🎩 You're Invited:Meet the Socket team at Black Hat in Las Vegas, August 3-6.RSVP
Sign In

@webability/mcp

Package Overview
Dependencies
Maintainers
1
Versions
12
Alerts
File Explorer

Advanced tools

Socket logo

Install Socket

Detect and block malicious and high-risk dependencies

Install

@webability/mcp

WebAbility MCP server — WCAG 2.2 / ADA / EAA accessibility scanning with three-tier confidence output (issues + incomplete + summary), framework-aware AI fix suggestions, and brand-palette contrast checks. For Cursor, Claude Code, and other IDEs.

Source
npmnpm
Version
1.2.2
Version published
Weekly downloads
182
343.9%
Maintainers
1
Weekly downloads
 
Created
Source

@webability/mcp

Accessibility testing MCP server for Cursor, VS Code Copilot, Claude Code, and any other MCP-compatible IDE.

What is WebAbility?

WebAbility.io is an AI-powered web accessibility platform — widget, scanner, and agents for WCAG 2.2 / ADA / Section 508 / EAA compliance. This MCP exposes the same scanning engine that powers the WebAbility widget and dashboard, so you can audit and fix accessibility issues from your IDE while you build.

The server registers an instructions block on initialize, so any MCP-compatible client picks up business context (what tool to call when, the three-tier output convention, etc.) automatically — no setup required beyond the install below.

Install

npm install -g @webability/mcp

Setup

Add to your IDE's MCP config:

{
  "mcpServers": {
    "webability": {
      "command": "webability-mcp"
    }
  }
}

Optional env: WEBABILITY_API_URL (default https://api.webability.io) for self-hosted backends.

Scan engines

scan_page runs three engines in parallel and deduplicates the results:

EngineRulesWhat it covers
WebAbility detectors60+Gradient-aware contrast, weak names, decorative icons, landmark hierarchy, ARIA correctness, link consistency, target size, keyboard traps
axe-core104Industry-standard WCAG 2.2 baseline
HTML_CodeSniffer200+Section 508 + WCAG techniques cross-reference

Three-tier output (since v1.2.1)

Every scan returns:

  • issues — high-confidence violations, safe to surface as bugs
  • incomplete — findings that need human review (contrast against gradients, marketing imagery, framer-motion pre-animation states, axe-incomplete). Never auto-fix these.
  • summary — counts by severity + an incomplete count

This mirrors axe-core's violations / incomplete / passes split and prevents agents from "fixing" false positives in destructive ways.

Tools

ToolWhat it does
scan_pageScan a URL for WCAG accessibility issues (3 engines)
flow_scanMulti-page journey scan with deduplicated issues across pages
scan_htmlScan a raw HTML snippet (no URL needed)
detect_frameworkDetect Tailwind / MUI / Bootstrap / Next.js / WP / plain CSS
generate_ai_fixFramework-aware fix alternatives. Auto-extracts brand palette from the live URL on contrast issues.
visual_auditPixel-level audit via vision (icon contrast, focus visibility, looks-like-a-button-but-isn't)
check_color_contrastWCAG contrast check on a color pair; pass url to get brand-aligned suggestions from the live page
check_ariaValidate ARIA attributes in an HTML snippet
get_rulesList axe-core rules with optional WCAG tag filter
find_sourceMap a CSS selector back to local source files

When to use this MCP

  • Building a new component and want it accessible from day one
  • Auditing a localhost / staging build before pushing
  • Triaging a Lighthouse / axe report — scan_page consolidates all three engines
  • Generating fix suggestions that match the framework you're already using
  • Checking color contrast against the user's actual brand palette (not generic suggestions)

Examples

In Cursor / Claude Code:

"Scan localhost:3000 for accessibility issues"

"Walk login → dashboard → checkout and report unique issues across the flow"

"Suggest a fix for the contrast issue on .btn-primary on https://example.com — match their brand colors"

"What does WCAG 1.4.11 check?"

License

MIT

Keywords

a11y

FAQs

Package last updated on 06 May 2026

Did you know?

Socket

Socket for GitHub automatically highlights issues in each pull request and monitors the health of all your open source dependencies. Discover the contents of your packages and block harmful activity before you install or update your dependencies.

Install

Related posts