High-risk tools in A11y Assist

High severity A11y Assist MCP Server 2 of 12 tools

2 of the 12 tools in A11y Assist are classified as high risk. This page profiles those tools specifically, with recommended policy actions and the attack patterns that target them.

Every operation listed below is an action PolicyLayer recommends controlling at the transport layer. Open any tool to see the full profile, risk score, and YAML policy snippet.

Tools at high risk

audit_html Execute

Run accessibility checks against an HTML snippet using axe-core (WCAG AA). No dev server or Storybook required. Limitation: cannot evaluate dynamic behaviour (focus management, ...
audit_url Execute

Run accessibility checks against a live URL. Catches dynamic behaviour (focus management, transitions, live regions) that audit_html cannot. NOTE: it drives a fresh headless bro...

Attacks that target this class

High-risk tools in any server share these documented attack patterns. Each links to the full case and the defensive policy.

High-risk tools in A11y Assist

Tools at high risk

Attacks that target this class

More on A11y Assist

Enforce policy on every A11y Assist tool call.