintainers</a></li>
+<li><a class="reference internal" href="#usage" id="toc-entry-1">Usage</a><ul>
+<li><a class="reference internal" href="#defining-a-tool-in-a-glue-module" id="toc-entry-2">Defining a tool in a glue module</a></li>
+<li><a class="reference internal" href="#tool-kinds" id="toc-entry-3">Tool kinds</a></li>
+</ul>
+</li>
+<li><a class="reference internal" href="#bug-tracker" id="toc-entry-4">Bug Tracker</a></li>
+<li><a class="reference internal" href="#credits" id="toc-entry-5">Credits</a><ul>
+<li><a class="reference internal" href="#authors" id="toc-entry-6">Authors</a></li>
+<li><a class="reference internal" href="#contributors" id="toc-entry-7">Contributors</a></li>
+<li><a class="reference internal" href="#maintainers" id="toc-entry-8">Maintainers</a></li>
 </ul>
 </li>
 </ul>
 </div>
 <div class="section" id="usage">
 <h2><a class="toc-backref" href="#toc-entry-1">Usage</a></h2>
-<p>This module is technical, however, it adds some specific functions that
-might be used in glue modules.</p>
-<p>For example, if we want to add on sales a functionality to find the
-sales on a period, we should do:</p>
+<p>Tools are managed under <tt class="docutils literal">Settings &gt; Technical &gt; AI &gt; AI Tool</tt>
+(developer mode). End users normally interact with tools through
+integration modules such as <tt class="docutils literal">ai_oca_mcp</tt>; this addon only provides the
+registry and the definition API.</p>
+<div class="section" id="defining-a-tool-in-a-glue-module">
+<h3><a class="toc-backref" href="#toc-entry-2">Defining a tool in a glue module</a></h3>
+<p>Example: a <tt class="docutils literal">total_sale_order</tt> tool that returns the total sales amount
+within a date range, optionally for a specific customer.</p>
 <pre class="code xml literal-block">
 <span class="nt">&lt;odoo&gt;</span><span class="w">
     </span><span class="nt">&lt;record</span><span class="w"> </span><span class="na">model=</span><span class="s">&quot;ai.tool&quot;</span><span class="w"> </span><span class="na">id=</span><span class="s">&quot;total_sale_order_tool&quot;</span><span class="nt">&gt;</span><span class="w">
@@ -406,12 +432,15 @@ <h2><a class="toc-backref" href="#toc-entry-1">Usage</a></h2>
             </span><span class="na">name=</span><span class="s">&quot;description&quot;</span><span class="w">
         </span><span class="nt">&gt;</span>Calculate<span class="w"> </span>the<span class="w"> </span>total<span class="w"> </span>amount<span class="w"> </span>of<span class="w"> </span>sale<span class="w"> </span>orders<span class="w"> </span>within<span class="w"> </span>a<span class="w"> </span>date<span class="w"> </span>range<span class="w"> </span>and<span class="w"> </span>optionally<span class="w"> </span>for<span class="w"> </span>a<span class="w"> </span>specific<span class="w"> </span>customer.<span class="nt">&lt;/field&gt;</span><span class="w">
         </span><span class="nt">&lt;field</span><span class="w"> </span><span class="na">name=</span><span class="s">&quot;model_id&quot;</span><span class="w"> </span><span class="na">ref=</span><span class="s">&quot;model_sale_order&quot;</span><span class="w"> </span><span class="nt">/&gt;</span><span class="w">
-        </span><span class="nt">&lt;field</span><span class="w"> </span><span class="na">name=</span><span class="s">&quot;function_name&quot;</span><span class="nt">&gt;</span>_mcp_total_sale_order<span class="nt">&lt;/field&gt;</span><span class="w">
+        </span><span class="nt">&lt;field</span><span class="w"> </span><span class="na">name=</span><span class="s">&quot;function_name&quot;</span><span class="nt">&gt;</span>_ai_total_sale_order<span class="nt">&lt;/field&gt;</span><span class="w">
+        </span><span class="nt">&lt;field</span><span class="w"> </span><span class="na">name=</span><span class="s">&quot;kind&quot;</span><span class="nt">&gt;</span>generic<span class="nt">&lt;/field&gt;</span><span class="w">
     </span><span class="nt">&lt;/record&gt;</span><span class="w">
 </span><span class="nt">&lt;/odoo&gt;</span>
 </pre>
 <pre class="code python literal-block">
-<span class="kn">from</span><span class="w"> </span><span class="nn">odoo.addons.ai_tool.tools</span><span class="w"> </span><span class="kn">import</span> <span class="n">aitool</span><span class="w">
+<span class="kn">from</span><span class="w"> </span><span class="nn">odoo</span><span class="w"> </span><span class="kn">import</span> <span class="n">models</span><span class="w">
+</span><span class="kn">from</span><span class="w"> </span><span class="nn">odoo.addons.ai_tool.tools</span><span class="w"> </span><span class="kn">import</span> <span class="n">aitool</span><span class="w">
+
 
 </span><span class="k">class</span><span class="w"> </span><span class="nc">SaleOrder</span><span class="p">(</span><span class="n">models</span><span class="o">.</span><span class="n">Model</span><span class="p">):</span><span class="w">
 </span>    <span class="n">_inherit</span> <span class="o">=</span> <span class="s2">&quot;sale.order&quot;</span><span class="w">
@@ -427,26 +456,53 @@ <h2><a class="toc-backref" href="#toc-entry-1">Usage</a></h2>
 </span>            <span class="s2">&quot;amount_total&quot;</span><span class="p">:</span> <span class="p">{</span><span class="s2">&quot;type&quot;</span><span class="p">:</span> <span class="s2">&quot;number&quot;</span><span class="p">},</span><span class="w">
 </span>        <span class="p">},</span><span class="w">
 </span>    <span class="p">)</span><span class="w">
-</span>    <span class="k">def</span><span class="w"> </span><span class="nf">_mcp_total_sale_order</span><span class="p">(</span><span class="bp">self</span><span class="p">,</span> <span class="n">start_date</span><span class="p">,</span> <span class="n">end_date</span><span class="p">,</span> <span class="n">customer_id</span><span class="o">=</span><span class="kc">None</span><span class="p">):</span><span class="w">
+</span>    <span class="k">def</span><span class="w"> </span><span class="nf">_ai_total_sale_order</span><span class="p">(</span><span class="bp">self</span><span class="p">,</span> <span class="n">start_date</span><span class="p">,</span> <span class="n">end_date</span><span class="p">,</span> <span class="n">customer_id</span><span class="o">=</span><span class="kc">None</span><span class="p">):</span><span class="w">
 </span>        <span class="n">domain</span> <span class="o">=</span> <span class="p">[(</span><span class="s2">&quot;date_order&quot;</span><span class="p">,</span> <span class="s2">&quot;&gt;=&quot;</span><span class="p">,</span> <span class="n">start_date</span><span class="p">),</span> <span class="p">(</span><span class="s2">&quot;date_order&quot;</span><span class="p">,</span> <span class="s2">&quot;&lt;=&quot;</span><span class="p">,</span> <span class="n">end_date</span><span class="p">)]</span><span class="w">
 </span>        <span class="k">if</span> <span class="n">customer_id</span><span class="p">:</span><span class="w">
 </span>            <span class="n">domain</span><span class="o">.</span><span class="n">append</span><span class="p">((</span><span class="s2">&quot;partner_id&quot;</span><span class="p">,</span> <span class="s2">&quot;=&quot;</span><span class="p">,</span> <span class="n">customer_id</span><span class="p">))</span><span class="w">
 </span>        <span class="n">orders</span> <span class="o">=</span> <span class="bp">self</span><span class="o">.</span><span class="n">read_group</span><span class="p">(</span><span class="n">domain</span><span class="p">,</span> <span class="p">[</span><span class="s2">&quot;amount_total&quot;</span><span class="p">],</span> <span class="p">[])</span><span class="w">
-</span>        <span class="k">return</span> <span class="p">{</span><span class="w">
-</span>            <span class="s2">&quot;amount_total&quot;</span><span class="p">:</span> <span class="p">(</span><span class="n">orders</span><span class="p">[</span><span class="mi">0</span><span class="p">][</span><span class="s2">&quot;amount_total&quot;</span><span class="p">]</span> <span class="ow">or</span> <span class="mi">0</span><span class="p">)</span> <span class="k">if</span> <span class="n">orders</span> <span class="k">else</span> <span class="mi">0</span><span class="p">,</span><span class="w">
-</span>        <span class="p">}</span>
+</span>        <span class="k">return</span> <span class="p">{</span><span class="s2">&quot;amount_total&quot;</span><span class="p">:</span> <span class="p">(</span><span class="n">orders</span><span class="p">[</span><span class="mi">0</span><span class="p">][</span><span class="s2">&quot;amount_total&quot;</span><span class="p">]</span> <span class="ow">or</span> <span class="mi">0</span><span class="p">)</span> <span class="k">if</span> <span class="n">orders</span> <span class="k">else</span> <span class="mi">0</span><span class="p">}</span>
 </pre>
-<p>Be aware that this kind of elements must allways return a dict. All the
-elements will be defined in output_schema.</p>
-<p>Also, for the signature of the functions, all fields must be in the
-inputs with the exception of record. This argument is protected and is
-used to define integrations with automation. This argument is required
-in <tt class="docutils literal">generic_model</tt> and <tt class="docutils literal">record</tt> tools.</p>
-<p>On <tt class="docutils literal">generic_model</tt>s we are expecting this value because we want to
-do a specific action with the model.</p>
+</div>
+<div class="section" id="tool-kinds">
+<h3><a class="toc-backref" href="#toc-entry-3">Tool kinds</a></h3>
+<table border="1" class="docutils">
+<colgroup>
+<col width="28%" />
+<col width="72%" />
+</colgroup>
+<thead valign="bottom">
+<tr><th class="head">Kind</th>
+<th class="head">Invocation</th>
+</tr>
+</thead>
+<tbody valign="top">
+<tr><td><tt class="docutils literal">generic</tt></td>
+<td><tt class="docutils literal"><span class="pre">model.function(**args)</span></tt> — no record context</td>
+</tr>
+<tr><td><tt class="docutils literal">generic_model</tt></td>
+<td><tt class="docutils literal">model.function(record=record, **args)</tt></td>
+</tr>
+<tr><td><tt class="docutils literal">record</tt></td>
+<td><tt class="docutils literal"><span class="pre">record.function(**args)</span></tt> — the record must
+match <tt class="docutils literal">model_id</tt></td>
+</tr>
+</tbody>
+</table>
+<p>Rules:</p>
+<ul class="simple">
+<li>A tool must always return a <tt class="docutils literal">dict</tt>; its keys are declared in
+<tt class="docutils literal">output_schema</tt>.</li>
+<li>All method parameters must be declared in <tt class="docutils literal">input_schema</tt>, except
+<tt class="docutils literal">record</tt>.</li>
+<li><tt class="docutils literal">record</tt> is a protected argument, required for <tt class="docutils literal">generic_model</tt> and
+<tt class="docutils literal">record</tt> tools — it is how integrations pass the record the action
+applies to.</li>
+</ul>
+</div>
 </div>
 <div class="section" id="bug-tracker">
-<h2><a class="toc-backref" href="#toc-entry-2">Bug Tracker</a></h2>
+<h2><a class="toc-backref" href="#toc-entry-4">Bug Tracker</a></h2>
 <p>Bugs are tracked on <a class="reference external" href="https://github.com/OCA/ai/issues">GitHub Issues</a>.
