Accessibility Ai MCP Server

This accessibility auditing MCP server is well-intentioned with proper documentation and reasonable rate-limiting, but has several security concerns that should be addressed. The optional authentication system is well-designed but not enforced by default, leading to unauthenticated access to all tools. Additionally, there are path traversal risks via the auth_middleware's file operations, and a potential information disclosure issue in error messages. The code quality is generally good with input validation on most operations, but the permission scope for file I/O (via auth middleware) slightly exceeds what the core server requires. Supply chain analysis found 3 known vulnerabilities in dependencies (0 critical, 3 high severity). Package verification found 1 issue.

8 files analyzed · 11 issues found

Security scores are indicators to help you make informed decisions, not guarantees. Always review permissions before connecting any MCP server.