diff --git a/client/packages/api-client/src/schema/schema.ts b/client/packages/api-client/src/schema/schema.ts
index c3867494199d..8d33de101ccd 100644
--- a/client/packages/api-client/src/schema/schema.ts
+++ b/client/packages/api-client/src/schema/schema.ts
@@ -19777,6 +19777,7 @@ export interface components {
                 | components["schemas"]["MessageNotificationContent"]
                 | components["schemas"]["NewSharedItemNotificationContent"]
                 | components["schemas"]["StorageOperationNotificationContent"]
+                | components["schemas"]["ToolInstallationRequestCreateContent"]
                 | components["schemas"]["BroadcastNotificationContent"];
             /**
              * Expiration time
@@ -19866,6 +19867,7 @@ export interface components {
                 | components["schemas"]["MessageNotificationContent"]
                 | components["schemas"]["NewSharedItemNotificationContent"]
                 | components["schemas"]["StorageOperationNotificationContent"]
+                | components["schemas"]["ToolInstallationRequestNotificationContent"]
                 | components["schemas"]["BroadcastNotificationContent"];
             /**
              * Create time
@@ -21065,7 +21067,7 @@ export interface components {
          *     displayed in the notification preferences.
          * @enum {string}
          */
-        PersonalNotificationCategory: "message" | "new_shared_item" | "storage_operation";
+        PersonalNotificationCategory: "message" | "new_shared_item" | "storage_operation" | "tool_installation_request";
         /** PluginAspectStatus */
         PluginAspectStatus: {
             /** Message */
@@ -21719,6 +21721,48 @@ export interface components {
             | "track_config"
             | "genome_data"
             | "in_use_state";
+        /**
+         * RequestedTool
+         * @description A single requested tool in a tool installation request.
+         *
+         *     This is the per-item model: each entry describes one tool. An installation
+         *     request submits an array of these, wrapped by
+         *     :class:`ToolInstallationRequestNotificationContent` which carries the
+         *     request-level metadata. All fields are sanitized on validation: control
+         *     characters are collapsed and whitespace-only values become ``None``.
+         */
+        RequestedTool: {
+            /**
+             * Description
+             * @description Short description of the tool and its scientific use case.
+             */
+            description?: string | null;
+            /**
+             * Tool name
+             * @description The human-readable name of the tool, if known.
+             */
+            name?: string | null;
+            /**
+             * Requested version
+             * @description The version of the tool being requested, if any.
+             */
+            requested_version?: string | null;
+            /**
+             * Scientific domain
+             * @description The scientific domain for the requested tool.
+             */
+            scientific_domain?: string | null;
+            /**
+             * Tool shed ID
+             * @description The fully qualified tool shed repository ID (e.g. ``toolshed.g2.bx.psu.edu/repos/devteam/bwa``), if known.
+             */
+            tool_shed_id?: string | null;
+            /**
+             * Tool URL
+             * @description Homepage or repository URL for the requested tool. Must be an http(s) URL.
+             */
+            tool_url?: string | null;
+        };
         /**
          * Requirement
          * @description Available types of job sources (model classes) that produce dataset collections.
@@ -24683,6 +24727,81 @@ export interface components {
              */
             values: string;
         };
+        /**
+         * ToolInstallationRequestCreateContent
+         * @description The client-submittable (request) shape of a tool installation request.
+         *
+         *     Carries only the fields a user supplies: the requested ``tools`` and
+         *     request-level metadata (workflow context, remarks). The two server-stamped
+         *     fields -- ``requester_email`` and ``is_confirmation`` -- are deliberately
+         *     absent so they cannot be set by clients and do not appear in the POST
+         *     request schema. The service stamps them, promoting the content to a
+         *     :class:`ToolInstallationRequestNotificationContent` for persistence.
+         */
+        ToolInstallationRequestCreateContent: {
+            /**
+             * Additional remarks
+             * @description Any additional information or context for the request.
+             */
+            additional_remarks?: string | null;
+            /**
+             * @description discriminator enum property added by openapi-typescript
+             * @enum {string}
+             */
+            category: "tool_installation_request";
+            /**
+             * Requested tools
+             * @description The tools being requested. Each entry describes a single tool.
+             */
+            tools: components["schemas"]["RequestedTool"][];
+            /**
+             * Workflow ID
+             * @description Encoded ID of the workflow requiring these tools, if applicable.
+             */
+            workflow_id?: string | null;
+        };
+        /**
+         * ToolInstallationRequestNotificationContent
+         * @description The persisted/response shape of a tool installation request.
+         *
+         *     Extends the create model with the two server-stamped fields. ``requester_email``
+         *     is derived from the authenticated submitter; ``is_confirmation`` selects the
+         *     confirmation vs. admin-facing email template. Both are written by the service
+         *     and never trusted from the client.
+         */
+        ToolInstallationRequestNotificationContent: {
+            /**
+             * Additional remarks
+             * @description Any additional information or context for the request.
+             */
+            additional_remarks?: string | null;
+            /**
+             * @description discriminator enum property added by openapi-typescript
+             * @enum {string}
+             */
+            category: "tool_installation_request";
+            /**
+             * Is confirmation
+             * @description True on the copy sent to the user who made the request; False on the request sent to admins.
+             * @default false
+             */
+            is_confirmation: boolean;
+            /**
+             * Requester email
+             * @description Email address of the user who made the request.
+             */
+            requester_email?: string | null;
+            /**
+             * Requested tools
+             * @description The tools being requested. Each entry describes a single tool.
+             */
+            tools: components["schemas"]["RequestedTool"][];
+            /**
+             * Workflow ID
+             * @description Encoded ID of the workflow requiring these tools, if applicable.
+             */
+            workflow_id?: string | null;
+        };
         /** ToolLandingRequest */
         ToolLandingRequest: {
             /** Origin */
@@ -25665,6 +25784,13 @@ export interface components {
          *             "push": true
          *           },
          *           "enabled": true
+         *         },
+         *         "tool_installation_request": {
+         *           "channels": {
+         *             "email": true,
+         *             "push": true
+         *           },
+         *           "enabled": true
          *         }
          *       }
          *     }
@@ -26081,6 +26207,13 @@ export interface components {
          *             "push": true
          *           },
          *           "enabled": true
+         *         },
+         *         "tool_installation_request": {
+         *           "channels": {
+         *             "email": true,
+         *             "push": true
+         *           },
+         *           "enabled": true
          *         }
          *       }
          *     }
@@ -26111,7 +26244,8 @@ export interface components {
             content:
                 | components["schemas"]["MessageNotificationContent"]
                 | components["schemas"]["NewSharedItemNotificationContent"]
-                | components["schemas"]["StorageOperationNotificationContent"];
+                | components["schemas"]["StorageOperationNotificationContent"]
+                | components["schemas"]["ToolInstallationRequestNotificationContent"];
             /**
              * Create time
              * Format: date-time
diff --git a/client/packages/ui/src/components/GModal.vue b/client/packages/ui/src/components/GModal.vue
index 6cb7a96bebca..933f58a5c0de 100644
--- a/client/packages/ui/src/components/GModal.vue
+++ b/client/packages/ui/src/components/GModal.vue
@@ -6,7 +6,7 @@
 import { FontAwesomeIcon } from "@fortawesome/vue-fontawesome";
 import { watchImmediate } from "@vueuse/core";
 import { faXmark } from "font-awesome-6";
-import { computed, onBeforeUnmount, onMounted, ref } from "vue";
+import { computed, nextTick, onBeforeUnmount, onMounted, ref } from "vue";
 
 import { useUid } from "../composables/uid";
 import { type ComponentColor, type ComponentSize, type ComponentSizeClassList, prefix } from "./componentVariants";
@@ -43,6 +43,8 @@ const props = withDefaults(
         okDisabled?: boolean;
         /** Title to show when the Ok button is disabled */
         okDisabledTitle?: string;
+        /** Disables all cancel/dismiss actions (Cancel button, backdrop click, Escape) */
+        cancelDisabled?: boolean;
         /** When false, keeps the modal open on "ok" */
         closeOnOk?: boolean;
         /** Allows content to overflow the modal body (e.g. for dropdowns/selectors inside the modal) */
@@ -62,6 +64,7 @@ const props = withDefaults(
         okColor: "blue",
         okDisabled: false,
         okDisabledTitle: undefined,
+        cancelDisabled: false,
         closeOnOk: true,
         overflowVisible: false,
     },
@@ -90,6 +93,7 @@ const dialog = ref<HTMLDialogElement | null>(null);
 onMounted(() => {
     if (dialog.value) {
         dialog.value.addEventListener("close", onClose);
+        dialog.value.addEventListener("cancel", onCancel);
     }
     if (props.show) {
         showModal();
@@ -99,11 +103,16 @@ onMounted(() => {
 onBeforeUnmount(() => {
     if (dialog.value) {
         dialog.value.removeEventListener("close", onClose);
+        dialog.value.removeEventListener("cancel", onCancel);
     }
 });
 
 function showModal() {
-    dialog.value?.showModal();
+    if (!dialog.value || dialog.value.open) {
+        return;
+    }
+
+    dialog.value.showModal();
     onOpen();
 }
 
@@ -114,22 +123,30 @@ function hideModal(ok = false) {
         emit("ok");
     } else {
         isOk = ok;
-        dialog.value?.close();
+        if (dialog.value?.open) {
+            dialog.value.close();
+        }
     }
 }
 
 watchImmediate(
     () => props.show,
-    () => {
-        if (props.show) {
+    async (show) => {
+        await nextTick();
+
+        if (show) {
             showModal();
         } else {
             hideModal();
         }
     },
+    { flush: "post" },
 );
 
 function onClickDialog(event: MouseEvent) {
+    if (props.cancelDisabled) {
+        return;
+    }
     if ((event.target as HTMLElement | null)?.tagName === "DIALOG") {
         const rect = dialog.value?.getBoundingClientRect();
         const insideDialogX = rect && event.clientX >= rect.left && event.clientX <= rect.right;
@@ -142,6 +159,14 @@ function onClickDialog(event: MouseEvent) {
     }
 }
 
+function onCancel(event: Event) {
+    // The native <dialog> fires "cancel" on Escape; prevent dismissal while
+    // cancel actions are disabled (e.g. during an in-flight submit).
+    if (props.cancelDisabled) {
+        event.preventDefault();
+    }
+}
+
 function onOpen() {
     emit("update:show", true);
     emit("open");
@@ -191,7 +216,13 @@ defineExpose({ showModal, hideModal });
 
                 <slot name="header"></slot>
 
-                <GButton icon-only class="g-modal-close-button" transparent size="large" @click="hideModal(false)">
+                <GButton
+                    icon-only
+                    class="g-modal-close-button"
+                    transparent
+                    size="large"
+                    :disabled="cancelDisabled"
+                    @click="hideModal(false)">
                     <FontAwesomeIcon fixed-width :icon="faXmark" />
                 </GButton>
             </header>
@@ -206,7 +237,9 @@ defineExpose({ showModal, hideModal });
                 </div>
 
                 <div v-if="props.confirm" class="g-modal-confirm-buttons">
-                    <GButton @click="hideModal(false)"> {{ props.cancelText ?? "Cancel" }} </GButton>
+                    <GButton :disabled="cancelDisabled" @click="hideModal(false)">
+                        {{ props.cancelText ?? "Cancel" }}
+                    </GButton>
                     <GButton
                         :disabled="okDisabled"
                         :disabled-title="okDisabledTitle"
diff --git a/client/src/api/notifications.ts b/client/src/api/notifications.ts
index 243e6a6841d1..d21ee52eb0e7 100644
--- a/client/src/api/notifications.ts
+++ b/client/src/api/notifications.ts
@@ -1,4 +1,6 @@
+import { GalaxyApi } from "@/api";
 import type { components } from "@/api/schema";
+import { rethrowSimple } from "@/utils/simple-error";
 
 export type BaseUserNotification = components["schemas"]["UserNotificationResponse"];
 export type UserNotificationPreferences = components["schemas"]["UserNotificationPreferences"]["preferences"];
@@ -33,7 +35,33 @@ export interface MessageNotificationCreateRequest extends NotificationCreateRequ
     notification: MessageNotificationCreateData;
 }
 
-export type UserNotification = MessageNotification | SharedItemNotification | StorageOperationNotification;
+export type ToolInstallationRequestNotificationContent =
+    components["schemas"]["ToolInstallationRequestNotificationContent"];
+
+export type ToolInstallationRequestCreateContent = components["schemas"]["ToolInstallationRequestCreateContent"];
+
+export type RequestedTool = components["schemas"]["RequestedTool"];
+
+export interface ToolInstallationRequestNotification extends BaseUserNotification {
+    category: "tool_installation_request";
+    content: ToolInstallationRequestNotificationContent;
+}
+
+/**
+ * Caller-supplied fields for a tool installation request.
+ *
+ * Derived from the create-only content model, which already omits the
+ * server-stamped `category`/`requester_email`/`is_confirmation` fields.
+ * `submitToolInstallationRequest` adds the `category` discriminator (required
+ * by the OpenAPI union) when building the request payload.
+ */
+export type ToolInstallationRequestInput = Omit<ToolInstallationRequestCreateContent, "category">;
+
+export type UserNotification =
+    | MessageNotification
+    | SharedItemNotification
+    | StorageOperationNotification
+    | ToolInstallationRequestNotification;
 
 export type NotificationChanges = components["schemas"]["UserNotificationUpdateRequest"];
 
@@ -43,3 +71,24 @@ export type NotificationVariants = components["schemas"]["NotificationVariant"];
 
 export type NewSharedItemNotificationContentItemType =
     components["schemas"]["NewSharedItemNotificationContent"]["item_type"];
+
+/** Submit a tool installation request as the authenticated user. */
+export async function submitToolInstallationRequest(content: ToolInstallationRequestInput) {
+    const { error } = await GalaxyApi().POST("/api/notifications", {
+        body: {
+            recipients: { user_ids: [], group_ids: [], role_ids: [] },
+            notification: {
+                source: "tool_installation_request_form",
+                category: "tool_installation_request",
+                variant: "info",
+                content: {
+                    ...content,
+                    category: "tool_installation_request",
+                },
+            },
+        },
+    });
+    if (error) {
+        rethrowSimple(error);
+    }
+}
diff --git a/client/src/components/Notifications/NotificationCard.test.ts b/client/src/components/Notifications/NotificationCard.test.ts
index ee1c850df7a4..bbcaf645035e 100644
--- a/client/src/components/Notifications/NotificationCard.test.ts
+++ b/client/src/components/Notifications/NotificationCard.test.ts
@@ -6,7 +6,11 @@ import { setActivePinia } from "pinia";
 import { describe, expect, it, vi } from "vitest";
 import { nextTick } from "vue";
 
-import { generateMessageNotification, generateNewSharedItemNotification } from "@/components/Notifications/test-utils";
+import {
+    generateMessageNotification,
+    generateNewSharedItemNotification,
+    generateToolInstallationRequestNotification,
+} from "@/components/Notifications/test-utils";
 import { useNotificationsStore } from "@/stores/notificationsStore";
 
 import NotificationCard from "@/components/Notifications/NotificationCard.vue";
@@ -137,4 +141,96 @@ describe("Notifications categories", () => {
 
         expect(spyOnUpdateNotification).toHaveBeenCalledTimes(1);
     });
+
+    it("tool_installation_request notification shows tool name in title and details in description", async () => {
+        const notification = generateToolInstallationRequestNotification();
+
+        const wrapper = await mountComponent(NotificationCard, {
+            notification,
+        });
+
+        // Title should include the first tool's label
+        const firstTool = notification.content.tools[0]!;
+        expect(wrapper.text()).toContain(firstTool.name);
+
+        // Description area should show tool installation request details
+        const descriptionArea = wrapper.find(`#g-card-description-${notification.id}`);
+        expect(descriptionArea.text()).toContain(firstTool.description);
+        expect(descriptionArea.text()).toContain(firstTool.scientific_domain);
+        expect(descriptionArea.text()).toContain(firstTool.requested_version);
+        expect(descriptionArea.text()).toContain(notification.content.requester_email);
+    });
+
+    it("tool_installation_request notification shows the tool shed id alongside the tool name", async () => {
+        const notification = generateToolInstallationRequestNotification();
+        notification.content.tools = [
+            {
+                name: "bwa",
+                tool_shed_id: "toolshed.g2.bx.psu.edu/repos/devteam/bwa",
+                tool_url: null,
+                description: null,
+                scientific_domain: null,
+                requested_version: "0.7.17",
+            },
+        ];
+
+        const wrapper = await mountComponent(NotificationCard, {
+            notification,
+        });
+
+        const descriptionArea = wrapper.find(`#g-card-description-${notification.id}`);
+        expect(descriptionArea.text()).toContain("Tool shed ID");
+        expect(descriptionArea.text()).toContain("toolshed.g2.bx.psu.edu/repos/devteam/bwa");
+    });
+
+    it("tool_installation_request notification associates details with each tool in multi-tool requests", async () => {
+        const notification = generateToolInstallationRequestNotification();
+        notification.content.tools = [
+            {
+                name: "bwa",
+                tool_shed_id: null,
+                tool_url: null,
+                description: "Aligner for short reads",
+                scientific_domain: null,
+                requested_version: null,
+            },
+            {
+                name: "samtools",
+                tool_shed_id: null,
+                tool_url: null,
+                description: "SAM/BAM utilities",
+                scientific_domain: null,
+                requested_version: "1.13",
+            },
+        ];
+
+        const wrapper = await mountComponent(NotificationCard, {
+            notification,
+        });
+
+        expect(wrapper.text()).toContain("Tool Installation Request: 2 tools");
+
+        // Each tool's list item must contain its own details and not the other tool's.
+        const toolItems = wrapper.findAll("ul:not(.list-unstyled) > li");
+        expect(toolItems).toHaveLength(2);
+        expect(toolItems.at(0).text()).toContain("bwa");
+        expect(toolItems.at(0).text()).toContain("Aligner for short reads");
+        expect(toolItems.at(0).text()).not.toContain("SAM/BAM utilities");
+        expect(toolItems.at(1).text()).toContain("samtools");
+        expect(toolItems.at(1).text()).toContain("SAM/BAM utilities");
+        expect(toolItems.at(1).text()).toContain("1.13");
+        expect(toolItems.at(1).text()).not.toContain("Aligner for short reads");
+    });
+
+    it("tool_installation_request notification links workflow id and exposes anchor for deep-linking", async () => {
+        const notification = generateToolInstallationRequestNotification();
+        notification.content.workflow_id = "encoded-workflow-id-abc";
+
+        const wrapper = await mountComponent(NotificationCard, {
+            notification,
+        });
+
+        expect(wrapper.html()).toContain(`/workflows/run?id=${notification.content.workflow_id}`);
+        expect(wrapper.find(`#notification-card-${notification.id}`).exists()).toBe(true);
+    });
 });
diff --git a/client/src/components/Notifications/NotificationCard.vue b/client/src/components/Notifications/NotificationCard.vue
index 9dc710004923..b4ed5105771a 100644
--- a/client/src/components/Notifications/NotificationCard.vue
+++ b/client/src/components/Notifications/NotificationCard.vue
@@ -1,4 +1,5 @@
 <script setup lang="ts">
+import type { IconDefinition } from "@fortawesome/free-solid-svg-icons";
 import {
     faCheck,
     faClock,
@@ -7,6 +8,7 @@ import {
     faInbox,
     faRetweet,
     faTrash,
+    faWrench,
 } from "@fortawesome/free-solid-svg-icons";
 import { FontAwesomeIcon } from "@fortawesome/vue-fontawesome";
 import { BLink } from "bootstrap-vue";
@@ -14,8 +16,8 @@ import { formatDistanceToNow, parseISO } from "date-fns";
 import { computed } from "vue";
 import { useRouter } from "vue-router/composables";
 
-import type { UserNotification } from "@/api/notifications";
-import type { CardAction } from "@/components/Common/GCard.types";
+import type { RequestedTool, UserNotification } from "@/api/notifications";
+import type { CardAction, TitleIcon } from "@/components/Common/GCard.types";
 import { useMarkdown } from "@/composables/markdown";
 import { useNotificationsStore } from "@/stores/notificationsStore";
 import { absPath } from "@/utils/redirect";
@@ -37,6 +39,44 @@ const router = useRouter();
 
 const { renderMarkdown } = useMarkdown({ openLinksInNewPage: false });
 
+/** Display label for a requested tool: name, else shed id, else URL, else a placeholder. */
+function toolLabel(tool: RequestedTool | undefined): string {
+    return tool?.name || tool?.tool_shed_id || tool?.tool_url || "(unspecified)";
+}
+
+interface ToolDetailRow {
+    label: string;
+    value: string;
+    /** Break long unbroken values (ids, URLs). */
+    breakText?: boolean;
+    /** Preserve the line structure of multiline values. */
+    multiline?: boolean;
+}
+
+/** The detail rows shown for a requested tool; values already used as the tool's label are skipped. */
+function toolDetailRows(tool: RequestedTool | undefined): ToolDetailRow[] {
+    if (!tool) {
+        return [];
+    }
+    const rows: ToolDetailRow[] = [];
+    if (tool.tool_shed_id && tool.name) {
+        rows.push({ label: "Tool shed ID", value: tool.tool_shed_id, breakText: true });
+    }
+    if (tool.tool_url && (tool.name || tool.tool_shed_id)) {
+        rows.push({ label: "URL", value: tool.tool_url, breakText: true });
+    }
+    if (tool.description) {
+        rows.push({ label: "Description", value: tool.description, multiline: true });
+    }
+    if (tool.scientific_domain) {
+        rows.push({ label: "Scientific domain", value: tool.scientific_domain });
+    }
+    if (tool.requested_version) {
+        rows.push({ label: "Version", value: tool.requested_version });
+    }
+    return rows;
+}
+
 function handleMessageClick(event: MouseEvent) {
     const target = event.target as HTMLElement;
     const anchor = target.closest("a");
@@ -63,23 +103,37 @@ const title = computed(() => {
         return `${sharedItemType.value} shared with you by ${props.notification.content.owner_name}`;
     } else if (props.notification.category === "storage_operation") {
         return props.notification.content.subject;
+    } else if (props.notification.category === "tool_installation_request") {
+        const tools = props.notification.content.tools;
+        return tools.length === 1 && tools[0]
+            ? `Tool Installation Request: ${toolLabel(tools[0])}`
+            : `Tool Installation Request: ${tools.length} tools`;
     } else {
         return props.notification.content.subject;
     }
 });
 
-const titleIcon = computed(() => {
+const titleIcon = computed<TitleIcon>(() => {
+    const iconMap: Record<string, IconDefinition> = {
+        new_shared_item: faRetweet,
+        storage_operation: faHourglassHalf,
+        tool_installation_request: faWrench,
+    };
     return {
-        icon:
-            props.notification.category === "new_shared_item"
-                ? faRetweet
-                : props.notification.category === "storage_operation"
-                  ? faHourglassHalf
-                  : faInbox,
+        icon: iconMap[props.notification.category] ?? faInbox,
         class: `text-${notificationVariant.value}`,
     };
 });
 
+/** The single requested tool, when a tool installation request contains exactly one. */
+const singleRequestedTool = computed(() =>
+    props.notification.category === "tool_installation_request" && props.notification.content.tools.length === 1
+        ? props.notification.content.tools[0]
+        : undefined,
+);
+
+const singleToolDetailRows = computed(() => toolDetailRows(singleRequestedTool.value));
+
 const sharedItemType = computed(() => {
     if (props.notification.category === "new_shared_item" && props.notification.content?.item_type) {
         return capitalizeFirstLetter(props.notification.content.item_type);
@@ -152,70 +206,137 @@ function markNotificationAsSeen() {
 </script>
 