 In case of trouble, please check there if your issue has already been reported.
 If you spotted it first, help us to smash it by providing a detailed and welcomed
@@ -454,15 +510,15 @@ <h2><a class="toc-backref" href="#toc-entry-2">Bug Tracker</a></h2>
 <p>Do not contact contributors directly about support or help with technical issues.</p>
 </div>
 <div class="section" id="credits">
-<h2><a class="toc-backref" href="#toc-entry-3">Credits</a></h2>
+<h2><a class="toc-backref" href="#toc-entry-5">Credits</a></h2>
 <div class="section" id="authors">
-<h3><a class="toc-backref" href="#toc-entry-4">Authors</a></h3>
+<h3><a class="toc-backref" href="#toc-entry-6">Authors</a></h3>
 <ul class="simple">
 <li>Dixmit</li>
 </ul>
 </div>
 <div class="section" id="contributors">
-<h3><a class="toc-backref" href="#toc-entry-5">Contributors</a></h3>
+<h3><a class="toc-backref" href="#toc-entry-7">Contributors</a></h3>
 <ul class="simple">
 <li><a class="reference external" href="https://www.dixmit.com">Dixmit</a><ul>
 <li>Enric Tobella</li>
@@ -475,7 +531,7 @@ <h3><a class="toc-backref" href="#toc-entry-5">Contributors</a></h3>
 </ul>
 </div>
 <div class="section" id="maintainers">
-<h3><a class="toc-backref" href="#toc-entry-6">Maintainers</a></h3>
+<h3><a class="toc-backref" href="#toc-entry-8">Maintainers</a></h3>
 <p>This module is maintained by the OCA.</p>
 <a class="reference external image-reference" href="https://odoo-community.org">
 <img alt="Odoo Community Association" src="https://odoo-community.org/logo.png" />
diff --git a/ai_tool/tests/test_ai_tool.py b/ai_tool/tests/test_ai_tool.py
index c9090aaf..707c50d6 100644
--- a/ai_tool/tests/test_ai_tool.py
+++ b/ai_tool/tests/test_ai_tool.py
@@ -47,3 +47,21 @@ def test_post_message_tool_record_different_model(self):
         tool.kind = "record"
         with self.assertRaises(ValueError):
             tool._execute_tool(message="Hello World", record=self.partner)
+
+    def test_tool_non_admin_user(self):
+        """A plain internal user (no ir.model access) must be able to build a
+        tool definition and execute a generic tool: resolving the tool's model
+        is metadata and must not require Administration/Access Rights."""
+        user = self.env["res.users"].create(
+            {
+                "name": "Ai Tool Plain User",
+                "login": "ai_tool_plain_user",
+                "group_ids": [(6, 0, [self.env.ref("base.group_user").id])],
+            }
+        )
+        self.assertFalse(user.has_group("base.group_system"))
+        tool = self.env.ref("ai_tool.current_date").with_user(user)
+        definition = tool._get_tool_definition()
+        self.assertEqual(definition["name"], "get_date")
+        result = tool._execute_tool()
+        self.assertIn("date", result)
diff --git a/ai_tool_read/README.rst b/ai_tool_read/README.rst
new file mode 100644
index 00000000..d144ede7
--- /dev/null
+++ b/ai_tool_read/README.rst
@@ -0,0 +1,253 @@
+.. image:: https://odoo-community.org/readme-banner-image
+   :target: https://odoo-community.org/get-involved?utm_source=readme
+   :alt: Odoo Community Association
+
+==============
+AI Tool - Read
+==============
+
+.. 
+   !!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!
+   !! This file is generated by oca-gen-addon-readme !!
+   !! changes will be overwritten.                   !!
+   !!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!
+   !! source digest: sha256:fe66b1297c9c53a47b95b8407598bb5fab4d963c5e90afea0c614688365f21fc
+   !!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!
+
+.. |badge1| image:: https://img.shields.io/badge/maturity-Beta-yellow.png
+    :target: https://odoo-community.org/page/development-status
+    :alt: Beta
+.. |badge2| image:: https://img.shields.io/badge/license-AGPL--3-blue.png
+    :target: http://www.gnu.org/licenses/agpl-3.0-standalone.html
+    :alt: License: AGPL-3
+.. |badge3| image:: https://img.shields.io/badge/github-OCA%2Fai-lightgray.png?logo=github
+    :target: https://github.com/OCA/ai/tree/19.0/ai_tool_read
+    :alt: OCA/ai
+.. |badge4| image:: https://img.shields.io/badge/weblate-Translate%20me-F47D42.png
+    :target: https://translation.odoo-community.org/projects/ai-19-0/ai-19-0-ai_tool_read
+    :alt: Translate me on Weblate
+.. |badge5| image:: https://img.shields.io/badge/runboat-Try%20me-875A7B.png
+    :target: https://runboat.odoo-community.org/builds?repo=OCA/ai&target_branch=19.0
+    :alt: Try me on Runboat
+
+|badge1| |badge2| |badge3| |badge4| |badge5|
+
+Adds ``ai_tool`` tools to let an AI agent read any model and field it is
+allowed to access, while keeping personal or otherwise sensitive fields
+out of the results.
+
+A flag **AI Read Forbidden** (``ai_no_read``) is added to fields. The
+tools never return nor describe a forbidden field, nor any field
+exposing its value: related fields, including those delegated through
+``_inherits``, and computed fields depending on it. Flagging
+``res.partner.email`` thus also hides ``email_formatted``,
+``email_normalized`` and ``res.users.email``.
+
+Three tools are provided:
+
+- **list_models**: lists the models the current user is allowed to read.
+- **get_fields**: describes a model's readable fields (label, type,
+  help, selection options and relation target), and lists the forbidden
+  ones under ``hidden``.
+- **search_read**: searches and reads records of a model. It returns the
+  stored fields unless a field list is given, relational fields as
+  record IDs, and dates in UTC. Results are paged with ``limit`` and
+  ``offset``, and ``has_more`` tells whether more records match. A field
+  whose computation is refused for the user is left out and listed in
+  ``inaccessible_fields``, and a record the search finds but the user
+  cannot read (as ``ir.attachment`` allows) is left out without notice,
+  as record rules would.
+
+The tools run with the calling user's own access rights (no ``sudo``),
+so Odoo ACLs, record rules and field ``groups`` still apply. Connect the
+agent as a user with no more rights than it needs: an administrator sees
+every field restricted by ``groups``.
+
+Besides forbidden fields, the results leave out binary fields, fields
+pointing to a model the user cannot read (reading them would fail), and
+display names computed on the fly, including the one Odoo adds to
+many2one values: they are built from other records' fields, which may be
+forbidden there.
+
+The flag keeps values out of the results, not out of searches: see
+*Known issues*.
+
+**Table of contents**
+
+.. contents::
+   :local:
+
+Configuration
+=============
+
+To forbid a field, tick **AI Read Forbidden** on it. As the
+administrator, either:
+
+- go to *Settings > Technical > Database Structure > Fields*, find the
+  field and tick the flag (the **AI Read Forbidden** filter and list
+  column help you review what is already flagged), or
+- open the model in *Settings > Technical > Database Structure > Models*
+  and tick the flag on the line of the field, in the *Fields* tab.
+
+The flag applies to base fields as well as custom ones, and takes effect
+immediately. A flag set on a mixin's field, such as ``email_normalized``
+on ``mail.thread.blacklist``, applies to every model inheriting it.
+
+A forbidden field takes along the fields that expose its value through
+their definition, on any model: related fields, the fields a model
+delegates through ``_inherits``, and computed fields that depend on it.
+The ``hidden`` list returned by the **get_fields** tool shows the result
+on a model. A value copied into another record when that record is
+written is not followed (see *Known issues*): flag such fields as well.
+
+This errs on the safe side: a computed field is hidden as soon as it
+depends on a forbidden field, even when its value does not contain it.
+Forbidding ``res.partner.email`` also hides ``is_blacklisted``, a yes/no
+computed from the address, and ``hr.employee.mobile_phone``, computed by
+the same method as the work email. For the same reason, flag the fields
+that hold the sensitive values themselves (email, phone, address), not
+fields that many others are computed from, such as ``parent_id`` or
+``company_id``: those would hide far more than intended.
+
+Fields restricted to a user group (``groups=`` in their definition) are
+already left out of the results for a user outside that group, without
+any flag, and are not reported in the ``hidden`` list either. **AI Read
+Forbidden** is only needed for fields that the user is otherwise allowed
+to read.
+
+Usage
+=====
+
+The tools are registered as ``ai.tool`` records and are callable through
+any ``ai_tool`` integration: ``ai_oca_mcp``, for instance, exposes them
+to MCP clients such as Claude Desktop. This module provides the tools
+themselves; how they are reached depends on the transport module
+installed.
+
+A typical agent workflow:
+
+1. Call ``list_models`` to discover the models the bound user may read.
+   Each entry gives the technical ``model`` name (e.g. ``res.partner``)
+   to pass to the other tools.
+
+2. Call ``get_fields`` with ``model`` to learn what each readable field
+   means (label, type, help, selection options, relation target), and
+   which fields are listed under ``hidden``.
+
+3. Call ``search_read`` to fetch records:
+
+   - ``model`` (required): the technical model name.
+   - ``domain`` (optional): an Odoo domain as a list, e.g.
+     ``[["is_company", "=", true]]``.
+   - ``fields`` (optional): an explicit field list; the stored readable
+     fields are returned otherwise. An empty list returns ids only.
+   - ``limit`` (optional): page size, 200 by default and at most; a
+     value of 0 or less, or past the cap, is treated as the maximum.
+   - ``offset`` (optional): skip that many matching records.
+   - ``order`` (optional): e.g. ``"name asc"``.
+
+   Relational fields come back as record ids, dates and datetimes as
+   ISO-8601 strings in UTC. ``has_more`` tells whether another page
+   exists under the same domain and order; fields the call could not
+   read are listed in ``inaccessible_fields``, while forbidden or
+   restricted fields are simply absent from the records.
+
+Example ``search_read`` arguments:
+
+.. code:: json
+
+   {
+     "model": "res.partner",
+     "domain": [["is_company", "=", true]],
+     "fields": ["name", "email", "country_id"],
+     "limit": 20,
+     "order": "name asc"
+   }
+
+Every call executes with the access rights of the calling user — the
+API-key owner when reached through ``ai_oca_mcp`` — so Odoo ACLs, record
+rules and field ``groups`` apply as usual. Connect the agent as a
+dedicated user holding only the rights it needs.
+
+Known issues / Roadmap
+======================
+
+The tools keep forbidden values out of their results, not out of the
+searches an agent runs: they are not meant to stop an agent that probes
+for hidden values on purpose. Each case below still lets a forbidden
+value through:
+
+- **Filtering on a forbidden field.**
+  ``[("email", "ilike", "@example.com")]`` lists the contacts whose
+  address matches, and repeating it on longer fragments rebuilds a whole
+  address. The same works on fields restricted by ``groups=``, which
+  Odoo does not check when searching, and on search-only fields:
+  ``phone_mobile_search`` rebuilds a phone number even when ``phone`` is
+  forbidden.
