English Français العربية

io.github.mertcanvural/overlayrisk-witness

السجل الرسمي أخرى

Independent before/after accessibility-overlay (accessiBe/UserWay) witness for any public URL.

الشيفرة المصدرية الموقع التوثيق

التثبيت

أضف هذا إلى إعدادات MCP في عميلك (Claude Desktop: claude_desktop_config.json، وCursor: ‏.cursor/mcp.json، ويستخدم VS Code وغيره الصيغة نفسها «mcpServers»).

NPM package overlayrisk-witness-mcp
Claude Code 
claude mcp add overlayrisk-witness -e 'OVERLAYRISK_API_URL=<OVERLAYRISK_API_URL>' -- npx -y overlayrisk-witness-mcp@0.1.0
إعداد JSON (Claude Desktop وCursor وVS Code) 
{
    "mcpServers": {
        "overlayrisk-witness": {
            "command": "npx",
            "args": [
                "-y",
                "overlayrisk-witness-mcp@0.1.0"
            ],
            "env": {
                "OVERLAYRISK_API_URL": "<OVERLAYRISK_API_URL>"
            }
        }
    }
}

متغيرات البيئة

  • OVERLAYRISK_API_URL Override the hosted witness endpoint (defaults to https://overlayrisk.com/api/witness).

التوثيق

مأخوذ من ملف README للمشروع على GitHub ويُحدَّث أسبوعيًا. تفتح الروابط على GitHub.

المحتويات
  1. OverlayRiskWitness MCP server
  2. What this server is (and isn't)
  3. Tool
  4. Install
  5. Configuration
  6. Develop
  7. License

OverlayRiskWitness MCP server

A Model Context Protocol server that runs the free, independent before/after accessibility-overlay witness from OverlayRiskWitness on any public URL.

Accessibility overlay widgets (accessiBe, UserWay, and similar) are sold as one-line ADA/WCAG compliance fixes, but independent testing routinely shows the underlying page is unchanged for real assistive-technology users. This server lets an AI agent run the witness: it loads a page with the overlay on, then off, captures both states, and returns one documented finding where the page's public accessibility/compliance claims don't hold up — with a UTC timestamp.

Findings are evidence, not a legal compliance ruling. This server is independent of accessiBe and UserWay; it tests their effect, it does not sell or defend an overlay.

What this server is (and isn't)

This is a thin client. It contains no scanning logic and no secrets. Its single tool POSTs to the hosted API at https://overlayrisk.com/api/witness, which does the real work (overlay detection, headless before/after capture, claim extraction). The full timestamped Risk Packet is a paid checkout on the website — see overlayrisk.com/pricing. The MCP server is a free funnel; it never handles payment.

Tool

witness_page
Input{ "url": "https://example.com/checkout" } — a public HTTP/HTTPS page URL
SuccessThe free-witness JSON: runId, siteUrl, overlayVendor (accessibe/userway), pagesTested, claimsTested, didNotHoldUp, freeFinding, lockedFindingCount — plus a note linking to the paid Risk Packet
Error{ status, code, error } (e.g. overlay_no_effect, page_fetch_failed, witness_timeout)

A single witness run can take up to ~3 minutes on cold/heavy sites. That exceeds many MCP clients' default 60s request timeout. The server emits periodic progress notifications, so clients that honor resetTimeoutOnProgress stay connected automatically; clients that don't should raise their per-request timeout.

Install

Run directly with npx (no global install):

npx overlayrisk-witness-mcp

The process speaks MCP over stdio.

Claude Desktop / Cursor / other MCP clients

Add to your client's MCP config:

{
  "mcpServers": {
    "overlayrisk-witness": {
      "command": "npx",
      "args": ["-y", "overlayrisk-witness-mcp"]
    }
  }
}

Configuration

Env varDefaultPurpose
OVERLAYRISK_API_URLhttps://overlayrisk.com/api/witnessOverride the witness endpoint (e.g. for local dev)
OVERLAYRISK_TIMEOUT_MS200000Request timeout in ms

No API key is required — the free one-page witness is public.

Develop

npm install
npm run smoke   # offline handshake test (lists tools, no network)
npm start       # run the server on stdio

License

MIT © Mert Can Vural

الأسئلة الشائعة

ما هو io.github.mertcanvural/overlayrisk-witness؟

Independent before/after accessibility-overlay (accessiBe/UserWay) witness for any public URL.

كيف أثبّت io.github.mertcanvural/overlayrisk-witness؟

يعمل على جهازك. في Claude Code: claude mcp add overlayrisk-witness -e 'OVERLAYRISK_API_URL=<OVERLAYRISK_API_URL>' -- npx -y overlayrisk-witness-mcp@0.1.0. وفي العملاء الآخرين، الصق إعداد JSON من هذه الصفحة في إعدادات MCP الخاصة بهم.

هل يحتاج io.github.mertcanvural/overlayrisk-witness إلى مفتاح API؟

لا يذكر إدراجه في السجل أي مفتاح أو سر إلزامي. قد تتطلب بعض الميزات حسابًا لدى الخدمة التي يتصل بها.

هل io.github.mertcanvural/overlayrisk-witness مفتوح المصدر؟

نعم. شيفرته متاحة على GitHub بترخيص MIT.

من يصون io.github.mertcanvural/overlayrisk-witness؟

ينشره mertcanvural. يدرجه AI.tn لكنه لا يصونه ولا يوصي به.

من سجل MCP الرسمي. الإدراج ليس توصية: راجع شيفرة الخادم وصلاحياته قبل منحه الوصول إلى بياناتك.