Model Context Protocol
Scan, fix and verify web accessibility from inside Cursor, Claude Code, GitHub Copilot and any MCP-compatible IDE. Fifteen tools, three scanning engines, and fixes your developers actually commit.
npm install -g @webability/mcp




Illustration of a WebAbility MCP session: the assistant is asked to scan the checkout page and fix its contrast failures. It calls scan_page, which returns 18 issues and 7 items needing human review; then detect_framework, which identifies Tailwind; then generate_ai_fix, which raises a grey from text-gray-400 to text-gray-600; then verify_fix, which confirms the pair now measures 7.6 to 1 and passes WCAG 1.4.3. Cursor, Claude Code and GitHub Copilot are shown as the clients connecting to it.
An accessibility MCP server lets an AI coding assistant test and fix web accessibility from inside your editor. It exposes tools (scanning, fix generation, verification) over the Model Context Protocol, so Cursor, Claude Code and GitHub Copilot can run a WCAG check against a page or component and write the correction into your source. Unlike a browser extension or a runtime script, the output is code you commit: fixes made at build time in your own source, not applied to a page as it loads.
Why now
Two things changed at once: the deadlines got real, and the assistants got good enough to act on a scan result.
Under the DOJ’s Title II rule, US state and local government entities had to meet WCAG 2.1 Level AA by 24 April 2026 for populations of 50,000 or more, with 26 April 2027 for smaller entities. The European Accessibility Act applies across the EU, and Ontario’s AODA has been in force for years.
Agencies running dozens of university, council and public-sector sites feel this first, and they need a way to fix issues at scale, not a dashboard that lists them.
Accessibility tooling has historically stopped at detection: a score, a list, a PDF. Someone still had to translate each finding into a code change, in the right framework, without breaking the layout.
An assistant with direct access to a scanner closes that gap. It reads the finding, writes the change in your idiom, and checks the result, in the place the code already lives.
Install
Install the package once, then point your MCP client at the webability-mcp binary. No API key required to start scanning locally.
Install the package once. The global install exposes the webability-mcp command. No API key required to start scanning locally.
# global install
npm install -g @webability/mcp
# check it is on your PATH
command -v webability-mcpThen add it to your MCP configuration. The same block works in Cursor, Claude Code, Copilot or VS Code.
{
"mcpServers": {
"webability": {
"command": "webability-mcp"
}
}
}Once connected, talk to your assistant in plain language. The assistant chains the tools itself: scan, detect the framework, generate the fix, re-scan to confirm.
# in Cursor or Claude Code
Scan localhost:3000 for accessibility issues
# calls scan_page, then:
Fix the contrast failures and verify themPoint your client at https://mcp.webability.io/mcp with your token in the x-webability-token header.
Run npm install -g @webability/cli then abilyo login, or set the WEBABILITY_API_KEY env variable.
Nothing to learn beyond plain language. The assistant picks the tools.
Command 1
Calls scan_page. Returns confirmed issues, items needing human review, and what passed.
Command 2
Calls detect_framework, then generate_ai_fix. Corrections arrive in your framework’s conventions, drawn from your own palette.
Command 3
Calls verify_fix on each changed element and reports pass or fail per criterion, before you open the pull request.
What you get
Ten run on your own machine and need no account. Two send content to our API for processing, still with no account. Three run server-side and need a WebAbility account.
Free · local
Scans any URL for WCAG issues. Runs three engines in parallel (WebAbility detectors, axe-core, HTML_CodeSniffer), then deduplicates the findings into one list.
Free · local
Multi-page journey scan. Walks login, dashboard, checkout and reports the unique issues found across the flow.
Free · local
Scans a raw HTML snippet. No URL needed, so it works on a component before it is deployed.
Free · local
Detects the page’s stack (Tailwind, MUI, Bootstrap, Next.js, WordPress or plain CSS) so generated fixes match it.
Free · local
Re-scans a fixed element and confirms the violation is gone. Returns verified true or false. This is what closes the loop.
Free · local
Checks WCAG contrast for a colour pair, with brand-aware suggestions when you pass a URL.
Free · local
Validates ARIA attributes in an HTML snippet.
Free · local
Lists axe-core rules with an optional WCAG tag filter, useful for narrowing scans or documenting what a run covers.
Free · local
Maps a CSS selector back to the file and line in your local source, so a finding turns straight into a diff.
Free · local
Lists the scans this server has run and returns the full stored result of any one of them. Logged under ~/.webability/scans on local installs only.
Sends to API
Framework-aware fix suggestions you apply in your own code. The finding is sent to our API so an AI model can produce the correction. No account needed.
Sends to API
Turns the findings from a scan into a WebAbility accessibility-report PDF saved next to the project, grouped by functionality with a WCAG score. The findings, including each element’s HTML, are sent to our API to render the PDF. Free, no account.
Requires Account
A pixel-level pass for focus visibility, icon contrast and looks-like-a-button-but-isn’t. The rendered screenshot is sent to our API for the vision model, and it needs a WebAbility account.
Requires Account
Kicks off the full server-side audit deliverable.
Requires Account
Checks an audit’s progress and returns the report plus an Excel workbook with download links, ready for an auditor.
Being straight about what leaves your machine: ten tools run entirely locally. generate_ai_fix and generate_report_pdf send content to api.webability.io for processing, no account needed. visual_audit, start_audit and get_audit run on our servers and need an account. That is how they work at all, and we mark them so security-minded teams can decide. Turn telemetry off with WEBABILITY_SCAN_TELEMETRY=off.
Most tools stop at “here are your problems.” The verify step is the part that tells you the problem is actually gone.
scan_page runs three engines and returns deduplicated findings mapped to WCAG criteria.