+- **Searching a relation by text.**
+  ``[("partner_id", "ilike", "@example.com")]`` searches contacts by
+  name, email included, and finds the orders of the contacts whose
+  address matches.
+- **Sorting.** Ordering on a forbidden field, or on a many2one (sorted
+  by the related record's display name), reveals the order of the hidden
+  values.
+- **Copied values.** A value copied into another record is not linked to
+  its source: the author's address in a chatter message
+  (``mail.message.email_from``) is returned unless that field is flagged
+  too.
+
+One more limit, which leaks nothing: a requested field that is
+forbidden, binary or restricted is simply missing from the records, with
+no reason given; ``get_fields`` tells them apart.
+
+Bug Tracker
+===========
+
+Bugs are tracked on `GitHub Issues <https://github.com/OCA/ai/issues>`_.
+In case of trouble, please check there if your issue has already been reported.
+If you spotted it first, help us to smash it by providing a detailed and welcomed
+`feedback <https://github.com/OCA/ai/issues/new?body=module:%20ai_tool_read%0Aversion:%2019.0%0A%0A**Steps%20to%20reproduce**%0A-%20...%0A%0A**Current%20behavior**%0A%0A**Expected%20behavior**>`_.
+
+Do not contact contributors directly about support or help with technical issues.
+
+Credits
+=======
+
+Authors
+-------
+
+* Quartile
+
+Contributors
+------------
+
+- `Quartile <https://www.quartile.co>`__:
+
+  - Toshikimi Shigenobu
+
+- Daniel Reis dreis.pt@gmail.com
+
+Maintainers
+-----------
+
+This module is maintained by the OCA.
+
+.. image:: https://odoo-community.org/logo.png
+   :alt: Odoo Community Association
+   :target: https://odoo-community.org
+
+OCA, or the Odoo Community Association, is a nonprofit organization whose
+mission is to support the collaborative development of Odoo features and
+promote its widespread use.
+
+.. |maintainer-nobuQuartile| image:: https://github.com/nobuQuartile.png?size=40px
+    :target: https://github.com/nobuQuartile
+    :alt: nobuQuartile
+
+Current `maintainer <https://odoo-community.org/page/maintainer-role>`__:
+
+|maintainer-nobuQuartile| 
+
+This module is part of the `OCA/ai <https://github.com/OCA/ai/tree/19.0/ai_tool_read>`_ project on GitHub.
+
+You are welcome to contribute. To learn how please visit https://odoo-community.org/page/Contribute.
diff --git a/ai_tool_read/__init__.py b/ai_tool_read/__init__.py
new file mode 100644
index 00000000..0650744f
--- /dev/null
+++ b/ai_tool_read/__init__.py
@@ -0,0 +1 @@
+from . import models
diff --git a/ai_tool_read/__manifest__.py b/ai_tool_read/__manifest__.py
new file mode 100644
index 00000000..d4a8b662
--- /dev/null
+++ b/ai_tool_read/__manifest__.py
@@ -0,0 +1,19 @@
+# Copyright 2026 Quartile (https://www.quartile.co)
+# License AGPL-3.0 or later (https://www.gnu.org/licenses/agpl).
+
+{
+    "name": "AI Tool - Read",
+    "summary": "Generic ai_tool to read any model/field, with a per-field opt-out flag",
+    "version": "19.0.1.0.0",
+    "website": "https://github.com/OCA/ai",
+    "license": "AGPL-3",
+    "author": "Quartile,Odoo Community Association (OCA)",
+    "maintainers": ["nobuQuartile"],
+    "depends": [
+        "ai_tool",
+    ],
+    "data": [
+        "views/ir_model_fields_views.xml",
+        "data/ai_tools.xml",
+    ],
+}
diff --git a/ai_tool_read/data/ai_tools.xml b/ai_tool_read/data/ai_tools.xml
new file mode 100644
index 00000000..ec0faacb
--- /dev/null
+++ b/ai_tool_read/data/ai_tools.xml
@@ -0,0 +1,48 @@
+<?xml version="1.0" encoding="utf-8" ?>
+<odoo>
+    <record id="list_models_tool" model="ai.tool">
+        <field name="name">list_models</field>
+        <field name="description">
+            List the models the current user is allowed to read, as {model, name}
+            entries. Use the technical "model" value (e.g. res.partner) with the
+            get_fields and search_read tools.
+        </field>
+        <field name="model_id" ref="base.model_ir_model" />
+        <field name="function_name">_ai_list_models</field>
+        <field name="kind">generic</field>
+    </record>
+    <record id="get_fields_tool" model="ai.tool">
+        <field name="name">get_fields</field>
+        <field name="description">
+            Describe a model's readable fields (label, type, help, selection
+            options and relation target) so their values can be interpreted.
+            Returns "fields" (readable) and "hidden" (fields forbidden to AI).
+        </field>
+        <field name="model_id" ref="base.model_ir_model" />
+        <field name="function_name">_ai_get_fields</field>
+        <field name="kind">generic</field>
+    </record>
+    <record id="search_read_tool" model="ai.tool">
+        <field name="name">search_read</field>
+        <field name="description">
+            Search and read records of a model. Accepts an optional Odoo domain
+            such as [["is_company", "=", true]], an explicit field list, a
+            limit (200 at most, and by default), an
+            offset and an order. Without a
+            field list, the stored fields are returned; ask for computed ones
+            explicitly. "has_more" tells whether more records match: read the
+            next page with the offset increased by the limit, keeping the same
+            domain and order. Relational fields are returned as record IDs; read
+            the related model to get the details of those records. Dates and
+            times are in UTC. A requested field missing from the records is not
+            available (forbidden to AI, binary, or not readable for the current
+            user), so do not retry it; get_fields lists the readable fields, and
+            the forbidden ones under "hidden". A field whose value cannot be
+            computed for the current user is left out and listed in
+            "inaccessible_fields"; do not retry it either.
+        </field>
+        <field name="model_id" ref="base.model_ir_model" />
+        <field name="function_name">_ai_search_read</field>
+        <field name="kind">generic</field>
+    </record>
+</odoo>
diff --git a/ai_tool_read/models/__init__.py b/ai_tool_read/models/__init__.py
new file mode 100644
index 00000000..9ecdc485
--- /dev/null
+++ b/ai_tool_read/models/__init__.py
@@ -0,0 +1,2 @@
+from . import ir_model_fields
+from . import ir_model
diff --git a/ai_tool_read/models/ir_model.py b/ai_tool_read/models/ir_model.py
new file mode 100644
index 00000000..44a7e208
--- /dev/null
+++ b/ai_tool_read/models/ir_model.py
@@ -0,0 +1,251 @@
+# Copyright 2026 Quartile (https://www.quartile.co)
+# License AGPL-3.0 or later (https://www.gnu.org/licenses/agpl).
+
+from datetime import date
+
+from odoo import models
+from odoo.exceptions import UserError
+
+from odoo.addons.ai_tool.tools import aitool
+
+MAX_LIMIT = 200
+
+
+class IrModel(models.Model):
+    _inherit = "ir.model"
+
+    def _ai_forbidden_fields(self):
+        """Return the fields forbidden to AI.
+
+        A flag set on a mixin's field applies to the models inheriting it. Every
+        field that depends on a flagged one is forbidden too, as it exposes its
+        value: related fields, ``_inherits`` included, and computed fields,
+        transitively (``res.partner.email`` takes ``email_formatted`` and
+        ``res.users.email`` along). The flags are metadata regular users cannot
+        read, hence the sudo.
+        """
+        registry = self.env.registry
+        forbidden = set()
+        flags = self.env["ir.model.fields"].sudo().search([("ai_no_read", "=", True)])
+        if not flags:
+            return forbidden
+        # Skip a flag left on a model or field that is gone from the code.
+        for flag in flags.filtered(
+            lambda rec: rec.model in registry
+            and rec.name in registry[rec.model]._fields
+        ):
+            flagged_class = registry[flag.model]
+            forbidden.update(
+                model_class._fields[flag.name]
+                for model_class in registry.models.values()
+                if issubclass(model_class, flagged_class)
+            )
+        for field in list(forbidden):
+            forbidden.update(registry.get_dependent_fields(field))
+        return forbidden
+
+    def _ai_readable_field_names(self, model):
+        """Return the field names of ``model`` the tools may return.
+
+        A field is left out when it is forbidden to AI, binary, restricted by
+        ``groups=`` for the caller (as ``fields_get`` does), or relational to a
+        model the caller cannot read, which would fail the whole read. So is a
+        ``display_name`` computed on the fly: ``name_get`` may show another
+        record's name (``mail.followers``) with nothing in its dependencies to
+        tell. A stored one declares its dependencies, like any computed field.
+        """
+        target = self.env[model]
+        forbidden = self._ai_forbidden_fields()
+        return {
+            name
+            for name, field in target._fields.items()
+            if field not in forbidden
+            and field.type != "binary"
+            and (field.store or name != "display_name")
+            and (
+                not field.groups
+                or self.env.su
+                or self.env.user.has_groups(field.groups)
+            )
+            and (
+                not field.relational or self.env[field.comodel_name].has_access("read")
+            )
+        }
+
+    def _ai_is_queryable_model(self, model):
+        """Whether ``model`` is a concrete model. ``ir.model`` also lists
+        abstract models, some with a read ACL (``board.board``), and wizards:
+        neither can be searched."""
+        return model in self.env and not (
+            self.env[model]._abstract or self.env[model]._transient
+        )
+
+    def _ai_target(self, model):
+        """Resolve ``model`` to a recordset, checking that it can be searched
+        and that the caller has read access (data is never read as sudo)."""
+        if not self._ai_is_queryable_model(model):
+            raise UserError(
+                self.env._(
+                    "Model '%(model)s' does not exist or cannot be read.", model=model
+                )
+            )
+        target = self.env[model]
+        target.check_access("read")
+        return target
+
+    def _ai_can_read(self, records, field_names):
+        """Whether ``field_names`` can be read on ``records`` by the caller."""
+        try:
+            records.read(field_names, load=None)
+        except UserError:
+            return False
+        return True
+
+    def _ai_read(self, records, field_names):
+        """Read ``field_names`` on ``records``; return the rows and the names of
+        the fields left out.
+
+        Searching and reading do not always agree: a record can be found and
+        then refused (``ir.attachment``), and a computed field can fail from its
+        compute (``signup_url`` of a partner with a user). When the plain read
+        fails, refused records are dropped without notice, as record rules would
+        drop them, and refused fields are probed one by one and left out.
+        ``AccessError`` is a ``UserError``; anything else still propagates.
+        """
+        try:
+            return records.read(field_names, load=None), []
+        except UserError:
+            records = records.filtered(lambda rec: self._ai_can_read(rec, ["id"]))
+        refused = [
+            name for name in field_names if not self._ai_can_read(records, [name])
+        ]
+        kept = [name for name in field_names if name not in refused]
+        # Never read an empty list: Odoo reads *all* fields for it.
+        return records.read(kept or ["id"], load=None), refused
+
+    def _ai_jsonify(self, row):
+        """Make a ``search_read`` row JSON-serializable (dates to ISO strings).
