MCP Marketplace
BrowseHow It WorksFor CreatorsDocs
Sign inSign up
MCP Marketplace

The curated, security-first marketplace for AI tools.

Product

Browse ToolsSubmit a ToolDocumentationHow It WorksBlogFAQ

Legal

Terms of ServicePrivacy PolicyCommunity Guidelines

Connect

support@mcp-marketplace.ioTwitter / XDiscord

MCP Marketplace © 2026. All rights reserved.

Back to Browse

Webability MCP Server

by Snayyar00
Developer ToolsModerate5.0MCP RegistryLocal
Free

Server data from the Official MCP Registry

WCAG/ADA/508 accessibility scanner + framework-aware fixes + vision audit for AI coding agents

About

WCAG/ADA/508 accessibility scanner + framework-aware fixes + vision audit for AI coding agents

Security Report

5.0
Moderate5.0Moderate Risk

This is an accessibility testing MCP server with reasonable security architecture and appropriate permissions for its purpose. The server implements SSRF protections in remote mode, secure token handling via environment variables, and proper authentication gates for paid features. However, there are several code quality and security concerns: insufficient input validation on some parameters, broad exception handling that could mask security issues, exposure of detailed error messages that might leak system information, and the reliance on Playwright with limited timeout configuration. The telemetry system sends data to external endpoints without robust error handling. Overall, permissions match the stated purpose (network for scanning, file I/O for caching), but implementation quality needs improvement. Supply chain analysis found 3 known vulnerabilities in dependencies (0 critical, 2 high severity). Package verification found 1 issue.

3 files analyzed · 14 issues found

Security scores are indicators to help you make informed decisions, not guarantees. Always review permissions before connecting any MCP server.

Permissions Required

This plugin requests these system permissions. Most are normal for its category.

HTTP Network Access

Connects to external APIs or services over the internet.

network_websocket

Check that this permission is expected for this type of plugin.

env_vars

Check that this permission is expected for this type of plugin.

File System Read

Reads files on your machine. Normal for tools that analyze or process local data.

File System Write

Writes or modifies files on your machine. Check that this is expected for the tool.

process_spawn

Check that this permission is expected for this type of plugin.

How to Install

Add this to your MCP configuration file:

{
  "mcpServers": {
    "io-github-snayyar00-webability": {
      "args": [
        "-y",
        "@webability/mcp"
      ],
      "command": "npx"
    }
  }
}

Documentation

View on GitHub

From the project's GitHub README.

@webability/mcp

Accessibility testing MCP server for Cursor, VS Code Copilot, Claude Code, and any other MCP-compatible IDE.

What is WebAbility?

WebAbility.io is an AI-powered web accessibility platform — accessibility widget, automated scanner, and AI agents for WCAG 2.1 / 2.2 AA, ADA, Section 508, EAA (European Accessibility Act) and AODA compliance. This MCP exposes the same accessibility-testing engine that powers the WebAbility widget and dashboard, so you can scan, audit and fix web accessibility issues (color contrast, ARIA, alt text, keyboard navigation, focus visibility, target size, and more) from your IDE while you build.

New to accessibility compliance? Start with the free WCAG & ADA accessibility checker, or read the WebAbility MCP docs and the getting-started guide.

The server registers an instructions block on initialize, so any MCP-compatible client picks up business context (what tool to call when, the three-tier output convention, etc.) automatically — no setup required beyond the install below.

Why this over other accessibility MCPs

Most accessibility MCP servers stop at find and suggest. WebAbility closes the whole loop in your editor, and starts free:

  • Free, local scan — no account, no Docker. scan_page runs entirely on your machine. (Deque's axe MCP needs a paid subscription, an API key, and a Docker install just to analyze a page.)
  • Fixes that fit your stack. generate_ai_fix returns ready-to-paste code for the framework you actually use — Tailwind, MUI, Bootstrap, WordPress, Next.js — not generic guidance.
  • A vision pass DOM scanners can't do. visual_audit catches focus visibility, icon contrast, and "looks like a button but isn't" — issues axe-core structurally cannot see.
  • Verification, not just detection. verify_fix re-checks that your fix actually landed and returns verified: true/false. Every 2026 comparison of accessibility MCPs names this the biggest gap in the category — most tools never close it.
  • Evidence for compliance. start_audit produces a persistent, timestamped report and Excel workbook you can hand to an auditor — not a result that vanishes with your session.

The full cycle, without leaving the editor: scan_page → generate_ai_fix → verify_fix, then start_audit when you need the paper trail.

Install

npm install -g @webability/mcp

Setup

Add to your IDE's MCP config:

{
  "mcpServers": {
    "webability": {
      "command": "webability-mcp"
    }
  }
}

Optional env: WEBABILITY_API_URL (default https://api.webability.io) for self-hosted backends.

Scan engines

scan_page runs three engines in parallel and deduplicates the results:

EngineRulesWhat it covers
WebAbility detectors60+Gradient-aware contrast, weak names, decorative icons, landmark hierarchy, ARIA correctness, link consistency, target size, keyboard traps
axe-core104Industry-standard WCAG 2.2 baseline
HTML_CodeSniffer200+Section 508 + WCAG techniques cross-reference

Three-tier output (since v1.2.1)

Every scan returns:

  • issues — high-confidence violations, safe to surface as bugs
  • incomplete — findings that need human review (contrast against gradients, marketing imagery, framer-motion pre-animation states, axe-incomplete). Never auto-fix these.
  • summary — counts by severity + an incomplete count

This mirrors axe-core's violations / incomplete / passes split and prevents agents from "fixing" false positives in destructive ways.