 <template>
-    <GCard
-        v-if="props.notification"
-        :id="props.notification.id"
-        :title="title"
-        :primary-actions="primaryActions"
-        :title-size="'sm'"
-        :title-icon="titleIcon"
-        :selected="props.selected"
-        :selectable="props.selectable"
-        :update-time="props.notification.publication_time ?? props.notification.create_time"
-        :update-time-icon="faClock"
-        :update-time-title="`Sent ${props.notification.publication_time ? 'on' : 'at'}`"
-        :content-class="[props.unreadBorder && !props.notification.seen_time ? 'border-dark unread-notification' : '']"
-        @select="emit('select', [props.notification])">
-        <template v-slot:description>
-            <template v-if="props.notification.category === 'new_shared_item'">
-                <span>The user</span>{{ " " }}<b>{{ props.notification.content.owner_name }}</b
-                >{{ " " }}<span>shared </span>
-                <BLink
-                    v-g-tooltip.bottom
-                    :title="`View ${props.notification.content.item_type} in new tab`"
-                    class="text-primary"
-                    :href="absPath(props.notification.content.slug)"
-                    target="_blank"
-                    @click="markNotificationAsSeen()">
-                    {{ props.notification.content.item_name }}
-                    <FontAwesomeIcon :icon="faExternalLinkAlt" fixed-width size="sm" />
-                </BLink>
-                <em>{{ props.notification.content.item_type }}</em
-                >{{ " " }}<span> with you.</span>
+    <div v-if="props.notification" :id="`notification-card-${props.notification.id}`">
+        <GCard
+            :id="props.notification.id"
+            :title="title"
+            :primary-actions="primaryActions"
+            :title-size="'sm'"
+            :title-icon="titleIcon"
+            :selected="props.selected"
+            :selectable="props.selectable"
+            :update-time="props.notification.publication_time ?? props.notification.create_time"
+            :update-time-icon="faClock"
+            :update-time-title="`Sent ${props.notification.publication_time ? 'on' : 'at'}`"
+            :content-class="[
+                props.unreadBorder && !props.notification.seen_time ? 'border-dark unread-notification' : '',
+            ]"
+            @select="emit('select', [props.notification])">
+            <template v-slot:description>
+                <template v-if="props.notification.category === 'new_shared_item'">
+                    <span>The user</span>{{ " " }}<b>{{ props.notification.content.owner_name }}</b
+                    >{{ " " }}<span>shared </span>
+                    <BLink
+                        v-g-tooltip.bottom
+                        :title="`View ${props.notification.content.item_type} in new tab`"
+                        class="text-primary"
+                        :href="absPath(props.notification.content.slug)"
+                        target="_blank"
+                        @click="markNotificationAsSeen()">
+                        {{ props.notification.content.item_name }}
+                        <FontAwesomeIcon :icon="faExternalLinkAlt" fixed-width size="sm" />
+                    </BLink>
+                    <em>{{ props.notification.content.item_type }}</em
+                    >{{ " " }}<span> with you.</span>
+                </template>
+                <template v-else-if="props.notification.category === 'tool_installation_request'">
+                    <dl class="mb-0">
+                        <template v-if="props.notification.content.tools.length > 1">
+                            <dt>Tools</dt>
+                            <dd>
+                                <ul class="mb-0 pl-3">
+                                    <li v-for="(tool, index) in props.notification.content.tools" :key="index">
+                                        {{ toolLabel(tool) }}
+                                        <!-- Per-tool details nested under the tool so it is clear
+                                             which tool each detail belongs to. -->
+                                        <ul v-if="toolDetailRows(tool).length" class="mb-0 pl-3 list-unstyled">
+                                            <li v-for="row in toolDetailRows(tool)" :key="row.label">
+                                                <strong>{{ row.label }}:</strong>
+                                                <span
+                                                    :class="{
+                                                        'text-break': row.breakText,
+                                                        'preserve-lines': row.multiline,
+                                                    }"
+                                                    >{{ row.value }}</span
+                                                >
+                                            </li>
+                                        </ul>
+                                    </li>
+                                </ul>
+                            </dd>
+                        </template>
+                        <template v-else>
+                            <dt>Tool</dt>
+                            <dd>{{ toolLabel(singleRequestedTool) }}</dd>
+                        </template>
+                        <template v-for="row in singleToolDetailRows">
+                            <dt :key="`detail-dt-${row.label}`">{{ row.label }}</dt>
+                            <dd :key="`detail-dd-${row.label}`">
+                                <span
+                                    :class="{
+                                        'text-break': row.breakText,
+                                        'preserve-lines': row.multiline,
+                                    }"
+                                    >{{ row.value }}</span
+                                >
+                            </dd>
+                        </template>
+                        <template v-if="props.notification.content.workflow_id">
+                            <dt>Workflow</dt>
+                            <dd>
+                                <RouterLink :to="`/workflows/run?id=${props.notification.content.workflow_id}`">
+                                    {{ props.notification.content.workflow_id }}
+                                </RouterLink>
+                            </dd>
+                        </template>
+                        <template v-if="props.notification.content.additional_remarks">
+                            <dt>Additional remarks</dt>
+                            <dd class="preserve-lines">{{ props.notification.content.additional_remarks }}</dd>
+                        </template>
+                        <template v-if="props.notification.content.requester_email">
+                            <dt>Requested by</dt>
+                            <dd>
+                                <BLink :href="`mailto:${props.notification.content.requester_email}`">
+                                    {{ props.notification.content.requester_email }}
+                                </BLink>
+                            </dd>
+                        </template>
+                    </dl>
+                </template>
+                <template v-else-if="props.notification.category === 'storage_operation'">
+                    <p>
+                        {{ props.notification.content.message }}
+                    </p>
+                    <p class="mb-1">
+                        <strong>Mode:</strong> {{ props.notification.content.mode }}
+                        <span class="mx-2">|</span>
+                        <strong>State:</strong> {{ props.notification.content.state }}
+                    </p>
+                    <p class="mb-1">
+                        <strong>Total:</strong> {{ props.notification.content.total_count }}
+                        <span class="mx-2">|</span>
+                        <strong>Succeeded:</strong> {{ props.notification.content.succeeded_count }}
+                        <span class="mx-2">|</span>
+                        <strong>Failed:</strong> {{ props.notification.content.failed_count }}
+                        <span class="mx-2">|</span>
+                        <strong>Skipped:</strong> {{ props.notification.content.skipped_count }}
+                    </p>
+                    <BLink
+                        class="text-primary"
+                        :href="props.notification.content.run_url"
+                        @click="markNotificationAsSeen()">
+                        Open storage operation run status
+                    </BLink>
+                </template>
+                <template v-else>
+                    <span
+                        class="notification-message"
+                        @click="handleMessageClick"
+                        v-html="renderMarkdown(props.notification.content.message)"></span>
+                </template>
             </template>
-            <template v-else-if="props.notification.category === 'storage_operation'">
-                <p>
-                    {{ props.notification.content.message }}
-                </p>
-                <p class="mb-1">
-                    <strong>Mode:</strong> {{ props.notification.content.mode }}
-                    <span class="mx-2">|</span>
-                    <strong>State:</strong> {{ props.notification.content.state }}
-                </p>
-                <p class="mb-1">
-                    <strong>Total:</strong> {{ props.notification.content.total_count }}
-                    <span class="mx-2">|</span>
-                    <strong>Succeeded:</strong> {{ props.notification.content.succeeded_count }}
-                    <span class="mx-2">|</span>
-                    <strong>Failed:</strong> {{ props.notification.content.failed_count }}
-                    <span class="mx-2">|</span>
-                    <strong>Skipped:</strong> {{ props.notification.content.skipped_count }}
-                </p>
-                <BLink
-                    class="text-primary"
-                    :href="props.notification.content.run_url"
-                    @click="markNotificationAsSeen()">
-                    Open storage operation run status
-                </BLink>
-            </template>
-            <template v-else>
-                <span
-                    class="notification-message"
-                    @click="handleMessageClick"
-                    v-html="renderMarkdown(props.notification.content.message)" />
-            </template>
-        </template>
-    </GCard>
+        </GCard>
+    </div>
 </template>
 
 <style lang="scss">
@@ -224,4 +345,8 @@ function markNotificationAsSeen() {
         margin: 0;
     }
 }
+
+.preserve-lines {
+    white-space: pre-line;
+}
 </style>
diff --git a/client/src/components/Notifications/test-utils.ts b/client/src/components/Notifications/test-utils.ts
index c9ff19f586dd..a1c53ea99eff 100644
--- a/client/src/components/Notifications/test-utils.ts
+++ b/client/src/components/Notifications/test-utils.ts
@@ -3,6 +3,7 @@ import type {
     NewSharedItemNotificationContentItemType,
     NotificationVariants,
     SharedItemNotification,
+    ToolInstallationRequestNotification,
     UserNotification,
 } from "@/api/notifications";
 
@@ -64,6 +65,38 @@ export function generateNewSharedItemNotification(): SharedItemNotification {
     };
 }
 
+export function generateToolInstallationRequestNotification(): ToolInstallationRequestNotification {
+    return {
+        id: "notification-" + Math.floor(Math.random() * 1000000),
+        source: "tool_installation_request_form",
+        category: "tool_installation_request",
+        variant: generateRandomVariant(),
+        create_time: new Date(Date.now() + 1).toISOString(),
+        update_time: new Date(Date.now() + 2).toISOString(),
+        publication_time: new Date(Date.now() + 3).toISOString(),
+        expiration_time: new Date(Date.now() + 86400000).toISOString(),
+        content: {
+            category: "tool_installation_request",
+            tools: [
+                {
+                    name: generateRandomString(),
+                    tool_shed_id: null,
+                    tool_url: "https://github.com/example/tool",
+                    description: "A useful scientific analysis tool",
+                    scientific_domain: "Genomics",
+                    requested_version: "1.0.0",
+                },
+            ],
+            workflow_id: null,
+            additional_remarks: null,
+            requester_email: "requester@example.com",
+            is_confirmation: false,
+        },
+        seen_time: Math.random() > 0.5 ? new Date().toISOString() + 3 : undefined,
+        deleted: false,
+    };
+}
+
 export function generateNotificationsList(n: number) {
     if (n <= 2) {
         throw new Error("Invalid input. Number must be greater than 2.");
diff --git a/client/src/components/Panels/ToolBox.vue b/client/src/components/Panels/ToolBox.vue
index 58037b1ac58a..ea375a450e7c 100644
--- a/client/src/components/Panels/ToolBox.vue
+++ b/client/src/components/Panels/ToolBox.vue
@@ -1,15 +1,18 @@
 <script setup lang="ts">
 import { faEye, faEyeSlash } from "@fortawesome/free-regular-svg-icons";
+import { faWrench } from "@fortawesome/free-solid-svg-icons";
 import { FontAwesomeIcon } from "@fortawesome/vue-fontawesome";
 import { BBadge } from "bootstrap-vue";
 import { storeToRefs } from "pinia";
 import { computed, ref, watch } from "vue";
 
+import { useConfig } from "@/composables/config";
 import { useToolRouting } from "@/composables/route";
 import { useFavoriteSearchResults, useToolPanelFavorites } from "@/composables/toolPanelFavorites";
 import { useUploadMethodModal } from "@/composables/upload/useUploadMethodModal";
 import type { Tool, ToolPanelItem, ToolSection as ToolSectionType, ToolSectionLabel } from "@/stores/toolStore";
 import { useToolStore } from "@/stores/toolStore";
+import { useUserStore } from "@/stores/userStore";
 import localize from "@/utils/localization";
 
 import { MY_PANEL_VIEW_ID, PANEL_LABEL_IDS } from "./panelViews";
@@ -29,6 +32,7 @@ import {
 } from "./utilities";
 
 import GButton from "../BaseComponents/GButton.vue";
+import ToolInstallationRequestForm from "../Tool/ToolInstallationRequestForm.vue";
 import ToolSearch from "./Common/ToolSearch.vue";
 import ToolSection from "./Common/ToolSection.vue";
 import MyToolsLanding from "./MyToolsLanding.vue";
@@ -36,9 +40,20 @@ import MyToolsLanding from "./MyToolsLanding.vue";
 /** Section IDs that are only valid for the workflow editor toolbox, and should be excluded from the regular toolbox. */
 const WORKFLOW_ONLY_SECTION_IDS = ["expression_tools"];
 
+const { config, isConfigLoaded } = useConfig();
+const { isAnonymous } = storeToRefs(useUserStore());
 const { openUploadModal } = useUploadMethodModal();
 const { routeToTool } = useToolRouting();
 
+const showToolInstallationRequestForm = ref(false);
+const showRequestToolButton = computed(
+    () =>
+        !props.workflow &&
+        isConfigLoaded.value &&
+        config.value?.enable_tool_installation_request_form &&
+        !isAnonymous.value,
+);
+
 const emit = defineEmits<{
     (e: "update:show-favorites", value: boolean): void;
     (e: "onInsertTool", toolId: string, toolName: string): void;
@@ -376,6 +391,10 @@ function onToggle() {
     showSections.value = !showSections.value;
 }
 
+function openToolInstallationRequestForm() {
+    showToolInstallationRequestForm.value = true;
+}
+
 /**
  * The favorites-results header (split section in mixed search results) honours
  * the same collapsed state as the My Tools landing's Favorites label, so the
@@ -425,6 +444,16 @@ function onLabelToggle(labelId: string) {
                 </div>
                 <div v-else-if="queryFinished && !hasResults" class="pb-2">
                     <BBadge class="alert-warning w-100">No results found</BBadge>
+                    <div v-if="showRequestToolButton" class="mt-2">
+                        <GButton
+                            size="small"
+                            class="w-100"
+                            data-description="request tool installation button"
+                            @click="openToolInstallationRequestForm">
+                            <FontAwesomeIcon :icon="faWrench" class="mr-1" />
+                            {{ localize("Request Tool Installation") }}
+                        </GButton>
+                    </div>
                 </div>
                 <div v-if="closestTerm" class="pb-2">
                     <BBadge class="alert-danger w-100">
@@ -437,6 +466,11 @@ function onLabelToggle(labelId: string) {
                 </div>
             </section>
         </div>
+
+        <ToolInstallationRequestForm
+            v-if="showToolInstallationRequestForm"
+            :show.sync="showToolInstallationRequestForm" />
+
         <div class="unified-panel-body">
             <div class="toolMenuContainer">
                 <MyToolsLanding
diff --git a/client/src/components/Panels/ToolBoxSearch.test.ts b/client/src/components/Panels/ToolBoxSearch.test.ts
index e8193b72ec2f..3b7c952cc943 100644
--- a/client/src/components/Panels/ToolBoxSearch.test.ts
+++ b/client/src/components/Panels/ToolBoxSearch.test.ts
@@ -1,3 +1,5 @@
+import "@/composables/__mocks__/filter";
+
 import { getLocalVue, injectTestRouter } from "@tests/vitest/helpers";
 import { mount } from "@vue/test-utils";
 import flushPromises from "flush-promises";
@@ -6,10 +8,11 @@ import { afterEach, beforeEach, describe, expect, it, vi } from "vitest";
 
 import toolsListUntyped from "@/components/ToolsView/testData/toolsList.json";
 import toolsListInPanelUntyped from "@/components/ToolsView/testData/toolsListInPanel.json";
-import { setMockConfig } from "@/composables/__mocks__/config";
+import { resetMockConfig, setMockConfig } from "@/composables/__mocks__/config";
 import { type Tool, type ToolSection, useToolStore } from "@/stores/toolStore";
 import { useUserStore } from "@/stores/userStore";
 
+import ToolInstallationRequestForm from "../Tool/ToolInstallationRequestForm.vue";
 import ToolBox from "./ToolBox.vue";
 
 vi.mock("@/composables/config");
@@ -493,3 +496,147 @@ describe("ToolBox search", () => {
     // panel startup" (the negative case). An additional spy-only test here
     // would duplicate the gate check without exercising user-visible behavior.
 });
+
+/** Helper to mount a default (non-favorites) ToolBox with pre-loaded tool data.
+ * Pass `anonymous=true` to simulate an unauthenticated (anonymous) user.
+ * An anonymous user is any non-null object without an `email` property.
+ */
+async function mountDefaultToolBox(pinia: ReturnType<typeof createPinia>, anonymous = false) {
+    setActivePinia(pinia);
+
+    const toolStore = useToolStore();
+    toolStore.toolsById = toToolsById(toolsList);
+    toolStore.toolSections = { default: toolsListInPanel };
+    toolStore.defaultPanelView = "default";
+    toolStore.currentPanelView = "default";
+
+    const userStore = useUserStore();
+    // isAnonymous is a computed value driven by currentUser.
+    // null → isAnonymous=false (registered/logged-in); object without email → isAnonymous=true
+    userStore.currentUser = anonymous ? ({ id: "anon" } as any) : null;
+    userStore.currentPreferences = { favorites: { tools: [] } };
+
+    const wrapper = mount(ToolBox as object, {
+        pinia,
+        localVue,
+        router,
+        propsData: { useSearchWorker: false },
+    });
+    await flushPromises();
+    return wrapper;
+}
+
+describe("ToolBox — Request Tool Installation button", () => {
+    beforeEach(() => {
+        vi.useFakeTimers();
+        setMockConfig({ toolbox_auto_sort: true, enable_tool_installation_request_form: true });
+    });
+
+    afterEach(() => {
+        vi.useRealTimers();
+        resetMockConfig();
+        setMockConfig({ toolbox_auto_sort: true });
+    });
+
+    it("is hidden when search returns results", async () => {
+        const pinia = createPinia();
+        const wrapper = await mountDefaultToolBox(pinia);
+
+        const input = wrapper.find("input.search-query");
+        await input.setValue("Filter");
+        vi.advanceTimersByTime(250);
+        await flushPromises();
+
+        expect(wrapper.find('[data-description="request tool installation button"]').exists()).toBe(false);
+    });
+
+    it("is visible when search returns no results", async () => {
+        const pinia = createPinia();
+        const wrapper = await mountDefaultToolBox(pinia);
+
+        const input = wrapper.find("input.search-query");
+        await input.setValue("xyznonexistenttool123");
+        vi.advanceTimersByTime(250);
+        await flushPromises();
+
+        expect(wrapper.find(".alert-warning").exists()).toBe(true);
+        expect(wrapper.find('[data-description="request tool installation button"]').exists()).toBe(true);
+    });
+
+    it("is hidden when enable_tool_installation_request_form config is false", async () => {
+        setMockConfig({ toolbox_auto_sort: true, enable_tool_installation_request_form: false });
+        const pinia = createPinia();
+        const wrapper = await mountDefaultToolBox(pinia);
+
+        const input = wrapper.find("input.search-query");
+        await input.setValue("xyznonexistenttool123");
+        vi.advanceTimersByTime(250);
+        await flushPromises();
+
+        expect(wrapper.find(".alert-warning").exists()).toBe(true);
+        expect(wrapper.find('[data-description="request tool installation button"]').exists()).toBe(false);
+    });
+
+    it("is hidden for anonymous users even when search returns no results", async () => {
+        const pinia = createPinia();
+        const wrapper = await mountDefaultToolBox(pinia, /* anonymous= */ true);
+
+        const input = wrapper.find("input.search-query");
+        await input.setValue("xyznonexistenttool123");
+        vi.advanceTimersByTime(250);
+        await flushPromises();
+
+        expect(wrapper.find(".alert-warning").exists()).toBe(true);
+        expect(wrapper.find('[data-description="request tool installation button"]').exists()).toBe(false);
+    });
+
+    it("is hidden in workflow mode even when search returns no results", async () => {
+        const pinia = createPinia();
+        setActivePinia(pinia);
+
+        const toolStore = useToolStore();
+        toolStore.toolsById = toToolsById(toolsList);
+        toolStore.toolSections = { default: toolsListInPanel };
+        toolStore.defaultPanelView = "default";
+        toolStore.currentPanelView = "default";
+
+        const userStore = useUserStore();
+        userStore.currentUser = null;
+        userStore.currentPreferences = { favorites: { tools: [] } };
+
+        const wrapper = mount(ToolBox as object, {
+            pinia,
+            localVue,
+            router,
+            propsData: { workflow: true, useSearchWorker: false },
+        });
+        await flushPromises();
+
+        const input = wrapper.find("input.search-query");
+        await input.setValue("xyznonexistenttool123");
+        vi.advanceTimersByTime(250);
+        await flushPromises();
+
+        expect(wrapper.find(".alert-warning").exists()).toBe(true);
+        expect(wrapper.find('[data-description="request tool installation button"]').exists()).toBe(false);
+    });
+
+    it("opens the tool installation request form modal when clicked", async () => {
+        const pinia = createPinia();
+        const wrapper = await mountDefaultToolBox(pinia);
+
+        const input = wrapper.find("input.search-query");
+        await input.setValue("xyznonexistenttool123");
+        vi.advanceTimersByTime(250);
+        await flushPromises();
+
+        const button = wrapper.find('[data-description="request tool installation button"]');
+        expect(button.exists()).toBe(true);
+
+        await button.trigger("click");
+        await flushPromises();
+
+        const requestForm = wrapper.findComponent(ToolInstallationRequestForm);
+        expect(requestForm.props("show")).toBe(true);
+    });
+});
diff --git a/client/src/components/Tool/ToolInstallationRequestForm.test.ts b/client/src/components/Tool/ToolInstallationRequestForm.test.ts
new file mode 100644
index 000000000000..3df3b8522eac
--- /dev/null
+++ b/client/src/components/Tool/ToolInstallationRequestForm.test.ts
@@ -0,0 +1,172 @@
+import "@/composables/__mocks__/filter";
+
+import { createTestingPinia } from "@pinia/testing";
+import { getLocalVue, suppressExpectedErrorMessages } from "@tests/vitest/helpers";
+import { mount, type Wrapper } from "@vue/test-utils";
+import flushPromises from "flush-promises";
+import { beforeEach, describe, expect, it, vi } from "vitest";
+
+import ToolInstallationRequestForm from "./ToolInstallationRequestForm.vue";
+import GModal from "@/components/BaseComponents/GModal.vue";
+
+const { mockSubmitToolInstallationRequest } = vi.hoisted(() => ({
+    mockSubmitToolInstallationRequest: vi.fn(),
+}));
+
+vi.mock("@/api/notifications", () => ({
+    submitToolInstallationRequest: mockSubmitToolInstallationRequest,
+}));
+
+const localVue = getLocalVue(true);
+
+async function mountForm(show = true): Promise<Wrapper<Vue>> {
+    suppressExpectedErrorMessages(["Invalid prop: type check failed for prop"]);
+
+    const pinia = createTestingPinia({ createSpy: vi.fn });
+    const wrapper = mount(ToolInstallationRequestForm as object, {
+        localVue,
+        propsData: { show },
+        pinia,
+        attachTo: document.body,
+    });
+    await flushPromises();
+    return wrapper;
+}
+
+/** Fill the two required fields: tool_name and description. */
+async function fillRequiredFields(wrapper: Wrapper<Vue>, overrides: Record<string, string> = {}) {
+    await wrapper.find("#tool-installation-request-name").setValue(overrides["tool_name"] ?? "FastQC");
+    await wrapper
+        .find("#tool-installation-request-description")
+        .setValue(overrides["description"] ?? "Quality control for sequencing data");
+    await flushPromises();
+}
+
+describe("ToolInstallationRequestForm", () => {
+    beforeEach(() => {
+        mockSubmitToolInstallationRequest.mockReset();
+        vi.restoreAllMocks();
+    });
+
+    it("show=false means modal is not open, show=true means modal is open", async () => {
+        const wrapper = await mountForm(false);
+
+        expect(wrapper.findComponent(GModal).props("show")).toBe(false);
+
+        await wrapper.setProps({ show: true });
+        await flushPromises();
+
+        expect(wrapper.findComponent(GModal).props("show")).toBe(true);
+    });
+
+    it("renders form inputs inside the modal", async () => {
+        const wrapper = await mountForm(true);
+        expect(wrapper.find("#tool-installation-request-name").exists()).toBe(true);
+        expect(wrapper.find("#tool-installation-request-description").exists()).toBe(true);
+        expect(wrapper.find("#tool-installation-request-url").exists()).toBe(true);
+        expect(wrapper.find("#tool-installation-request-additional-remarks").exists()).toBe(true);
+        // Removed fields
+        expect(wrapper.find("#tool-installation-request-requester-affiliation").exists()).toBe(false);
+        // Name and email are filled server-side; no fields for them in the form
+        expect(wrapper.find("#tool-installation-request-requester-name").exists()).toBe(false);
+        expect(wrapper.find("#tool-installation-request-requester-email").exists()).toBe(false);
+    });
+
+    it("ok button is disabled when required fields are empty", async () => {
+        const wrapper = await mountForm(true);
+        const modal = wrapper.findComponent(GModal);
+        expect(modal.props("okDisabled")).toBe(true);
+    });
+
+    it("ok button is enabled when required fields are filled", async () => {
+        const wrapper = await mountForm(true);
+        await fillRequiredFields(wrapper);
+        const modal = wrapper.findComponent(GModal);
+        expect(modal.props("okDisabled")).toBe(false);
+    });
+
+    it("submits correct payload on ok", async () => {
+        const wrapper = await mountForm(true);
+        await wrapper.find("#tool-installation-request-name").setValue("FastQC");
+        await wrapper.find("#tool-installation-request-url").setValue("https://github.com/s-andrews/FastQC");
+        await wrapper.find("#tool-installation-request-description").setValue("Quality control for sequencing data");
+        await wrapper.find("#tool-installation-request-domain").setValue("Genomics");
+        await wrapper.find("#tool-installation-request-version").setValue("0.12.1");
+        await wrapper.find("#tool-installation-request-additional-remarks").setValue("Optional extra info");
+        await flushPromises();
+
+        wrapper.findComponent(GModal).vm.$emit("ok");
+        await flushPromises();
+
+        expect(mockSubmitToolInstallationRequest).toHaveBeenCalledOnce();
+        const payload = mockSubmitToolInstallationRequest.mock.calls[0]?.[0] as Record<string, unknown>;
+        expect(payload).toMatchObject({
+            tools: [
+                {
+                    name: "FastQC",
+                    tool_url: "https://github.com/s-andrews/FastQC",
+                    description: "Quality control for sequencing data",
+                    scientific_domain: "Genomics",
+                    requested_version: "0.12.1",
+                },
+            ],
+            additional_remarks: "Optional extra info",
+        });
+        // Requester email comes from the server (authenticated user), not the form
+        expect(payload).not.toHaveProperty("requester_email");
+        expect(payload).not.toHaveProperty("is_confirmation");
+        // Removed fields no longer sent
+        expect(payload).not.toHaveProperty("requester_name");
+        expect(payload).not.toHaveProperty("requester_affiliation");
+        expect(payload).not.toHaveProperty("conda_available");
+        expect(payload).not.toHaveProperty("test_data_available");
+    });
+
+    it("rejects non-https URL and does not submit", async () => {
+        const wrapper = await mountForm(true);
+        await fillRequiredFields(wrapper);
+        await wrapper.find("#tool-installation-request-url").setValue("http://example.com/tool");
+        wrapper.findComponent(GModal).vm.$emit("ok");
+        await flushPromises();
+        expect(mockSubmitToolInstallationRequest).not.toHaveBeenCalled();
+        expect(wrapper.text()).toContain("https://");
+    });
+
+    it("shows success alert after successful submission", async () => {
+        const wrapper = await mountForm(true);
+        await fillRequiredFields(wrapper);
+        wrapper.findComponent(GModal).vm.$emit("ok");
+        await flushPromises();
+        expect(wrapper.find(".alert-success").exists()).toBe(true);
+        expect(wrapper.text()).toContain("submitted");
+    });
+
+    it("shows error alert when submission fails", async () => {
+        mockSubmitToolInstallationRequest.mockRejectedValue(new Error("Network error"));
+        const wrapper = await mountForm(true);
+        await fillRequiredFields(wrapper);
+        wrapper.findComponent(GModal).vm.$emit("ok");
+        await flushPromises();
+        expect(wrapper.find(".alert-danger").exists()).toBe(true);
+    });
+
+    it("does not call API when required fields are missing", async () => {
+        const wrapper = await mountForm(true);
+        // Only fill tool_name, leave description empty
+        await wrapper.find("#tool-installation-request-name").setValue("Samtools");
+        await flushPromises();
+        wrapper.findComponent(GModal).vm.$emit("ok");
+        await flushPromises();
+        expect(mockSubmitToolInstallationRequest).not.toHaveBeenCalled();
+    });
+
+    it("emits update:show=false when cancel event fires on modal", async () => {
+        const wrapper = await mountForm(true);
+        wrapper.findComponent(GModal).vm.$emit("cancel");
+        await flushPromises();
+        const emitted = wrapper.emitted("update:show") as boolean[][];
+        expect(emitted).toBeTruthy();
+        // GModal emits update:show=true when it opens, so assert on the latest emission.
+        expect(emitted[emitted.length - 1]).toEqual([false]);
+    });
+});
diff --git a/client/src/components/Tool/ToolInstallationRequestForm.vue b/client/src/components/Tool/ToolInstallationRequestForm.vue
new file mode 100644
index 000000000000..eb8870139ad3
--- /dev/null
+++ b/client/src/components/Tool/ToolInstallationRequestForm.vue
@@ -0,0 +1,205 @@
+<script setup lang="ts">
+import { BAlert } from "bootstrap-vue";
+import { computed, ref } from "vue";
+
+import { submitToolInstallationRequest } from "@/api/notifications";
+import { errorMessageAsString } from "@/utils/simple-error";
+import { isValidNetworkUrl } from "@/utils/url";
+
+import GModal from "@/components/BaseComponents/GModal.vue";
+import FormElement from "@/components/Form/FormElement.vue";
+
+const props = defineProps<{
+    show: boolean;
+}>();
+
+const emit = defineEmits<{
+    (e: "update:show", value: boolean): void;
+}>();
+
+const toolName = ref("");
+const toolUrl = ref("");
+const description = ref("");
+const scientificDomain = ref("");
+const requestedVersion = ref("");
+const additionalRemarks = ref("");
+
+const submitting = ref(false);
+const successMessage = ref("");
+const errorMessage = ref("");
+const urlError = ref("");
+const cancelButtonText = computed(() => (submitting.value ? "Cancel" : "Close"));
+
+const formValid = () => !!(toolName.value.trim() && description.value.trim());
+
+/** Server-side field bounds (see RequestedTool / ToolInstallationRequestCreateContent). */
+const FIELD_LIMITS: [label: string, value: () => string, limit: number][] = [
+    ["Tool Name", () => toolName.value.trim(), 255],
+    ["Homepage / Repository URL", () => toolUrl.value.trim(), 2048],
+    ["Description", () => description.value.trim(), 5000],
+    ["Scientific Domain", () => scientificDomain.value.trim(), 255],
+    ["Requested Version", () => requestedVersion.value.trim(), 255],
+    ["Additional Remarks", () => additionalRemarks.value.trim(), 5000],
+];
+
+function validateFieldLengths(): boolean {
+    for (const [label, value, limit] of FIELD_LIMITS) {
+        const length = value().length;
+        if (length > limit) {
+            errorMessage.value = `${label} is too long (${length} characters; the maximum is ${limit}).`;
+            return false;
+        }
+    }
+    return true;
+}
+
+function validateToolUrl(): boolean {
+    const url = toolUrl.value.trim();
+
+    if (url && (!url.startsWith("https://") || !isValidNetworkUrl(url))) {
+        urlError.value = "Only https:// URLs are allowed.";
+        return false;
+    }
+
+    urlError.value = "";
+    return true;
+}
+
+function resetForm() {
+    toolName.value = "";
+    toolUrl.value = "";
+    description.value = "";
+    scientificDomain.value = "";
+    requestedVersion.value = "";
+    additionalRemarks.value = "";
+    errorMessage.value = "";
+    urlError.value = "";
+    successMessage.value = "";
+}
+
+function close() {
+    resetForm();
+    emit("update:show", false);
+}
+
+async function submit() {
+    if (!formValid()) {
+        errorMessage.value = "Please fill in all required fields.";
+        return;
+    }
+
+    if (!validateToolUrl()) {
+        return;
+    }
+
+    if (!validateFieldLengths()) {
+        return;
+    }
+
+    submitting.value = true;
+    errorMessage.value = "";
+    successMessage.value = "";
+
+    try {
+        await submitToolInstallationRequest({
+            tools: [
+                {
+                    name: toolName.value.trim(),
+                    tool_url: toolUrl.value.trim() || undefined,
+                    description: description.value.trim(),
+                    scientific_domain: scientificDomain.value.trim() || undefined,
+                    requested_version: requestedVersion.value.trim() || undefined,
+                },
+            ],
+            additional_remarks: additionalRemarks.value.trim() || undefined,
+        });
+
+        submitting.value = false;
+        resetForm();
+        successMessage.value =
+            "Your tool installation request has been submitted! The instance admins have been notified and will review your request.";
+    } catch (e) {
+        submitting.value = false;
+        errorMessage.value = errorMessageAsString(e, "Failed to submit tool installation request. Please try again.");
+    }
+}
+</script>
+
+<template>
+    <GModal
+        :show="props.show"
+        title="Request Tool Installation"
+        size="medium"
+        confirm
+        ok-text="Submit Request"
+        :cancel-text="cancelButtonText"
+        :ok-disabled="submitting || !formValid()"
+        :cancel-disabled="submitting"
+        :close-on-ok="false"
+        @ok="submit"
+        @cancel="close"
+        @update:show="emit('update:show', $event)">
+        <BAlert v-if="successMessage" variant="success" show>
+            {{ successMessage }}
+        </BAlert>
+
+        <BAlert v-if="errorMessage" variant="danger" show dismissible @dismissed="errorMessage = ''">
+            {{ errorMessage }}
+        </BAlert>
+
+        <div v-if="!successMessage">
+            <p class="mb-3 text-muted">
+                Request a tool to be installed on this Galaxy instance. Your installation request will be sent to the
+                admins for review.
+            </p>
+
+            <h6 v-localize class="font-weight-bold mb-2">Tool Information</h6>
+
+            <FormElement
+                id="tool-installation-request-name"
+                v-model="toolName"
+                type="text"
+                title="Tool Name"
+                help="e.g. FastQC"
+                :attributes="{ optional: false }" />
+
+            <FormElement
+                id="tool-installation-request-url"
+                v-model="toolUrl"
+                type="text"
+                title="Homepage / Repository URL"
+                help="e.g. https://github.com/..."
+                :error="urlError || undefined" />
+
+            <FormElement
+                id="tool-installation-request-description"
+                v-model="description"
+                type="text"
+                title="Description"
+                help="Describe the tool and its scientific use case"
+                :attributes="{ area: true, optional: false }" />
+
+            <FormElement
+                id="tool-installation-request-domain"
+                v-model="scientificDomain"
+                type="text"
+                title="Scientific Domain"
+                help="e.g. Genomics, Proteomics, AI/ML" />
+
+            <FormElement
+                id="tool-installation-request-version"
+                v-model="requestedVersion"
+                type="text"
+                title="Requested Version"
+                help="e.g. 1.2.0" />
+
+            <FormElement
+                id="tool-installation-request-additional-remarks"
+                v-model="additionalRemarks"
+                type="text"
+                title="Additional Remarks"
+                help="Any other information that may help the admins"
+                :attributes="{ area: true }" />
+        </div>
+    </GModal>
+</template>
diff --git a/client/src/components/User/Notifications/NotificationsCategorySettings.vue b/client/src/components/User/Notifications/NotificationsCategorySettings.vue
index d7653366c760..c7ca50958b51 100644
--- a/client/src/components/User/Notifications/NotificationsCategorySettings.vue
+++ b/client/src/components/User/Notifications/NotificationsCategorySettings.vue
@@ -6,7 +6,7 @@ import { snakeCaseToTitleCase } from "@/utils/strings";
 