+
+        ``isinstance(value, date)`` also covers ``datetime``, a subclass."""
+
+        return {
+            key: value.isoformat() if isinstance(value, date) else value
+            for key, value in row.items()
+        }
+
+    @aitool(
+        input_schema={},
+        output_schema={
+            "models": {
+                "type": "array",
+                "items": {
+                    "type": "object",
+                    "properties": {
+                        "model": {"type": "string"},
+                        "name": {"type": "string"},
+                    },
+                },
+            },
+        },
+    )
+    def _ai_list_models(self):
+        """List the concrete models the caller is allowed to read, leaving out
+        those gone from the registry."""
+        result = []
+        # Listing every readable model is the point of the tool.
+        for record in self.sudo().search([], order="model"):  # pylint: disable=no-search-all
+            model = record.model
+            if self._ai_is_queryable_model(model) and self.env[model].has_access(
+                "read"
+            ):
+                result.append({"model": model, "name": record.name})
+        return {"models": result}
+
+    @aitool(
+        input_schema={"model": {"type": "string"}},
+        required_inputs=["model"],
+        output_schema={
+            "fields": {"type": "object", "additionalProperties": True},
+            "hidden": {"type": "array", "items": {"type": "string"}},
+        },
+    )
+    def _ai_get_fields(self, model):
+        """Describe the readable fields of ``model``, and list under ``hidden``
+        the fields forbidden to AI. A field the caller could not see anyway
+        (``groups=``) is not listed, so as not to disclose it."""
+        target = self._ai_target(model)
+        readable = self._ai_readable_field_names(model)
+        forbidden = self._ai_forbidden_fields()
+        meta = target.fields_get(
+            attributes=["string", "help", "type", "selection", "relation", "required"]
+        )
+        return {
+            "fields": {name: info for name, info in meta.items() if name in readable},
+            # fields_get() also lists virtual fields (res.users' sel_groups_*).
+            # Reporting forbidden fields under ``hidden`` is deliberate: it
+            # tells the agent they exist but are off-limits, unlike
+            # group-restricted fields which are not disclosed at all.
+            "hidden": sorted(
+                name for name in meta if target._fields.get(name) in forbidden
+            ),
+        }
+
+    @aitool(
+        input_schema={
+            "model": {"type": "string"},
+            "domain": {"type": "array"},
+            "fields": {"type": "array", "items": {"type": "string"}},
+            "limit": {"type": "integer", "minimum": 1, "maximum": MAX_LIMIT},
+            "offset": {"type": "integer", "minimum": 0},
+            "order": {"type": "string"},
+        },
+        required_inputs=["model"],
+        output_schema={
+            "records": {
+                "type": "array",
+                "items": {"type": "object", "additionalProperties": True},
+            },
+            "has_more": {"type": "boolean"},
+            "inaccessible_fields": {"type": "array", "items": {"type": "string"}},
+        },
+    )
+    def _ai_search_read(
+        self, model, domain=None, fields=None, limit=MAX_LIMIT, offset=0, order=None
+    ):
+        """Search and read records of ``model`` with the caller's rights.
+
+        Only readable fields are returned, the stored ones unless ``fields`` is
+        given, which keeps the default read clear of computations that may fail
+        for the caller; fields refused at read time are listed in
+        ``inaccessible_fields`` (:meth:`_ai_read`). Many2one values are plain
+        IDs (``load=None``): the display name core would add is built from the
+        related record's fields, which may be forbidden there. ``has_more``
+        tells whether a next page exists, read with ``offset`` under the same
+        domain and order.
+        """
+        target = self._ai_target(model)
+        readable = self._ai_readable_field_names(model)
+        if fields is None:
+            output_fields = [name for name in readable if target._fields[name].store]
+        else:
+            # An explicit empty list asks for ids only, not the defaults.
+            output_fields = [name for name in fields if name in readable]
+        # The schema bounds are not enforced by the caller (ai_oca_mcp passes the
+        # arguments through). Odoo reads every record for a limit of 0 or less,
+        # past the cap, and agents send -1 to mean "all": cap those too.
+        if not limit or limit < 1 or limit > MAX_LIMIT:
+            limit = MAX_LIMIT
+        # One record past the page tells whether there is a next one.
+        records = target.search(
+            domain or [], offset=offset, limit=limit + 1, order=order
+        )
+        # Never read an empty list: Odoo reads *all* fields for it. ``id`` comes
+        # with every row anyway.
+        rows, inaccessible_fields = self._ai_read(
+            records[:limit], output_fields or ["id"]
+        )
+        return {
+            "records": [self._ai_jsonify(row) for row in rows],
+            "has_more": len(records) > limit,
+            "inaccessible_fields": inaccessible_fields,
+        }
diff --git a/ai_tool_read/models/ir_model_fields.py b/ai_tool_read/models/ir_model_fields.py
new file mode 100644
index 00000000..c952aed7
--- /dev/null
+++ b/ai_tool_read/models/ir_model_fields.py
@@ -0,0 +1,33 @@
+# Copyright 2026 Quartile (https://www.quartile.co)
+# License AGPL-3.0 or later (https://www.gnu.org/licenses/agpl).
+
+from odoo import fields, models
+
+
+class IrModelFields(models.Model):
+    _inherit = "ir.model.fields"
+
+    ai_no_read = fields.Boolean(
+        string="AI Read Forbidden",
+        default=False,
+        index=True,
+        help="If enabled, the generic AI read tools will exclude this field from "
+        "records, schema introspection and domain/order filtering. Use it to keep "
+        "personal or otherwise sensitive fields away from AI agents.",
+    )
+
+    def write(self, vals):
+        # ``ai_no_read`` is an add-on flag with no schema/ORM side effects, so it
+        # must stay settable even on base (non-manual) fields -- which is the
+        # whole point (e.g. flagging res.partner.email). Core write() forbids
+        # altering base fields, so route just this key through the plain ORM
+        # write and let everything else keep the standard validation. Copy the
+        # dict first: popping the key must not be visible to the caller, which
+        # may reuse the same ``vals`` for another write.
+        vals = dict(vals)
+        if "ai_no_read" in vals:
+            flag_value = vals.pop("ai_no_read")
+            models.Model.write(self, {"ai_no_read": flag_value})
+        if vals:
+            return super().write(vals)
+        return True
diff --git a/ai_tool_read/pyproject.toml b/ai_tool_read/pyproject.toml
new file mode 100644
index 00000000..4231d0cc
--- /dev/null
+++ b/ai_tool_read/pyproject.toml
@@ -0,0 +1,3 @@
+[build-system]
+requires = ["whool"]
+build-backend = "whool.buildapi"
diff --git a/ai_tool_read/readme/CONFIGURE.md b/ai_tool_read/readme/CONFIGURE.md
new file mode 100644
index 00000000..8851a412
--- /dev/null
+++ b/ai_tool_read/readme/CONFIGURE.md
@@ -0,0 +1,30 @@
+To forbid a field, tick **AI Read Forbidden** on it. As the administrator, either:
+
+- go to *Settings > Technical > Database Structure > Fields*, find the field and tick
+  the flag (the **AI Read Forbidden** filter and list column help you review what is
+  already flagged), or
+- open the model in *Settings > Technical > Database Structure > Models* and tick the
+  flag on the line of the field, in the *Fields* tab.
+
+The flag applies to base fields as well as custom ones, and takes effect immediately. A
+flag set on a mixin's field, such as `email_normalized` on `mail.thread.blacklist`,
+applies to every model inheriting it.
+
+A forbidden field takes along the fields that expose its value through their definition,
+on any model: related fields, the fields a model delegates through `_inherits`, and
+computed fields that depend on it. The `hidden` list returned by the **get_fields** tool
+shows the result on a model. A value copied into another record when that record is
+written is not followed (see *Known issues*): flag such fields as well.
+
+This errs on the safe side: a computed field is hidden as soon as it depends on a
+forbidden field, even when its value does not contain it. Forbidding `res.partner.email`
+also hides `is_blacklisted`, a yes/no computed from the address, and
+`hr.employee.mobile_phone`, computed by the same method as the work email. For the same
+reason, flag the fields that hold the sensitive values themselves (email, phone,
+address), not fields that many others are computed from, such as `parent_id` or
+`company_id`: those would hide far more than intended.
+
+Fields restricted to a user group (`groups=` in their definition) are already left out
+of the results for a user outside that group, without any flag, and are not reported in
+the `hidden` list either. **AI Read Forbidden** is only needed for fields that the user
+is otherwise allowed to read.
diff --git a/ai_tool_read/readme/CONTRIBUTORS.md b/ai_tool_read/readme/CONTRIBUTORS.md
new file mode 100644
index 00000000..c98732f3
--- /dev/null
+++ b/ai_tool_read/readme/CONTRIBUTORS.md
@@ -0,0 +1,3 @@
+- [Quartile](https://www.quartile.co):
+  - Toshikimi Shigenobu
+- Daniel Reis <dreis.pt@gmail.com>
diff --git a/ai_tool_read/readme/DESCRIPTION.md b/ai_tool_read/readme/DESCRIPTION.md
new file mode 100644
index 00000000..03c4311b
--- /dev/null
+++ b/ai_tool_read/readme/DESCRIPTION.md
@@ -0,0 +1,36 @@
+Adds `ai_tool` tools to let an AI agent read any model and field it
+is allowed to access, while keeping personal or otherwise sensitive fields out
+of the results.
+
+A flag **AI Read Forbidden** (`ai_no_read`) is added to fields. The tools never
+return nor describe a forbidden field, nor any field exposing its value:
+related fields, including those delegated through `_inherits`, and computed
+fields depending on it. Flagging `res.partner.email` thus also hides
+`email_formatted`, `email_normalized` and `res.users.email`.
+
+Three tools are provided:
+
+- **list_models**: lists the models the current user is allowed to read.
+- **get_fields**: describes a model's readable fields (label, type, help,
+  selection options and relation target), and lists the forbidden ones under
+  `hidden`.
+- **search_read**: searches and reads records of a model. It returns the
+  stored fields unless a field list is given, relational fields as record
+  IDs, and dates in UTC. Results are paged with `limit` and `offset`, and
+  `has_more` tells whether more records match. A field whose computation is
+  refused for the user is left out and listed in `inaccessible_fields`, and a
+  record the search finds but the user cannot read (as `ir.attachment` allows)
+  is left out without notice, as record rules would.
+
+The tools run with the calling user's own access rights (no `sudo`), so Odoo
+ACLs, record rules and field `groups` still apply. Connect the agent as a user
+with no more rights than it needs: an administrator sees every field restricted
+by `groups`.
+
+Besides forbidden fields, the results leave out binary fields, fields pointing
+to a model the user cannot read (reading them would fail), and display names
+computed on the fly, including the one Odoo adds to many2one values: they are
+built from other records' fields, which may be forbidden there.
