wcagc-mcp
wcagc-mcp
An MCP server that lets an AI assistant (Claude, ChatGPT, or any MCP-compatible client) run real, deterministic accessibility scans through wcagc — axe-core under the hood, not an LLM guess. Every scan result carries an explicit coverage disclaimer and never claims "compliant": automated testing finds only a portion of accessibility barriers, and this tool says so in every response.
This package is a thin, stateless adapter. It holds no database, no scan logic, and no secrets beyond the wcagc API base URL — it translates MCP tool calls into HTTP calls against the wcagc API and forwards the caller's own API key. All authentication, entitlements, quotas, and scan orchestration live in the API; this code is safe to read end to end.
Two ways to run it
Local (stdio) — for Claude Desktop, Cursor, or any MCP client that spawns a local process:
npx @wcagc/mcpConfigure your MCP client with:
{
"mcpServers": {
"wcagc": {
"command": "npx",
"args": ["-y", "@wcagc/mcp"],
"env": {
"WCAGC_MCP_KEY": "<your mcp:scan API key>"
}
}
}
}Mint an mcp:scan key from your wcagc account under Settings → API keys — available on every
plan, with a daily quota on Free/Starter and unlimited on Pro/Agency.
Hosted (Streamable HTTP) — what Claude web/desktop/mobile connectors and ChatGPT use, since neither runs a local process for you. Add this as a remote MCP connector and paste the same API key as the bearer token:
https://mcp.wcagc.com/mcpIn ChatGPT, full tool access currently requires a Business, Enterprise, or Edu workspace; on Plus you can use the read-only Custom GPT Action instead. See wcagc.com/integrations/mcp.
Related MCP server: WCAG MCP Server
Tools
Tool | Plan | What it does |
| all | Scan any public URL, or a registered site for full tracking (Pro+). |
| all | Run a PDF/UA-1 structure check on a public PDF. |
| all | Read a scan's status, severity counts, and findings. |
| Pro+ | List the account's registered sites. |
| Pro+ | Crawl and scan every reachable page of a registered site. |
| Pro+ | Read a full-site run. |
| Pro+ | Replay a saved multi-step journey and check each step. |
| Pro+ | Read a site's violation-count history over time. |
Every scan-producing tool returns the coverage disclaimer in both the text content and the structured content. There is no score, grade, or conformance verdict — automated testing finds roughly 30–57% of accessibility issues, and the remainder needs manual review.
Configuration
Env var | Used by | Meaning |
| both | The wcagc API to call. Defaults to |
| stdio | Your |
| hosted | Port to listen on (default |
| hosted | Comma-separated Host-header allowlist (DNS-rebinding protection when bound to |
| hosted | How long a verified bearer is cached before re-checking with the API (default |
Development
npm install
npm run dev # hosted, watch mode
npm run start:stdio # stdio mode
npm run typecheck
npm run verify # node:test against a local fixture APILicense
MIT — see LICENSE.
Maintenance
Latest Blog Posts
- Who's Calling? MCP Hosts Are an Identity Blind Spot (And the Spec Knows It)By Om-Shree-0709 on .mcpAgent IdentityOAuth 2.1
- Your AI Chatbot Just Exposed Your CEO's Salary to an InternBy Om-Shree-0709 on .Agent IdentityMCP SecurityOAuth Delegation
- Why MCP Servers Need Execution Sandboxing (And Why Your Current Stack Isn't Enough)By Om-Shree-0709 on .Agentic AiPrompt InjectionWebAssembly
MCP directory API
We provide all the information about MCP servers via our MCP API.
curl -X GET 'https://glama.ai/api/mcp/v1/servers/WCAG-Compliance/wcagc-mcp'
If you have feedback or need assistance with the MCP directory API, please join our Discord server