github Python re-analysis due

kinti/a11y-toolkit

github

The accessibility layer for AI coding agents — 17 MCP tools + 5 prompts + skill: audit (static + rendered incl. shadow DOM, reflow, keyboard traps, infinite scroll), FIX (safe autofix + contrast), DOCUMENT (EAA statements), WATCH (budget, SARIF, diffs), HAND OFF (countersignature-ready evidence pack). WCAG 2.2, zero deps at core, es/en.

maintainer
kinti
licence
MIT
first seen
2026-08-22
last seen
2026-09-15
releases · 30d
21
short id

kinti/a11y-toolkit is an MCP server distributed on github, maintained by kinti, tracked here since August 2026. It has shipped 21 releases and exposes 9 tools. Tools include a11y_aria_live_snippet, a11y_audit_url, a11y_contrast_image, a11y_contrast_pair, a11y_diff, a11y_diff_urls, and 3 more. Its composite risk grade is A — an inferred review prompt computed from observed signals, not a verdict.

what we found

Reading the source raised one review prompt — exfiltration combo — each a pattern worth a human look rather than a finding of fault.

Its 9 tools appear to reach filesystem and network, inferred from tool names, descriptions and input schemas rather than from observed behaviour.

full security breakdown →
tools 9
  • a11y_aria_live_snippet Injectable monitor that logs every dynamic-region announcement (aria-live, role=alert/status): time, politeness, role, text — what a screen…
  • a11y_audit_url Express WCAG audit of a URL: images without alt (1.1.1), controls without accessible names (4.1.2), form fields without labels (3.3.2), mis…
  • a11y_contrast_image Text over images: pixel-level sampling of the actual background behind the text box → worst/median/p95 ratio, % of area passing AA, and zon…
  • a11y_contrast_pair Exact contrast ratio + per-criterion verdicts: 1.4.3 (AA), 1.4.6 (AAA), 1.4.11 (non-text). If AA fails, suggests the nearest passing color.
  • a11y_diff Compares two snapshots: added/removed/renamed interactives and focus-order changes. Accepts inline JSON or file paths.
  • a11y_diff_urls Snapshot two URLs and diff in one call (staging vs production).
  • a11y_generate_declaration Legal accessibility declaration in HTML: RD 1112/2018 art. 10 (Spain, public sector) or Ley 11/2023 / European Accessibility Act wording. e…
  • a11y_snapshot Accessibility snapshot of a URL: interactive elements (tag, role, accessible name, href) + real tab focus order. Requires Playwright locall…
  • a11y_suggest_color Nearest color to yours that reaches a target ratio (4.5 by default).
release cadence · 90d 21 releases
06-18 00:00 08-01 00:00 now
recent releases last 10
version date src
v3.9.4 2026-09-15 github
v3.12.0 2026-09-15 github
v3.11.0 2026-09-15 github
v3.10.0 2026-09-15 github
v3.9.5 2026-09-15 github
v3.9.3 2026-09-15 github
v3.9.2 2026-09-15 github
v3.9.1 2026-09-15 github
v3.9.0 2026-09-15 github
v3.8.0 2026-09-15 github

view all →