+
+The flag keeps values out of the results, not out of searches: see *Known
+issues*.
diff --git a/ai_tool_read/readme/ROADMAP.md b/ai_tool_read/readme/ROADMAP.md
new file mode 100644
index 00000000..e8890e21
--- /dev/null
+++ b/ai_tool_read/readme/ROADMAP.md
@@ -0,0 +1,22 @@
+The tools keep forbidden values out of their results, not out of the searches
+an agent runs: they are not meant to stop an agent that probes for hidden
+values on purpose. Each case below still lets a forbidden value through:
+
+- **Filtering on a forbidden field.** `[("email", "ilike", "@example.com")]`
+  lists the contacts whose address matches, and repeating it on longer
+  fragments rebuilds a whole address. The same works on fields restricted by
+  `groups=`, which Odoo does not check when searching, and on search-only
+  fields: `phone_mobile_search` rebuilds a phone number even when `phone` is
+  forbidden.
+- **Searching a relation by text.** `[("partner_id", "ilike", "@example.com")]`
+  searches contacts by name, email included, and finds the orders of the
+  contacts whose address matches.
+- **Sorting.** Ordering on a forbidden field, or on a many2one (sorted by the
+  related record's display name), reveals the order of the hidden values.
+- **Copied values.** A value copied into another record is not linked to its
+  source: the author's address in a chatter message
+  (`mail.message.email_from`) is returned unless that field is flagged too.
+
+One more limit, which leaks nothing: a requested field that is forbidden,
+binary or restricted is simply missing from the records, with no reason given;
+`get_fields` tells them apart.
diff --git a/ai_tool_read/readme/USAGE.md b/ai_tool_read/readme/USAGE.md
new file mode 100644
index 00000000..afa23120
--- /dev/null
+++ b/ai_tool_read/readme/USAGE.md
@@ -0,0 +1,47 @@
+The tools are registered as `ai.tool` records and are callable through any
+`ai_tool` integration: `ai_oca_mcp`, for instance, exposes them to MCP clients
+such as Claude Desktop. This module provides the tools themselves; how they are
+reached depends on the transport module installed.
+
+A typical agent workflow:
+
+1. Call `list_models` to discover the models the bound user may read. Each
+   entry gives the technical `model` name (e.g. `res.partner`) to pass to the
+   other tools.
+2. Call `get_fields` with `model` to learn what each readable field means
+   (label, type, help, selection options, relation target), and which fields
+   are listed under `hidden`.
+3. Call `search_read` to fetch records:
+
+   - `model` (required): the technical model name.
+   - `domain` (optional): an Odoo domain as a list, e.g.
+     `[["is_company", "=", true]]`.
+   - `fields` (optional): an explicit field list; the stored readable fields
+     are returned otherwise. An empty list returns ids only.
+   - `limit` (optional): page size, 200 by default and at most; a value of 0
+     or less, or past the cap, is treated as the maximum.
+   - `offset` (optional): skip that many matching records.
+   - `order` (optional): e.g. `"name asc"`.
+
+   Relational fields come back as record ids, dates and datetimes as ISO-8601
+   strings in UTC. `has_more` tells whether another page exists under the same
+   domain and order; fields the call could not read are listed in
+   `inaccessible_fields`, while forbidden or restricted fields are simply
+   absent from the records.
+
+Example `search_read` arguments:
+
+```json
+{
+  "model": "res.partner",
+  "domain": [["is_company", "=", true]],
+  "fields": ["name", "email", "country_id"],
+  "limit": 20,
+  "order": "name asc"
+}
+```
+
+Every call executes with the access rights of the calling user — the API-key
+owner when reached through `ai_oca_mcp` — so Odoo ACLs, record rules and field
+`groups` apply as usual. Connect the agent as a dedicated user holding only
+the rights it needs.
diff --git a/ai_tool_read/static/description/index.html b/ai_tool_read/static/description/index.html
new file mode 100644
index 00000000..bcf71351
--- /dev/null
+++ b/ai_tool_read/static/description/index.html
@@ -0,0 +1,587 @@
+<!DOCTYPE html PUBLIC "-//W3C//DTD XHTML 1.0 Transitional//EN" "http://www.w3.org/TR/xhtml1/DTD/xhtml1-transitional.dtd">
+<html xmlns="http://www.w3.org/1999/xhtml" xml:lang="en" lang="en">
+<head>
+<meta http-equiv="Content-Type" content="text/html; charset=utf-8" />
+<meta name="generator" content="Docutils: https://docutils.sourceforge.io/" />
+<title>AI Tool - Read</title>
+<style type="text/css">
+
+/*
+:Author: David Goodger (goodger@python.org)
+:Id: $Id: html4css1.css 9511 2024-01-13 09:50:07Z milde $
+:Copyright: This stylesheet has been placed in the public domain.
+
+Default cascading style sheet for the HTML output of Docutils.
+Despite the name, some widely supported CSS2 features are used.
+
+See https://docutils.sourceforge.io/docs/howto/html-stylesheets.html for how to
+customize this style sheet.
+*/
+
+/* used to remove borders from tables and images */
+.borderless, table.borderless td, table.borderless th {
+  border: 0 }
+
+table.borderless td, table.borderless th {
+  /* Override padding for "table.docutils td" with "! important".
+     The right padding separates the table cells. */
+  padding: 0 0.5em 0 0 ! important }
+
+.first {
+  /* Override more specific margin styles with "! important". */
+  margin-top: 0 ! important }
+
+.last, .with-subtitle {
+  margin-bottom: 0 ! important }
+
+.hidden {
+  display: none }
+
+.subscript {
+  vertical-align: sub;
+  font-size: smaller }
+
+.superscript {
+  vertical-align: super;
+  font-size: smaller }
+
+a.toc-backref {
+  text-decoration: none ;
+  color: black }
+
+blockquote.epigraph {
+  margin: 2em 5em ; }
+
+dl.docutils dd {
+  margin-bottom: 0.5em }
+
+object[type="image/svg+xml"], object[type="application/x-shockwave-flash"] {
+  overflow: hidden;
+}
+
+/* Uncomment (and remove this text!) to get bold-faced definition list terms
+dl.docutils dt {
+  font-weight: bold }
+*/
+
+div.abstract {
+  margin: 2em 5em }
+
+div.abstract p.topic-title {
+  font-weight: bold ;
+  text-align: center }
+
+div.admonition, div.attention, div.caution, div.danger, div.error,
+div.hint, div.important, div.note, div.tip, div.warning {
+  margin: 2em ;
+  border: medium outset ;
+  padding: 1em }
+
+div.admonition p.admonition-title, div.hint p.admonition-title,
+div.important p.admonition-title, div.note p.admonition-title,
+div.tip p.admonition-title {
+  font-weight: bold ;
+  font-family: sans-serif }
+
+div.attention p.admonition-title, div.caution p.admonition-title,
+div.danger p.admonition-title, div.error p.admonition-title,
+div.warning p.admonition-title, .code .error {
+  color: red ;
+  font-weight: bold ;
+  font-family: sans-serif }
+
+/* Uncomment (and remove this text!) to get reduced vertical space in
+   compound paragraphs.
+div.compound .compound-first, div.compound .compound-middle {
+  margin-bottom: 0.5em }
+
+div.compound .compound-last, div.compound .compound-middle {
+  margin-top: 0.5em }
+*/
+
+div.dedication {
+  margin: 2em 5em ;
+  text-align: center ;
+  font-style: italic }
+
+div.dedication p.topic-title {
+  font-weight: bold ;
+  font-style: normal }
+
+div.figure {
+  margin-left: 2em ;
+  margin-right: 2em }
+
+div.footer, div.header {
+  clear: both;
+  font-size: smaller }
+
+div.line-block {
+  display: block ;
+  margin-top: 1em ;
+  margin-bottom: 1em }
+
+div.line-block div.line-block {
+  margin-top: 0 ;
+  margin-bottom: 0 ;
+  margin-left: 1.5em }
+
+div.sidebar {
+  margin: 0 0 0.5em 1em ;
+  border: medium outset ;
+  padding: 1em ;
+  background-color: #ffffee ;
+  width: 40% ;
+  float: right ;
+  clear: right }
+
+div.sidebar p.rubric {
+  font-family: sans-serif ;
+  font-size: medium }
+
+div.system-messages {
+  margin: 5em }
+
+div.system-messages h1 {
+  color: red }
+
+div.system-message {
+  border: medium outset ;
+  padding: 1em }
+
+div.system-message p.system-message-title {
+  color: red ;
+  font-weight: bold }
+
+div.topic {
+  margin: 2em }
+
+h1.section-subtitle, h2.section-subtitle, h3.section-subtitle,
+h4.section-subtitle, h5.section-subtitle, h6.section-subtitle {
+  margin-top: 0.4em }
+
+h1.title {
+  text-align: center }
+
+h2.subtitle {
+  text-align: center }
+
+hr.docutils {
+  width: 75% }
+
+img.align-left, .figure.align-left, object.align-left, table.align-left {
+  clear: left ;
+  float: left ;
+  margin-right: 1em }
+
+img.align-right, .figure.align-right, object.align-right, table.align-right {
+  clear: right ;
+  float: right ;
+  margin-left: 1em }
+
+img.align-center, .figure.align-center, object.align-center {
+  display: block;
+  margin-left: auto;
+  margin-right: auto;
+}
+
+table.align-center {
+  margin-left: auto;
+  margin-right: auto;
+}
+
+.align-left {
+  text-align: left }
+
+.align-center {
+  clear: both ;
+  text-align: center }
+
+.align-right {
+  text-align: right }
+
+/* reset inner alignment in figures */
+div.align-right {
+  text-align: inherit }
+
+/* div.align-center * { */
+/*   text-align: left } */
+
+.align-top    {
+  vertical-align: top }
+
+.align-middle {
+  vertical-align: middle }
+
+.align-bottom {
+  vertical-align: bottom }
+
+ol.simple, ul.simple {
+  margin-bottom: 1em }
+
+ol.arabic {
+  list-style: decimal }
+
+ol.loweralpha {
+  list-style: lower-alpha }
+
+ol.upperalpha {
+  list-style: upper-alpha }
+
+ol.lowerroman {
+  list-style: lower-roman }
+
+ol.upperroman {
+  list-style: upper-roman }
+
+p.attribution {
+  text-align: right ;
+  margin-left: 50% }
+
+p.caption {
+  font-style: italic }
+
+p.credits {
+  font-style: italic ;
+  font-size: smaller }
+
+p.label {
+  white-space: nowrap }
+
+p.rubric {
+  font-weight: bold ;
+  font-size: larger ;
+  color: maroon ;
+  text-align: center }
+
+p.sidebar-title {
+  font-family: sans-serif ;
+  font-weight: bold ;
+  font-size: larger }
+
+p.sidebar-subtitle {
+  font-family: sans-serif ;
+  font-weight: bold }
+
+p.topic-title {
+  font-weight: bold }
+
+pre.address {
+  margin-bottom: 0 ;
+  margin-top: 0 ;
+  font: inherit }
+
+pre.literal-block, pre.doctest-block, pre.math, pre.code {
+  margin-left: 2em ;
+  margin-right: 2em }
+
+pre.code .ln { color: gray; } /* line numbers */
+pre.code, code { background-color: #eeeeee }
+pre.code .comment, code .comment { color: #5C6576 }
+pre.code .keyword, code .keyword { color: #3B0D06; font-weight: bold }
+pre.code .literal.string, code .literal.string { color: #0C5404 }
+pre.code .name.builtin, code .name.builtin { color: #352B84 }
+pre.code .deleted, code .deleted { background-color: #DEB0A1}
+pre.code .inserted, code .inserted { background-color: #A3D289}
+
+span.classifier {
+  font-family: sans-serif ;
+  font-style: oblique }
+
+span.classifier-delimiter {
+  font-family: sans-serif ;
+  font-weight: bold }
+
+span.interpreted {
+  font-family: sans-serif }
+
+span.option {
+  white-space: nowrap }
+
+span.pre {
+  white-space: pre }
+
+span.problematic, pre.problematic {
+  color: red }
+
+span.section-subtitle {
+  /* font-size relative to parent (h1..h6 element) */
+  font-size: 80% }
+
+table.citation {
+  border-left: solid 1px gray;
+  margin-left: 1px }
+
+table.docinfo {
+  margin: 2em 4em }
+
+table.docutils {
+  margin-top: 0.5em ;
+  margin-bottom: 0.5em }
+
+table.footnote {
+  border-left: solid 1px black;
+  margin-left: 1px }
+
+table.docutils td, table.docutils th,
+table.docinfo td, table.docinfo th {
+  padding-left: 0.5em ;
+  padding-right: 0.5em ;
+  vertical-align: top }
+
+table.docutils th.field-name, table.docinfo th.docinfo-name {
+  font-weight: bold ;
+  text-align: left ;
+  white-space: nowrap ;
+  padding-left: 0 }
+
+/* "booktabs" style (no vertical lines) */
+table.docutils.booktabs {
+  border: 0px;
+  border-top: 2px solid;
+  border-bottom: 2px solid;
+  border-collapse: collapse;
+}
+table.docutils.booktabs * {
+  border: 0px;
+}
+table.docutils.booktabs th {
+  border-bottom: thin solid;
+  text-align: left;
+}
+
+h1 tt.docutils, h2 tt.docutils, h3 tt.docutils,
+h4 tt.docutils, h5 tt.docutils, h6 tt.docutils {
+  font-size: 100% }
+
+ul.auto-toc {
+  list-style-type: none }
+
+</style>
+</head>
+<body>
+<div class="document">
+
+
+<a class="reference external image-reference" href="https://odoo-community.org/get-involved?utm_source=readme">
+<img alt="Odoo Community Association" src="https://odoo-community.org/readme-banner-image" />
+</a>
+<div class="section" id="ai-tool-read">
+<h1>AI Tool - Read</h1>
+<!-- !!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!