Honest limits
Being precise about the boundary is more useful to you than a bigger claim would be.
Issues are findings we can confirm automatically. Incomplete are findings that need a person to judge: contrast over a gradient or photograph, marketing imagery where “decorative or meaningful?” is a content decision, and elements whose pre-animation state cannot be inspected reliably.
Nothing in the incomplete list is ever auto-fixed. Guessing there is how tooling breaks working pages. It is the same split axe-core uses, and it stops an eager agent from “correcting” a false positive.
Automated testing reliably detects roughly 30 to 40% of WCAG issues. No tool can determine whether your alt text is meaningful, whether a heading order matches the page’s logic, or whether a screen reader announces a component usefully.
For the rest, our IAAP-certified experts test by hand and produce a report you can hand to an auditor. The MCP is the automated layer, not the whole answer.
Comparison
Every major vendor now ships an accessibility MCP. The difference that matters to a developer evaluating one on a Tuesday afternoon is whether you can actually run it.
| Ships an MCP | Install without sales |
|---|---|
| WebAbility | |
| Yes | Yes, one npm command |
| Jeikin | |
| Yes | Yes, one npx command |
| Deque | |
| Yes | No, npm or Docker plus a paid subscription |
| Evinced | |
| Yes | No, sales-issued API key |
| Siteimprove | |
| Yes | No, enterprise sales |
| AudioEye | |
| Yes | No, public npm install plus account token |
| accessiBe | |
| Yes | No, dashboard account and token |
| UserWay / Level Access | |
| Yes | No, enterprise platform API token |
Snapshot from public information, July 2026. Vendor offerings change, so verify current details with each vendor before relying on this table.
Published to the registries where developers actually browse.

One command. No demo call, no Docker image, no account for local scans.
Accountability
The MCP is where developers work. These are the parts that matter when someone has to sign off on the result.
start_audit and get_audit produce a timestamped report and an Excel workbook covering the full scan, not just what one developer looked at. It is the artefact you hand to a procurement team, an auditor or counsel.
Standards covered: WCAG 2.1 and 2.2 AA, ADA, Section 508, the European Accessibility Act, EN 301 549 and AODA.
Because corrections are written into your repository, they survive redeploys, get reviewed in pull requests, and are visible in version control. Accessibility becomes part of the codebase rather than a layer on top of it.
For everything automation should not touch, our IAAP-certified team handles manual remediation and testing with assistive technology.
Global Compliance Coverage
Everything developers ask before installing it
Free tools, compliance guides and reference material.