Vertaaux MCP server
io.github.PetriLahdelma/vertaaux-mcp·v1.2.2Autonomous UX and a11y audit, fix, and verify loop. 38 tools, framework-aware patches.
0 stars50 downloads/wk
Reviews
Write oneNobody has reviewed Vertaaux yet.
If you have run it, two minutes of your experience saves the next person an afternoon.
Vertaaux tools (1)
write = sends, deletes, buys or postsRead from the package source without running it. The installed server may list more.
verify_fixes[audit] POST-DEPLOY fix verification. Run a fresh audit on a URL where you merged a11y fixes and compare to a baseline. Partitions findings into: fixed (worked), still_broken (didn't land), regressions (worse), new_issues (unrelated), unknown (flaky, not counted). Returns verification_status: all_fixed | partial | regressed | budget_exhausted | unknown. Budget-capped at 3 iterations per (session,
Public scan report
scanner v0.1.9 · 2026-09-27 · same rubric, same numbers if you re-run it
- Code scan103 source files scanned25/25
- –Live reliabilityno gateway calls yet and no remote to proben/a
- –Tool poisoningtools not inspected (local package is not executed); not countedn/a
- Auth qualitystatic API keys via environment variables6/15
- Maintenancelast push 102 days ago8/15
- Maintainer identitynamespace and repository owner differ4/10
How Vertaaux compares
Against every graded MCP server, from our own scans and uptime checks. Updated after each scan run.
- Safety score
- 66/100
- higher than 23% of 48,255 servers
- Tools
- 1
- the typical server has 7
- Tools that change things
- 0%
- typical: 0%. Fewer write tools means less an agent can break
- Downloads a week
- 50
- more than 42% of 12,191 servers with a package
What its tools let an agent do: 1 read
Install Vertaaux in Claude Code, Cursor or VS Code
Runs npx -y @vertaaux/mcp-server on your machine. Read the scan report first; the gateway never runs local packages.
claude mcp add vertaaux-mcp -- npx -y @vertaaux/mcp-server
What the publisher says
From the Vertaaux repository's README, as published. We do not edit it. Read it on GitHub
VertaaUX MCP Server
The only MCP server with an autonomous audit, fix, and verify loop. Detects UX and accessibility issues across 7 categories, generates framework-aware patches (React, Vue, Angular, Svelte), opens atomic GitHub PRs via the Git Trees API, and verifies the fix landed in production. Built for CI/CD pipelines with policy-as-code thresholds.
Why this server is different
- verifyfixes loop**: close the audit, fix, re-audit cycle without leaving the agent loop. Budget-capped at 3 iterations to prevent runaway billing.
- Framework-aware patches: suggest_fix detects React/Vue/Angular/Svelte/Nuxt via the nearest package.json and emits idiomatic patches (JSX rewrites for React, HTML attrs preserved elsewhere).
- Atomic Git Trees PRs: generate_pr applies N patches in a single commit or zero. Conflict graph + AST gate (Babel, vue-eslint-parser, svelte/compiler) refuse unparseable patches before they reach the PR.
- Deterministic finding IDs: rule:hash format stable across audit runs so agents can reference findings without storing state.
- Multi-engine a11y: audit_a11y combines axe-core, AccessLint, and VertaaUX analyzers in a single call.
- Policy-as-code: policy_check mirrors the GitHub Action's threshold evaluator exactly so CI and agent verdicts match.
Features
- 38 Tools across audit, fix, PR, schedule, webhook, policy, and a11y categories
- 7 Prompt Templates for common workflows
- 8 Resource URIs for audit data and UX guidelines
- Enterprise Controls: domain allowlist, rate limiting, PII redaction
- Dual Transport: stdio (CLI/Desktop) + HTTP streaming (web)
- Official MCP SDK: spec-compliant via @modelcontextprotocol/sdk
Install
MCP Official Registry
npx -y @modelcontextprotocol/cli install io.github.PetriLahdelma/vertaaux-mcpnpm
npm install -g @vertaaux/mcp-server
VERTAAUX_API_KEY=vx_live_... vertaaux-mcpDrift policy: smithery.yaml, glama.json, and server.json are auto-generated from the live MCP tool registry by npm run generate:manifests. Never hand-edit them. See docs/REGISTRY-PUBLISHING.md for the runbook.
Quick Start
# Install & build
npm install && npm run build
# Run (stdio transport, for Claude Desktop, VS Code, Cursor)
VERTAAUX_API_KEY=vx_live_... npm start
# Run (HTTP transport, for web clients)
VERTAAUX_API_KEY=vx_live_... npm run start:httpIDE Integration
Claude Desktop
Add to ~/Library/Application Support/Claude/claudedesktopconfig.json:
{
"mcpServers": {
"vertaaux": {
"command": "node",
"args": ["/path/to/mcp-server/dist/index.js"],
"env": {
"VERTAAUX_API_KEY": "vx_live_..."
}
}
}
}VS Code (with MCP extension)
Add to .vscode/settings.json:
{
"mcp.servers": {
"vertaaux": {
"command": "node",
"args": ["./mcp-server/dist/index.js"],
"env": {
"VERTAAUX_API_KEY": "vx_live_..."
}
}
}
}Cursor
Add to .cursor/mcp.json:
{
"mcpServers": {
"vertaaux": {
"command": "node",
"args": ["/path/to/mcp-server/dist/index.js"],
"env": {
"VERTAAUX_API_KEY": "vx_live_..."
}
}
}
}Environment Variables
Tools
Audit Tools (Core)
Shortened. The full README is on GitHub.
Nothing above is checked by us. What we check is on the safety report.
Vertaaux: common questions
- Is Vertaaux MCP server safe?
- With care: it is graded C, so read the findings first (66/100). Read the Vertaaux safety report
- How do I install Vertaaux?
- It runs on your machine. Copy the Claude Code, Cursor, VS Code or Claude Desktop config from the install section.
- Does Vertaaux need an API key?
- Yes. The registry entry asks for
VERTAAUX_API_KEY. - Is Vertaaux maintained?
- The last commit was 140 days ago (2026-06-17). The latest release is v1.2.2.
- How does Vertaaux compare with other MCP servers?
- safety score 66/100 (higher than 23% of 48,255 servers); tools 1 (the typical server has 7); tools that change things 0% (typical: 0%. Fewer write tools means less an agent can break). Full comparison.