+!! This file is generated by oca-gen-addon-readme !!
+!! changes will be overwritten.                   !!
+!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!
+!! source digest: sha256:fe66b1297c9c53a47b95b8407598bb5fab4d963c5e90afea0c614688365f21fc
+!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!! -->
+<p><a class="reference external image-reference" href="https://odoo-community.org/page/development-status"><img alt="Beta" src="https://img.shields.io/badge/maturity-Beta-yellow.png" /></a> <a class="reference external image-reference" href="http://www.gnu.org/licenses/agpl-3.0-standalone.html"><img alt="License: AGPL-3" src="https://img.shields.io/badge/license-AGPL--3-blue.png" /></a> <a class="reference external image-reference" href="https://github.com/OCA/ai/tree/19.0/ai_tool_read"><img alt="OCA/ai" src="https://img.shields.io/badge/github-OCA%2Fai-lightgray.png?logo=github" /></a> <a class="reference external image-reference" href="https://translation.odoo-community.org/projects/ai-19-0/ai-19-0-ai_tool_read"><img alt="Translate me on Weblate" src="https://img.shields.io/badge/weblate-Translate%20me-F47D42.png" /></a> <a class="reference external image-reference" href="https://runboat.odoo-community.org/builds?repo=OCA/ai&amp;target_branch=19.0"><img alt="Try me on Runboat" src="https://img.shields.io/badge/runboat-Try%20me-875A7B.png" /></a></p>
+<p>Adds <tt class="docutils literal">ai_tool</tt> tools to let an AI agent read any model and field it is
+allowed to access, while keeping personal or otherwise sensitive fields
+out of the results.</p>
+<p>A flag <strong>AI Read Forbidden</strong> (<tt class="docutils literal">ai_no_read</tt>) is added to fields. The
+tools never return nor describe a forbidden field, nor any field
+exposing its value: related fields, including those delegated through
+<tt class="docutils literal">_inherits</tt>, and computed fields depending on it. Flagging
+<tt class="docutils literal">res.partner.email</tt> thus also hides <tt class="docutils literal">email_formatted</tt>,
+<tt class="docutils literal">email_normalized</tt> and <tt class="docutils literal">res.users.email</tt>.</p>
+<p>Three tools are provided:</p>
+<ul class="simple">
+<li><strong>list_models</strong>: lists the models the current user is allowed to read.</li>
+<li><strong>get_fields</strong>: describes a model’s readable fields (label, type,
+help, selection options and relation target), and lists the forbidden
+ones under <tt class="docutils literal">hidden</tt>.</li>
+<li><strong>search_read</strong>: searches and reads records of a model. It returns the
+stored fields unless a field list is given, relational fields as
+record IDs, and dates in UTC. Results are paged with <tt class="docutils literal">limit</tt> and
+<tt class="docutils literal">offset</tt>, and <tt class="docutils literal">has_more</tt> tells whether more records match. A field
+whose computation is refused for the user is left out and listed in
+<tt class="docutils literal">inaccessible_fields</tt>, and a record the search finds but the user
+cannot read (as <tt class="docutils literal">ir.attachment</tt> allows) is left out without notice,
+as record rules would.</li>
+</ul>
+<p>The tools run with the calling user’s own access rights (no <tt class="docutils literal">sudo</tt>),
+so Odoo ACLs, record rules and field <tt class="docutils literal">groups</tt> still apply. Connect the
+agent as a user with no more rights than it needs: an administrator sees
+every field restricted by <tt class="docutils literal">groups</tt>.</p>
+<p>Besides forbidden fields, the results leave out binary fields, fields
+pointing to a model the user cannot read (reading them would fail), and
+display names computed on the fly, including the one Odoo adds to
+many2one values: they are built from other records’ fields, which may be
+forbidden there.</p>
+<p>The flag keeps values out of the results, not out of searches: see
+<em>Known issues</em>.</p>
+<p><strong>Table of contents</strong></p>
+<div class="contents local topic" id="contents">
+<ul class="simple">
+<li><a class="reference internal" href="#configuration" id="toc-entry-1">Configuration</a></li>
+<li><a class="reference internal" href="#usage" id="toc-entry-2">Usage</a></li>
+<li><a class="reference internal" href="#known-issues-roadmap" id="toc-entry-3">Known issues / Roadmap</a></li>
+<li><a class="reference internal" href="#bug-tracker" id="toc-entry-4">Bug Tracker</a></li>
+<li><a class="reference internal" href="#credits" id="toc-entry-5">Credits</a><ul>
+<li><a class="reference internal" href="#authors" id="toc-entry-6">Authors</a></li>
+<li><a class="reference internal" href="#contributors" id="toc-entry-7">Contributors</a></li>
+<li><a class="reference internal" href="#maintainers" id="toc-entry-8">Maintainers</a></li>
+</ul>
+</li>
+</ul>
+</div>
+<div class="section" id="configuration">
+<h2><a class="toc-backref" href="#toc-entry-1">Configuration</a></h2>
+<p>To forbid a field, tick <strong>AI Read Forbidden</strong> on it. As the
+administrator, either:</p>
+<ul class="simple">
+<li>go to <em>Settings &gt; Technical &gt; Database Structure &gt; Fields</em>, find the
+field and tick the flag (the <strong>AI Read Forbidden</strong> filter and list
+column help you review what is already flagged), or</li>
+<li>open the model in <em>Settings &gt; Technical &gt; Database Structure &gt; Models</em>
+and tick the flag on the line of the field, in the <em>Fields</em> tab.</li>
+</ul>
+<p>The flag applies to base fields as well as custom ones, and takes effect
+immediately. A flag set on a mixin’s field, such as <tt class="docutils literal">email_normalized</tt>
+on <tt class="docutils literal">mail.thread.blacklist</tt>, applies to every model inheriting it.</p>
+<p>A forbidden field takes along the fields that expose its value through
+their definition, on any model: related fields, the fields a model
+delegates through <tt class="docutils literal">_inherits</tt>, and computed fields that depend on it.
+The <tt class="docutils literal">hidden</tt> list returned by the <strong>get_fields</strong> tool shows the result
+on a model. A value copied into another record when that record is
+written is not followed (see <em>Known issues</em>): flag such fields as well.</p>
+<p>This errs on the safe side: a computed field is hidden as soon as it
+depends on a forbidden field, even when its value does not contain it.
+Forbidding <tt class="docutils literal">res.partner.email</tt> also hides <tt class="docutils literal">is_blacklisted</tt>, a yes/no
+computed from the address, and <tt class="docutils literal">hr.employee.mobile_phone</tt>, computed by
+the same method as the work email. For the same reason, flag the fields
+that hold the sensitive values themselves (email, phone, address), not
+fields that many others are computed from, such as <tt class="docutils literal">parent_id</tt> or
+<tt class="docutils literal">company_id</tt>: those would hide far more than intended.</p>
+<p>Fields restricted to a user group (<tt class="docutils literal">groups=</tt> in their definition) are
+already left out of the results for a user outside that group, without
+any flag, and are not reported in the <tt class="docutils literal">hidden</tt> list either. <strong>AI Read
+Forbidden</strong> is only needed for fields that the user is otherwise allowed
+to read.</p>
+</div>
+<div class="section" id="usage">
+<h2><a class="toc-backref" href="#toc-entry-2">Usage</a></h2>
+<p>The tools are registered as <tt class="docutils literal">ai.tool</tt> records and are callable through
+any <tt class="docutils literal">ai_tool</tt> integration: <tt class="docutils literal">ai_oca_mcp</tt>, for instance, exposes them
+to MCP clients such as Claude Desktop. This module provides the tools
+themselves; how they are reached depends on the transport module
+installed.</p>
+<p>A typical agent workflow:</p>
+<ol class="arabic">
+<li><p class="first">Call <tt class="docutils literal">list_models</tt> to discover the models the bound user may read.
+Each entry gives the technical <tt class="docutils literal">model</tt> name (e.g. <tt class="docutils literal">res.partner</tt>)
+to pass to the other tools.</p>
+</li>
+<li><p class="first">Call <tt class="docutils literal">get_fields</tt> with <tt class="docutils literal">model</tt> to learn what each readable field
+means (label, type, help, selection options, relation target), and
+which fields are listed under <tt class="docutils literal">hidden</tt>.</p>
+</li>
+<li><p class="first">Call <tt class="docutils literal">search_read</tt> to fetch records:</p>
+<ul class="simple">
+<li><tt class="docutils literal">model</tt> (required): the technical model name.</li>
+<li><tt class="docutils literal">domain</tt> (optional): an Odoo domain as a list, e.g.