 import NotificationsChannelSettings from "./NotificationsChannelSettings.vue";
 
-const categoryDescriptionMap: Record<NotificationCategory, string> = {
+const categoryDescriptionMap: Partial<Record<NotificationCategory, string>> = {
     message: `
         You will receive these notifications only when your Galaxy administrators send you a message.
         Please note that for certain critical or urgent messages, you will receive notifications even if you have disabled this channel.
diff --git a/client/src/components/User/Notifications/NotificationsPreferences.vue b/client/src/components/User/Notifications/NotificationsPreferences.vue
index e654b091e343..8b680baa1906 100644
--- a/client/src/components/User/Notifications/NotificationsPreferences.vue
+++ b/client/src/components/User/Notifications/NotificationsPreferences.vue
@@ -40,8 +40,11 @@ const pushNotificationsGranted = ref(pushNotificationsEnabled());
 const notificationsPreferences = ref<UserNotificationPreferences>({});
 const supportedChannels = ref<NotificationChannel[]>([]);
 
-const categories = computed<NotificationCategory[]>(
-    () => Object.keys(notificationsPreferences.value) as NotificationCategory[],
+// tool_installation_request notifications are admin-targeted; users should not be able to opt out.
+const categories = computed<NotificationCategory[]>(() =>
+    (Object.keys(notificationsPreferences.value) as NotificationCategory[]).filter(
+        (c) => c !== "tool_installation_request",
+    ),
 );
 const showPreferences = computed(() => {
     return !loading.value && config.value.enable_notification_system && notificationsPreferences.value;
diff --git a/client/src/components/Workflow/Run/WorkflowMissingToolsRequest.test.ts b/client/src/components/Workflow/Run/WorkflowMissingToolsRequest.test.ts
new file mode 100644
index 000000000000..082da0c1ab02
--- /dev/null
+++ b/client/src/components/Workflow/Run/WorkflowMissingToolsRequest.test.ts
@@ -0,0 +1,335 @@
+import { createTestingPinia } from "@pinia/testing";
+import { getLocalVue } from "@tests/vitest/helpers";
+import { mount, type Wrapper } from "@vue/test-utils";
+import flushPromises from "flush-promises";
+import { setActivePinia } from "pinia";
+import { afterEach, beforeEach, describe, expect, it, vi } from "vitest";
+
+import { setMockConfig } from "@/composables/__mocks__/config";
+import { useUserStore } from "@/stores/userStore";
+
+import WorkflowMissingToolsRequest from "./WorkflowMissingToolsRequest.vue";
+import GModal from "@/components/BaseComponents/GModal.vue";
+
+vi.mock("@/composables/config");
+
+const { mockSubmitToolInstallationRequest } = vi.hoisted(() => ({
+    mockSubmitToolInstallationRequest: vi.fn(),
+}));
+
+vi.mock("@/api/notifications", () => ({
+    submitToolInstallationRequest: mockSubmitToolInstallationRequest,
+}));
+
+const localVue = getLocalVue(true);
+
+const MISSING_TOOL_IDS = [
+    "toolshed.g2.bx.psu.edu/repos/devteam/bwa/bwa/0.7.17",
+    "toolshed.g2.bx.psu.edu/repos/devteam/samtools/samtools/1.13",
+];
+
+// The requested-tool entries the component derives from MISSING_TOOL_IDS.
+const EXPECTED_REQUESTED_TOOLS = [
+    { tool_shed_id: "toolshed.g2.bx.psu.edu/repos/devteam/bwa", name: "bwa", requested_version: "0.7.17" },
+    { tool_shed_id: "toolshed.g2.bx.psu.edu/repos/devteam/samtools", name: "samtools", requested_version: "1.13" },
+];
+
+const REGISTERED_USER = {
+    id: "user1",
+    username: "testuser",
+    email: "testuser@galaxy.test",
+    is_admin: false,
+    isAnonymous: false,
+    total_disk_usage: 0,
+    nice_total_disk_usage: "0 bytes",
+    quota_percent: null,
+    quota: "0 bytes",
+    preferences: {},
+    active: true,
+    deleted: false,
+    purged: false,
+};
+
+function mountComponent(props: Record<string, unknown> = {}): Wrapper<Vue> {
+    const pinia = createTestingPinia({
+        createSpy: vi.fn,
+        initialState: {
+            user: { currentUser: REGISTERED_USER },
+        },
+    });
+    setActivePinia(pinia);
+
+    return mount(WorkflowMissingToolsRequest as object, {
+        localVue,
+        pinia,
+        propsData: {
+            missingToolIds: MISSING_TOOL_IDS,
+            workflowId: "workflow-encoded-id-abc",
+            ...props,
+        },
+        attachTo: document.body,
+    });
+}
+
+describe("WorkflowMissingToolsRequest", () => {
+    beforeEach(() => {
+        mockSubmitToolInstallationRequest.mockReset();
+        setMockConfig({ enable_tool_installation_request_form: true });
+    });
+
+    afterEach(() => {
+        vi.restoreAllMocks();
+    });
+
+    it("renders the request button when feature is enabled and user is authenticated", async () => {
+        const wrapper = mountComponent();
+        await flushPromises();
+        expect(wrapper.text()).toContain("Request Installation");
+        expect(wrapper.text()).toContain("2 missing tools");
+    });
+
+    it("does not render when feature flag is disabled", async () => {
+        setMockConfig({ enable_tool_installation_request_form: false });
+        const wrapper = mountComponent();
+        await flushPromises();
+        expect(wrapper.text()).not.toContain("Request Installation");
+    });
+
+    it("does not render when no tool IDs are provided", async () => {
+        const wrapper = mountComponent({ missingToolIds: [] });
+        await flushPromises();
+        expect(wrapper.find(".workflow-missing-tools-request").exists()).toBe(false);
+    });
+
+    it("shows confirmation modal when button is clicked", async () => {
+        const wrapper = mountComponent();
+        await flushPromises();
+        await wrapper.find("[data-testid='request-install-btn']").trigger("click");
+        await flushPromises();
+        const modal = wrapper.findComponent(GModal);
+        expect(modal.props("show")).toBe(true);
+    });
+
+    it("closes modal and does not call submitToolInstallationRequest when cancelled", async () => {
+        const wrapper = mountComponent();
+        await flushPromises();
+
+        await wrapper.find("[data-testid='request-install-btn']").trigger("click");
+        await flushPromises();
+
+        const modal = wrapper.findComponent(GModal);
+        expect(modal.props("show")).toBe(true);
+
+        modal.vm.$emit("cancel");
+        await flushPromises();
+
+        expect(mockSubmitToolInstallationRequest).not.toHaveBeenCalled();
+        expect(wrapper.findComponent(GModal).props("show")).toBe(false);
+    });
+
+    it("calls submitToolInstallationRequest with correct payload on confirm", async () => {
+        const wrapper = mountComponent();
+        await flushPromises();
+
+        await wrapper.find("button").trigger("click");
+        await flushPromises();
+
+        wrapper.findComponent(GModal).vm.$emit("ok");
+        await flushPromises();
+
+        expect(mockSubmitToolInstallationRequest).toHaveBeenCalledOnce();
+        const payload = mockSubmitToolInstallationRequest.mock.calls[0]?.[0] as Record<string, unknown>;
+        expect(payload.tools).toEqual(EXPECTED_REQUESTED_TOOLS);
+        expect(payload.workflow_id).toBe("workflow-encoded-id-abc");
+        expect(typeof payload.additional_remarks).toBe("string");
+    });
+
+    it("shows success alert after successful request", async () => {
+        const wrapper = mountComponent();
+        await flushPromises();
+
+        await wrapper.find("[data-testid='request-install-btn']").trigger("click");
+        await flushPromises();
+        wrapper.findComponent(GModal).vm.$emit("ok");
+        await flushPromises();
+
+        expect(wrapper.text()).not.toContain("Request Installation");
+        expect(wrapper.find(".alert-success").exists()).toBe(true);
+        expect(wrapper.text()).toContain("Installation request sent");
+        expect(wrapper.text()).toContain("Check your notifications for updates");
+    });
+
+    it("shows error alert when submission fails", async () => {
+        mockSubmitToolInstallationRequest.mockRejectedValueOnce(new Error("Server error"));
+        const wrapper = mountComponent();
+        await flushPromises();
+
+        await wrapper.find("[data-testid='request-install-btn']").trigger("click");
+        await flushPromises();
+        wrapper.findComponent(GModal).vm.$emit("ok");
+        await flushPromises();
+
+        expect(wrapper.find(".alert-danger").exists()).toBe(true);
+        expect(wrapper.text()).toContain("Request Installation");
+    });
+
+    it("uses singular 'tool' for a single missing tool ID", async () => {
+        const wrapper = mountComponent({ missingToolIds: [MISSING_TOOL_IDS[0]] });
+        await flushPromises();
+        expect(wrapper.text()).toContain("1 missing tool");
+        expect(wrapper.text()).not.toContain("1 missing tools");
+    });
+
+    it("does not render when user is anonymous", async () => {
+        const wrapper = mountComponent();
+        const userStore = useUserStore();
+        userStore.$patch({ currentUser: { id: "anon1", isAnonymous: true } as any });
+        await flushPromises();
+        expect(wrapper.find(".workflow-missing-tools-request").exists()).toBe(false);
+    });
+
+    it("splits versioned tool-shed ids into tool_shed_id, name, and requested_version", async () => {
+        const wrapper = mountComponent({ missingToolIds: [MISSING_TOOL_IDS[0]], workflowId: "wf-id" });
+        await flushPromises();
+        await wrapper.find("[data-testid='request-install-btn']").trigger("click");
+        await flushPromises();
+        wrapper.findComponent(GModal).vm.$emit("ok");
+        await flushPromises();
+
+        const payload = mockSubmitToolInstallationRequest.mock.calls[0]?.[0] as Record<string, unknown>;
+        expect(payload.tools).toEqual([EXPECTED_REQUESTED_TOOLS[0]]);
+        expect(payload.workflow_id).toBe("wf-id");
+    });
+
+    it("sends local (non-tool-shed) tool ids as names, without a tool_shed_id", async () => {
+        const wrapper = mountComponent({ missingToolIds: ["Cut1"], workflowId: "wf-id" });
+        await flushPromises();
+        await wrapper.find("[data-testid='request-install-btn']").trigger("click");
+        await flushPromises();
+        wrapper.findComponent(GModal).vm.$emit("ok");
+        await flushPromises();
+
+        const payload = mockSubmitToolInstallationRequest.mock.calls[0]?.[0] as Record<string, unknown>;
+        expect(payload.tools).toEqual([{ name: "Cut1" }]);
+    });
+
+    it("additional_remarks describes the workflow context without repeating the structured tool ids", async () => {
+        const wrapper = mountComponent();
+        await flushPromises();
+        await wrapper.find("[data-testid='request-install-btn']").trigger("click");
+        await flushPromises();
+        wrapper.findComponent(GModal).vm.$emit("ok");
+        await flushPromises();
+
+        const payload = mockSubmitToolInstallationRequest.mock.calls[0]?.[0] as Record<string, unknown>;
+        const remarks = payload.additional_remarks as string;
+        expect(remarks).toContain("required by this workflow");
+        for (const id of MISSING_TOOL_IDS) {
+            expect(remarks).not.toContain(id);
+        }
+    });
+
+    it("tells the submitter in the modal when the request will be truncated to 50 tools", async () => {
+        const manyToolIds = Array.from({ length: 60 }, (_, i) => `tool-${i}`);
+        const wrapper = mountComponent({ missingToolIds: manyToolIds });
+        await flushPromises();
+        await wrapper.find("[data-testid='request-install-btn']").trigger("click");
+        await flushPromises();
+
+        const note = wrapper.find("[data-testid='truncation-note']");
+        expect(note.exists()).toBe(true);
+        expect(note.text()).toContain("first 50 of the 60 missing tools");
+    });
+
+    it("does not show the truncation note when at or under the limit", async () => {
+        const wrapper = mountComponent();
+        await flushPromises();
+        await wrapper.find("[data-testid='request-install-btn']").trigger("click");
+        await flushPromises();
+
+        expect(wrapper.find("[data-testid='truncation-note']").exists()).toBe(false);
+    });
+
+    it("caps the request at 50 tools and notes the truncation in the remarks", async () => {
+        const manyToolIds = Array.from({ length: 60 }, (_, i) => `tool-${i}`);
+        const wrapper = mountComponent({ missingToolIds: manyToolIds });
+        await flushPromises();
+        await wrapper.find("[data-testid='request-install-btn']").trigger("click");
+        await flushPromises();
+        wrapper.findComponent(GModal).vm.$emit("ok");
+        await flushPromises();
+
+        const payload = mockSubmitToolInstallationRequest.mock.calls[0]?.[0] as Record<string, unknown>;
+        const tools = payload.tools as { name: string }[];
+        expect(tools).toHaveLength(50);
+        expect(tools[0]?.name).toBe("tool-0");
+        expect(tools[49]?.name).toBe("tool-49");
+        expect(payload.additional_remarks as string).toContain("Only the first 50 of 60 missing tools");
+    });
+
+    it("button is disabled while the submission is in-flight", async () => {
+        let resolveRequest!: () => void;
+        mockSubmitToolInstallationRequest.mockReturnValueOnce(
+            new Promise<void>((resolve) => {
+                resolveRequest = () => resolve();
+            }),
+        );
+        const wrapper = mountComponent();
+        await flushPromises();
+
+        await wrapper.find("[data-testid='request-install-btn']").trigger("click");
+        await flushPromises();
+        wrapper.findComponent(GModal).vm.$emit("ok");
+        await wrapper.vm.$nextTick();
+
+        expect(wrapper.find("[data-testid='request-install-btn']").attributes("aria-disabled")).toBe("true");
+
+        resolveRequest();
+        await flushPromises();
+    });
+
+    it("dismissing the error alert clears the error and keeps the button visible", async () => {
+        mockSubmitToolInstallationRequest.mockRejectedValueOnce(new Error("Oops"));
+        const wrapper = mountComponent();
+        await flushPromises();
+
+        await wrapper.find("[data-testid='request-install-btn']").trigger("click");
+        await flushPromises();
+        wrapper.findComponent(GModal).vm.$emit("ok");
+        await flushPromises();
+
+        expect(wrapper.find(".alert-danger").exists()).toBe(true);
+
+        wrapper.findComponent({ name: "BAlert" }).vm.$emit("dismissed");
+        await flushPromises();
+
+        expect(wrapper.find(".alert-danger").exists()).toBe(false);
+        expect(wrapper.find("[data-testid='request-install-btn']").exists()).toBe(true);
+    });
+
+    it("modal body shows singular 'tool' when there is exactly 1 missing tool", async () => {
+        const wrapper = mountComponent({ missingToolIds: [MISSING_TOOL_IDS[0]] });
+        await flushPromises();
+        await wrapper.find("[data-testid='request-install-btn']").trigger("click");
+        await flushPromises();
+        expect(wrapper.findComponent(GModal).text()).toContain("1 missing tool");
+        expect(wrapper.findComponent(GModal).text()).not.toContain("1 missing tools");
+    });
+
+    it("can cancel and then reopen the modal", async () => {
+        const wrapper = mountComponent();
+        await flushPromises();
+
+        await wrapper.find("[data-testid='request-install-btn']").trigger("click");
+        await flushPromises();
+        expect(wrapper.findComponent(GModal).props("show")).toBe(true);
+
+        wrapper.findComponent(GModal).vm.$emit("cancel");
+        await flushPromises();
+        expect(wrapper.findComponent(GModal).props("show")).toBe(false);
+
+        await wrapper.find("[data-testid='request-install-btn']").trigger("click");
+        await flushPromises();
+        expect(wrapper.findComponent(GModal).props("show")).toBe(true);
+    });
+});
diff --git a/client/src/components/Workflow/Run/WorkflowMissingToolsRequest.vue b/client/src/components/Workflow/Run/WorkflowMissingToolsRequest.vue
new file mode 100644
index 000000000000..fa16149495fc
--- /dev/null
+++ b/client/src/components/Workflow/Run/WorkflowMissingToolsRequest.vue
@@ -0,0 +1,117 @@
+<script setup lang="ts">
+import { BAlert } from "bootstrap-vue";
+import { computed, ref } from "vue";
+
+import { submitToolInstallationRequest } from "@/api/notifications";
+import { useConfig } from "@/composables/config";
+import { useUserStore } from "@/stores/userStore";
+import { errorMessageAsString } from "@/utils/simple-error";
+import { parseRequestedToolParts } from "@/utils/tool-version";
+
+import GButton from "@/components/BaseComponents/GButton.vue";
+import GModal from "@/components/BaseComponents/GModal.vue";
+
+const props = defineProps<{
+    missingToolIds: string[];
+    workflowId: string;
+}>();
+
+const { config, isConfigLoaded } = useConfig();
+const userStore = useUserStore();
+
+const showConfirm = ref(false);
+const submitting = ref(false);
+const submitted = ref(false);
+const errorMessage = ref("");
+
+const showButton = computed(
+    () =>
+        isConfigLoaded.value &&
+        config.value?.enable_tool_installation_request_form &&
+        !userStore.isAnonymous &&
+        props.missingToolIds.length > 0,
+);
+
+const toolCount = computed(() => props.missingToolIds.length);
+
+/** Mirrors the server-side bound on requested-tool entries per request. */
+const MAX_REQUESTED_TOOLS = 50;
+
+async function requestInstallation() {
+    submitting.value = true;
+    errorMessage.value = "";
+
+    // The requested tools carry the ids/versions in structured form, so the
+    // remarks only add the workflow context (and a note when the request had
+    // to be truncated to the server-side limit).
+    const toolVerb = toolCount.value === 1 ? "tool is" : "tools are";
+    let description =
+        `The requested ${toolVerb} required by this workflow but not installed on this instance. ` +
+        `These tools are available in the Tool Shed and need to be installed.`;
+    if (toolCount.value > MAX_REQUESTED_TOOLS) {
+        description += ` Only the first ${MAX_REQUESTED_TOOLS} of ${toolCount.value} missing tools are listed in this request.`;
+    }
+
+    try {
+        await submitToolInstallationRequest({
+            tools: props.missingToolIds.slice(0, MAX_REQUESTED_TOOLS).map(parseRequestedToolParts),
+            workflow_id: props.workflowId,
+            additional_remarks: description,
+        });
+
+        submitted.value = true;
+        showConfirm.value = false;
+    } catch (e) {
+        errorMessage.value = errorMessageAsString(e, "Failed to submit installation request. Please try again.");
+    } finally {
+        submitting.value = false;
+    }
+}
+</script>
+
+<template>
+    <div v-if="showButton" class="workflow-missing-tools-request mt-3">
+        <BAlert v-if="errorMessage" variant="danger" show dismissible @dismissed="errorMessage = ''">
+            {{ errorMessage }}
+        </BAlert>
+
+        <BAlert v-if="submitted" variant="success" show>
+            Installation request sent. Check your notifications for updates.
+        </BAlert>
+
+        <GButton
+            v-else
+            data-testid="request-install-btn"
+            :disabled="submitting"
+            variant="primary"
+            size="small"
+            @click="showConfirm = true">
+            Request Installation ({{ toolCount }} missing {{ toolCount === 1 ? "tool" : "tools" }})
+        </GButton>
+
+        <GModal
+            :show="showConfirm"
+            title="Request Tool Installation"
+            size="small"
+            confirm
+            ok-text="Send Request"
+            :ok-disabled="submitting"
+            :close-on-ok="false"
+            @ok="requestInstallation"
+            @cancel="showConfirm = false"
+            @update:show="showConfirm = $event">
+            <p>
+                Request the admins to install
+                <strong>{{ toolCount }} missing {{ toolCount === 1 ? "tool" : "tools" }}</strong>
+                required by this workflow?
+            </p>
+            <p class="text-muted small mb-0">
+                The admins will receive a notification and can install the tools from the Tool Shed.
+            </p>
+            <p v-if="toolCount > MAX_REQUESTED_TOOLS" data-testid="truncation-note" class="text-muted small mb-0">
+                Only the first {{ MAX_REQUESTED_TOOLS }} of the {{ toolCount }} missing tools will be included in the
+                request.
+            </p>
+        </GModal>
+    </div>
+</template>
diff --git a/client/src/components/Workflow/Run/WorkflowRun.test.js b/client/src/components/Workflow/Run/WorkflowRun.test.js
index 4df7760ac949..a5faf674b5ed 100644
--- a/client/src/components/Workflow/Run/WorkflowRun.test.js
+++ b/client/src/components/Workflow/Run/WorkflowRun.test.js
@@ -27,6 +27,8 @@ vi.mock("./WorkflowRunSuccess", () => ({
     default: {},
 }));
 
