# io.github.aditya-ariosity/wcag-accessibility (npm · wcag-accessibility-mcp)

A WCAG accessibility testing MCP for AI agents, Codex, Claude Code, and automated UI audits.

- Trust score: 69/100 (medium)
- Registry status: active
- Liveness: live
- Owner verified: no
- Last scored: 2026-08-18

## Components

- npm · `wcag-accessibility-mcp`: 69/100 (this document), [markdown](https://verifymcp.io/servers/aditya-ariosity-wcag-accessibility/wcag-accessibility-mcp.md), [page](https://verifymcp.io/servers/aditya-ariosity-wcag-accessibility/wcag-accessibility-mcp)

## Channel facts

- Registry: `npm`
- Package: `wcag-accessibility-mcp`
- Version: `0.1.4`
- Transport: `stdio`

## Trust breakdown

How this component scores in each security and reliability category. Every signal is checked automatically from public evidence about the published package, including repeated runs of it in an isolated sandbox, and we only credit what we can confirm. Scores are 0–100 per category. Scoring method: https://verifymcp.io/docs/scoring (what has changed: https://verifymcp.io/docs/scoring/changelog)

Scored 2026-08-18.

- **Supply Chain Security**: 98/100
  - No malware found by supply-chain analysis.
  - A known CVE affects extract-zip, but no fixed version has been published, so there is nothing to upgrade to.
  - No install/post-install scripts declared.
  - 49 of 173 dependencies flagged as unhealthy.
- **Provenance & Transparency**: 48/100
  - Source repository is publicly reachable at the declared URL.
  - Provenance check failed: no build-provenance attestation is published.
  - Clear OSI-approved license (MIT).
  - Actively maintained (last published 0 days ago).
  - Publishes a security disclosure policy (SECURITY.md).
- **Schema Quality & AI Usability**: 82/100
  - 100% of prompts and resources have a non-trivial description (not blank, and not just the item's name).
  - AI-judged instruction clarity (good).
  - Context-footprint check failed: tool/resource definitions use about 956 tokens (~136/item across 7 items; 7 tools + 0 resources), over budget; trim descriptions and params.
  - Usage-examples check failed: none of the tools include examples.
- **Stability & Change Management**: 0/100
  - Stability not yet verified: not enough scan history yet (needs a 30-day window).
- **Tool Coverage**: 90/100
  - 100% of tools have a non-trivial description (not blank, and not just the tool's name).
  - 71% of tool parameters carry a description.
- **Capabilities**: 100/100
  - Implements a supported MCP spec version (2025-11-25); the latest is 2026-07-28.

**Unverified: 1 category.** A category scored 0 because we could not verify it: a data source with nothing on this package, evidence we could not reach, or a check we could not run. We only credit what we can confirm.

## Install

### Claude

```bash
claude mcp add aditya-ariosity-wcag-accessibility -- npx -y wcag-accessibility-mcp
```

### Codex

```bash
codex mcp add aditya-ariosity-wcag-accessibility -- npx -y wcag-accessibility-mcp
```

### opencode

```json
{
  "$schema": "https://opencode.ai/config.json",
  "mcp": {
    "aditya-ariosity-wcag-accessibility": {
      "type": "local",
      "command": [
        "npx",
        "-y",
        "wcag-accessibility-mcp"
      ],
      "enabled": true
    }
  }
}
```

### OpenClaw

```bash
openclaw mcp add aditya-ariosity-wcag-accessibility --command npx --arg -y --arg wcag-accessibility-mcp
```

### Hermes

```yaml
mcp_servers:
  aditya-ariosity-wcag-accessibility:
    command: "npx"
    args: ["-y", "wcag-accessibility-mcp"]
```

### Other

```json
{
  "mcpServers": {
    "aditya-ariosity-wcag-accessibility": {
      "command": "npx",
      "args": [
        "-y",
        "wcag-accessibility-mcp"
      ]
    }
  }
}
```

## Changelog

Every change recorded for this component, newest first. Days that predate change tracking, or that we cannot explain, say so: "we were watching and nothing happened" and "we were not watching" are different claims.

### 2026-08-18 (score 69, +15)

- [security improvement] Malware scan: unverified → pass

### 2026-08-17 (score 54)

First indexed and scored.

## MCP tools (7)

### `audit_url` (~147 tokens)

Audit a rendered URL

Load a public or local web page in headless Chromium, run axe-core, and return prioritized WCAG findings, DOM evidence, computed styles, and contrast corrections. Read-only.