Tools

ToolWhat it does
scan_pageScan a URL for WCAG accessibility issues (3 engines)
flow_scanMulti-page journey scan with deduplicated issues across pages
scan_htmlScan a raw HTML snippet (no URL needed)
detect_frameworkDetect Tailwind / MUI / Bootstrap / Next.js / WP / plain CSS
generate_ai_fixFramework-aware fix alternatives. Auto-extracts brand palette from the live URL on contrast issues.
verify_fixRe-scan a fixed element and confirm the violation is gone — verified: true/false. Closes the find → fix → verify loop.
visual_auditPixel-level audit via vision (icon contrast, focus visibility, looks-like-a-button-but-isn't)
start_auditKick off the full server-side audit deliverable (report + Excel workbook). Returns an id to poll. Requires an account.
get_auditCheck an audit's progress and, once complete, get the severity summary + report/workbook download URLs.
check_color_contrastWCAG contrast check on a color pair; pass url to get brand-aligned suggestions from the live page
check_ariaValidate ARIA attributes in an HTML snippet
get_rulesList axe-core rules with optional WCAG tag filter
find_sourceMap a CSS selector back to local source files

When to use this MCP

  • Building a new component and want it accessible from day one
  • Auditing a localhost / staging build before pushing
  • Triaging a Lighthouse / axe report — scan_page consolidates all three engines
  • Generating fix suggestions that match the framework you're already using
  • Checking color contrast against the user's actual brand palette (not generic suggestions)

Examples

In Cursor / Claude Code:

"Scan localhost:3000 for accessibility issues"

"Walk login → dashboard → checkout and report unique issues across the flow"

"Suggest a fix for the contrast issue on .btn-primary on https://example.com — match their brand colors"

"What does WCAG 1.4.11 check?"

Privacy, scan logs & telemetry

Every scan is logged locally to ~/.webability/scans/ — a one-line-per-scan index.jsonl ledger plus the full result of your last 500 scans. Browse them with the scan_history tool ("what did we scan earlier?") or plain jq. Set WEBABILITY_SCAN_LOG=off to disable, WEBABILITY_SCAN_LOG_DIR to relocate.

The server also reports one small telemetry event per tool call (every tool, not just scans) to the WebAbility API: tool name, a short target label (URL, selector, issue type — never page content), pass/fail, duration, issue counts, and a persistent anonymous install ID. Full scan results, HTML, and generated fix code never leave your machine via telemetry. Set WEBABILITY_SCAN_TELEMETRY=off to opt out.

Two tools — generate_ai_fix and visual_audit — additionally send page content (an HTML snippet or a screenshot) to WebAbility's API so it can call a third-party LLM on your behalf; WebAbility doesn't store that content, but the LLM provider sees it in transit. See PRIVACY.md for the full per-tool breakdown and WebAbility's privacy policy.

Learn more

WebAbility platform & docs

  • WebAbility.io — the accessibility platform (widget, scanner, AI agents, dashboard)
  • MCP server documentation · all docs
  • Accessibility widget — one-line install, WCAG-compliant remediation for live sites
  • Professional accessibility audit · managed accessibility
  • Free WCAG & ADA accessibility checker — scan any URL in seconds
  • Pricing · lifetime deal

Accessibility compliance guides

  • WCAG 2.1 / 2.2 AA — Web Content Accessibility Guidelines
  • ADA compliance — Americans with Disabilities Act
  • Section 508 — U.S. federal accessibility requirements
  • EAA — European Accessibility Act · AODA — Ontario (Canada)

Accessibility by industry

  • Government · Education · Healthcare · Finance
  • E-commerce / retail · Legal · Media · Non-profit

Install the widget on your stack

  • WordPress · Shopify · Webflow · Squarespace · BigCommerce · HubSpot · any site (embed)

Package

  • npm: @webability/mcp · Source: github.com/snayyar00/webability-mcp

Keywords: web accessibility, accessibility testing, WCAG 2.2 AA, ADA compliance, Section 508, EAA, AODA, a11y, accessibility scanner, color contrast checker, ARIA validation, alt text, keyboard navigation, screen reader, MCP server, accessibility for AI coding agents.

License

MIT © WebAbility.io

Reviews

No reviews yet

Be the first to review this server!

0

installs

New

no ratings yet

Is this your server?

Claim ownership to manage your listing, respond to reviews, and track installs from your dashboard.

Claim with GitHub

Sign up with the GitHub account that owns this repo

Links

Source CodeDocumentationnpm Package

Details

Published July 11, 2026
Version 1.3.1
0 installs
Local Plugin

More Developer Tools MCP Servers

Git

Free

by Modelcontextprotocol · Developer Tools

Read, search, and manipulate Git repositories programmatically

80.0K
Stars
7
Installs
6.5
Security
No ratings yet
Local

Toleno

Free

by Toleno · Developer Tools

Toleno Network MCP Server — Manage your Toleno mining account with Claude AI using natural language.

137
Stars
543
Installs
8.0
Security
4.8
Local

mcp-creator-python

Free

by mcp-marketplace · Developer Tools

Create, build, and publish Python MCP servers to PyPI — conversationally.

-
Stars
81
Installs
10.0
Security
4.6
Local

MarkItDown

Free

by Microsoft · Content & Media

Convert files (PDF, Word, Excel, images, audio) to Markdown for LLM consumption

156.1K
Stars
50
Installs
6.0
Security
5.0
Local

MCP Marketplace

Free

by mcp-marketplace · Developer Tools

Search and install MCP servers from inside your AI client.

-
Stars
42
Installs
10.0
Security
5.0
Remote

FinAgent

Free

by mcp-marketplace · Finance

Free stock data and market news for any MCP-compatible AI assistant.

-
Stars
26
Installs
10.0
Security
No ratings yet
Local