+vi.mock("@/composables/config");
+
 describe("WorkflowRun.vue", () => {
     let wrapper;
     const run1WorkflowId = "ebab00128497f9d7";
diff --git a/client/src/components/Workflow/Run/WorkflowRun.vue b/client/src/components/Workflow/Run/WorkflowRun.vue
index 5b60ad6382fe..e82d2aac7efe 100644
--- a/client/src/components/Workflow/Run/WorkflowRun.vue
+++ b/client/src/components/Workflow/Run/WorkflowRun.vue
@@ -8,6 +8,7 @@ import { canMutateHistory } from "@/api";
 import type { WorkflowInvocationRequestInputs } from "@/api/invocations";
 import { getWorkflowInfo } from "@/api/workflows";
 import { copyWorkflow } from "@/components/Workflow/workflows.services";
+import { useConfig } from "@/composables/config";
 import { useWorkflowInstance } from "@/composables/useWorkflowInstance";
 import { useHistoryItemsStore } from "@/stores/historyItemsStore";
 import { useHistoryStore } from "@/stores/historyStore";
@@ -15,9 +16,10 @@ import { useUserStore } from "@/stores/userStore";
 import { errorMessageAsString } from "@/utils/simple-error";
 
 import { WorkflowRunModel } from "./model";
-import { getRunData } from "./services";
+import { getRunData, WorkflowMissingToolsError } from "./services";
 
 import LoadingSpan from "@/components/LoadingSpan.vue";
+import WorkflowMissingToolsRequest from "@/components/Workflow/Run/WorkflowMissingToolsRequest.vue";
 import WorkflowRunForm from "@/components/Workflow/Run/WorkflowRunForm.vue";
 import WorkflowRunFormSimple from "@/components/Workflow/Run/WorkflowRunFormSimple.vue";
 import WorkflowRunSuccess from "@/components/Workflow/Run/WorkflowRunSuccess.vue";
@@ -26,6 +28,7 @@ const historyStore = useHistoryStore();
 const historyItemsStore = useHistoryItemsStore();
 const userStore = useUserStore();
 const router = useRouter();
+const { config } = useConfig();
 
 interface Props {
     workflowId: string;
@@ -61,6 +64,7 @@ const disableSimpleFormReason = ref<
 >(undefined);
 const submissionError = ref("");
 const workflowError = ref("");
+const missingToolIds = ref<string[]>([]);
 const workflowName = ref("");
 const workflowModel: any = ref(null);
 const owner = ref<string>();
@@ -152,21 +156,35 @@ async function loadRun() {
         owner.value = incomingModel.runData.owner;
         loading.value = false;
     } catch (e) {
-        const errMessage = errorMessageAsString(e);
-        if (errMessage === "Workflow step has upgrade messages") {
-            hasUpgradeMessages.value = true;
-            if (!props.instance) {
+        if (e instanceof WorkflowMissingToolsError) {
+            workflowError.value = e.message;
+            missingToolIds.value = e.missingToolIds;
+            if (!workflowName.value) {
                 try {
                     const storedWorkflow = await getWorkflowInfo(props.workflowId);
                     owner.value = storedWorkflow.owner;
                     workflowName.value = storedWorkflow.name;
                 } catch {
-                    // just show original error
-                    workflowError.value = errMessage;
+                    // best-effort: name not critical for the request button
                 }
             }
         } else {
-            workflowError.value = errMessage;
+            const errMessage = errorMessageAsString(e);
+            if (errMessage === "Workflow step has upgrade messages") {
+                hasUpgradeMessages.value = true;
+                if (!props.instance) {
+                    try {
+                        const storedWorkflow = await getWorkflowInfo(props.workflowId);
+                        owner.value = storedWorkflow.owner;
+                        workflowName.value = storedWorkflow.name;
+                    } catch {
+                        // just show original error
+                        workflowError.value = errMessage;
+                    }
+                }
+            } else {
+                workflowError.value = errMessage;
+            }
         }
         loading.value = false;
     }
@@ -211,6 +229,7 @@ defineExpose({
     submissionError,
     handleSubmissionError,
     workflowError,
+    missingToolIds,
     workflowModel,
 });
 </script>
@@ -220,6 +239,10 @@ defineExpose({
         <BAlert v-if="workflowError" variant="danger" show>
             <h2 class="h-text">Workflow cannot be executed. Please resolve the following issue:</h2>
             {{ workflowError }}
+            <WorkflowMissingToolsRequest
+                v-if="config?.enable_tool_installation_request_form"
+                :missing-tool-ids="missingToolIds"
+                :workflow-id="props.workflowId" />
         </BAlert>
         <span v-else>
             <BAlert v-if="loading" variant="info" show>
diff --git a/client/src/components/Workflow/Run/services.js b/client/src/components/Workflow/Run/services.js
index 55457c3300ef..97b77587eb50 100644
--- a/client/src/components/Workflow/Run/services.js
+++ b/client/src/components/Workflow/Run/services.js
@@ -4,7 +4,20 @@
 import axios from "axios";
 
 import { getAppRoot } from "@/onload/loadConfig";
-import { rethrowSimple } from "@/utils/simple-error";
+import { errorMessageAsString, rethrowSimple } from "@/utils/simple-error";
+
+/**
+ * Error thrown when a workflow cannot run because required tools are not installed.
+ * Carries the list of missing tool IDs so callers can offer an installation request.
+ */
+export class WorkflowMissingToolsError extends Error {
+    constructor(message, missingToolIds) {
+        super(message);
+        this.name = "WorkflowMissingToolsError";
+        /** @type {string[]} */
+        this.missingToolIds = missingToolIds || [];
+    }
+}
 
 /**
  * Download the workflow using the 'run' style (see workflow manager on backend
@@ -22,6 +35,11 @@ export async function getRunData(workflowId, version = null, instance = false) {
         const response = await axios.get(url);
         return response.data;
     } catch (e) {
+        const missingToolIds = e?.response?.data?.missing_tool_ids;
+        if (missingToolIds && missingToolIds.length > 0) {
+            const errMsg = errorMessageAsString(e, "Following tools are not installed.");
+            throw new WorkflowMissingToolsError(errMsg, missingToolIds);
+        }
         rethrowSimple(e);
     }
 }
diff --git a/client/src/composables/__mocks__/config.ts b/client/src/composables/__mocks__/config.ts
index 2f6623faebcf..dd18dfe06318 100644
--- a/client/src/composables/__mocks__/config.ts
+++ b/client/src/composables/__mocks__/config.ts
@@ -1,6 +1,8 @@
 import { vi } from "vitest";
 import { ref } from "vue";
 
+const isConfigLoadedRef = ref(true);
+
 // Default mock config values
 const defaultConfig = {
     allow_local_account_creation: true,
@@ -20,7 +22,7 @@ const mockConfig = ref({ ...defaultConfig });
 
 export const useConfig = vi.fn(() => ({
     config: mockConfig,
-    isConfigLoaded: true,
+    isConfigLoaded: isConfigLoadedRef,
 }));
 
 // Helper function for tests to override config values
diff --git a/client/src/utils/tool-version.test.ts b/client/src/utils/tool-version.test.ts
index bf6e5c297580..a7c717c0b863 100644
--- a/client/src/utils/tool-version.test.ts
+++ b/client/src/utils/tool-version.test.ts
@@ -2,7 +2,7 @@ import { describe, expect, it } from "vitest";
 
 import type { Tool } from "@/stores/toolStore";
 
-import { extractBaseToolId, filterLatestToolVersions } from "./tool-version";
+import { extractBaseToolId, filterLatestToolVersions, parseRequestedToolParts } from "./tool-version";
 
 describe("Tool Version Utilities", () => {
     describe("extractBaseToolId", () => {
@@ -39,6 +39,46 @@ describe("Tool Version Utilities", () => {
         });
     });
 
+    describe("parseRequestedToolParts", () => {
+        it("splits a versioned tool shed id into shed repository id, name, and version", () => {
+            expect(parseRequestedToolParts("toolshed.g2.bx.psu.edu/repos/devteam/bwa/bwa/0.7.17")).toEqual({
+                tool_shed_id: "toolshed.g2.bx.psu.edu/repos/devteam/bwa",
+                name: "bwa",
+                requested_version: "0.7.17",
+            });
+            expect(
+                parseRequestedToolParts("toolshed.g2.bx.psu.edu/repos/devteam/bowtie2/bowtie2/2.4.2+galaxy0"),
+            ).toEqual({
+                tool_shed_id: "toolshed.g2.bx.psu.edu/repos/devteam/bowtie2",
+                name: "bowtie2",
+                requested_version: "2.4.2+galaxy0",
+            });
+        });
+
+        it("keeps the shed repository id for unversioned tool shed ids", () => {
+            expect(parseRequestedToolParts("toolshed.g2.bx.psu.edu/repos/devteam/bwa/bwa_tool")).toEqual({
+                tool_shed_id: "toolshed.g2.bx.psu.edu/repos/devteam/bwa",
+                name: "bwa_tool",
+                requested_version: undefined,
+            });
+        });
+
+        it("does not treat a non-version trailing segment as a version", () => {
+            expect(parseRequestedToolParts("toolshed.g2.bx.psu.edu/repos/owner/repo/tool/subtool")).toEqual({
+                tool_shed_id: "toolshed.g2.bx.psu.edu/repos/owner/repo",
+                name: "tool/subtool",
+                requested_version: undefined,
+            });
+        });
+
+        it("returns local (non-tool-shed) ids as a bare name", () => {
+            expect(parseRequestedToolParts("Cut1")).toEqual({ name: "Cut1" });
+            expect(parseRequestedToolParts("interactive_tool_jupyter")).toEqual({
+                name: "interactive_tool_jupyter",
+            });
+        });
+    });
+
     describe("filterLatestToolVersions", () => {
         const createMockTool = (id: string, version: string, name = "Tool"): Tool => ({
             id,
diff --git a/client/src/utils/tool-version.ts b/client/src/utils/tool-version.ts
index a497b4a86776..ddaf9ce339b3 100644
--- a/client/src/utils/tool-version.ts
+++ b/client/src/utils/tool-version.ts
@@ -4,6 +4,9 @@
 
 import type { Tool } from "@/stores/toolStore";
 
+/** Matches segments that look like a version (e.g. "1.13", "2.4.2+galaxy0"). */
+const VERSION_SEGMENT_REGEX = /^\d+(\.\d+)*[-+\w]*$/;
+
 /**
  * Extracts the base tool ID from a versioned tool ID.
  * Handles both simple tool IDs (tool/version) and tool shed IDs
@@ -18,9 +21,7 @@ export function extractBaseToolId(toolId: string): string {
         if (parts.length >= 5) {
             // Remove the version part if it exists
             const lastPart = parts[parts.length - 1];
-            // Check if the last part looks like a version (contains dots or is numeric, optionally with suffix)
-            // Now also handles + signs (e.g., "2.4.2+galaxy0")
-            if (lastPart && /^\d+(\.\d+)*[-+\w]*$/.test(lastPart)) {
+            if (lastPart && VERSION_SEGMENT_REGEX.test(lastPart)) {
                 baseId = parts.slice(0, -1).join("/");
             }
         }
@@ -30,7 +31,7 @@ export function extractBaseToolId(toolId: string): string {
         const parts = toolId.split("/");
         const lastPart = parts[parts.length - 1];
         // Check if the last part looks like a version
-        if (lastPart && /^\d+(\.\d+)*[-+\w]*$/.test(lastPart)) {
+        if (lastPart && VERSION_SEGMENT_REGEX.test(lastPart)) {
             baseId = parts.slice(0, -1).join("/");
         }
     }
@@ -38,6 +39,38 @@ export function extractBaseToolId(toolId: string): string {
     return baseId;
 }
 
+export interface RequestedToolParts {
+    tool_shed_id?: string;
+    name: string;
+    requested_version?: string;
+}
+
+/**
+ * Splits a tool id into the parts of a tool installation request entry.
+ * Tool-shed tools use ids of the form
+ * `<shed host>/repos/<owner>/<repo>/<tool id>[/<version>]`, from which the
+ * shed repository id, tool name, and version are derived (the trailing segment
+ * is treated as a version only when it looks like one, mirroring
+ * `extractBaseToolId`); anything else (e.g. a local tool id) only identifies
+ * the tool by name.
+ */
+export function parseRequestedToolParts(toolId: string): RequestedToolParts {
+    const match = toolId.match(/^(.+\/repos\/[^/]+\/[^/]+)\/(.+)$/);
+    const toolShedId = match?.[1];
+    const rest = match?.[2];
+    if (!toolShedId || !rest) {
+        return { name: toolId };
+    }
+    const segments = rest.split("/");
+    const lastSegment = segments[segments.length - 1];
+    let requestedVersion: string | undefined;
+    if (segments.length > 1 && lastSegment && VERSION_SEGMENT_REGEX.test(lastSegment)) {
+        segments.pop();
+        requestedVersion = lastSegment;
+    }
+    return { tool_shed_id: toolShedId, name: segments.join("/"), requested_version: requestedVersion };
+}
+
 /**
  * Filters a list of tools to show only the latest version from each lineage
  */
diff --git a/doc/source/admin/galaxy_options.rst b/doc/source/admin/galaxy_options.rst
index 32ab4ac83eec..686ef5d43586 100644
--- a/doc/source/admin/galaxy_options.rst
+++ b/doc/source/admin/galaxy_options.rst
@@ -6254,6 +6254,24 @@
 :Type: bool
 
 
+~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~
+``enable_tool_installation_request_form``
+~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~
+
+:Description:
+    Enable the Tool Installation Request Form in the toolbox, allowing
+    users to request new tools to be installed on this Galaxy
+    instance.
+    When enabled, a "Request Tool Installation" button will appear in
+    the tool panel. Submitted requests are sent as notifications to
+    all admin users via Galaxy's notification system, which must also
+    be enabled.
+    This requires ``enable_notification_system`` to be set to
+    ``true``.
+:Default: ``false``
+:Type: bool
+
+
 ~~~~~~~~~~~~~~~~~~~~~~~~
 ``file_source_temp_dir``
 ~~~~~~~~~~~~~~~~~~~~~~~~
diff --git a/lib/galaxy/authnz/psa_authnz.py b/lib/galaxy/authnz/psa_authnz.py
index 2b7422baedb0..2e3d1e5627ce 100644
--- a/lib/galaxy/authnz/psa_authnz.py
+++ b/lib/galaxy/authnz/psa_authnz.py
@@ -856,8 +856,8 @@ def _send_oidc_profile_update_notification(trans: "ProvidesAppContext", user, up
         return
     try:
         from galaxy.schema.notifications import (
+            InternalNotificationCreateData,
             MessageNotificationContent,
-            NotificationCreateData,
             NotificationCreateRequest,
             NotificationRecipients,
             NotificationVariant,
@@ -873,7 +873,7 @@ def _send_oidc_profile_update_notification(trans: "ProvidesAppContext", user, up
         message = f"Your profile was updated from your identity provider: {', '.join(field_list)}."
         request = NotificationCreateRequest(
             recipients=NotificationRecipients.model_construct(user_ids=[user.id]),
-            notification=NotificationCreateData(
+            notification=InternalNotificationCreateData(
                 source="oidc",
                 category=PersonalNotificationCategory.message,
                 variant=NotificationVariant.info,
diff --git a/lib/galaxy/config/_galaxy_config_schema_attributes.py b/lib/galaxy/config/_galaxy_config_schema_attributes.py
index 23db4b9813b5..6611685f35b0 100644
--- a/lib/galaxy/config/_galaxy_config_schema_attributes.py
+++ b/lib/galaxy/config/_galaxy_config_schema_attributes.py
@@ -469,6 +469,7 @@ class GalaxyAppConfigurationAttributes:
     dispatch_notifications_interval: int
     help_forum_api_url: str
     enable_help_forum_tool_panel_integration: bool
+    enable_tool_installation_request_form: bool
     file_source_temp_dir: str | None
     file_source_webdav_use_temp_files: bool
     file_source_listings_expiry_time: int
diff --git a/lib/galaxy/config/sample/galaxy.yml.sample b/lib/galaxy/config/sample/galaxy.yml.sample
index 8a71f9955e15..2543c476e3ed 100644
--- a/lib/galaxy/config/sample/galaxy.yml.sample
+++ b/lib/galaxy/config/sample/galaxy.yml.sample
@@ -3381,6 +3381,15 @@ galaxy:
   # This requires the help_forum_api_url to be set.
   #enable_help_forum_tool_panel_integration: false
 
+  # Enable the Tool Installation Request Form in the toolbox, allowing
+  # users to request new tools to be installed on this Galaxy instance.
+  # When enabled, a "Request Tool Installation" button will appear in
+  # the tool panel. Submitted requests are sent as notifications to all
+  # admin users via Galaxy's notification system, which must also be
+  # enabled.
+  # This requires ``enable_notification_system`` to be set to ``true``.
+  #enable_tool_installation_request_form: false
+
   # Directory to store temporary files for file sources. This defaults
   # to new_file_path if not set.
   #file_source_temp_dir: null
diff --git a/lib/galaxy/config/schemas/config_schema.yml b/lib/galaxy/config/schemas/config_schema.yml
index fe8addfbae6f..9963e1dc1034 100644
--- a/lib/galaxy/config/schemas/config_schema.yml
+++ b/lib/galaxy/config/schemas/config_schema.yml
@@ -4649,6 +4649,19 @@ mapping:
         desc: |
           Enable the integration of the Galaxy Help Forum in the tool panel. This requires the help_forum_api_url to be set.
 
+      enable_tool_installation_request_form:
+        type: bool
+        required: false
+        default: false
+        per_host: true
+        desc: |
+          Enable the Tool Installation Request Form in the toolbox, allowing users to request new tools to be installed on this Galaxy instance.
+
+          When enabled, a "Request Tool Installation" button will appear in the tool panel. Submitted requests are sent as
+          notifications to all admin users via Galaxy's notification system, which must also be enabled.
+
+          This requires ``enable_notification_system`` to be set to ``true``.
+
       file_source_temp_dir:
         type: str
         required: false
diff --git a/lib/galaxy/config/templates.py b/lib/galaxy/config/templates.py
index 04bf69adad14..855d0172e95f 100644
--- a/lib/galaxy/config/templates.py
+++ b/lib/galaxy/config/templates.py
@@ -4,11 +4,22 @@
 of `templates_dir`, passed to the `render` function). If the requested
 template path cannot be resolved with respect to this directory, the default
 template will be read from `config/templates` in the Galaxy root.
+
+Templates may ``{% include %}`` partials (shared template fragments). Partials
+are resolved via a Jinja loader with the same custom-first, package-default
+precedence as the main template. Partials are pure template body (they do not
+use the ``>>>>>>`` doc-header convention), so they are looked up directly by the
+loader rather than through :func:`_get_template_body`.
 """
 
 from pathlib import Path
 
-from jinja2 import Environment
+from jinja2 import (
+    ChoiceLoader,
+    Environment,
+    FileSystemLoader,
+    PackageLoader,
+)
 
 from galaxy.util.resources import (
     resource_path,
@@ -17,12 +28,50 @@
 
 TEMPLATE_SEP = ">>>>>>"  # Used to split templates into doc/body sections
 
+#: Loader for ``{% include %}`` partials: custom templates dir first, then the
+#: package's bundled ``templates`` directory. Matches the custom-first
+#: precedence of :func:`_get_template_path`. Built lazily-free per call (the
+#: custom dir varies per render call) -- cheap to construct.
+_PACKAGE_TEMPLATES_LOADER = PackageLoader("galaxy.config", "templates")
+
+
+def _build_loader(custom_templates_dir: str) -> ChoiceLoader:
+    return ChoiceLoader([FileSystemLoader(custom_templates_dir), _PACKAGE_TEMPLATES_LOADER])
+
+
+def render(
+    template_path: str,
+    context: dict,
+    custom_templates_dir: str,
+    autoescape: bool | None = None,
+) -> str:
+    """Read and return templated content as string.
+
+    ``autoescape`` defaults to ``True`` for HTML templates to prevent XSS.
+    Plain-text (``.txt``) templates must never be autoescaped: when left at the
+    default (``None``) they render unescaped, and explicitly passing
+    ``autoescape=True`` for a ``.txt`` template is a programming error that
+    raises ``ValueError`` rather than being silently ignored. When autoescape is
+    enabled, template authors who intentionally inject trusted HTML must mark
+    the value with the ``| safe`` filter.
 
