Enables AI agents to open draft GitHub PRs with framework-aware patches applied atomically via Git Trees API, and export audit results as SARIF for GitHub Code Scanning.

Provides semantic markup auditing capabilities including HTML5 validation, heading hierarchy analysis, and landmark region assessment as part of UX audits.

Supports static analysis of JavaScript codebases for UX and accessibility issues, with framework-aware patch generation for detected problems.

Supports auditing from Lighthouse JSON artifacts as input sources for comprehensive UX and accessibility analysis alongside other audit engines.

Provides npm package distribution and installation options for the MCP server, enabling easy deployment and integration into development workflows.

Supports framework-aware patch generation for React codebases, automatically detecting React components and generating appropriate fixes for UX and accessibility issues.

Supports framework-aware patch generation for Svelte codebases, automatically detecting Svelte components and generating appropriate fixes for UX and accessibility issues.

Includes SVG analysis as part of accessibility audits, checking for proper ARIA usage and accessibility attributes in SVG elements.

npx -y @modelcontextprotocol/cli install io.github.PetriLahdelma/vertaaux-mcp

npm install -g @vertaaux/mcp-server
VERTAAUX_API_KEY=vx_live_... vertaaux-mcp

# Install & build
npm install && npm run build

# Run (stdio transport, for Claude Desktop, VS Code, Cursor)
VERTAAUX_API_KEY=vx_live_... npm start

# Run (HTTP transport, for web clients)
VERTAAUX_API_KEY=vx_live_... npm run start:http

{
 "mcpServers": {
 "vertaaux": {
 "command": "node",
 "args": ["/path/to/mcp-server/dist/index.js"],
 "env": {
 "VERTAAUX_API_KEY": "vx_live_..."
 }
 }
 }
}

{
 "mcp.servers": {
 "vertaaux": {
 "command": "node",
 "args": ["./mcp-server/dist/index.js"],
 "env": {
 "VERTAAUX_API_KEY": "vx_live_..."
 }
 }
 }
}

{
 "mcpServers": {
 "vertaaux": {
 "command": "node",
 "args": ["/path/to/mcp-server/dist/index.js"],
 "env": {
 "VERTAAUX_API_KEY": "vx_live_..."
 }
 }
 }
}

import { configureEnterpriseControls } from './server.js';

configureEnterpriseControls({
 allowlist: {
 allowed_domains: ['*.example.com'],
 denied_domains: ['internal.example.com'],
 },
 budget: {
 max_requests: 100,
 max_pages: 50,
 max_duration_ms: 60000,
 max_concurrency: 3,
 },
 redaction: {
 redact_emails: true,
 redact_phone_numbers: true,
 redact_credit_cards: true,
 custom_patterns: [
 { name: 'api_key', pattern: 'sk_[a-zA-Z0-9]{20,}', replacement: '[REDACTED]' }
 ],
 },
});

1. audit_url({ url: "https://example.com", mode: "deep" })
 → Returns audit_id with top 5 issues

2. get_findings({ audit_id: "...", severity: "critical" })
 → Returns all critical findings with deterministic IDs

3. suggest_fix({ audit_id: "...", finding_id: "button-name:a1b2c3d4" })
 → Returns search/replace patch with 85% confidence

4. run_verification_suite({ url: "...", selector: "button.submit", rule_id: "button-name" })
 → Verifies fix resolves the issue

5. create_pr_comment({ file_path: "src/Button.tsx", patches: [...] })
 → Generates PR comment with suggestion blocks

mcp-server/
├── src/
│ ├── index.ts # Main entry, tool registration
│ ├── server.ts # MCP server config, resources, middleware
│ ├── a11y-tools.ts # Multi-engine a11y audit & baseline diffing tools
│ ├── http.ts # HTTP transport entry point
│ ├── prompts.ts # MCP prompt templates
│ ├── analysis.ts # Component analysis engine
│ ├── patch.ts # Patch generation
│ ├── verification.ts # Patch verification
│ ├── pr-comment.ts # PR comment generation
│ ├── tools/
│ │ ├── audit-url.ts # audit_url tool
│ │ ├── audit-repo.ts # audit_repo tool (static analysis)
│ │ ├── audit-artifact.ts # audit_artifact tool (HAR/Lighthouse)
│ │ ├── get-findings.ts # get_findings tool
│ │ ├── explain-finding.ts# explain_finding tool
│ │ ├── suggest-fix.ts # suggest_fix tool
│ │ ├── generate-pr.ts # generate_pr tool
│ │ └── index.ts # Tool exports
│ ├── transports/
│ │ ├── stdio.ts # Stdio transport (default)
│ │ └── http.ts # HTTP streaming transport
│ ├── middleware/
│ │ ├── allowlist.ts # Domain/path allowlist
│ │ ├── budget.ts # Rate limiting & quotas
│ │ ├── redaction.ts # PII redaction
│ │ └── index.ts # Middleware stack
│ ├── resources/
│ │ ├── audit-results.ts # vertaa://audits/* resources
│ │ ├── screenshots.ts # vertaa://screenshots/* resources
│ │ ├── historical.ts # vertaa://history/* resources
│ │ ├── legacy.ts # Guidelines resources
│ │ └── index.ts # Resource exports
│ ├── schemas/
│ │ ├── audit.ts # Audit schemas (mode, findings)
│ │ ├── findings.ts # Finding schemas
│ │ ├── controls.ts # Enterprise control schemas
│ │ ├── errors.ts # Error schemas
│ │ └── index.ts
│ ├── utils/
│ │ ├── error-recovery.ts # Structured errors with recovery guidance
│ │ ├── change-tracker.ts # Baseline change tracking
│ │ └── deterministic-id.ts # Stable finding IDs
│ └── index.test.ts # Test suite
├── README.md
├── package.json
├── tsconfig.json
└── vitest.config.ts

npm test # Run test suite
npm run test:watch # Watch mode
npm run test:coverage # Coverage report

npm run build # TypeScript → dist/

{
 "code": "AUDIT_NOT_FOUND",
 "message": "Audit abc123 not found.",
 "recovery": {
 "action": "Start a new audit for this URL",
 "tool": "audit_url",
 "params": { "url": "https://example.com" }
 }
}