Ranuk Web Accessibility & AST Security Auditor

io.github.RanuK12Published by GitHub account RanuK12v1.0.0Updated Oct 25, 2026

Edge MCP Server for live WCAG 2.1 AA accessibility compliance and AST security audits.

VerifiedStreamable HTTPWeb executableDeveloper ToolsSecurity & Monitoring

Overview

AI-generated overview

Remote MCP server that runs live WCAG 2.1 AA/ADA accessibility scans on a domain and audits source code for exposed secrets and unsafe eval/exec/shell usage.

What you can do
Run a live WCAG 2.1 AA, ADA and EN 301 549 accessibility scan on a domain and get verifiable violations with remediation links (wcag_quick_scan). Analyze source code for exposed secrets and unsafe eval, exec or shell=True usage (ast_security_and_secret_audit).
When to use it
Useful when checking a live site for accessibility compliance before or after a release, or when reviewing code for hardcoded secrets and risky dynamic execution patterns.
Requirements
A remote streamable HTTP endpoint at audit.ranuk.dev; no authentication, environment variables or headers are declared. The target domain or code must be reachable or supplied to the service.
Before you install
Scans are performed by a third-party remote service, so the domain and any source code you submit leave your environment. The code audit may surface secrets in its output; treat results as sensitive. No authentication is declared, so do not assume submitted data is private.

Installation

In SourceWeft

  1. Open Ranuk Web Accessibility & AST Security Auditor in the dashboard and add it to a workspace.
  2. Enable the server for the chats that should use its tools.

Web executable via Streamable HTTP. Remote servers run from the web runtime once configured in a workspace.

Use with an agent

Paste this prompt into Claude Code, Codex, Cursor or another agent — or into SourceWeft chat. The agent reads this server's install guide, shows you its publisher, endpoint and sign-in, and adds it to your client once you agree. Keys never go into a command.

Read https://sourceweft.com/mcp/io.github.RanuK12%2Fada-audits/install.md and connect the MCP server it describes to my client. Before changing any config, show me its publisher, endpoint and sign-in method and wait for my OK. Never put an API key in a command or in a file I would commit; ask me where it should come from.

Read the install guide the agent follows

Other MCP clients

Add this to your client's mcpServers config.

{
  "mcpServers": {
    "ranuk-web-accessibility-ast-security-aud": {
      "type": "http",
      "url": "https://audit.ranuk.dev/mcp"
    }
  }
}

README

ADA-Audits

Automated Data Accessibility Audits for Python projects.

📌 Features

  • Scans Python files and notebooks for data accessibility issues
  • Detects missing docstrings, type hints, and accessibility standards
  • Generates reports with actionable insights
  • Integrates with CI/CD pipelines

🚀 Quick Start

Follow these steps to get started with ADA-Audits:

Step 1: Installation

Using pip:

bash
# Clone the repositorygit clone https://github.com/your-org/ada-audits.gitcd ada-audits
# Install in development modepip install -e .

Using Poetry:

bash
# Clone the repositorygit clone https://github.com/your-org/ada-audits.gitcd ada-audits
# Install dependencies with Poetrypoetry install
# Activate the virtual environmentpoetry shell

Step 2: Create Configuration File

Create a .ada-audit.yml file in your project root:

yaml
# .ada-audit.yml - Minimal working configurationtargets:  - src/  - notebooks/
rules:  - missing-docstring  - missing-type-hint  - accessibility-issue
output:  format: markdown  file: audit-report.md

Step 3: Run Your First Audit

Scan a single file:

bash
ada-scan path/to/file.py

Expected output:

✓ Scanning: path/to/file.pyFound 3 issues:  [WARNING] line 15: Missing docstring for function 'process_data'  [WARNING] line 23: Missing type hint for parameter 'input_path'  [ERROR]   line 45: Accessibility issue - missing alt text for image

Scan an entire directory:

bash
ada-scan src/

Expected output:

✓ Scanning directory: src/Found 12 files to analyze  src/__init__.py .............. OK  src/main.py .................. 2 issues  src/utils.py ................. 5 issues  src/processors/base.py ....... 1 issue  src/processors/transform.py .. 4 issues
Summary: 12 issues found across 4 files

Generate a full report:

bash
ada-audit --output report.md

Expected output:

✓ ADA Audit Report Generated  Output: report.md  Total files scanned: 12  Issues found: 15  Compliance score: 78%

📖 Usage

Command Line Interface

CommandDescription
ada-scan <path>Scan a file or directory for accessibility issues
ada-auditGenerate a full audit report based on configuration
ada-audit --output <file>Generate report with custom output filename
ada-audit --format <fmt>Output format: markdown, json, or html

Configuration Reference

Full configuration options for .ada-audit.yml:

yaml
# Paths to scantargets:  - src/              # Python source files  - notebooks/        # Jupyter notebooks  - tests/            # Test files
# Rules to applyrules:  - missing-docstring      # Functions/classes without docstrings  - missing-type-hint      # Parameters without type annotations  - accessibility-issue    # Accessibility standard violations
# Output settingsoutput:  format: markdown         # Options: markdown, json, html  file: audit-report.md   # Output filename
# Optional: Exclude patternsexclude:  - "**/__pycache__/**"  - "**/migrations/**"

🤝 Contributing

  1. Fork the repository
  2. Create a feature branch (git checkout -b feature/your-feature)
  3. Commit your changes (git commit -m 'feat: add new rule [ranukita:xxxxx]')
  4. Push to the branch (git push origin feature/your-feature)
  5. Open a Pull Request

📄 License

This project is licensed under the MIT License - see the LICENSE file for details.

Source: README.md at commit a0e1349

Tools

2

wcag_quick_scan

Ejecuta un escaneo WCAG 2.1 AA / ADA / Directiva Europea EN 301 549 (EAA) en vivo sobre un dominio y devuelve violaciones verificables + link de remediación.

Parametersdomainrequiredlocale

ast_security_and_secret_audit

Analiza código fuente en busca de secretos expuestos y usos inseguros de eval/exec/shell=True.

Parameterscoderequired

Version history

1
  1. v1.0.0LatestOct 25, 2026

Score

100% of the applicable checks met

How complete this listing is, computed from the registry entry, the endpoint and public sources. Not a rating of the server and not a statement that it is safe or working today: reachability is a dated check, and no installs or reviews go into the score.

  • Reached in the last 30 daysRequired25 pts
  • Auth declaredRequired10 pts
  • Tools listedRequired15 pts
  • DescriptionRequired15 pts
  • Logo10 pts
  • Documentation15 pts
  • License10 pts