-def render(template_path: str, context: dict, custom_templates_dir: str) -> str:
-    """Read and return templated content as string."""
+    The rendered template may ``{% include %}`` partials; those are resolved
+    via a loader with the same custom-first precedence (see module docstring).
+    Autoescape applies to partial output as well, inheriting the parent
+    environment's setting.
+    """
     with _get_template_path(template_path, custom_templates_dir).open() as f:
         template_str = _get_template_body(f.read())
-    tmpl = Environment().from_string(template_str)
+    if template_path.endswith(".txt"):
+        if autoescape is True:
+            raise ValueError(
+                f"Plain-text templates must never be autoescaped; got autoescape=True for '{template_path}'."
+            )
+        autoescape = False
+    elif autoescape is None:
+        autoescape = True
+    env = Environment(autoescape=autoescape, loader=_build_loader(custom_templates_dir))
+    tmpl = env.from_string(template_str)
     return tmpl.render(**context)
 
 
diff --git a/lib/galaxy/config/templates/mail/activation-email.html b/lib/galaxy/config/templates/mail/activation-email.html
index 6d1260db04be..3e2017078b57 100644
--- a/lib/galaxy/config/templates/mail/activation-email.html
+++ b/lib/galaxy/config/templates/mail/activation-email.html
@@ -76,7 +76,7 @@ <h3 style="font-size: 18pt;">Thanks for signing up to use Galaxy!</h3>
     </p>
 
     {% if custom_message %}
-    <p>{{ custom_message }}</p>
+    <p>{{ custom_message | safe }}</p>
     {% endif %}
     <br>
 
diff --git a/lib/galaxy/config/templates/mail/notifications/_tool_installation_request_fields.html b/lib/galaxy/config/templates/mail/notifications/_tool_installation_request_fields.html
new file mode 100644
index 000000000000..81a99a8f46ae
--- /dev/null
+++ b/lib/galaxy/config/templates/mail/notifications/_tool_installation_request_fields.html
@@ -0,0 +1,52 @@
+{# Shared tool-request field rows for the HTML email body.
+   Included by tool_installation_request-email.html and
+   tool_installation_request_confirmation-email.html. Pure partial body (no
+   >>>>>> doc header). Variables: content (a tool installation request, with a
+   `tools` array of requested-tool dicts). #}
+{% set tools = content['tools'] %}
+{% for tool in tools %}
+<table style="font-size: 12pt; border-collapse: collapse; width: 100%;{% if not loop.last %} margin-bottom: 8px;{% endif %}">
+  <tr>
+    <td style="padding: 4px 8px; font-weight: bold; white-space: nowrap;">Tool</td>
+    <td style="padding: 4px 8px;">{{ tool['name'] or tool['tool_shed_id'] or tool['tool_url'] or "(unspecified)" }}</td>
+  </tr>
+  {% if tool['tool_shed_id'] and tool['name'] %}
+  <tr>
+    <td style="padding: 4px 8px; font-weight: bold; white-space: nowrap;">Tool shed ID</td>
+    <td style="padding: 4px 8px;">{{ tool['tool_shed_id'] }}</td>
+  </tr>
+  {% endif %}
+  {% if tool['tool_url'] and (tool['name'] or tool['tool_shed_id']) %}
+  <tr>
+    <td style="padding: 4px 8px; font-weight: bold; white-space: nowrap;">URL</td>
+    <td style="padding: 4px 8px;">{{ tool['tool_url'] }}</td>
+  </tr>
+  {% endif %}
+  {% if tool['description'] %}
+  <tr>
+    <td style="padding: 4px 8px; font-weight: bold; white-space: nowrap; vertical-align: top;">Description</td>
+    <td style="padding: 4px 8px; white-space: pre-line;">{{ tool['description'] }}</td>
+  </tr>
+  {% endif %}
+  {% if tool['scientific_domain'] %}
+  <tr>
+    <td style="padding: 4px 8px; font-weight: bold; white-space: nowrap;">Scientific domain</td>
+    <td style="padding: 4px 8px;">{{ tool['scientific_domain'] }}</td>
+  </tr>
+  {% endif %}
+  {% if tool['requested_version'] %}
+  <tr>
+    <td style="padding: 4px 8px; font-weight: bold; white-space: nowrap;">Requested version</td>
+    <td style="padding: 4px 8px;">{{ tool['requested_version'] }}</td>
+  </tr>
+  {% endif %}
+</table>
+{% endfor %}
+{% if content['additional_remarks'] %}
+<table style="font-size: 12pt; border-collapse: collapse; width: 100%;">
+  <tr>
+    <td style="padding: 4px 8px; font-weight: bold; white-space: nowrap; vertical-align: top;">Additional remarks</td>
+    <td style="padding: 4px 8px; white-space: pre-line;">{{ content['additional_remarks'] }}</td>
+  </tr>
+</table>
+{% endif %}
diff --git a/lib/galaxy/config/templates/mail/notifications/_tool_installation_request_fields.txt b/lib/galaxy/config/templates/mail/notifications/_tool_installation_request_fields.txt
new file mode 100644
index 000000000000..41455a7d9d25
--- /dev/null
+++ b/lib/galaxy/config/templates/mail/notifications/_tool_installation_request_fields.txt
@@ -0,0 +1,28 @@
+{#- Shared tool-request field block for the plain-text email body.
+   Included by tool_installation_request-email.txt and
+   tool_installation_request_confirmation-email.txt. Pure partial body (no
+   >>>>>> doc header). Variables: content (a tool installation request, with a
+   `tools` array of requested-tool dicts). Multiline values are indented so
+   user-supplied text cannot mimic a field row at column 0. -#}
+{%- macro tool_label(tool) -%}
+{{ tool['name'] or tool['tool_shed_id'] or tool['tool_url'] or "(unspecified)" }}
+{%- endmacro -%}
+{%- set tools = content['tools'] -%}
+{%- if tools | length == 1 -%}
+{%- set tool = tools[0] -%}
+Tool:         {{ tool_label(tool) }}
+{% if tool['tool_shed_id'] and tool['name'] %}Tool shed:    {{ tool['tool_shed_id'] }}
+{% endif %}{% if tool['tool_url'] and (tool['name'] or tool['tool_shed_id']) %}URL:          {{ tool['tool_url'] }}
+{% endif %}{% if tool['description'] %}Description:  {{ tool['description'] | replace("\n", "\n              ") }}
+{% endif %}{% if tool['scientific_domain'] %}Domain:       {{ tool['scientific_domain'] }}
+{% endif %}{% if tool['requested_version'] %}Version:      {{ tool['requested_version'] }}
+{% endif %}{% else -%}
+Tools:
+{% for tool in tools %}  - {{ tool_label(tool) }}
+{% if tool['tool_shed_id'] and tool['name'] %}    Tool shed:    {{ tool['tool_shed_id'] }}
+{% endif %}{% if tool['tool_url'] and (tool['name'] or tool['tool_shed_id']) %}    URL:          {{ tool['tool_url'] }}
+{% endif %}{% if tool['description'] %}    Description:  {{ tool['description'] | replace("\n", "\n                  ") }}
+{% endif %}{% if tool['scientific_domain'] %}    Domain:       {{ tool['scientific_domain'] }}
+{% endif %}{% if tool['requested_version'] %}    Version:      {{ tool['requested_version'] }}
+{% endif %}{% endfor %}{% endif %}{% if content['additional_remarks'] %}Remarks:      {{ content['additional_remarks'] | replace("\n", "\n              ") }}
+{% endif -%}
diff --git a/lib/galaxy/config/templates/mail/notifications/message-email.html b/lib/galaxy/config/templates/mail/notifications/message-email.html
index 7c5045077dee..5647359c76f2 100644
--- a/lib/galaxy/config/templates/mail/notifications/message-email.html
+++ b/lib/galaxy/config/templates/mail/notifications/message-email.html
@@ -46,7 +46,7 @@
       <br><br>
       <strong>Message:</strong>
       <br>
-      {{ content['message'] }}
+      {{ content['message'] | safe }}
       <br><br>
     </p>
     
diff --git a/lib/galaxy/config/templates/mail/notifications/tool_installation_request-email.html b/lib/galaxy/config/templates/mail/notifications/tool_installation_request-email.html
new file mode 100644
index 000000000000..d48c97a92310
--- /dev/null
+++ b/lib/galaxy/config/templates/mail/notifications/tool_installation_request-email.html
@@ -0,0 +1,114 @@
+Use this template to customize the HTML email your admins will receive
+when a user submits a tool installation request.
+Copy the file to {{ templates_dir }}/mail/notifications/tool_installation_request-email.html and modify as required.
+
+If you are adding URLs, remember that only absolute URLs (with
+a domain name) make sense in email! They can be served from any stable
+location, including your Galaxy server or GitHub.
+
+The following variables are available for inserting into the HTML with Jinja2
+syntax, like {{ variable_name }}. They will be rendered into the text before
+the email is sent:
+
+- name                      The admin's name
+- user_email                The admin's email
+- date                      Date and time of the notification
+- hostname                  Your galaxy's hostname (i.e. usegalaxy.* or the value in `server_name` from the galaxy config file)
+- contact_email             Your galaxy's contact email
+- notification_settings_url The URL to the admin's notification settings to manage their subscriptions
+- variant                   The notification variant indicates the level of importance of the notification (i.e. info, warning, urgent)
+- content                   The tool_installation_request payload
+  - tools                   List of requested tools. Each entry may provide:
+    - name                  Human-readable tool name (optional)
+    - tool_shed_id          Tool shed repository ID (optional)
+    - tool_url              Homepage or repository URL for the tool (optional)
+    - description           Description of the tool and its use case (optional)
+    - scientific_domain     Scientific domain (optional)
+    - requested_version     Requested version (optional)
+  - requester_email         The email address of the requester
+  - workflow_id             Encoded ID of the workflow requiring these tools (optional)
+  - additional_remarks      Any additional information provided by the requester (optional)
+- workflow_name             Resolved workflow name (if workflow_id can be resolved)
+- galaxy_url                The URL to the Galaxy instance (i.e. https://usegalaxy.*)
+
+Template begins here >>>>>>
+<!DOCTYPE html>
+<html lang="en" dir="ltr">
+  <head>
+    <meta charset="utf-8">
+    <title>[Galaxy] Tool installation request</title>
+    <link href="https://fonts.googleapis.com/css2?family=Roboto&display=swap" rel="stylesheet">
+  </head>
+  <body style="font-family: 'Roboto', sans-serif;">
+
+    <p style="font-size: 12pt;">
+      Hello {{ name }},<br><br>
+
+      A user has submitted a request to install
+      {% if content['tools'] | length == 1 %}a new tool{% else %}new tools{% endif %}
+      on <b>{{ hostname }}</b> on <b>{{ date }}</b>.
+    </p>
+
+    {% include "mail/notifications/_tool_installation_request_fields.html" %}
+
+    <table style="font-size: 12pt; border-collapse: collapse; width: 100%;">
+      {% if content['workflow_id'] %}
+      <tr>
+        <td style="padding: 4px 8px; font-weight: bold; white-space: nowrap;">Workflow</td>
+        <td style="padding: 4px 8px;">
+          {% if workflow_name and galaxy_url %}
+          <a href="{{ galaxy_url }}/workflows/run?id={{ content['workflow_id'] }}">{{ workflow_name }}</a>
+          {% elif workflow_name %}
+          {{ workflow_name }}
+          {% else %}
+          {{ content['workflow_id'] }}
+          {% endif %}
+        </td>
+      </tr>
+      {% endif %}
+      {% if content['requester_email'] %}
+      <tr>
+        <td style="padding: 4px 8px; font-weight: bold; white-space: nowrap;">Requested by</td>
+        <td style="padding: 4px 8px;">{{ content['requester_email'] }}</td>
+      </tr>
+      {% endif %}
+    </table>
+
+    <p style="font-size: 12pt;">
+      {% if galaxy_url %}
+      You can review the notification in Galaxy: <a href="{{ galaxy_url }}/user/notifications">View notifications</a>
+      {% endif %}
+    </p>
+
+    <p style="font-size: 12pt;">
+      Thank you for administering Galaxy!
+    </p>
+
+    <p style="font-size: 12pt;">
+      Regards,<br>
+      Your Galaxy Team at <a href="{{ galaxy_url }}">{{ hostname }}</a>
+    </p>
+
+    <p style="font-size: 10pt;">
+      You received this email because you are an administrator of this Galaxy instance.
+      {% if notification_settings_url %}
+      You can manage your notification settings <a href="{{ notification_settings_url }}">here</a>.
+      {% endif %}
+
+      <br>
+
+      {% if contact_email %}
+      This is an automated email. If you have any questions or concerns, please do not reply to this email, instead, contact us at <a href="mailto:{{ contact_email }}">{{ contact_email }}</a>.
+      {% endif %}
+    </p>
+
+    <img
+      style="width: 130px; height: auto; margin: 15px 0;"
+      src="https://galaxyproject.org/images/galaxy-logos/galaxy_project_logo_square.png"
+      alt="Galaxy project logo"
+    >
+
+    <br>
+
+  </body>
+</html>
diff --git a/lib/galaxy/config/templates/mail/notifications/tool_installation_request-email.txt b/lib/galaxy/config/templates/mail/notifications/tool_installation_request-email.txt
new file mode 100644
index 000000000000..27b71c57e8c6
--- /dev/null
+++ b/lib/galaxy/config/templates/mail/notifications/tool_installation_request-email.txt
@@ -0,0 +1,60 @@
+Use this template to customize the text email your admins will receive
+when a user submits a tool installation request.
+Copy the file to {{ templates_dir }}/mail/notifications/tool_installation_request-email.txt and modify as required.
+
+If you are adding URLs, remember that only absolute URLs (with
+a domain name) make sense in email! They can be served from any stable
+location, including your Galaxy server or GitHub.
+
+The following variables are available for inserting into the text like
+{{ variable_name }}. They will be rendered into the text before the email is
+sent:
+
+- name                      The admin's name
+- user_email                The admin's email
+- date                      Date and time of the notification
+- hostname                  Your galaxy's hostname (i.e. usegalaxy.* or the value in `server_name` from the galaxy config file)
+- contact_email             Your galaxy's contact email
+- notification_settings_url The URL to the admin's notification settings to manage their subscriptions
+- variant                   The notification variant indicates the level of importance of the notification (i.e. info, warning, urgent)
+- content                   The tool_installation_request payload
+  - tools                   List of requested tools. Each entry may provide:
+    - name                  Human-readable tool name (optional)
+    - tool_shed_id          Tool shed repository ID (optional)
+    - tool_url              Homepage or repository URL for the tool (optional)
+    - description           Description of the tool and its use case (optional)
+    - scientific_domain     Scientific domain (optional)
+    - requested_version     Requested version (optional)
+  - requester_email         The email address of the requester
+  - workflow_id             Encoded ID of the workflow requiring these tools (optional)
+  - additional_remarks      Any additional information provided by the requester (optional)
+- workflow_name             Resolved workflow name (if workflow_id can be resolved)
+- galaxy_url                The URL to the Galaxy instance (i.e. https://usegalaxy.*)
+
+Template begins here>>>>>>
+Hello {{ name }},
+
+A user has submitted a request to install {% if content['tools'] | length == 1 %}a new tool{% else %}new tools{% endif %} on {{ hostname }} on {{ date }}.
+
+{% include "mail/notifications/_tool_installation_request_fields.txt" %}{% if content['workflow_id'] %}Workflow:     {{ workflow_name if workflow_name else content['workflow_id'] }}
+{% endif %}{% if content['requester_email'] %}Requested by: {{ content['requester_email'] }}
+{% endif %}
+{% if galaxy_url %}
+You can review the notification in Galaxy: {{ galaxy_url }}/user/notifications
+{% endif %}
+
+Thank you for administering Galaxy!
+
+Regards,
+Your Galaxy Team at {{ hostname }}
+
+---
+
+You received this email because you are an administrator of this Galaxy instance.
+{% if notification_settings_url %}
+To manage your notification settings, please visit {{ notification_settings_url }}.
+{% endif %}
+
+{% if contact_email %}
+This is an automated email. If you have any questions or concerns, please do not reply to this email, instead, contact us at {{ contact_email }}.
+{% endif %}
diff --git a/lib/galaxy/config/templates/mail/notifications/tool_installation_request_confirmation-email.html b/lib/galaxy/config/templates/mail/notifications/tool_installation_request_confirmation-email.html
new file mode 100644
index 000000000000..89e94d0699ea
--- /dev/null
+++ b/lib/galaxy/config/templates/mail/notifications/tool_installation_request_confirmation-email.html
@@ -0,0 +1,27 @@
+Use this template to customize the HTML email a user will receive
+when they submit a tool installation request.
+
+Template begins here >>>>>>
+<!DOCTYPE html>
+<html lang="en" dir="ltr">
+  <head>
+    <meta charset="utf-8">
+    <title>[Galaxy] Tool installation request submitted</title>
+    <link href="https://fonts.googleapis.com/css2?family=Roboto&display=swap" rel="stylesheet">
+  </head>
+  <body style="font-family: 'Roboto', sans-serif;">
+
+    <p style="font-size: 12pt;">
+      Hello {{ name }},<br><br>
+
+      Your request to install the following tool(s) on <b>{{ hostname }}</b> has been submitted to the administrators:
+    </p>
+
+    {% include "mail/notifications/_tool_installation_request_fields.html" %}
+
+    <p style="font-size: 10pt; color: #666; margin-top: 20px;">
+      You received this email because you submitted a tool installation request on this Galaxy instance.
+    </p>
+
+  </body>
+</html>
diff --git a/lib/galaxy/config/templates/mail/notifications/tool_installation_request_confirmation-email.txt b/lib/galaxy/config/templates/mail/notifications/tool_installation_request_confirmation-email.txt
new file mode 100644
index 000000000000..b5ebadc820e0
--- /dev/null
+++ b/lib/galaxy/config/templates/mail/notifications/tool_installation_request_confirmation-email.txt
@@ -0,0 +1,12 @@
+Use this template to customize the text email a user will receive
+when they submit a tool installation request.
+
+Template begins here>>>>>>
+Hello {{ name }},
+
+Your request to install the following tool(s) on {{ hostname }} has been submitted to the administrators:
+
+{% include "mail/notifications/_tool_installation_request_fields.txt" %}
+---
+
+You received this email because you submitted a tool installation request on this Galaxy instance.
diff --git a/lib/galaxy/managers/configuration.py b/lib/galaxy/managers/configuration.py
index ad085d3668e0..a367d9b42ee1 100644
--- a/lib/galaxy/managers/configuration.py
+++ b/lib/galaxy/managers/configuration.py
@@ -7,9 +7,7 @@
 
 import logging
 import sys
-from typing import (
-    Any,
-)
+from typing import Any
 
 from galaxy.managers import base
 from galaxy.managers.context import ProvidesUserContext
@@ -245,6 +243,7 @@ def _config_is_truthy(item, key, **context):
             "fixed_delegated_auth": _defaults_to(False),
             "help_forum_api_url": _use_config,
             "enable_help_forum_tool_panel_integration": _use_config,
+            "enable_tool_installation_request_form": _use_config,
             "llm_api_configured": lambda item, key, **context: bool(
                 item.ai_api_key or item.ai_api_base_url or getattr(item, "inference_services", None)
             ),
diff --git a/lib/galaxy/managers/notification.py b/lib/galaxy/managers/notification.py
index 39e1d0ecbe3a..bad5f676c56e 100644
--- a/lib/galaxy/managers/notification.py
+++ b/lib/galaxy/managers/notification.py
@@ -3,6 +3,7 @@
 from datetime import datetime
 from enum import Enum
 from typing import (
+    Any,
     cast,
     NamedTuple,
 )
@@ -23,7 +24,10 @@
     update,
 )
 from sqlalchemy.engine import CursorResult
-from sqlalchemy.orm import InstrumentedAttribute
+from sqlalchemy.orm import (
+    InstrumentedAttribute,
+    object_session,
+)
 from sqlalchemy.sql import Select
 from typing_extensions import Protocol
 
@@ -43,16 +47,19 @@
     DatasetStorageOperationRun,
     GroupRoleAssociation,
     Notification,
+    StoredWorkflow,
     User,
     UserGroupAssociation,
     UserNotificationAssociation,
     UserRoleAssociation,
 )
 from galaxy.model.scoped_session import galaxy_scoped_session
+from galaxy.schema.fields import decode_id
 from galaxy.schema.notifications import (
     AnyNotificationContent,
     BroadcastNotificationCreateRequest,
     BroadcastNotificationResponse,
+    InternalNotificationCreateData,
     MandatoryNotificationCategory,
     MessageNotificationContent,
     NewSharedItemNotificationContent,
@@ -66,7 +73,9 @@
     NotificationResponse,
     NotificationVariant,
     PersonalNotificationCategory,
+    RequestedTool,
     StorageOperationNotificationContent,
+    ToolInstallationRequestNotificationContent,
     UpdateUserNotificationPreferencesRequest,
     UserNotificationPreferences,
     UserNotificationUpdateRequest,
@@ -80,6 +89,10 @@
 
 log = logging.getLogger(__name__)
 
+# Sentinel for the cached workflow_name lookup: distinguishes "not yet resolved"
+# from "resolved to None" (a valid result when the workflow cannot be found).
+_UNSET: Any = object()
+
 
 NOTIFICATION_PREFERENCES_SECTION_NAME = "notifications"
 
@@ -212,7 +225,7 @@ def send_storage_operation_notification(
 
         notification_request = NotificationCreateRequest(
             recipients=NotificationRecipients.model_construct(user_ids=[user_id]),
-            notification=NotificationCreateData(
+            notification=InternalNotificationCreateData(
                 source="galaxy",
                 category=PersonalNotificationCategory.storage_operation,
                 variant=variant,
@@ -245,8 +258,9 @@ def send_notification_internal(
     ) -> NotificationCreatedResponse | AsyncTaskResultSummary:
         """Sends a notification to a list of recipients (users, groups or roles).
 
-        If `force_sync` is set to `True`, the notification recipients will be processed synchronously instead of
-        in a background task.
+        If `force_sync` is set to `True`, recipient association creation will be
+        processed synchronously instead of in a background task. Other notification
+        channels are still dispatched by the regular background dispatcher.
 
         Note: This function is meant for internal use from other callers that don't need to check sender permissions.
         """
@@ -259,6 +273,8 @@ def send_notification_internal(
             return async_task_summary(result)
 
         notification, recipient_user_count = self.send_notification_to_recipients(request)
+        if notification is None:
+            raise RuntimeError("Expected notification to be created before delivery.")
         return NotificationCreatedResponse(
             total_notifications_sent=recipient_user_count,
             notification=NotificationResponse.model_validate(notification),
@@ -328,10 +344,11 @@ def get_pending_notifications(self):
 
     def _dispatch_notification_to_users(self, notification: Notification):
         users = self._get_associated_users(notification)
+        category = cast(PersonalNotificationCategory, notification.category)
         for user in users:
             try:
                 if self._is_user_subscribed_to_notification(user, notification):
-                    settings = self._get_user_category_settings(user, notification.category)  # type: ignore[arg-type]
+                    settings = self._get_user_category_settings(user, category)
                     self._send_via_channels(notification, user, settings.channels)
             except Exception as e:
                 log.error(f"Error sending notification to user {user.id}. Reason: {util.unicodify(e)}")
@@ -354,7 +371,8 @@ def _is_user_subscribed_to_notification(self, user: User, notification: Notifica
         if self._is_urgent(notification):
             # Urgent notifications are always sent
             return True
-        category_settings = self._get_user_category_settings(user, notification.category)  # type: ignore[arg-type]
+        category = cast(PersonalNotificationCategory, notification.category)
+        category_settings = self._get_user_category_settings(user, category)
         return self._is_subscribed_to_category(category_settings)
 
     def _send_via_channels(self, notification: Notification, user: User, channel_settings: NotificationChannelSettings):
@@ -772,10 +790,11 @@ class NotificationContext(BaseModel):
     user_email: str
     date: str
     hostname: str
-    contact_email: str
+    contact_email: str | None = None
     variant: str
-    notification_settings_url: str
+    notification_settings_url: str | None = None
     content: AnyNotificationContent
+    workflow_name: str | None = None
     galaxy_url: str | None = None
 
 
@@ -828,17 +847,39 @@ def build_context(self, template_format: TemplateFormats) -> NotificationContext
             galaxy_url=self.notification.galaxy_url,
         )
 
+    def get_template_path(self, template_format: TemplateFormats) -> str:
+        """Returns the path of the template used to render the email body.
+
+        Subclasses can override this to select a different template (e.g. a
+        confirmation template for a specific recipient) without re-implementing
+        the whole render pipeline.
+        """
+        return f"mail/notifications/{self.notification.category}-email.{template_format.value}"
+
+    #: Whether the HTML body should be autoescaped. Defaults to ``True`` to
+    #: secure templates that render raw user-supplied content. Templates that
+    #: inject pre-rendered HTML (e.g. via ``to_html``) must opt out by setting
+    #: this to ``False``; document the reason at the opt-out site.
+    autoescape_html: bool = True
+
     def get_body(self, template_format: TemplateFormats) -> str:
-        template_path = f"mail/notifications/{self.notification.category}-email.{template_format.value}"
+        template_path = self.get_template_path(template_format)
         context = self.build_context(template_format)
+        # Only autoescape when the builder opts in, and never for plain text.
+        autoescape = self.autoescape_html and template_format == TemplateFormats.HTML
         return templates.render(
             template_path,
             context.model_dump(),
             self.config.templates_dir,
+            autoescape=autoescape,
         )
 
 
 class MessageEmailNotificationTemplateBuilder(EmailNotificationTemplateBuilder):
+    # content['message'] is pre-rendered to HTML via to_html() and is marked
+    # | safe in the template; the remaining fields (subject, name, hostname) are
+    # raw/user-controlled, so keep autoescape on to escape them.
+    autoescape_html = True
     markdown_to = {
         TemplateFormats.HTML: to_html,
         TemplateFormats.TXT: lambda x: x,  # TODO: strip markdown?
@@ -855,6 +896,9 @@ def get_subject(self) -> str:
 
 
 class NewSharedItemEmailNotificationTemplateBuilder(EmailNotificationTemplateBuilder):
+    # item_name/owner_name are raw user-supplied strings; escape them in HTML.
+    autoescape_html = True
+
     def get_content(self, template_format: TemplateFormats) -> AnyNotificationContent:
         content = NewSharedItemNotificationContent.model_construct(**self.notification.content)  # type: ignore[arg-type]
         return content
@@ -865,6 +909,9 @@ def get_subject(self) -> str:
 
 
 class StorageOperationEmailNotificationTemplateBuilder(EmailNotificationTemplateBuilder):
+    # content['message'] is pre-rendered to HTML via to_html(); autoescape would
+    # double-escape it, so this template must opt out.
+    autoescape_html = False
     markdown_to = {
         TemplateFormats.HTML: to_html,
         TemplateFormats.TXT: lambda x: x,
@@ -880,12 +927,98 @@ def get_subject(self) -> str:
         return f"[Galaxy] {content.subject}"
 
