MCP.Market

Overlayrisk Witness MCP server

by mertcanvural·io.github.mertcanvural/overlayrisk-witness·v0.1.0
No reviews yet

Independent before/after accessibility-overlay (accessiBe/UserWay) witness for any public URL.

A88/100grade A
Write a reviewInstall
What users say
No reviews yet
Be the first
Safety scan
A88/100

full report

Adoption
New

0 stars37 downloads/wk

Reviews

Write one

Nobody has reviewed Overlayrisk Witness yet.

If you have run it, two minutes of your experience saves the next person an afternoon.

Overlayrisk Witness tools (1, 1 write)

write = sends, deletes, buys or posts

Read from the package source without running it. The installed server may list more.

  • witness_pagewrite action

    Runs the OverlayRiskWitness free one-page witness for a public URL. Loads the

Public scan report

scanner v0.1.9 · 2026-09-26 · same rubric, same numbers if you re-run it

no findings
  • Code scan3 source files scanned25/25
  • –Live reliabilityno gateway calls yet and no remote to proben/a
  • –Tool poisoningtools not inspected (local package is not executed); not countedn/a
  • Auth qualitylocal package, no credentials required12/15
  • Maintenancelast push 90 days ago12/15
  • Maintainer identityregistry namespace matches repository owner; GitHub account older than a year8/10
Overall 88/100. Components that don't apply are left out of the denominator. Any critical finding is an F.RubricAppeal a findingJSON

How Overlayrisk Witness compares

Against every graded MCP server, from our own scans and uptime checks. Updated after each scan run.

Safety score
88/100
higher than 75% of 48,255 servers
Tools
1
the typical server has 7
Tools that change things
100%
typical: 0%. Fewer write tools means less an agent can break
Downloads a week
37
more than 28% of 12,191 servers with a package

What its tools let an agent do: 1 change

Install Overlayrisk Witness in Claude Code, Cursor or VS Code

Runs npx -y overlayrisk-witness-mcp on your machine. Read the scan report first; the gateway never runs local packages.

claude mcp add overlayrisk-witness -- npx -y overlayrisk-witness-mcp
Add to Cursor

What the publisher says

From the Overlayrisk Witness repository's README, as published. We do not edit it. Read it on GitHub

OverlayRiskWitness MCP server

A Model Context Protocol server that runs the free, independent before/after accessibility-overlay witness from OverlayRiskWitness on any public URL.

Accessibility overlay widgets (accessiBe, UserWay, and similar) are sold as one-line ADA/WCAG compliance fixes, but independent testing routinely shows the underlying page is unchanged for real assistive-technology users. This server lets an AI agent run the witness: it loads a page with the overlay on, then off, captures both states, and returns one documented finding where the page's public accessibility/compliance claims don't hold up — with a UTC timestamp.

Findings are evidence, not a legal compliance ruling. This server is independent of

accessiBe and UserWay; it tests their effect, it does not sell or defend an overlay.

What this server is (and isn't)

This is a thin client. It contains no scanning logic and no secrets. Its single tool POSTs to the hosted API at https://overlayrisk.com/api/witness, which does the real work (overlay detection, headless before/after capture, claim extraction). The full timestamped Risk Packet is a paid checkout on the website — see overlayrisk.com/pricing. The MCP server is a free funnel; it never handles payment.

Tool

witness_page

A single witness run can take up to ~3 minutes on cold/heavy sites. That exceeds many MCP clients' default 60s request timeout. The server emits periodic progress notifications, so clients that honor resetTimeoutOnProgress stay connected automatically; clients that don't should raise their per-request timeout.

Install

Run directly with npx (no global install):

npx overlayrisk-witness-mcp

The process speaks MCP over stdio.

Claude Desktop / Cursor / other MCP clients

Add to your client's MCP config:

{
  "mcpServers": {
    "overlayrisk-witness": {
      "command": "npx",
      "args": ["-y", "overlayrisk-witness-mcp"]
    }
  }
}

Configuration

No API key is required — the free one-page witness is public.

Develop

npm install
npm run smoke   # offline handshake test (lists tools, no network)
npm start       # run the server on stdio

License

MIT © Mert Can Vural

Nothing above is checked by us. What we check is on the safety report.

Overlayrisk Witness: common questions

Is Overlayrisk Witness MCP server safe?
Yes, by our scan: it is graded A (88/100). Read the Overlayrisk Witness safety report
How do I install Overlayrisk Witness?
It runs on your machine. Copy the Claude Code, Cursor, VS Code or Claude Desktop config from the install section.
Does Overlayrisk Witness need an API key?
No secret keys are declared. It reads 1 setting from the environment.
Is Overlayrisk Witness maintained?
The last commit was 128 days ago (2026-06-28). The latest release is v0.1.0.
How does Overlayrisk Witness compare with other MCP servers?
safety score 88/100 (higher than 75% of 48,255 servers); tools 1 (the typical server has 7); tools that change things 100% (typical: 0%. Fewer write tools means less an agent can break). Full comparison.