+<tt class="docutils literal"><span class="pre">[[&quot;is_company&quot;,</span> <span class="pre">&quot;=&quot;,</span> true]]</tt>.</li>
+<li><tt class="docutils literal">fields</tt> (optional): an explicit field list; the stored readable
+fields are returned otherwise. An empty list returns ids only.</li>
+<li><tt class="docutils literal">limit</tt> (optional): page size, 200 by default and at most; a
+value of 0 or less, or past the cap, is treated as the maximum.</li>
+<li><tt class="docutils literal">offset</tt> (optional): skip that many matching records.</li>
+<li><tt class="docutils literal">order</tt> (optional): e.g. <tt class="docutils literal">&quot;name asc&quot;</tt>.</li>
+</ul>
+<p>Relational fields come back as record ids, dates and datetimes as
+ISO-8601 strings in UTC. <tt class="docutils literal">has_more</tt> tells whether another page
+exists under the same domain and order; fields the call could not
+read are listed in <tt class="docutils literal">inaccessible_fields</tt>, while forbidden or
+restricted fields are simply absent from the records.</p>
+</li>
+</ol>
+<p>Example <tt class="docutils literal">search_read</tt> arguments:</p>
+<pre class="code json literal-block">
+<span class="p">{</span><span class="w">
+  </span><span class="nt">&quot;model&quot;</span><span class="p">:</span><span class="w"> </span><span class="s2">&quot;res.partner&quot;</span><span class="p">,</span><span class="w">
+  </span><span class="nt">&quot;domain&quot;</span><span class="p">:</span><span class="w"> </span><span class="p">[[</span><span class="s2">&quot;is_company&quot;</span><span class="p">,</span><span class="w"> </span><span class="s2">&quot;=&quot;</span><span class="p">,</span><span class="w"> </span><span class="kc">true</span><span class="p">]],</span><span class="w">
+  </span><span class="nt">&quot;fields&quot;</span><span class="p">:</span><span class="w"> </span><span class="p">[</span><span class="s2">&quot;name&quot;</span><span class="p">,</span><span class="w"> </span><span class="s2">&quot;email&quot;</span><span class="p">,</span><span class="w"> </span><span class="s2">&quot;country_id&quot;</span><span class="p">],</span><span class="w">
+  </span><span class="nt">&quot;limit&quot;</span><span class="p">:</span><span class="w"> </span><span class="mi">20</span><span class="p">,</span><span class="w">
+  </span><span class="nt">&quot;order&quot;</span><span class="p">:</span><span class="w"> </span><span class="s2">&quot;name asc&quot;</span><span class="w">
+</span><span class="p">}</span>
+</pre>
+<p>Every call executes with the access rights of the calling user — the
+API-key owner when reached through <tt class="docutils literal">ai_oca_mcp</tt> — so Odoo ACLs, record
+rules and field <tt class="docutils literal">groups</tt> apply as usual. Connect the agent as a
+dedicated user holding only the rights it needs.</p>
+</div>
+<div class="section" id="known-issues-roadmap">
+<h2><a class="toc-backref" href="#toc-entry-3">Known issues / Roadmap</a></h2>
+<p>The tools keep forbidden values out of their results, not out of the
+searches an agent runs: they are not meant to stop an agent that probes
+for hidden values on purpose. Each case below still lets a forbidden
+value through:</p>
+<ul class="simple">
+<li><strong>Filtering on a forbidden field.</strong>
+<tt class="docutils literal"><span class="pre">[(&quot;email&quot;,</span> &quot;ilike&quot;, <span class="pre">&quot;&#64;example.com&quot;)]</span></tt> lists the contacts whose
+address matches, and repeating it on longer fragments rebuilds a whole
+address. The same works on fields restricted by <tt class="docutils literal">groups=</tt>, which
+Odoo does not check when searching, and on search-only fields:
+<tt class="docutils literal">phone_mobile_search</tt> rebuilds a phone number even when <tt class="docutils literal">phone</tt> is
+forbidden.</li>
+<li><strong>Searching a relation by text.</strong>
+<tt class="docutils literal"><span class="pre">[(&quot;partner_id&quot;,</span> &quot;ilike&quot;, <span class="pre">&quot;&#64;example.com&quot;)]</span></tt> searches contacts by
+name, email included, and finds the orders of the contacts whose
+address matches.</li>
+<li><strong>Sorting.</strong> Ordering on a forbidden field, or on a many2one (sorted
+by the related record’s display name), reveals the order of the hidden
+values.</li>
+<li><strong>Copied values.</strong> A value copied into another record is not linked to
+its source: the author’s address in a chatter message
+(<tt class="docutils literal">mail.message.email_from</tt>) is returned unless that field is flagged
+too.</li>
+</ul>
+<p>One more limit, which leaks nothing: a requested field that is
+forbidden, binary or restricted is simply missing from the records, with
+no reason given; <tt class="docutils literal">get_fields</tt> tells them apart.</p>
+</div>
+<div class="section" id="bug-tracker">
+<h2><a class="toc-backref" href="#toc-entry-4">Bug Tracker</a></h2>
+<p>Bugs are tracked on <a class="reference external" href="https://github.com/OCA/ai/issues">GitHub Issues</a>.
+In case of trouble, please check there if your issue has already been reported.
+If you spotted it first, help us to smash it by providing a detailed and welcomed
+<a class="reference external" href="https://github.com/OCA/ai/issues/new?body=module:%20ai_tool_read%0Aversion:%2019.0%0A%0A**Steps%20to%20reproduce**%0A-%20...%0A%0A**Current%20behavior**%0A%0A**Expected%20behavior**">feedback</a>.</p>
+<p>Do not contact contributors directly about support or help with technical issues.</p>
+</div>
+<div class="section" id="credits">
+<h2><a class="toc-backref" href="#toc-entry-5">Credits</a></h2>
+<div class="section" id="authors">
+<h3><a class="toc-backref" href="#toc-entry-6">Authors</a></h3>
+<ul class="simple">
+<li>Quartile</li>
+</ul>
+</div>
+<div class="section" id="contributors">
+<h3><a class="toc-backref" href="#toc-entry-7">Contributors</a></h3>
+<ul class="simple">
+<li><a class="reference external" href="https://www.quartile.co">Quartile</a>:<ul>
+<li>Toshikimi Shigenobu</li>
+</ul>
+</li>
+<li>Daniel Reis <a class="reference external" href="mailto:dreis.pt&#64;gmail.com">dreis.pt&#64;gmail.com</a></li>
+</ul>
+</div>
+<div class="section" id="maintainers">
+<h3><a class="toc-backref" href="#toc-entry-8">Maintainers</a></h3>
+<p>This module is maintained by the OCA.</p>
+<a class="reference external image-reference" href="https://odoo-community.org">
+<img alt="Odoo Community Association" src="https://odoo-community.org/logo.png" />
+</a>
+<p>OCA, or the Odoo Community Association, is a nonprofit organization whose
+mission is to support the collaborative development of Odoo features and
+promote its widespread use.</p>
+<p>Current <a class="reference external" href="https://odoo-community.org/page/maintainer-role">maintainer</a>:</p>
+<p><a class="reference external image-reference" href="https://github.com/nobuQuartile"><img alt="nobuQuartile" src="https://github.com/nobuQuartile.png?size=40px" /></a></p>
+<p>This module is part of the <a class="reference external" href="https://github.com/OCA/ai/tree/19.0/ai_tool_read">OCA/ai</a> project on GitHub.</p>
+<p>You are welcome to contribute. To learn how please visit <a class="reference external" href="https://odoo-community.org/page/Contribute">https://odoo-community.org/page/Contribute</a>.</p>
+</div>
+</div>
+</div>
+</div>
+</body>
+</html>
diff --git a/ai_tool_read/tests/__init__.py b/ai_tool_read/tests/__init__.py
new file mode 100644
index 00000000..b4517d16
--- /dev/null
+++ b/ai_tool_read/tests/__init__.py
@@ -0,0 +1 @@
+from . import test_ai_tool_read
diff --git a/ai_tool_read/tests/test_ai_tool_read.py b/ai_tool_read/tests/test_ai_tool_read.py
new file mode 100644
index 00000000..b3e970ce
--- /dev/null
+++ b/ai_tool_read/tests/test_ai_tool_read.py
@@ -0,0 +1,258 @@
+# Copyright 2026 Quartile (https://www.quartile.co)
+# License AGPL-3.0 or later (https://www.gnu.org/licenses/agpl).
+
+from odoo.exceptions import AccessError, UserError
+from odoo.tests.common import TransactionCase, new_test_user
+
+from odoo.addons.ai_tool_read.models.ir_model import MAX_LIMIT
+
+
+class TestAiToolRead(TransactionCase):
+    @classmethod
+    def setUpClass(cls):
+        super().setUpClass()
+        IrModelFields = cls.env["ir.model.fields"]
+        # ``ai_no_read`` is configuration data an administrator may already have
+        # set in the database, so start from a known state: only res.partner.email
+        # is forbidden for the whole test class.
+        IrModelFields.search([("ai_no_read", "=", True)]).ai_no_read = False
+        cls.email_field = IrModelFields.search(
+            [("model", "=", "res.partner"), ("name", "=", "email")], limit=1
+        )
+        cls.email_field.ai_no_read = True
+        cls.partner = cls.env["res.partner"].create(
+            {"name": "Tanaka", "email": "tanaka@example.com"}
+        )
+        cls.user = new_test_user(cls.env, login="ai_reader", groups="base.group_user")
+        cls.system_user = new_test_user(
+            cls.env, login="ai_admin", groups="base.group_user,base.group_system"
+        )
+
+    def _tool(self, name):
+        return self.env.ref(f"ai_tool_read.{name}_tool").with_user(self.user)
+
+    def _search_read(self, model="res.partner", user=None, **kwargs):
+        return (
+            self.env["ir.model"]
+            .with_user(user or self.user)
+            ._ai_search_read(model, **kwargs)
+        )
+
+    def _get_fields(self, model):
+        return self.env["ir.model"].with_user(self.user)._ai_get_fields(model)
+
+    def test_agent_workflow(self):
+        # The way an agent uses the module, through the ai.tool records: find a
+        # model, learn its fields, then read records.
+        for name in ("list_models", "get_fields", "search_read"):
+            definition = self._tool(name)._get_tool_definition()
+            self.assertIn("properties", definition["inputSchema"])
+        models = [
+            m["model"] for m in self._tool("list_models")._execute_tool()["models"]
+        ]
+        self.assertIn("res.partner", models)
+        self.assertNotIn("ir.cron", models)  # no read access
+        self.assertNotIn("mail.compose.message", models)  # wizard, though readable
+        res = self._tool("get_fields")._execute_tool(model="res.partner")
+        self.assertEqual(res["fields"]["parent_id"]["relation"], "res.partner")
+        self.assertNotIn("email", res["fields"])
+        self.assertIn("email", res["hidden"])
+        res = self._tool("search_read")._execute_tool(
+            model="res.partner", domain=[("id", "=", self.partner.id)]
+        )
+        record = res["records"][0]
+        self.assertEqual(record["name"], "Tanaka")
+        self.assertNotIn("email", record)  # forbidden
+        self.assertNotIn("image_1920", record)  # binary
+        self.assertNotIn("contact_address", record)  # computed, not asked for
+        self.assertIsInstance(record["create_date"], str)  # JSON-serializable
+        self.assertFalse(res["has_more"])
+
+    def test_explicit_fields(self):
+        # A field computed on the fly is read when asked for, and a forbidden or
+        # binary one is left out, the record still coming with its id.