 
+class ToolInstallationRequestEmailNotificationTemplateBuilder(EmailNotificationTemplateBuilder):
+    _workflow_name: Any = _UNSET
+    _content: Any = _UNSET
+    # Tool request fields are raw user input; escape them in the HTML body.
+    autoescape_html = True
+
+    def get_content(self, template_format: TemplateFormats) -> AnyNotificationContent:
+        # model_validate (not model_construct): the stored JSON holds the nested
+        # tools as plain dicts, which must be coerced into RequestedTool models
+        # for the attribute access in _tool_label/get_subject. The content is
+        # format-independent for this builder and consulted several times per
+        # email (subject, template selection, both bodies), so validate once.
+        if self._content is _UNSET:
+            self._content = ToolInstallationRequestNotificationContent.model_validate(self.notification.content)
+        return self._content
+
+    def _is_confirmation(self) -> bool:
+        """Whether this email renders the request confirmation sent to the requester.
+
+        The service stamps ``is_confirmation`` on the notification content when
+        building the requester's copy, so the template is selected from a real
+        content field rather than by re-inferring the recipient's identity from
+        email-string matching at render time.
+        """
+        content = cast(ToolInstallationRequestNotificationContent, self.get_content(TemplateFormats.TXT))
+        return bool(content.is_confirmation)
+
+    def get_template_path(self, template_format: TemplateFormats) -> str:
+        if self._is_confirmation():
+            return f"mail/notifications/tool_installation_request_confirmation-email.{template_format.value}"
+        return super().get_template_path(template_format)
+
+    def build_context(self, template_format: TemplateFormats) -> NotificationContext:
+        context = EmailNotificationTemplateBuilder.build_context(self, template_format)
+        content = cast(ToolInstallationRequestNotificationContent, context.content)
+        workflow_name = self._get_workflow_name(content.workflow_id)
+        return context.model_copy(update={"workflow_name": workflow_name})
+
+    def _get_workflow_name(self, workflow_id: str | None) -> str | None:
+        # Resolved once per builder; send() renders both TXT and HTML bodies,
+        # so caching avoids a duplicate StoredWorkflow lookup.
+        if self._workflow_name is not _UNSET:
+            return self._workflow_name
+        self._workflow_name = self._resolve_workflow_name(workflow_id)
+        return self._workflow_name
+
+    def _resolve_workflow_name(self, workflow_id: str | None) -> str | None:
+        if not workflow_id:
+            return None
+        try:
+            workflow_db_id = decode_id(workflow_id)
+        except Exception:
+            return None
+
+        session = object_session(self.notification)
+        if session is None:
+            return None
+
+        stored_workflow = session.get(StoredWorkflow, workflow_db_id)
+        return stored_workflow.name if stored_workflow else None
+
+    #: Subject lines must stay well under the RFC 5322 998-char header limit;
+    #: a space-free label (e.g. a long URL) cannot be folded by the mailer.
+    _SUBJECT_LABEL_MAX_LENGTH = 100
+
+    @classmethod
+    def _tool_label(cls, tool: RequestedTool) -> str:
+        """A display label for a requested tool: name, else shed id, else URL; truncated for header use."""
+        label = tool.name or tool.tool_shed_id or tool.tool_url or "(unspecified)"
+        if len(label) > cls._SUBJECT_LABEL_MAX_LENGTH:
+            label = f"{label[:cls._SUBJECT_LABEL_MAX_LENGTH]}..."
+        return label
+
+    def get_subject(self) -> str:
+        content = cast(ToolInstallationRequestNotificationContent, self.get_content(TemplateFormats.TXT))
+        tools = content.tools
+        if self._is_confirmation():
+            if len(tools) == 1:
+                return f"[Galaxy] Tool installation request submitted: {self._tool_label(tools[0])}"
+            return f"[Galaxy] Tool installation request submitted ({len(tools)} tools)"
+        if len(tools) == 1:
+            return f"[Galaxy] Tool installation request: {self._tool_label(tools[0])}"
+        return f"[Galaxy] Tool installation request ({len(tools)} tools)"
+
+
 class EmailNotificationChannelPlugin(NotificationChannelPlugin):
     # Register the supported email templates here
     email_templates_by_category: dict[PersonalNotificationCategory, type[EmailNotificationTemplateBuilder]] = {
         PersonalNotificationCategory.message: MessageEmailNotificationTemplateBuilder,
         PersonalNotificationCategory.new_shared_item: NewSharedItemEmailNotificationTemplateBuilder,
         PersonalNotificationCategory.storage_operation: StorageOperationEmailNotificationTemplateBuilder,
+        PersonalNotificationCategory.tool_installation_request: ToolInstallationRequestEmailNotificationTemplateBuilder,
     }
 
     def send(self, notification: Notification, user: User):
diff --git a/lib/galaxy/managers/users.py b/lib/galaxy/managers/users.py
index a6b35ce81b56..0270d8bbea65 100644
--- a/lib/galaxy/managers/users.py
+++ b/lib/galaxy/managers/users.py
@@ -586,8 +586,18 @@ def send_activation_email(self, trans, email, username):
             "custom_message": self.app.config.custom_activation_email_message,
             "expiry_days": self.app.config.activation_grace_period,
         }
-        body = templates.render(TXT_ACTIVATION_EMAIL_TEMPLATE_RELPATH, template_context, self.app.config.templates_dir)
-        html = templates.render(HTML_ACTIVATION_EMAIL_TEMPLATE_RELPATH, template_context, self.app.config.templates_dir)
+        # The HTML body is autoescaped to prevent XSS via attacker-influenced
+        # values such as the Host-derived ``hostname``; pre-escaped ``Markup``
+        # values (``name``/``user_email``) pass through unchanged under
+        # autoescape, and the admin's ``custom_message`` is marked ``| safe`` in
+        # the template. The plain-text body is never autoescaped (see
+        # templates.render's ``.txt`` guard).
+        body = templates.render(
+            TXT_ACTIVATION_EMAIL_TEMPLATE_RELPATH, template_context, self.app.config.templates_dir, autoescape=False
+        )
+        html = templates.render(
+            HTML_ACTIVATION_EMAIL_TEMPLATE_RELPATH, template_context, self.app.config.templates_dir, autoescape=True
+        )
         to = email
         subject = "Galaxy Account Activation"
         try:
diff --git a/lib/galaxy/managers/workflows.py b/lib/galaxy/managers/workflows.py
index be29643d86c0..1abf9ead16c8 100644
--- a/lib/galaxy/managers/workflows.py
+++ b/lib/galaxy/managers/workflows.py
@@ -1144,7 +1144,10 @@ def _workflow_to_dict_run(
                 if step_errors:
                     errors[step.id] = step_errors
         if missing_tools:
-            raise exceptions.MessageException(f"Following tools missing: {', '.join(missing_tools)}")
+            raise exceptions.MessageException(
+                f"Following tools missing: {', '.join(missing_tools)}",
+                missing_tool_ids=missing_tools,
+            )
         step_order_indices = {}
         for step in workflow.steps:
             step_order_indices[step.id] = step.order_index
diff --git a/lib/galaxy/schema/notifications.py b/lib/galaxy/schema/notifications.py
index f8e1b0a558ea..25d2c180133e 100644
--- a/lib/galaxy/schema/notifications.py
+++ b/lib/galaxy/schema/notifications.py
@@ -1,3 +1,4 @@
+import re
 from datetime import datetime
 from enum import Enum
 from typing import (
@@ -11,6 +12,8 @@
 from pydantic import (
     ConfigDict,
     Field,
+    field_validator,
+    model_validator,
     RootModel,
 )
 
@@ -62,6 +65,7 @@ class PersonalNotificationCategory(str, Enum):
     message = "message"
     new_shared_item = "new_shared_item"
     storage_operation = "storage_operation"
+    tool_installation_request = "tool_installation_request"
     # TODO: enable this and create content model when we have a hook for completed workflows
     # workflow_execution_completed = "workflow_execution_completed"
 
@@ -137,6 +141,182 @@ class StorageOperationNotificationContent(MessageNotificationContentBase):
     skipped_count: int = Field(default=0, title="Skipped Count", description="Skipped datasets count.")
 
 
+# Tool-request fields are raw user input that ends up in emails (including the
+# subject header) and notification cards. Control characters would allow forging
+# extra lines in the plain-text emails or break SMTP header construction, and
+# whitespace-only values would defeat the "must have an identifier" invariant,
+# so all free-text fields are normalized on validation.
+# C0/C1 controls and DEL, plus the Unicode line/paragraph separators, all of
+# which can start a new line in Unicode-aware renderers.
+_CONTROL_CHARS = re.compile(r"[\x00-\x1f\x7f-\x9f\u2028\u2029]+")
+_CONTROL_CHARS_EXCEPT_NEWLINE = re.compile(r"[\x00-\x09\x0b-\x1f\x7f-\x9f\u2028\u2029]+")
+# NEL and the Unicode line/paragraph separators, normalized to \n in multiline fields.
+_UNICODE_LINE_BREAKS = re.compile(r"[\x85\u2028\u2029]")
+# Invisible/format characters: zero-width chars that would render blank labels,
+# bidi embedding/override/isolate controls that can visually reverse rendered
+# text (RTL spoofing), invisible operators, and Unicode tag characters.
+_INVISIBLE_CHARS = re.compile(
+    r"[\u00ad\u180e\u200b-\u200f\u202a-\u202e\u2060-\u2064\u2066-\u2069\ufeff\U000e0000-\U000e007f]+"
+)
+
+
+def _sanitize_single_line(value: str | None) -> str | None:
+    """Collapse control characters (including any line break) and trim; empty becomes None."""
+    if value is None:
+        return None
+    value = _CONTROL_CHARS.sub(" ", value)
+    value = _INVISIBLE_CHARS.sub("", value)
+    return value.strip() or None
+
+
+def _sanitize_multiline(value: str | None) -> str | None:
+    """Normalize all line-break forms to newlines, drop other control characters, and trim; empty becomes None."""
+    if value is None:
+        return None
+    value = value.replace("\r\n", "\n").replace("\r", "\n")
+    value = _UNICODE_LINE_BREAKS.sub("\n", value)
+    value = _CONTROL_CHARS_EXCEPT_NEWLINE.sub(" ", value)
+    value = _INVISIBLE_CHARS.sub("", value)
+    return value.strip() or None
+
+
+class RequestedTool(Model):
+    """A single requested tool in a tool installation request.
+
+    This is the per-item model: each entry describes one tool. An installation
+    request submits an array of these, wrapped by
+    :class:`ToolInstallationRequestNotificationContent` which carries the
+    request-level metadata. All fields are sanitized on validation: control
+    characters are collapsed and whitespace-only values become ``None``.
+    """
+
+    name: str | None = Field(
+        None,
+        max_length=255,
+        title="Tool name",
+        description="The human-readable name of the tool, if known.",
+    )
+    tool_shed_id: str | None = Field(
+        None,
+        max_length=255,
+        title="Tool shed ID",
+        description="The fully qualified tool shed repository ID "
+        "(e.g. ``toolshed.g2.bx.psu.edu/repos/devteam/bwa``), if known.",
+    )
+    tool_url: str | None = Field(
+        None,
+        max_length=2048,
+        title="Tool URL",
+        description="Homepage or repository URL for the requested tool. Must be an http(s) URL.",
+    )
+    requested_version: str | None = Field(
+        None, max_length=255, title="Requested version", description="The version of the tool being requested, if any."
+    )
+    description: str | None = Field(
+        None,
+        max_length=5000,
+        title="Description",
+        description="Short description of the tool and its scientific use case.",
+    )
+    scientific_domain: str | None = Field(
+        None, max_length=255, title="Scientific domain", description="The scientific domain for the requested tool."
+    )
+
+    # mode="before" so the max_length bounds apply to the sanitized value
+    # (e.g. CRLF text that fits after normalization is not rejected).
+    @field_validator("name", "tool_shed_id", "tool_url", "requested_version", "scientific_domain", mode="before")
+    @classmethod
+    def _sanitize_single_line_fields(cls, value: Any) -> Any:
+        return _sanitize_single_line(value) if isinstance(value, str) else value
+
+    @field_validator("description", mode="before")
+    @classmethod
+    def _sanitize_description(cls, value: Any) -> Any:
+        return _sanitize_multiline(value) if isinstance(value, str) else value
+
+    @field_validator("tool_url", mode="after")
+    @classmethod
+    def _tool_url_must_be_http(cls, value: str | None) -> str | None:
+        # Scheme is case-insensitive per RFC 3986.
+        if value and not value.lower().startswith(("http://", "https://")):
+            raise ValueError("tool_url must be an http(s) URL")
+        return value
+
+    @model_validator(mode="after")
+    def _has_identifier(self) -> "RequestedTool":
+        # A requested tool must be identifiable somehow: a name, a shed id, or a URL.
+        # Sanitization has already turned whitespace-only values into None.
+        if not (self.name or self.tool_shed_id or self.tool_url):
+            raise ValueError("a requested tool must provide at least one of name, tool_shed_id, or tool_url")
+        return self
+
+
+class ToolInstallationRequestCreateContent(Model):
+    """The client-submittable (request) shape of a tool installation request.
+
+    Carries only the fields a user supplies: the requested ``tools`` and
+    request-level metadata (workflow context, remarks). The two server-stamped
+    fields -- ``requester_email`` and ``is_confirmation`` -- are deliberately
+    absent so they cannot be set by clients and do not appear in the POST
+    request schema. The service stamps them, promoting the content to a
+    :class:`ToolInstallationRequestNotificationContent` for persistence.
+    """
+
+    category: Literal[PersonalNotificationCategory.tool_installation_request] = (
+        PersonalNotificationCategory.tool_installation_request
+    )
+    tools: list[RequestedTool] = Field(
+        ...,
+        min_length=1,
+        max_length=50,
+        title="Requested tools",
+        description="The tools being requested. Each entry describes a single tool.",
+    )
+    workflow_id: str | None = Field(
+        None,
+        max_length=255,
+        title="Workflow ID",
+        description="Encoded ID of the workflow requiring these tools, if applicable.",
+    )
+    additional_remarks: str | None = Field(
+        None,
+        max_length=5000,
+        title="Additional remarks",
+        description="Any additional information or context for the request.",
+    )
+
+    @field_validator("workflow_id", mode="before")
+    @classmethod
+    def _sanitize_workflow_id(cls, value: Any) -> Any:
+        return _sanitize_single_line(value) if isinstance(value, str) else value
+
+    @field_validator("additional_remarks", mode="before")
+    @classmethod
+    def _sanitize_additional_remarks(cls, value: Any) -> Any:
+        return _sanitize_multiline(value) if isinstance(value, str) else value
+
+
+class ToolInstallationRequestNotificationContent(ToolInstallationRequestCreateContent):
+    """The persisted/response shape of a tool installation request.
+
+    Extends the create model with the two server-stamped fields. ``requester_email``
+    is derived from the authenticated submitter; ``is_confirmation`` selects the
+    confirmation vs. admin-facing email template. Both are written by the service
+    and never trusted from the client.
+    """
+
+    requester_email: str | None = Field(
+        None,
+        title="Requester email",
+        description="Email address of the user who made the request.",
+    )
+    is_confirmation: bool = Field(
+        default=False,
+        title="Is confirmation",
+        description="True on the copy sent to the user who made the request; False on the request sent to admins.",
+    )
+
+
 NotificationContentField = Field(
     default=...,
     discriminator="category",
@@ -144,8 +324,14 @@ class StorageOperationNotificationContent(MessageNotificationContentBase):
     description="The content of the notification. The structure depends on the category.",
 )
 
+# Content models shared verbatim between the response and create unions; the
+# two unions below differ only in the tool-installation-request entry.
+_CommonUserNotificationContent = (
+    MessageNotificationContent | NewSharedItemNotificationContent | StorageOperationNotificationContent
+)
+
 AnyUserNotificationContent = Annotated[
-    MessageNotificationContent | NewSharedItemNotificationContent | StorageOperationNotificationContent,
+    _CommonUserNotificationContent | ToolInstallationRequestNotificationContent,
     NotificationContentField,
 ]
 
@@ -154,6 +340,20 @@ class StorageOperationNotificationContent(MessageNotificationContentBase):
     NotificationContentField,
 ]
 
+# Request-side content union. Same as ``AnyNotificationContent`` except the
+# tool-installation-request entry uses the create-only model, which omits the
+# server-stamped ``requester_email`` / ``is_confirmation`` fields so clients
+# cannot set them and they stay out of the POST request schema.
+AnyUserNotificationCreateContent = Annotated[
+    _CommonUserNotificationContent | ToolInstallationRequestCreateContent,
+    NotificationContentField,
+]
+
+AnyNotificationCreateContent = Annotated[
+    AnyUserNotificationCreateContent | BroadcastNotificationContent,
+    NotificationContentField,
+]
+
 
 NotificationIdField = Field(
     ...,
@@ -275,7 +475,7 @@ class NotificationCreateData(Model):
     source: str = NotificationSourceField
     category: NotificationCategory = NotificationCategoryField
     variant: NotificationVariant = NotificationVariantField
-    content: AnyNotificationContent
+    content: AnyNotificationCreateContent
     publication_time: OffsetNaiveDatetime | None = Field(
         None,
         title="Publication time",
@@ -287,6 +487,29 @@ class NotificationCreateData(Model):
         description="The time when the notification should expire. By default it will expire after 6 months. Expired notifications will be permanently deleted.",
     )
 
+    @model_validator(mode="after")
+    def _content_matches_category(self) -> "NotificationCreateData":
+        # The content union is discriminated by its own category field; a
+        # notification whose envelope category disagrees with it would render
+        # and dispatch incorrectly, so reject it at validation time.
+        if self.content.category != self.category:
+            raise ValueError("The content category does not match the notification category.")
+        return self
+
+
+class InternalNotificationCreateData(NotificationCreateData):
+    """Internal variant of :class:`NotificationCreateData` for server-built notifications.
+
+    ``content`` is the full notification content union instead of the
+    client-submittable create union, so server-stamped content models (e.g. a
+    tool installation request carrying ``requester_email``/``is_confirmation``)
+    survive typed serialization round-trips such as the Celery task dispatch.
+    This model never appears in the API schema; clients submit
+    :class:`NotificationCreateData` instead.
+    """
+
+    content: AnyNotificationContent
+
 
 class GenericNotificationRecipients(GenericModel, Generic[DatabaseIdT], PatchGenericPickle):
     """The recipients of a notification. Can be a combination of users, groups and roles."""
@@ -324,6 +547,11 @@ class GenericNotificationCreate(GenericModel, Generic[DatabaseIdT]):
 
 
 class NotificationCreateRequest(GenericNotificationCreate[int]):
+    notification: InternalNotificationCreateData = Field(
+        ...,
+        title="Notification",
+        description="The notification to create. The structure depends on the category.",
+    )
     galaxy_url: str | None = Field(
         None,
         title="Galaxy URL",
@@ -508,8 +736,13 @@ def update(
             self.preferences.update(other)
 
     def get(self, category: PersonalNotificationCategory) -> NotificationCategorySettings:
-        """Get the notification preferences for a specific category."""
-        return self.preferences[category]
+        """Get the notification preferences for a specific category.
+
+        Falls back to default settings when the category is absent from the stored
+        preferences -- e.g. for users who saved preferences before this category was
+        introduced (no migration backfills newly added categories).
+        """
+        return self.preferences.get(category, NotificationCategorySettings())
 
     @classmethod
     def default(cls):
diff --git a/lib/galaxy/webapps/galaxy/api/notifications.py b/lib/galaxy/webapps/galaxy/api/notifications.py
index d0789bd7e463..f59ffd5095f8 100644
--- a/lib/galaxy/webapps/galaxy/api/notifications.py
+++ b/lib/galaxy/webapps/galaxy/api/notifications.py
@@ -224,7 +224,6 @@ def delete_user_notifications(
     @router.post(
         "/api/notifications",
         summary="Sends a notification to a list of recipients (users, groups or roles).",
-        require_admin=True,
     )
     def send_notification(
         self,
diff --git a/lib/galaxy/webapps/galaxy/services/notifications.py b/lib/galaxy/webapps/galaxy/services/notifications.py
index ad1b03e94972..b5f7e5538463 100644
--- a/lib/galaxy/webapps/galaxy/services/notifications.py
+++ b/lib/galaxy/webapps/galaxy/services/notifications.py
@@ -1,13 +1,16 @@
 from datetime import datetime
 from typing import (
     NoReturn,
+    Protocol,
 )
 
+from galaxy.config import GalaxyAppConfiguration
 from galaxy.exceptions import (
     AdminRequiredException,
     AuthenticationRequired,
     ObjectNotFound,
     RequestParameterInvalidException,
+    ServerNotConfiguredForRequest,
 )
 from galaxy.managers.context import ProvidesUserContext
 from galaxy.managers.notification import NotificationManager
@@ -17,20 +20,30 @@
     SSEConnectionManager,
     SSEEvent,
 )
+from galaxy.managers.users import UserManager
 from galaxy.model import User
 from galaxy.schema.fields import Security
 from galaxy.schema.notifications import (
+    AnyNotificationContent,
+    AnyNotificationCreateContent,
     BroadcastNotificationCreateRequest,
     BroadcastNotificationListResponse,
     BroadcastNotificationResponse,
+    InternalNotificationCreateData,
     NotificationBroadcastUpdateRequest,
+    NotificationCategory,
     NotificationCreatedResponse,
     NotificationCreateRequest,
     NotificationCreateRequestBody,
+    NotificationRecipients,
     NotificationResponse,
     NotificationsBatchUpdateResponse,
     NotificationStatusSummary,
     NotificationUpdateRequest,
+    NotificationVariant,
+    PersonalNotificationCategory,
+    ToolInstallationRequestCreateContent,
+    ToolInstallationRequestNotificationContent,
     UpdateUserNotificationPreferencesRequest,
     UserNotificationListResponse,
     UserNotificationPreferences,
@@ -41,10 +54,130 @@
 from galaxy.webapps.galaxy.services.base import ServiceBase
 
 
+class NotificationRequestHandler(Protocol):
+    """Per-category handler for user-submitted request notifications.
+
+    Each user-allowed request category registers a handler in
+    ``_REQUEST_HANDLERS`` that owns the category-specific behavior: whether the
+    feature is enabled, how the content is rewritten server-side, who the
+    request is delivered to, and whether a confirmation copy is produced for the
+    submitter. Adding a new request type is a new enum member + a handler
+    implementing this protocol + a typed content model; the allow-list is
+    derived from the registry and the service method
+    (``_build_user_sender_requests``) needs no category-specific edits.
+    """
+
+    category: PersonalNotificationCategory
+
+    def is_enabled(self, config: GalaxyAppConfiguration) -> bool:
+        """Whether this request category is enabled on the instance."""
+        ...
+
+    def stamp_content(self, content: AnyNotificationCreateContent, sender: User) -> AnyNotificationContent:
+        """Rewrite the client-supplied content server-side (e.g. stamp the requester email).
+
+        Must raise ``RequestParameterInvalidException`` when the content type does
+        not match this handler's category, so mismatched category/content
+        submissions are rejected instead of persisted.
+        """
+        ...
+
+    def resolve_recipients(
+        self, sender: User, config: GalaxyAppConfiguration, user_manager: UserManager
+    ) -> NotificationRecipients:
+        """Resolve who the request is delivered to (typically the instance admins)."""
+        ...
+
+    def build_confirmation(
+        self, sender: User, admin_request: NotificationCreateRequest
+    ) -> NotificationCreateRequest | None:
+        """Optionally derive the submitter's confirmation copy, or None for no copy."""
+        ...
+
+
+class ToolInstallationRequestHandler:
+    """Handler for ``tool_installation_request`` user submissions.
+
+    Delivers the request to all instance admins and, when the submitter is not an
+    admin, produces a confirmation copy for the submitter.
+    """
+
+    category = PersonalNotificationCategory.tool_installation_request
+
+    def is_enabled(self, config: GalaxyAppConfiguration) -> bool:
+        return config.enable_tool_installation_request_form
+
+    def stamp_content(self, content: AnyNotificationCreateContent, sender: User) -> AnyNotificationContent:
+        if not isinstance(content, ToolInstallationRequestCreateContent):
+            raise RequestParameterInvalidException(
+                "The notification content does not match the tool_installation_request category."
+            )
+        # Promote the request (create) content to the persisted content model and
+        # stamp the requester's real email server-side (never trust the client).
+        # is_confirmation is forced False on the admin-facing copy; the service
+        # decides which copy is the confirmation in build_confirmation below.
+        # model_construct reuses the already-validated field values instead of
+        # re-running every sanitizer and bound check on them.
+        return ToolInstallationRequestNotificationContent.model_construct(
+            **dict(content),
+            requester_email=sender.email,
+            is_confirmation=False,
+        )
+
+    def resolve_recipients(
+        self, sender: User, config: GalaxyAppConfiguration, user_manager: UserManager
+    ) -> NotificationRecipients:
+        admin_users = user_manager.admins()
+        if not admin_users:
+            raise ServerNotConfiguredForRequest("No admin users are configured on this Galaxy instance.")
+        return NotificationRecipients(user_ids=[u.id for u in admin_users])
+
+    def build_confirmation(
+        self, sender: User, admin_request: NotificationCreateRequest
+    ) -> NotificationCreateRequest | None:
+        admin_user_ids = set(admin_request.recipients.user_ids)
+        if sender.id in admin_user_ids:
+            # An admin submitter already receives the admin-facing request -- no separate copy.
+            return None
+        notification_data = admin_request.notification
+        content = notification_data.content
+        # stamp_content rejects any other content type for this category, so the
+        # admin request always carries the promoted model; assert only narrows the type.
+        assert isinstance(content, ToolInstallationRequestNotificationContent)
+        confirmation_content = content.model_copy(update={"is_confirmation": True})
+        confirmation_notification = notification_data.model_copy(update={"content": confirmation_content})
+        return admin_request.model_copy(
+            update={
+                "notification": confirmation_notification,
+                "recipients": NotificationRecipients(user_ids=[sender.id]),
+            }
+        )
+
+
+# Registry of per-category request handlers. To add a new user-submittable
+# request type, register a handler instance here; the user allow-list is
+# derived from the registry keys, so they cannot drift apart.
+# _build_user_sender_requests dispatches through this registry, so it needs no
+# category-specific branching for new types.
+_REQUEST_HANDLERS: dict[NotificationCategory, NotificationRequestHandler] = {
+    handler.category: handler for handler in (ToolInstallationRequestHandler(),)
+}
+
+_USER_ALLOWED_CATEGORIES: frozenset[NotificationCategory] = frozenset(_REQUEST_HANDLERS)
+
+
 class NotificationService(ServiceBase):
-    def __init__(self, notification_manager: NotificationManager, sse_manager: SSEConnectionManager):
+    def __init__(
+        self,
+        notification_manager: NotificationManager,
+        sse_manager: SSEConnectionManager,
+        user_manager: UserManager,
+        config: GalaxyAppConfiguration,
+    ):
         self.notification_manager = notification_manager
         self.sse_manager = sse_manager
+        self.user_manager = user_manager
+        self.config = config
 
     @property
     def notifications_enabled(self) -> bool:
@@ -65,19 +198,113 @@ def send_notification(
     ) -> NotificationCreatedResponse | AsyncTaskResultSummary:
         """Sends a notification to a list of recipients (users, groups or roles).
 
