# A11y Audit (ADA Lawsuit-Risk Scan)

> Scans any URL for the WCAG failures behind ADA lawsuits. $1.50/call via x402.

- name: io.github.theharrisontruong-web/a11y-audit
- version: 1.0.0
- connection class: R0 (autonomous)
- trust: 93/100 flags: duplicate-repo
- quality: 91/100 (new)
- owner: not claimed
- descriptor: https://api.protogrid.dev/v1/servers/io.github.theharrisontruong-web%2Fa11y-audit
- tools: https://api.protogrid.dev/v1/servers/io.github.theharrisontruong-web%2Fa11y-audit/tools

**An agent can connect right now, no human step.** Remote endpoint, no authentication, reachable on the last probe.

## Connection (mcpServers)

```json
{
  "mcpServers": {
    "a11y-audit": {
      "type": "http",
      "url": "https://a11y-al6bxcngia-ue.a.run.app/mcp"
    }
  }
}
```


## Trust

- hygiene: 80
- liveness: 100
- freshness: 100
- provenance: 90
- drivers: +repository +namespace-matches-repo +website +reachable +uptime-100% +updated-1d-ago -duplicate-repo(4 names)
- Derived from observable signals (official registry feed and our own credential-free probes); no code audit performed.

## Quality 91/100 (new)

### protocol: 88 (weight 25)

- pass `protocol.modern`: supports 2026-07-28 (server/discover)
- pass `protocol.stateless`: answers without a session
- pass `protocol.transport`: streamable HTTP
- warn `protocol.list_ttl`: tools/list declares ttlMs 0, so clients re-fetch it on every use

### authorization: n/a (weight 15)

- n/a `auth.prm`, `auth.as_metadata`, `auth.cimd`: no remote uses OAuth
- n/a `auth.secret_in_url`: no templated URL

### tool hygiene: 94 (weight 30)

- pass `tools.descriptions`: every tool has a description
- warn `tools.description_length`: 1 tools have descriptions over 1,024 characters, which crowds the context
- pass `tools.schemas`: every tool has an object input schema
- pass `tools.annotations`: 2 of 2 tools declare readOnlyHint or destructiveHint
- pass `tools.directory_hints`: every tool declares readOnlyHint, destructiveHint, idempotentHint and openWorldHint
- pass `tools.token_cost`: about 546 tokens to load every tool
- pass `tools.api_dump`: tools are not a one-to-one API dump
- pass `tools.hidden_text`: no hidden text in tool names, descriptions, schemas or annotations

### stability: n/a (weight 15)

- n/a `stability.changes`, `stability.rug_pull`, `stability.new_links`: tool history recorded for 1 of the 7 days needed

### dependencies: n/a (weight 15)

- n/a `deps.known_vulns`, `deps.mcp_sdk_version`, `deps.resolvable`: no npm or PyPI package

- tools: 2, about 546 tokens to load them all
- tool set hash: bc7dd71bf76557c9656fb2aaca2bae3d
- tools last changed: 2026-11-13T12:58:02.359Z
- badge: [![protogrid quality](https://protogrid.dev/badge/io.github.theharrisontruong-web/a11y-audit.svg)](https://protogrid.dev/servers/io.github.theharrisontruong-web/a11y-audit)
- Checks run on what our credential-free, read-only probes observe; tools are never called and no code audit is performed.

### Tool changes

- 2026-11-13 `audit_a11y_lite` changed (annotations)
- 2026-11-13 `audit_a11y` changed (annotations)

Full history: https://api.protogrid.dev/v1/servers/io.github.theharrisontruong-web%2Fa11y-audit/changes

## Remotes

- https://a11y-al6bxcngia-ue.a.run.app/mcp (streamable-http, auth none, reachable true, uptime30d 1)

## Packages

_none_

## Tools (2)

- `audit_a11y`: Full accessibility lawsuit-risk scan of a website URL (ADA / WCAG triage). Fetches the page server-side and runs 20 weighted checks across image alt text and media captions, form labels and input purpose, page structure (lang, heading order, landmarks, skip link), links and interactive elements (link text, button names, target size, keyboard operability), color contrast (estimated from the page's own CSS) and document basics (title, viewport zoom, focus indicator, ARIA sanity). These are the failure classes plaintiff firms' scanners look for — they appear in ~96% of ADA website complaints. Returns machine-readable JSON: 0-100 score, A-F grade, a lawsuit-risk level (Low/Moderate/Elevated/High) with the failing plaintiff-scan checks named, per-check pass/partial/fail/unknown with evidence, and the top 3 prioritized fixes. HONEST LIMITS: this is an automated triage scan, not a WCAG/ADA compliance certification — automated tools catch roughly 30% of WCAG issues. Cost: $1.50 USDC on Base per call, paid via x402 — the caller's agent pays from its owner's approved wallet; no API key needed. Use this to triage a store's ADA lawsuit exposure before a demand letter arrives, or to scan a client portfolio for accessibility risk.
- `audit_a11y_lite`: FREE lite accessibility lawsuit-risk scan of a website URL. Runs the same 20 checks as audit_a11y but returns top-line results only: 0-100 score, A-F grade, lawsuit-risk level, check counts, and the titles of the top gaps — no per-check evidence, no detailed recommendations. Use this to triage whether a site needs the full audit_a11y report, or call audit_a11y directly for the complete evidence-backed scan. Automated scan — not a compliance certification.