+        domain = [("id", "=", self.partner.id)]
+        res = self._search_read(
+            domain=domain, fields=["name", "email", "contact_address"]
+        )
+        self.assertEqual(set(res["records"][0]), {"id", "name", "contact_address"})
+        res = self._search_read(domain=domain, fields=["email", "image_1920"])
+        self.assertEqual(res["records"], [{"id": self.partner.id}])
+
+    def test_no_readable_field(self):
+        # With every field forbidden, records come with their id only: an empty
+        # field list must not reach read(), which reads all fields for it.
+        partner_fields = self.env["ir.model.fields"].search(
+            [("model", "=", "res.partner")]
+        )
+        partner_fields.ai_no_read = True
+        res = self._search_read(domain=[("id", "=", self.partner.id)])
+        self.assertEqual(res["records"], [{"id": self.partner.id}])
+
+    def test_relational_read_as_id(self):
+        # Core adds the display name of a many2one, built from fields of the
+        # related record that may be forbidden there (a partner's name).
+        child = self.env["res.partner"].create(
+            {"name": "Suzuki", "parent_id": self.partner.id}
+        )
+        res = self._search_read(
+            domain=[("id", "=", child.id)], fields=["parent_id", "child_ids"]
+        )
+        self.assertEqual(
+            res["records"],
+            [{"id": child.id, "parent_id": self.partner.id, "child_ids": []}],
+        )
+
+    def test_paging(self):
+        partners = self.env["res.partner"].create(
+            [{"name": f"Page {i}"} for i in range(3)]
+        )
+        kwargs = {
+            "domain": [("id", "in", partners.ids)],
+            "fields": ["name"],
+            "order": "id",
+        }
+        res = self._search_read(limit=2, **kwargs)
+        self.assertEqual([r["id"] for r in res["records"]], partners[:2].ids)
+        self.assertTrue(res["has_more"])
+        res = self._search_read(limit=2, offset=2, **kwargs)
+        self.assertEqual([r["id"] for r in res["records"]], partners[2:].ids)
+        self.assertFalse(res["has_more"])
+
+    def test_limit_capped(self):
+        # A missing or out-of-range limit falls back to the cap, which Odoo would
+        # otherwise lift for a limit of 0 or less.
+        partners = self.env["res.partner"].create(
+            [{"name": f"Cap {i}"} for i in range(MAX_LIMIT + 1)]
+        )
+        for limit in (None, -1, 0, MAX_LIMIT + 1):
+            with self.subTest(limit=limit):
+                res = self._search_read(
+                    domain=[("id", "in", partners.ids)], fields=["id"], limit=limit
+                )
+                self.assertEqual(len(res["records"]), MAX_LIMIT)
+                self.assertTrue(res["has_more"])
+
+    def test_forbidden_value_followed(self):
+        # A field exposing the value of a forbidden one is forbidden too: one
+        # computed from it, related to it, or delegated through _inherits.
+        res = self._get_fields("res.partner")
+        for name in ("email_normalized", "email_formatted"):
+            with self.subTest(name=name):
+                self.assertIn(name, res["hidden"])
+                self.assertNotIn(name, res["fields"])
+        for model in ("res.users", "mail.followers"):
+            with self.subTest(model=model):
+                self.assertNotIn("email", self._get_fields(model)["fields"])
+        # Followed through several levels.
+        self.env["ir.model.fields"].search(
+            [("model", "=", "res.partner"), ("name", "=", "name")]
+        ).ai_no_read = True
+        res = self._get_fields("res.partner")
+        for name in ("display_name", "commercial_company_name", "parent_name"):
+            with self.subTest(name=name):
+                self.assertIn(name, res["hidden"])
+        # A field merely pointing to the record is not affected.
+        self.assertIn("parent_id", res["fields"])
+
+    def test_flag_on_mixin(self):
+        # A flag set on a mixin's field applies to the models inheriting it.
+        self.email_field.ai_no_read = False
+        self.assertIn("email_normalized", self._get_fields("res.partner")["fields"])
+        self.env["ir.model.fields"].search(
+            [("model", "=", "mail.thread.blacklist"), ("name", "=", "email_normalized")]
+        ).ai_no_read = True
+        self.assertIn("email_normalized", self._get_fields("res.partner")["hidden"])
+
+    def test_display_name_hidden(self):
+        # A display name computed on the fly may show another record's name
+        # with nothing in the field dependencies to tell: a follower shows its
+        # partner's name. display_name is never stored, so it is left out
+        # everywhere; a stored one would declare its dependencies like any
+        # computed field.
+        self.assertNotIn("display_name", self._get_fields("mail.followers")["fields"])
+        self.assertNotIn("display_name", self._get_fields("res.partner")["fields"])
+
+    def test_unreadable_fields_not_exposed(self):
+        # A group-restricted field is not even reported as hidden.
+        res = self._get_fields("mail.guest")
+        self.assertNotIn("access_token", res["fields"])
+        self.assertNotIn("access_token", res["hidden"])
+        # A field pointing to a model the user cannot read is left out, so that
+        # reading the model does not fail as a whole.
+        self.assertNotIn("model_access", self._get_fields("res.groups")["fields"])
+        group_user = self.env.ref("base.group_user")
+        res = self._search_read("res.groups", domain=[("id", "=", group_user.id)])
+        self.assertNotIn("model_access", res["records"][0])
+        # A user who may read them gets them.
+        res = self._search_read(
+            "res.groups",
+            user=self.system_user,
+            domain=[("id", "=", group_user.id)],
+            fields=["model_access"],
+        )
+        self.assertIn("model_access", res["records"][0])
+
+    def test_refused_field_left_out(self):
+        # A computed field can be refused only when it is computed, typically
+        # because its compute looks up a model the user cannot read. Simulated,
+        # as which real fields do so depends on the installed modules, and a
+        # value already in the cache would not be computed at all.
+        def compute_refused(partners):
+            partners.env["ir.model.access"].check_access("read")
+
+        self.patch(
+            type(self.env["res.partner"]), "_compute_contact_address", compute_refused
+        )
+        self.partner.invalidate_recordset(["contact_address"])
+        domain = [("id", "=", self.partner.id)]
+        res = self._search_read(domain=domain, fields=["name", "contact_address"])
+        self.assertEqual(res["records"], [{"id": self.partner.id, "name": "Tanaka"}])
+        self.assertEqual(res["inaccessible_fields"], ["contact_address"])
+
+    def test_refused_record_dropped(self):
+        # ir.attachment search finds attachments that its read then refuses (no
+        # res_model, not public, created by someone else).
+        Attachment = self.env["ir.attachment"]
+        private = Attachment.create({"name": "private.txt", "raw": b"x"})
+        public = Attachment.create({"name": "public.txt", "raw": b"x", "public": True})
+        res = self._search_read(
+            "ir.attachment",
+            domain=[("id", "in", (private | public).ids)],
+            fields=["name"],
+        )
+        self.assertEqual([r["name"] for r in res["records"]], ["public.txt"])
+        self.assertEqual(res["inaccessible_fields"], [])
+
+    def test_unqueryable_model_rejected(self):
+        for model in ("no.such.model", "mail.thread", "base.language.install"):
+            with self.subTest(model=model):
+                with self.assertRaises(UserError) as catcher:
+                    self._search_read(model)
+                self.assertNotIsInstance(catcher.exception, AccessError)
+        with self.assertRaises(AccessError):
+            self._search_read("ir.cron")
+        # An abstract model is not listed even when an ACL grants read on it.
+        self.env["ir.model.access"].create(
+            {
+                "name": "ai_tool_read_test_access",
+                "model_id": self.env["ir.model"]._get("mail.thread").id,
+                "group_id": self.env.ref("base.group_user").id,
+                "perm_read": True,
+            }
+        )
+        models = [
+            m["model"] for m in self._tool("list_models")._execute_tool()["models"]
+        ]
+        self.assertNotIn("mail.thread", models)
+
+    def test_flag_write_on_base_field(self):
+        # Core refuses to alter a base field, but the flag goes through.
+        self.email_field.write({"ai_no_read": False})
+        res = self._search_read(domain=[("id", "=", self.partner.id)], fields=["email"])
+        self.assertEqual(res["records"][0]["email"], "tanaka@example.com")
+        # Any other key keeps core's validation, with or without the flag.
+        for vals in ({"index": True}, {"ai_no_read": True, "index": True}):
+            with self.subTest(vals=vals):
+                with self.assertRaises(UserError), self.cr.savepoint():
+                    self.email_field.write(vals)
diff --git a/ai_tool_read/views/ir_model_fields_views.xml b/ai_tool_read/views/ir_model_fields_views.xml
new file mode 100644
index 00000000..37ddfd76
--- /dev/null
+++ b/ai_tool_read/views/ir_model_fields_views.xml
@@ -0,0 +1,56 @@
+<?xml version="1.0" encoding="utf-8" ?>
+<odoo>
+    <record id="ir_model_fields_view_form" model="ir.ui.view">
+        <field name="model">ir.model.fields</field>
+        <field name="inherit_id" ref="base.view_model_fields_form" />
+        <field name="arch" type="xml">
+            <field name="readonly" position="after">
+                <field name="ai_no_read" />
+            </field>
+        </field>
+    </record>
+
+    <record id="ir_model_view_form" model="ir.ui.view">
+        <field name="model">ir.model</field>
+        <field name="inherit_id" ref="base.view_model_form" />
+        <field name="arch" type="xml">
+            <xpath
+                expr="//field[@name='field_id']/form//field[@name='readonly']"
+                position="after"
+            >
+                <field name="ai_no_read" />
+            </xpath>
+            <xpath
+                expr="//field[@name='field_id']/list//field[@name='readonly']"
+                position="after"
+            >
+                <field name="ai_no_read" optional="show" />
+            </xpath>
+        </field>
+    </record>
+
+    <record id="ir_model_fields_view_tree" model="ir.ui.view">
+        <field name="model">ir.model.fields</field>
+        <field name="inherit_id" ref="base.view_model_fields_tree" />
+        <field name="arch" type="xml">
+            <field name="readonly" position="after">
+                <field name="ai_no_read" optional="show" />
+            </field>
+        </field>
+    </record>
+
+    <record id="ir_model_fields_view_search" model="ir.ui.view">
+        <field name="model">ir.model.fields</field>
+        <field name="inherit_id" ref="base.view_model_fields_search" />
+        <field name="arch" type="xml">
+            <filter name="required" position="after">
+                <separator />
+                <filter
+                    name="ai_no_read"
+                    string="AI Read Forbidden"
+                    domain="[('ai_no_read', '=', True)]"
+                />
+            </filter>
+        </field>
+    </record>
+</odoo>
diff --git a/setup/_metapackage/pyproject.toml b/setup/_metapackage/pyproject.toml
index 7036d51b..d00db7cc 100644
--- a/setup/_metapackage/pyproject.toml
+++ b/setup/_metapackage/pyproject.toml
@@ -2,7 +2,9 @@
 name = "odoo-addons-oca-ai"
 version = "19.0.20260901.0"
 dependencies = [
+    "odoo-addon-ai_oca_mcp==19.0.*",
     "odoo-addon-ai_tool==19.0.*",
+    "odoo-addon-ai_tool_read==19.0.*",
 ]
 classifiers=[
     "Programming Language :: Python",