-        Before sending the notification, it checks if the requesting user has the necessary permissions to do so.
+        Admin users may send to arbitrary recipients for categories outside the user-allowed set.
+        For user-allowed categories (e.g. tool installation requests), admin submissions are treated
+        like regular user submissions so that recipients and content are populated server-side.
+
+        Authenticated non-admin users may only use categories in the server-side allow-list,
+        subject to per-category feature-flag checks; their recipients are overridden server-side.
         """
         self.notification_manager.ensure_notifications_enabled()
-        self._ensure_user_can_send_notifications(sender_context)
         galaxy_url = (
             str(sender_context.url_builder("/", qualified=True)).rstrip("/") if sender_context.url_builder else None
         )
-        request = NotificationCreateRequest.model_construct(
-            notification=payload.notification,
-            recipients=payload.recipients,
+        requests = self._build_user_sender_requests(sender_context, payload, galaxy_url)
+        # Send each built request. The first (primary) is the admin-facing
+        # notification, so the API response describes the request the admin will
+        # act on -- return that one, not the last iteration's (confirmation) result.
+        response: NotificationCreatedResponse | AsyncTaskResultSummary | None = None
+        for index, request in enumerate(requests):
+            sent = self.send_internal_notification(request, force_sync=False)
+            if index == 0:
+                response = sent
+        assert response is not None
+        return response
+
+    def _build_user_sender_requests(
+        self,
+        sender_context: ProvidesUserContext,
+        payload: NotificationCreateRequestBody,
+        galaxy_url: str | None,
+    ) -> list[NotificationCreateRequest]:
+        """Validate and rewrite a user notification submission.
+
+        For admin users sending non-user-allowed categories, passes through the payload as-is.
+        For user-allowed request categories (non-admins, or admins sending such a category),
+        validates the category and dispatches to the per-category ``NotificationRequestHandler``
+        which rewrites recipients/content server-side and may produce a confirmation copy.
+
+        Each handler owns its category's behavior (feature gate, content stamping, recipient
+        resolution, confirmation copy). See ``_REQUEST_HANDLERS``.
+        """
+        category = payload.notification.category
+        # Envelope/content category agreement is enforced by the
+        # NotificationCreateData model validator when the body is parsed.
+
+        # Admin sending arbitrary category notification: pass through unchanged.
+        # The data is promoted to the internal model so the request matches its
+        # declared (full content union) type on the Celery round-trip.
+        if sender_context.user_is_admin and category not in _USER_ALLOWED_CATEGORIES:
+            return [
+                NotificationCreateRequest.model_construct(
+                    notification=InternalNotificationCreateData.model_construct(**dict(payload.notification)),
+                    recipients=payload.recipients,
+                    galaxy_url=galaxy_url,
+                )
+            ]
+
+        # All other cases: validate and dispatch to the request handler
+        user_manager = self.user_manager
+        config = self.config
+
+        if sender_context.anonymous or sender_context.user is None:
+            raise AuthenticationRequired("You must be logged in to submit a notification.")
+
+        if category not in _USER_ALLOWED_CATEGORIES:
+            raise AdminRequiredException("Only administrators can send notifications of this category.")
+
+        handler = _REQUEST_HANDLERS[category]
+        if not handler.is_enabled(config):
+            # Note: pydantic validates the category union/Literal fields to plain
+            # strings, so interpolating `category` yields the bare value.
+            raise AdminRequiredException(f"{category} notifications are disabled on this Galaxy instance.")
+
+        sender = sender_context.user
+        assert sender is not None  # checked above
+
+        content = handler.stamp_content(payload.notification.content, sender)
+
+        # Like the stamped content fields, the envelope of a user-submitted
+        # request is server-controlled: source and variant are fixed (a client
+        # must not escalate to e.g. `urgent`, which bypasses channel opt-outs),
+        # and the timing fields are not client-settable -- publication is
+        # immediate and expiration falls back to the default retention period
+        # applied by the notification model.
+        notification_data = InternalNotificationCreateData.model_construct(
+            source=f"{category}_form",
+            category=payload.notification.category,
+            variant=NotificationVariant.info,
+            content=content,
+            publication_time=None,
+            expiration_time=None,
+        )
+
+        # Admin-facing request: delivered to the handler-resolved recipients (the
+        # submitter receives it too if they are among them, e.g. an admin).
+        admin_request = NotificationCreateRequest.model_construct(
+            notification=notification_data,
+            recipients=handler.resolve_recipients(sender, config, user_manager),
             galaxy_url=galaxy_url,
         )
-        return self.notification_manager.send_notification_internal(request)
+        requests = [admin_request]
+
+        # Optional submitter confirmation copy. The handler returns None when no
+        # copy is appropriate (e.g. the submitter already receives the request).
+        confirmation = handler.build_confirmation(sender, admin_request)
+        if confirmation is not None:
+            requests.append(confirmation)
+
+        return requests
 
     def broadcast(
         self, sender_context: ProvidesUserContext, payload: BroadcastNotificationCreateRequest
@@ -222,12 +449,6 @@ def update_user_notification_preferences(
         user = self.get_authenticated_user(user_context)
         return self.notification_manager.update_user_notification_preferences(user, request)
 
-    def _ensure_user_can_send_notifications(self, sender_context: ProvidesUserContext) -> None:
-        """Raises an exception if the user cannot send notifications."""
-        # TODO implement and check permissions for non-admin users?
-        if not sender_context.user_is_admin:
-            raise AdminRequiredException("Only administrators can create and send notifications.")
-
     def _ensure_user_can_broadcast_notifications(self, sender_context: ProvidesUserContext) -> None:
         """Raises an exception if the user cannot broadcast notifications."""
         # TODO implement and check permissions for non-admin users?
diff --git a/lib/galaxy/webapps/galaxy/services/sharable.py b/lib/galaxy/webapps/galaxy/services/sharable.py
index 8ca3d2de6187..872fa1bca956 100644
--- a/lib/galaxy/webapps/galaxy/services/sharable.py
+++ b/lib/galaxy/webapps/galaxy/services/sharable.py
@@ -15,8 +15,8 @@
 )
 from galaxy.schema.fields import DecodedDatabaseIdField
 from galaxy.schema.notifications import (
+    InternalNotificationCreateData,
     NewSharedItemNotificationContent,
-    NotificationCreateData,
     NotificationCreateRequest,
     NotificationRecipients,
     PersonalNotificationCategory,
@@ -197,7 +197,7 @@ def build_notification_request(
         user_ids = [user.id for user in users_to_notify]
         request = NotificationCreateRequest(
             recipients=NotificationRecipients.model_construct(user_ids=user_ids),
-            notification=NotificationCreateData(
+            notification=InternalNotificationCreateData(
                 source=SharedItemNotificationFactory.source,
                 variant="info",
                 category=PersonalNotificationCategory.new_shared_item,
diff --git a/lib/galaxy/workflow/completion_hooks/notification.py b/lib/galaxy/workflow/completion_hooks/notification.py
index 3b714478b7fa..dc8ec8e377e3 100644
--- a/lib/galaxy/workflow/completion_hooks/notification.py
+++ b/lib/galaxy/workflow/completion_hooks/notification.py
@@ -11,8 +11,8 @@
 from typing import TYPE_CHECKING
 
 from galaxy.schema.notifications import (
+    InternalNotificationCreateData,
     MessageNotificationContent,
-    NotificationCreateData,
     NotificationCreateRequest,
     NotificationRecipients,
     NotificationVariant,
@@ -65,7 +65,7 @@ def execute(self, completion: "WorkflowInvocationCompletion") -> None:
         variant = NotificationVariant.info
 
         # Create the notification request
-        notification_data = NotificationCreateData(
+        notification_data = InternalNotificationCreateData(
             source="galaxy",
             category=PersonalNotificationCategory.message,
             variant=variant,
diff --git a/test/integration/test_tool_installation_request_form.py b/test/integration/test_tool_installation_request_form.py
new file mode 100644
index 000000000000..988c6d0aaf4b
--- /dev/null
+++ b/test/integration/test_tool_installation_request_form.py
@@ -0,0 +1,505 @@
+"""Integration tests for the tool-installation-request-form feature (routed via POST /api/notifications)."""
+
+import json
+import os
+import re
+from typing import ClassVar
+
+from galaxy_test.base.api_util import ADMIN_TEST_USER
+from galaxy_test.base.populators import DatasetPopulator
+from galaxy_test.driver.integration_util import IntegrationTestCase
+
+TOOL_INSTALLATION_REQUEST_NOTIFICATION_BODY = {
+    "recipients": {"user_ids": [], "group_ids": [], "role_ids": []},
+    "notification": {
+        "source": "tool_installation_request_form",
+        "category": "tool_installation_request",
+        "variant": "info",
+        "content": {
+            "category": "tool_installation_request",
+            "tools": [
+                {
+                    "name": "FastQC",
+                    "tool_shed_id": None,
+                    "tool_url": "https://github.com/s-andrews/FastQC",
+                    "description": "Quality control tool for high-throughput sequencing data.",
+                    "scientific_domain": "Genomics",
+                    "requested_version": "0.12.1",
+                }
+            ],
+            "additional_remarks": "Would be great for the genomics team.",
+        },
+    },
+}
+
+
+class ToolInstallationRequestFormIntegrationBase(IntegrationTestCase):
+    """Base class with configuration for tool installation request form tests."""
+
+    dataset_populator: DatasetPopulator
+
+    @classmethod
+    def handle_galaxy_config_kwds(cls, config):
+        super().handle_galaxy_config_kwds(config)
+        config["enable_notification_system"] = True
+        config["enable_tool_installation_request_form"] = True
+        config["enable_celery_tasks"] = False
+
+    def setUp(self):
+        super().setUp()
+        # Ensure the admin user exists in the database so notifications can be sent to them.
+        self._setup_user(ADMIN_TEST_USER)
+        self.dataset_populator = DatasetPopulator(self.galaxy_interactor)
+
+
+class TestToolInstallationRequestFormIntegration(ToolInstallationRequestFormIntegrationBase):
+    def test_anonymous_user_cannot_submit(self):
+        """Anonymous users should receive 403 (AuthenticationRequired)."""
+        with self._different_user(anon=True):
+            response = self._post("notifications", data=TOOL_INSTALLATION_REQUEST_NOTIFICATION_BODY, json=True)
+            self._assert_status_code_is(response, 403)
+
+    def test_registered_user_can_submit(self):
+        """A registered user can successfully submit a tool installation request via POST /api/notifications."""
+        user = self._setup_user("tool_installation_request_submitter@galaxy.test")
+        with self._different_user(user["email"]):
+            response = self._post("notifications", data=TOOL_INSTALLATION_REQUEST_NOTIFICATION_BODY, json=True)
+            self._assert_status_code_is(response, 200)
+            data = response.json()
+            assert "notification" in data
+            assert data["notification"]["id"]
+
+    def test_admin_receives_notification_after_submission(self):
+        """After a user submits a tool installation request the admin should have a new notification."""
+        user = self._setup_user("tool_installation_request_sender@galaxy.test")
+        with self._different_user(user["email"]):
+            response = self._post("notifications", data=TOOL_INSTALLATION_REQUEST_NOTIFICATION_BODY, json=True)
+            self._assert_status_code_is(response, 200)
+
+        # Admin should now have a tool_installation_request notification
+        with self._different_user(ADMIN_TEST_USER):
+            notifications = self._get("notifications").json()
+        tool_installation_request_notifications = [
+            n for n in notifications if n.get("category") == "tool_installation_request"
+        ]
+        assert (
+            len(tool_installation_request_notifications) >= 1
+        ), f"Expected at least one tool_installation_request notification for admin, got: {notifications}"
+        # The admin-facing copy must not be flagged as a confirmation.
+        assert all(
+            not n.get("content", {}).get("is_confirmation", False) for n in tool_installation_request_notifications
+        ), "Admin-facing tool request notification must have is_confirmation=False"
+
+    def test_sender_receives_notification_too(self):
+        """The submitter should also receive the notification in their own inbox."""
+        user = self._setup_user("tool_installation_request_sender2@galaxy.test")
+        with self._different_user(user["email"]):
+            self._post("notifications", data=TOOL_INSTALLATION_REQUEST_NOTIFICATION_BODY, json=True)
+            notifications = self._get("notifications").json()
+        tool_installation_request_notifications = [
+            n for n in notifications if n.get("category") == "tool_installation_request"
+        ]
+        assert (
+            len(tool_installation_request_notifications) >= 1
+        ), f"Expected sender to receive the notification, got: {notifications}"
+        # The submitter's copy must be the confirmation (is_confirmation=True).
+        assert any(
+            n.get("content", {}).get("is_confirmation", False) for n in tool_installation_request_notifications
+        ), "Sender's tool request notification must have is_confirmation=True"
+
+    def test_admin_submitter_receives_only_admin_copy(self):
+        """An admin who submits their own request gets the admin copy, not a separate confirmation."""
+        with self._different_user(ADMIN_TEST_USER):
+            response = self._post("notifications", data=TOOL_INSTALLATION_REQUEST_NOTIFICATION_BODY, json=True)
+            self._assert_status_code_is(response, 200)
+            notifications = self._get("notifications").json()
+        tool_installation_request_notifications = [
+            n for n in notifications if n.get("category") == "tool_installation_request"
+        ]
+        assert tool_installation_request_notifications, "Expected the admin to receive their own request"
+        assert all(
+            not n.get("content", {}).get("is_confirmation", False) for n in tool_installation_request_notifications
+        ), "An admin submitter should not receive a separate confirmation copy"
+
+    def test_requester_email_overridden_server_side(self):
+        """Server-stamped content fields must override any client-supplied values.
+
+        requester_email must be the user's real email, and is_confirmation must be
+        False on the admin-facing copy -- never trusting a client-supplied True that
+        would render the confirmation template/subject to admins.
+        """
+        user = self._setup_user("tool_installation_request_email_check@galaxy.test")
+        payload_with_spoofed_email = {
+            "recipients": {"user_ids": [], "group_ids": [], "role_ids": []},
+            "notification": {
+                "source": "tool_installation_request_form",
+                "category": "tool_installation_request",
+                "variant": "info",
+                "content": {
+                    "category": "tool_installation_request",
+                    "tools": [
+                        {
+                            "name": "FastQC",
+                            "tool_shed_id": None,
+                            "tool_url": "https://github.com/s-andrews/FastQC",
+                            "description": "Quality control tool for high-throughput sequencing data.",
+                            "scientific_domain": "Genomics",
+                            "requested_version": "0.12.1",
+                        }
+                    ],
+                    "additional_remarks": "Would be great for the genomics team.",
+                    "requester_email": "spoofed@example.com",
+                    "is_confirmation": True,
+                },
+            },
+        }
+        with self._different_user(user["email"]):
+            self._post("notifications", data=payload_with_spoofed_email, json=True)
+            notifications = self._get("notifications").json()
+        tool_installation_request_notifications = [
+            n for n in notifications if n.get("category") == "tool_installation_request"
+        ]
+        assert tool_installation_request_notifications, "Expected at least one tool_installation_request notification"
+        content = tool_installation_request_notifications[0]["content"]
+        assert (
+            content["requester_email"] == user["email"]
+        ), f"requester_email should be {user['email']!r}, got {content['requester_email']!r}"
+
+        # The admin-facing copy must have is_confirmation=False even though the
+        # client sent True -- a client-supplied True must never reach admins and
+        # render the confirmation template/subject to them.
+        with self._different_user(ADMIN_TEST_USER):
+            admin_notifications = self._get("notifications").json()
+        admin_copies = [
+            n
+            for n in admin_notifications
+            if n.get("category") == "tool_installation_request"
+            and not n.get("content", {}).get("is_confirmation", False)
+        ]
+        assert admin_copies, "Expected an admin-facing tool request notification with is_confirmation=False"
+        # This request's admin copy must carry the server-stamped requester_email.
+        this_request_admin_copies = [n for n in admin_copies if n["content"].get("requester_email") == user["email"]]
+        assert (
+            this_request_admin_copies
+        ), "Expected the admin-facing copy of this request to carry the server-stamped requester_email"
+
+    def test_client_supplied_recipients_ignored(self):
+        """The server must override recipients regardless of what the client sends."""
+        user = self._setup_user("tool_installation_request_recipients_check@galaxy.test")
+        ignored_recipient = self._setup_user("tool_installation_request_ignored_recipient@galaxy.test")
+        payload_with_recipients = {
+            "recipients": {"user_ids": [ignored_recipient["id"]], "group_ids": [], "role_ids": []},
+            "notification": TOOL_INSTALLATION_REQUEST_NOTIFICATION_BODY["notification"],
+        }
+        with self._different_user(user["email"]):
+            response = self._post("notifications", data=payload_with_recipients, json=True)
+            # Server accepts the request and overrides recipients — should still succeed
+            self._assert_status_code_is(response, 200)
+
+        with self._different_user(ignored_recipient["email"]):
+            notifications = self._get("notifications").json()
+        tool_installation_request_notifications = [
+            n for n in notifications if n.get("category") == "tool_installation_request"
+        ]
+        assert (
+            tool_installation_request_notifications == []
+        ), "Client-supplied recipients must be ignored for user submissions"
+
+    def test_mismatched_category_and_content_rejected(self):
+        """A tool_installation_request submission with non-tool-request content is rejected."""
+        user = self._setup_user("tool_installation_request_mismatch@galaxy.test")
+        mismatched_payload = {
+            "recipients": {"user_ids": [], "group_ids": [], "role_ids": []},
+            "notification": {
+                "source": "tool_installation_request_form",
+                "category": "tool_installation_request",
+                "variant": "info",
+                "content": {
+                    "category": "message",
+                    "subject": "Not a tool request",
+                    "message": "This content does not match the declared category",
+                },
+            },
+        }
+        with self._different_user(user["email"]):
+            response = self._post("notifications", data=mismatched_payload, json=True)
+            self._assert_status_code_is(response, 400)
+
+    def test_admin_mismatched_category_and_content_rejected(self):
+        """The envelope/content category check also applies to the admin passthrough path."""
+        mismatched_payload = {
+            "recipients": {"user_ids": [], "group_ids": [], "role_ids": []},
+            "notification": {
+                "source": "test",
+                "category": "message",
+                "variant": "info",
+                "content": {
+                    "category": "tool_installation_request",
+                    "tools": [{"name": "FastQC"}],
+                },
+            },
+        }
+        with self._different_user(ADMIN_TEST_USER):
+            response = self._post("notifications", data=mismatched_payload, json=True)
+            self._assert_status_code_is(response, 400)
+
+    def test_whitespace_only_tool_identifier_rejected(self):
+        """A tool entry whose only identifier is whitespace fails validation."""
+        user = self._setup_user("tool_installation_request_blank_id@galaxy.test")
+        payload = {
+            "recipients": {"user_ids": [], "group_ids": [], "role_ids": []},
+            "notification": {
+                "source": "tool_installation_request_form",
+                "category": "tool_installation_request",
+                "variant": "info",
+                "content": {
+                    "category": "tool_installation_request",
+                    "tools": [{"name": "   "}],
+                },
+            },
+        }
+        with self._different_user(user["email"]):
+            response = self._post("notifications", data=payload, json=True)
+            assert response.status_code in (400, 422), response.text
+
+    def test_control_characters_sanitized_and_envelope_stamped(self):
+        """Newlines in tool fields are collapsed, and the notification envelope
+        (source, variant, expiration) is server-controlled regardless of the payload."""
+        user = self._setup_user("tool_installation_request_envelope@galaxy.test")
+        payload = {
+            "recipients": {"user_ids": [], "group_ids": [], "role_ids": []},
+            "notification": {
+                "source": "client-chosen-source",
+                "category": "tool_installation_request",
+                "variant": "urgent",
+                "expiration_time": "2000-01-01T00:00:00",
+                "content": {
+                    "category": "tool_installation_request",
+                    "tools": [{"name": "FastQC\nEvil"}],
+                },
+            },
+        }
+        with self._different_user(user["email"]):
+            response = self._post("notifications", data=payload, json=True)
+            self._assert_status_code_is(response, 200)
+            notification = response.json()["notification"]
+        assert notification["variant"] == "info", "variant must be server-stamped, not client-escalated"
+        assert notification["source"] == "tool_installation_request_form"
+        assert notification["expiration_time"] != "2000-01-01T00:00:00"
+        assert notification["content"]["tools"][0]["name"] == "FastQC Evil"
+
+    def test_non_admin_cannot_send_disallowed_category(self):
+        """Non-admin users may not send 'message' category notifications."""
+        user = self._setup_user("tool_installation_request_category_check@galaxy.test")
+        message_payload = {
+            "recipients": {"user_ids": [], "group_ids": [], "role_ids": []},
+            "notification": {
+                "source": "test",
+                "category": "message",
+                "variant": "info",
+                "content": {
+                    "category": "message",
+                    "subject": "Hello",
+                    "message": "This should be blocked",
+                },
+            },
+        }
+        with self._different_user(user["email"]):
+            response = self._post("notifications", data=message_payload, json=True)
+            self._assert_status_code_is(response, 403)
+
+    def test_minimal_payload_succeeds(self):
+        """Only required content fields (tool_names, description) should be enough."""
+        user = self._setup_user("tool_installation_request_minimal@galaxy.test")
+        minimal_payload = {
+            "recipients": {"user_ids": [], "group_ids": [], "role_ids": []},
+            "notification": {
+                "source": "tool_installation_request_form",
+                "category": "tool_installation_request",
+                "variant": "info",
+                "content": {
+                    "category": "tool_installation_request",
+                    "tools": [
+                        {
+                            "name": "Samtools",
+                            "tool_shed_id": None,
+                            "tool_url": None,
+                            "description": "Tools for manipulating alignments in SAM format.",
+                            "scientific_domain": None,
+                            "requested_version": None,
+                        }
+                    ],
+                },
+            },
+        }
+        with self._different_user(user["email"]):
+            response = self._post("notifications", data=minimal_payload, json=True)
+            self._assert_status_code_is(response, 200)
+
+    def test_workflow_install_request_with_tool_names(self):
+        """Submit a request that includes workflow context (multiple tool_names + workflow_id)."""
+        user = self._setup_user("tool_installation_request_workflow@galaxy.test")
+        workflow_payload = {
+            "recipients": {"user_ids": [], "group_ids": [], "role_ids": []},
+            "notification": {
+                "source": "tool_installation_request_form",
+                "category": "tool_installation_request",
+                "variant": "info",
+                "content": {
+                    "category": "tool_installation_request",
+                    "tools": [
+                        {
+                            "name": None,
+                            "tool_shed_id": "toolshed.g2.bx.psu.edu/repos/devteam/bwa/bwa/0.7.17",
+                            "tool_url": None,
+                            "description": "These tools are required by My Analysis workflow.",
+                            "scientific_domain": None,
+                            "requested_version": None,
+                        },
+                        {
+                            "name": None,
+                            "tool_shed_id": "toolshed.g2.bx.psu.edu/repos/devteam/samtools/samtools/1.13",
+                            "tool_url": None,
+                            "description": None,
+                            "scientific_domain": None,
+                            "requested_version": None,
+                        },
+                    ],
+                    "workflow_id": "encoded-workflow-id-abc",
+                },
+            },
+        }
+        with self._different_user(user["email"]):
+            response = self._post("notifications", data=workflow_payload, json=True)
+            self._assert_status_code_is(response, 200)
+
+        with self._different_user(ADMIN_TEST_USER):
+            notifications = self._get("notifications").json()
+        workflow_tool_notifications = [
+            n
+            for n in notifications
+            if n.get("category") == "tool_installation_request"
+            and n.get("content", {}).get("workflow_id") == "encoded-workflow-id-abc"
+        ]
+        assert (
+            len(workflow_tool_notifications) >= 1
+        ), f"Expected at least one tool_installation_request notification with workflow_id, got: {notifications}"
+        content = workflow_tool_notifications[0]["content"]
+        assert content["workflow_id"] == "encoded-workflow-id-abc"
+        assert len(content["tools"]) == 2
+
+
+class TestToolInstallationRequestFormEmailDeliveryIntegration(ToolInstallationRequestFormIntegrationBase):
+    email_directory: ClassVar[str]
+
+    @classmethod
+    def handle_galaxy_config_kwds(cls, config):
+        super().handle_galaxy_config_kwds(config)
+        cls.email_directory = cls._test_driver.mkdtemp()
+        config["enable_celery_tasks"] = True
+        config["email_from"] = "galaxy-no-reply@example.com"
+        config["smtp_server"] = f"mock_emails_to_path://{cls.email_directory}/email.json"
+
+    def test_submission_creates_notification_without_sending_admin_email_synchronously(self):
+        """Tool installation requests return the notification synchronously but leave email delivery to Celery."""
+        user = self._setup_user("tool_installation_request_email_delivery@galaxy.test")
+        with self._different_user(user["email"]):
+            update_request = {
+                "preferences": {
+                    "tool_installation_request": {
+                        "enabled": True,
+                        "channels": {"push": True, "email": False},
+                    }
+                }
+            }
+            update_response = self._put("notifications/preferences", data=update_request, json=True)
+            self._assert_status_code_is_ok(update_response)
+
+            response = self._post("notifications", data=TOOL_INSTALLATION_REQUEST_NOTIFICATION_BODY, json=True)
+            self._assert_status_code_is(response, 200)
+            data = response.json()
+            task_id = data["id"]
+            assert task_id
+
+            self.dataset_populator.wait_on_task_id(task_id)
+
+            # verify the notification was created
+            notifications = self._get("notifications").json()
+            tool_installation_request_notifications = [
+                n for n in notifications if n.get("category") == "tool_installation_request"
+            ]
+            assert len(tool_installation_request_notifications) >= 1
+
+        assert not os.path.exists(os.path.join(self.email_directory, "email.json"))
+
+
+class TestToolInstallationRequestFormEmailContentIntegration(ToolInstallationRequestFormIntegrationBase):
+    """End-to-end rendering/delivery of the tool-request email via the real dispatch path."""
+
+    email_directory: ClassVar[str]
+
+    @classmethod
+    def handle_galaxy_config_kwds(cls, config):
+        super().handle_galaxy_config_kwds(config)
+        cls.email_directory = cls._test_driver.mkdtemp()
+        # The email channel is only registered when async (Celery) processing is on.
+        config["enable_celery_tasks"] = True
+        config["email_from"] = "galaxy-no-reply@example.com"
+        config["smtp_server"] = f"mock_emails_to_path://{cls.email_directory}/email.json"
+
+    def test_admin_email_renders_requested_tool_fields(self):
+        """The admin email subject/body render the requested tools from the persisted content.
+
+        An admin submits their own request so exactly one (admin-facing) email is
+        produced, making the mock email file content deterministic.
+        """
+        with self._different_user(ADMIN_TEST_USER):
+            response = self._post("notifications", data=TOOL_INSTALLATION_REQUEST_NOTIFICATION_BODY, json=True)
+            self._assert_status_code_is(response, 200)
+            self.dataset_populator.wait_on_task_id(response.json()["id"])
+
+        # Emails are delivered by the periodic background dispatcher, not during
+        # the request; run it directly to render and send the pending email.
+        dispatched = self._app.notification_manager.dispatch_pending_notifications_via_channels()
+        assert dispatched >= 1
+
+        email_path = os.path.join(self.email_directory, "email.json")
+        assert os.path.exists(email_path), "Expected the admin tool-request email to be delivered"
+        with open(email_path) as f:
+            email = json.load(f)
+        assert email["to"] == ADMIN_TEST_USER
+        assert email["subject"] == "[Galaxy] Tool installation request: FastQC"
+        body = email["body"]
+        # Field rows start at column 0 with their value on the same line; the
+        # exact label padding is presentation, so it is not pinned here.
+        assert re.search(r"^Tool: +FastQC$", body, re.MULTILINE)
+        assert re.search(r"^URL: +https://github\.com/s-andrews/FastQC$", body, re.MULTILINE)
+        assert re.search(r"^Domain: +Genomics$", body, re.MULTILINE)
+        assert re.search(r"^Version: +0\.12\.1$", body, re.MULTILINE)
+        assert re.search(r"^Remarks: +Would be great for the genomics team\.$", body, re.MULTILINE)
+        assert re.search(rf"^Requested by: {re.escape(ADMIN_TEST_USER)}$", body, re.MULTILINE)
+        # No stray blank lines within the rendered field block: exactly one blank
+        # line before it, and consecutive field lines with no gaps.
+        assert "\n\nTool:" in body
+        assert "\n\n\nTool:" not in body
+        assert re.search(r"^Version: +0\.12\.1\nRemarks:", body, re.MULTILINE)
+        html = email["html"]
+        assert "FastQC" in html and "Genomics" in html
+
+
+class TestToolInstallationRequestFormDisabledIntegration(IntegrationTestCase):
+    """Tests for when the tool installation request form feature is disabled."""
+
+    @classmethod
+    def handle_galaxy_config_kwds(cls, config):
+        super().handle_galaxy_config_kwds(config)
+        config["enable_notification_system"] = True
+        config["enable_tool_installation_request_form"] = False
+        config["enable_celery_tasks"] = False
+
+    def test_disabled_config_returns_error(self):
+        """When tool_installation_request_form is disabled, non-admin submissions should be denied."""
+        user = self._setup_user("tool_installation_request_disabled@galaxy.test")
+        with self._different_user(user["email"]):
+            response = self._post("notifications", data=TOOL_INSTALLATION_REQUEST_NOTIFICATION_BODY, json=True)
+            self._assert_status_code_is(response, 403)
diff --git a/test/unit/app/managers/test_NotificationManager.py b/test/unit/app/managers/test_NotificationManager.py
index 26148d707a95..559f0b772234 100644
--- a/test/unit/app/managers/test_NotificationManager.py
+++ b/test/unit/app/managers/test_NotificationManager.py
@@ -12,6 +12,7 @@
 )
 