Input parameters:

- `height` (integer): Viewport height in CSS pixels.
- `maxIssues` (integer): Maximum violation groups returned; summary totals still cover the full run.
- `maxNodesPerIssue` (integer): Maximum affected elements returned per rule.
- `standard` (string): WCAG ruleset to test. Use best-practice to include additional axe guidance.
- `url` (string, required): Absolute http:// or https:// URL to render and test.
- `width` (integer): Viewport width in CSS pixels.

### `audit_html` (~160 tokens)

Audit an HTML document

Render supplied HTML in an isolated headless browser and return WCAG findings plus evidence and suggested corrections. Use for generated UI before it is hosted. Read-only.

Input parameters:

- `baseUrl` (string): Optional http(s) base URL used to resolve relative assets.
- `height` (integer): Viewport height in CSS pixels.
- `html` (string, required): Complete HTML document or fragment to render and test.
- `maxIssues` (integer): Maximum violation groups returned; summary totals still cover the full run.
- `maxNodesPerIssue` (integer): Maximum affected elements returned per rule.
- `standard` (string): WCAG ruleset to test. Use best-practice to include additional axe guidance.
- `width` (integer): Viewport width in CSS pixels.

### `audit_file` (~142 tokens)

Audit a local HTML file

Render a local .html or .htm file beneath the configured allowed root and return accessibility findings and corrections. Read-only.

Input parameters:

- `filePath` (string, required): Absolute path, or path relative to the server working directory, to an HTML file.
- `height` (integer): Viewport height in CSS pixels.
- `maxIssues` (integer): Maximum violation groups returned; summary totals still cover the full run.
- `maxNodesPerIssue` (integer): Maximum affected elements returned per rule.
- `standard` (string): WCAG ruleset to test. Use best-practice to include additional axe guidance.
- `width` (integer): Viewport width in CSS pixels.

### `check_contrast` (~118 tokens)

Check a color pair

Calculate the WCAG contrast ratio for foreground and background colors and determine whether the pair passes for the supplied text size and weight.

Input parameters:

- `background` (string, required): Background CSS sRGB color such as white, #ffffff, rgb(), hsl(), or color(srgb ...).
- `fontSizePx` (number)
- `fontWeight` (integer)
- `foreground` (string, required): Foreground CSS sRGB color such as white, #767676, rgb(), hsl(), or color(srgb ...).
- `level` (string)

### `suggest_contrast_fix` (~131 tokens)

Suggest a passing color

Find the nearest black-or-white-directed foreground or background adjustment that reaches the selected WCAG contrast threshold. Returns a mathematical candidate, not an automatic edit.

Input parameters:

- `adjust` (string)
- `background` (string, required): Background CSS sRGB color such as white, #ffffff, rgb(), hsl(), or color(srgb ...).
- `fontSizePx` (number)
- `fontWeight` (integer)
- `foreground` (string, required): Foreground CSS sRGB color such as white, #767676, rgb(), hsl(), or color(srgb ...).
- `level` (string)

### `explain_issue` (~49 tokens)

Explain an accessibility rule

Return implementation-focused remediation steps and the axe rule reference for a rule ID found in an audit.

Input parameters:

- `ruleId` (string, required): axe rule ID such as color-contrast, button-name, or label.

### `get_wcag_checklist` (~95 tokens)

Get the complete WCAG requirement checklist

Return every success criterion required by a WCAG 2.0, 2.1, or 2.2 A/AA/AAA profile, with W3C references, axe rule mappings, and explicit automated-partial versus manual coverage. Use this to plan the checks that a browser audit cannot complete.

Input parameters:

- `evaluation` (string)
- `principle` (string)
- `standard` (string)

## Diagnostics

Captured diagnostic sections: Provenance, Vulnerabilities, Dependencies. The full working is on the page: https://verifymcp.io/servers/aditya-ariosity-wcag-accessibility/wcag-accessibility-mcp#diagnostics

## Score history

- 2026-08-18: 69
- 2026-08-17: 54

## Links

- npm package: https://www.npmjs.com/package/wcag-accessibility-mcp
- Socket report: https://socket.dev/npm/package/wcag-accessibility-mcp
- Repository: https://github.com/aditya-ariosity/wcag-accessibility-mcp
- Changelog RSS feed: https://verifymcp.io/servers/aditya-ariosity-wcag-accessibility/wcag-accessibility-mcp.xml
- Changelog JSON feed: https://verifymcp.io/servers/aditya-ariosity-wcag-accessibility/wcag-accessibility-mcp.json
- HTML version of this page: https://verifymcp.io/servers/aditya-ariosity-wcag-accessibility/wcag-accessibility-mcp