 import pytest
+from pydantic import ValidationError
 
 from galaxy.exceptions import ObjectNotFound
 from galaxy.managers.notification import (
@@ -25,17 +26,22 @@
     Role,
     User,
 )
+from galaxy.schema.fields import Security
 from galaxy.schema.notifications import (
     BroadcastNotificationContent,
     BroadcastNotificationCreateRequest,
+    InternalNotificationCreateData,
     NotificationBroadcastUpdateRequest,
     NotificationCategorySettings,
     NotificationChannelSettings,
     NotificationCreateData,
+    NotificationCreatedResponse,
     NotificationCreateRequest,
     NotificationRecipients,
     NotificationVariant,
     PersonalNotificationCategory,
+    RequestedTool,
+    ToolInstallationRequestCreateContent,
     UpdateUserNotificationPreferencesRequest,
     UserNotificationPreferences,
     UserNotificationUpdateRequest,
@@ -44,6 +50,7 @@
     StorageOperationExecutionResult,
     StorageOperationRunState,
 )
+from galaxy.security.idencoding import IdEncodingHelper
 from galaxy.util import now
 from .base import BaseTestCase
 
@@ -81,7 +88,7 @@ def _send_message_notification_to_users(self, users: list[User], notification: d
         data = self._default_test_notification_data()
         if notification:
             data.update(notification)
-        notification_data = NotificationCreateData(**data)
+        notification_data = InternalNotificationCreateData(**data)
 
         request = NotificationCreateRequest(
             recipients=NotificationRecipients.model_construct(
@@ -358,6 +365,28 @@ def test_get_user_notification_preferences_returns_default_preferences(self):
 
         assert actual_preferences == default_preferences
 
+    def test_preferences_get_falls_back_to_default_for_missing_category(self):
+        """Users who saved preferences before a category was introduced have no
+        key for it in their stored blob. ``get`` must fall back to default
+        settings rather than raising ``KeyError`` (which would silently drop
+        the notification at association-creation time).
+        """
+        # Build preferences from a stale blob that predates tool_installation_request.
+        stale_blob = {
+            PersonalNotificationCategory.message: {
+                "enabled": True,
+                "channels": {"push": True, "email": True, "webhook": False},
+            }
+        }
+        preferences = UserNotificationPreferences.model_validate({"preferences": stale_blob})
+
+        settings = preferences.get(PersonalNotificationCategory.tool_installation_request)
+
+        # Default settings, not a raise.
+        assert settings == NotificationCategorySettings()
+        assert settings.enabled is True
+        assert settings.channels.push is True
+
     def test_update_user_notification_preferences(self):
         user = self._create_test_user()
         preferences = self.notification_manager.get_user_notification_preferences(user)
@@ -507,6 +536,34 @@ def validate_send_email(frm, to, subject, body, config, html=None):
             mock_send_mail.assert_called_once()
             assert len(emails_sent) == 1
 
+    def test_force_sync_creates_notification_without_dispatching_email_channel_when_async_is_enabled(self):
+        user = self._create_test_user()
+        Security.security = IdEncodingHelper(id_secret="testing")
+
+        request = NotificationCreateRequest(
+            recipients=NotificationRecipients.model_construct(user_ids=[user.id]),
+            notification=InternalNotificationCreateData(**self._default_test_notification_data()),
+            galaxy_url="https://test.galaxy.url",
+        )
+
+        with patch("galaxy.util.send_mail") as mock_send_mail:
+            response = self.notification_manager.send_notification_internal(request, force_sync=True)
+
+        assert isinstance(response, NotificationCreatedResponse)
+        assert response.total_notifications_sent == 1
+        mock_send_mail.assert_not_called()
+        assert "email" in self.notification_manager.get_supported_channels()
+        pending_notifications = self.notification_manager.get_pending_notifications()
+        assert len(pending_notifications) == 1
+        assert pending_notifications[0].category == response.notification.category
+
+        with patch("galaxy.util.send_mail") as mock_send_mail:
+            dispatched_count = self.notification_manager.dispatch_pending_notifications_via_channels()
+
+        assert dispatched_count == 1
+        mock_send_mail.assert_called_once()
+        assert self.notification_manager.get_pending_notifications() == []
+
 
 class TestNotificationRecipientResolver(NotificationsBaseTestCase):
     def test_default_resolution_strategy(self):
@@ -596,3 +653,87 @@ def _create_test_role(self, name: str, users: list[User], groups: list[Group]):
             self.trans.app.security_agent.associate_group_role(group, role)
         sa_session.flush()
         return role
+
+
+class TestToolInstallationRequestContentValidation:
+    """Sanitization/bounds on the user-submitted tool-request content models."""
+
+    def test_control_characters_are_collapsed_in_single_line_fields(self):
+        tool = RequestedTool(name="FastQC\nEvil", requested_version="1.0\r2")
+        assert tool.name == "FastQC Evil"
+        assert tool.requested_version == "1.0 2"
+
+    def test_whitespace_only_identifier_is_rejected(self):
+        with pytest.raises(ValidationError):
+            RequestedTool(name="   ")
+
+    def test_multiline_fields_keep_newlines_but_drop_other_control_characters(self):
+        content = ToolInstallationRequestCreateContent(
+            tools=[RequestedTool(name="bwa")],
+            additional_remarks="line1\r\nline2\x00x",
+        )
+        assert content.additional_remarks == "line1\nline2 x"
+
+    def test_non_http_tool_url_is_rejected(self):
+        with pytest.raises(ValidationError):
+            RequestedTool(tool_url="javascript:alert(1)")
+
+    def test_tools_list_is_bounded(self):
+        with pytest.raises(ValidationError):
+            ToolInstallationRequestCreateContent(tools=[RequestedTool(name=f"tool-{i}") for i in range(51)])
+
+    def test_unicode_line_separators_are_sanitized(self):
+        # NEL in single-line fields collapses to a space; in multiline fields
+        # Unicode line/paragraph separators normalize to newlines.
+        tool = RequestedTool(name="FastQC\x85Evil", description="l1\u2028l2\u2029l3")
+        assert tool.name == "FastQC Evil"
+        assert tool.description == "l1\nl2\nl3"
+
+    def test_zero_width_identifier_is_rejected(self):
+        with pytest.raises(ValidationError):
+            RequestedTool(name="\u200b")
+
+    def test_crlf_text_fitting_after_normalization_is_accepted(self):
+        # Raw length exceeds the bound, sanitized length does not.
+        remarks = ("y\r\n" * 2000).rstrip()
+        assert len(remarks) > 5000
+        content = ToolInstallationRequestCreateContent(tools=[RequestedTool(name="bwa")], additional_remarks=remarks)
+        assert content.additional_remarks == "\n".join(["y"] * 2000)
+
+    def test_uppercase_url_scheme_is_accepted(self):
+        assert RequestedTool(tool_url="HTTPS://example.com/tool").tool_url == "HTTPS://example.com/tool"
+
+    def test_mismatched_envelope_and_content_category_is_rejected(self):
+        with pytest.raises(ValidationError, match="does not match"):
+            NotificationCreateData.model_validate(
+                {
+                    "source": "s",
+                    "category": "tool_installation_request",
+                    "variant": "info",
+                    "content": {"category": "message", "subject": "x", "message": "y"},
+                }
+            )
+
+    def test_bidi_and_tag_characters_are_stripped(self):
+        # RTL override (U+202E) must not survive into rendered labels, and a
+        # name made only of Unicode tag characters is not a usable identifier.
+        tool = RequestedTool(name="a\u202eevil\u202cb")
+        assert tool.name == "aevilb"
+        with pytest.raises(ValidationError):
+            RequestedTool(name="\U000e0041\U000e0042")
+
+    def test_subject_tool_label_is_truncated_for_header_safety(self):
+        from galaxy.managers.notification import ToolInstallationRequestEmailNotificationTemplateBuilder
+
+        tool = RequestedTool(tool_url="https://example.org/" + "x" * 1500)
+        label = ToolInstallationRequestEmailNotificationTemplateBuilder._tool_label(tool)
+        assert len(label) <= ToolInstallationRequestEmailNotificationTemplateBuilder._SUBJECT_LABEL_MAX_LENGTH + 3
+        assert label.endswith("...")
+        # Short labels are untouched.
+        assert ToolInstallationRequestEmailNotificationTemplateBuilder._tool_label(RequestedTool(name="bwa")) == "bwa"
+
+    def test_field_lengths_are_bounded(self):
+        with pytest.raises(ValidationError):
+            RequestedTool(name="x" * 256)
+        with pytest.raises(ValidationError):
+            ToolInstallationRequestCreateContent(tools=[RequestedTool(name="bwa")], additional_remarks="x" * 5001)
diff --git a/test/unit/app/test_custom_templates.py b/test/unit/app/test_custom_templates.py
index 2da4cfef8217..24079ccb36ec 100644
--- a/test/unit/app/test_custom_templates.py
+++ b/test/unit/app/test_custom_templates.py
@@ -1,5 +1,9 @@
 """Test custom template configuration and rendering."""
 
+import re
+
+import pytest
+
 from galaxy.config import templates
 
 TEMPLATE_RELPATH = "mail/activation-email.html"
@@ -45,3 +49,286 @@ def test_it_can_render_a_custom_template(tmp_path):
         custom_templates_dir,
     )
     assert output == CUSTOM_TEMPLATE_OUTPUT
+
+
+def test_html_templates_autoescape_user_supplied_content_when_enabled(tmp_path):
+    """HTML templates must autoescape variable output when autoescape is enabled."""
+    custom_templates_dir = tmp_path
+    template_path = custom_templates_dir / "mail/inject.html"
+    template_path.parent.mkdir(parents=True, exist_ok=True)
+    with open(template_path, "w") as f:
+        f.write(">>>>>> body\n{{ value }}")
+    output = templates.render(
+        "mail/inject.html", {"value": "<script>alert(1)</script>"}, custom_templates_dir, autoescape=True
+    )
+    assert "<script>" not in output
+    assert "&lt;script&gt;" in output
+
+
+def test_html_templates_autoescape_by_default(tmp_path):
+    """Autoescape is now default: new callers are secured by default."""
+    custom_templates_dir = tmp_path
+    template_path = custom_templates_dir / "mail/inject.html"
+    template_path.parent.mkdir(parents=True, exist_ok=True)
+    with open(template_path, "w") as f:
+        f.write(">>>>>> body\n{{ value }}")
+    output = templates.render("mail/inject.html", {"value": "<b>bold</b>"}, custom_templates_dir)
+    assert output == "&lt;b&gt;bold&lt;/b&gt;"
+
+
+def test_html_templates_can_opt_out_of_autoescape(tmp_path):
+    """Existing HTML templates can opt out to keep raw behavior."""
+    custom_templates_dir = tmp_path
+    template_path = custom_templates_dir / "mail/inject.html"
+    template_path.parent.mkdir(parents=True, exist_ok=True)
+    with open(template_path, "w") as f:
+        f.write(">>>>>> body\n{{ value }}")
+    output = templates.render("mail/inject.html", {"value": "<b>bold</b>"}, custom_templates_dir, autoescape=False)
+    assert output == "<b>bold</b>"
+
+
+def test_txt_templates_do_not_escape_content(tmp_path):
+    """Plain-text templates are not autoescaped by default (even without opt out)."""
+    custom_templates_dir = tmp_path
+    template_path = custom_templates_dir / "mail/inject.txt"
+    template_path.parent.mkdir(parents=True, exist_ok=True)
+    with open(template_path, "w") as f:
+        f.write(">>>>>> body\n{{ value }}")
+    output = templates.render("mail/inject.txt", {"value": "<b>bold</b>"}, custom_templates_dir)
+    assert output == "<b>bold</b>"
+
+
+def test_txt_templates_explicit_autoescape_true_is_rejected(tmp_path):
+    """Explicitly opting into autoescape for a .txt template is a programming error."""
+    custom_templates_dir = tmp_path
+    template_path = custom_templates_dir / "mail/inject.txt"
+    template_path.parent.mkdir(parents=True, exist_ok=True)
+    with open(template_path, "w") as f:
+        f.write(">>>>>> body\n{{ value }}")
+    with pytest.raises(ValueError, match="must never be autoescaped"):
+        templates.render("mail/inject.txt", {"value": "<b>bold</b>"}, custom_templates_dir, autoescape=True)
+
+
+def test_html_templates_respect_safe_filter(tmp_path):
+    """Trusted, pre-rendered HTML marked with | safe must pass through unescaped."""
+    custom_templates_dir = tmp_path
+    template_path = custom_templates_dir / "mail/safe.html"
+    template_path.parent.mkdir(parents=True, exist_ok=True)
+    with open(template_path, "w") as f:
+        f.write(">>>>>> body\n{{ value | safe }}")
+    output = templates.render("mail/safe.html", {"value": "<p>ok</p>"}, custom_templates_dir, autoescape=True)
+    assert output == "<p>ok</p>"
+
+
+def test_template_can_include_a_packaged_partial(tmp_path):
+    """A template can {% include %} a partial bundled with the package."""
+    custom_templates_dir = tmp_path
+    template_path = custom_templates_dir / "mail/uses_partial.html"
+    template_path.parent.mkdir(parents=True, exist_ok=True)
+    # The packaged tool-request field partial renders the requested tool row.
+    with open(template_path, "w") as f:
+        f.write(">>>>>> body\n{% include 'mail/notifications/_tool_installation_request_fields.html' %}")
+    content = {
+        "tools": [
+            {
+                "name": "FastQC",
+                "tool_shed_id": None,
+                "tool_url": None,
+                "description": "QC tool",
+                "scientific_domain": None,
+                "requested_version": None,
+            }
+        ],
+        "additional_remarks": None,
+    }
+    output = templates.render("mail/uses_partial.html", {"content": content}, custom_templates_dir)
+    assert "FastQC" in output
+    assert "Description" in output
+    assert "QC tool" in output
+
+
+def test_custom_partial_overrides_packaged_partial(tmp_path):
+    """A partial in the custom templates dir takes precedence over the packaged one."""
+    custom_templates_dir = tmp_path
+    template_path = custom_templates_dir / "mail/uses_partial.html"
+    template_path.parent.mkdir(parents=True, exist_ok=True)
+    with open(template_path, "w") as f:
+        f.write(">>>>>> body\n{% include 'mail/notifications/_tool_installation_request_fields.html' %}")
+    # Custom partial shadows the packaged one (custom-first precedence).
+    custom_partial = custom_templates_dir / "mail/notifications/_tool_installation_request_fields.html"
+    custom_partial.parent.mkdir(parents=True, exist_ok=True)
+    with open(custom_partial, "w") as f:
+        f.write("CUSTOM-PARTIAL-{{ content['tool_names'][0] }}")
+    output = templates.render("mail/uses_partial.html", {"content": {"tool_names": ["MyTool"]}}, custom_templates_dir)
+    assert "CUSTOM-PARTIAL-MyTool" in output
+
+
+def test_partial_output_is_autoescaped(tmp_path):
+    """Autoescape applies to partial output (a partial variable must be escaped)."""
+    custom_templates_dir = tmp_path
+    template_path = custom_templates_dir / "mail/uses_partial.html"
+    template_path.parent.mkdir(parents=True, exist_ok=True)
+    with open(template_path, "w") as f:
+        f.write(">>>>>> body\n{% include 'mail/notifications/_tool_installation_request_fields.html' %}")
+    content = {
+        "tools": [
+            {
+                "name": "<script>x</script>",
+                "tool_shed_id": None,
+                "tool_url": None,
+                "description": "d",
+                "scientific_domain": None,
+                "requested_version": None,
+            }
+        ],
+        "additional_remarks": None,
+    }
+    output = templates.render("mail/uses_partial.html", {"content": content}, custom_templates_dir)
+    assert "<script>" not in output
+    assert "&lt;script&gt;" in output
+
+
+def test_tool_installation_request_email_renders_with_partial(tmp_path):
+    """The bundled admin tool-request template renders end-to-end via its partial include."""
+    custom_templates_dir = tmp_path
+    content = {
+        "category": "tool_installation_request",
+        "tools": [
+            {
+                "name": "BWA",
+                "tool_shed_id": None,
+                "tool_url": "https://github.com/lh3/bwa",
+                "description": "Aligner",
+                "scientific_domain": "Genomics",
+                "requested_version": "0.7.17",
+            }
+        ],
+        "requester_email": "user@example.org",
+        "workflow_id": None,
+        "additional_remarks": None,
+    }
+    output = templates.render(
+        "mail/notifications/tool_installation_request-email.html",
+        {
+            "content": content,
+            "name": "Admin",
+            "hostname": "galaxy.example",
+            "galaxy_url": "https://galaxy.example",
+            "workflow_name": None,
+        },
+        custom_templates_dir,
+    )
+    # Shared partial content + admin-only rows both present
+    assert "BWA" in output
+    assert "Aligner" in output
+    assert "user@example.org" in output  # admin-only "Requested by" row
+    assert "<!DOCTYPE html>" in output
+
+
+def _render_txt_tool_request_email(tmp_path, content):
+    return templates.render(
+        "mail/notifications/tool_installation_request-email.txt",
+        {
+            "content": content,
+            "name": "Admin",
+            "hostname": "galaxy.example",
+            "date": "August 05, 2026",
+            "galaxy_url": None,
+            "workflow_name": None,
+            "notification_settings_url": None,
+            "contact_email": None,
+        },
+        tmp_path,
+    )
+
+
+def test_tool_installation_request_text_email_renders_multiple_tools(tmp_path):
+    """The multi-tool branch of the text partial lists each tool with its own details."""
+    content = {
+        "category": "tool_installation_request",
+        "tools": [
+            {
+                "name": "bwa",
+                "tool_shed_id": "toolshed.g2.bx.psu.edu/repos/devteam/bwa",
+                "tool_url": None,
+                "description": "Short read aligner",
+                "scientific_domain": None,
+                "requested_version": "0.7.17",
+            },
+            {
+                "name": None,
+                "tool_shed_id": "toolshed.g2.bx.psu.edu/repos/devteam/samtools",
+                "tool_url": None,
+                "description": None,
+                "scientific_domain": None,
+                "requested_version": None,
+            },
+        ],
+        "requester_email": "user@example.org",
+        "workflow_id": None,
+        "additional_remarks": None,
+    }
+    output = _render_txt_tool_request_email(tmp_path, content)
+    assert "new tools" in output  # plural intro
+    # Each tool renders as a list entry; details are indented under their tool.
+    # The indentation depths matter (they attribute details to a tool); the
+    # exact label padding is presentation and is not pinned.
+    assert re.search(r"^  - bwa$", output, re.MULTILINE)
+    assert re.search(r"^    Tool shed: +toolshed\.g2\.bx\.psu\.edu/repos/devteam/bwa$", output, re.MULTILINE)
+    assert re.search(r"^    Description: +Short read aligner$", output, re.MULTILINE)
+    assert re.search(r"^    Version: +0\.7\.17$", output, re.MULTILINE)
+    # A tool identified only by shed id uses the shed id as its label (no separate row).
+    assert re.search(r"^  - toolshed\.g2\.bx\.psu\.edu/repos/devteam/samtools$", output, re.MULTILINE)
+    assert output.count("Tool shed:") == 1
+    # No stray blank lines inside the field block.
+    assert "\n\n  - " not in output
+    assert "\n\nRequested by:" not in output
+
+
+def test_tool_installation_request_text_email_does_not_repeat_label_values(tmp_path):
+    """A tool identified only by its URL renders the URL once (as the label), not again as a URL row."""
+    content = {
+        "category": "tool_installation_request",
+        "tools": [
+            {
+                "name": None,
+                "tool_shed_id": None,
+                "tool_url": "https://x.org/tool",
+                "description": None,
+                "scientific_domain": None,
+                "requested_version": None,
+            }
+        ],
+        "requester_email": "user@example.org",
+        "workflow_id": None,
+        "additional_remarks": None,
+    }
+    output = _render_txt_tool_request_email(tmp_path, content)
+    assert re.search(r"^Tool: +https://x\.org/tool$", output, re.MULTILINE)
+    assert "URL:" not in output
+
+
+def test_tool_installation_request_text_email_indents_multiline_fields(tmp_path):
+    """Continuation lines of multiline fields are indented, so user text cannot mimic a field row."""
+    content = {
+        "category": "tool_installation_request",
+        "tools": [
+            {
+                "name": "bwa",
+                "tool_shed_id": None,
+                "tool_url": None,
+                "description": None,
+                "scientific_domain": None,
+                "requested_version": None,
+            }
+        ],
+        "requester_email": "real@example.org",
+        "workflow_id": None,
+        "additional_remarks": "ok\nRequested by: forged@example.org",
+    }
+    output = _render_txt_tool_request_email(tmp_path, content)
+    # The forged line is indented under Remarks, not at column 0.
+    assert "\nRequested by: forged@example.org" not in output
+    assert "\n              Requested by: forged@example.org" in output
+    # The genuine stamped row still renders at column 0.
+    assert "\nRequested by: real@example.org" in output