Spotlight MCP server

by thrain.ai·ai.thrain/spotlight·v0.1.2

Local PDF accessibility audit: machine-checkable PDF/UA basics (ADA/EAA/508). No uploads.

C68/100grade C

What users say

No reviews yet

Safety scan

C68/100

Adoption

New

28 downloads/wk

Reviews

Nobody has reviewed Spotlight yet.

If you have run it, two minutes of your experience saves the next person an afternoon.

write = sends, deletes, buys or posts

Read from the package source without running it. The installed server may list more.

check_pdf_accessibility
Audit a local PDF against the machine-checkable basics of PDF/UA (ADA/EAA/Section 508

scanner v0.1.9 · 2026-09-24 · same rubric, same numbers if you re-run it

no findings

Code scan4 source files scanned25/25
–Live reliabilityno gateway calls yet and no remote to proben/a
–Tool poisoningtools not inspected (local package is not executed); not countedn/a
Auth qualitylocal package, no credentials required12/15
Maintenancerepository not readable: repo not found3/15
Maintainer identityverified namespace with website, no repo4/10

Overall 68/100. Components that don't apply are left out of the denominator. Any critical finding is an F.Rubric Appeal a finding JSON

Against every graded MCP server, from our own scans and uptime checks. Updated after each scan run.

Safety score: 68/100; higher than 30% of 48,255 servers
Tools: 1; the typical server has 7
Tools that change things: 0%; typical: 0%. Fewer write tools means less an agent can break
Downloads a week: 28; more than 15% of 12,191 servers with a package

What its tools let an agent do: 1 read

Runs npx -y @thrain/spotlight-mcp on your machine. Read the scan report first; the gateway never runs local packages.

claude mcp add spotlight -- npx -y @thrain/spotlight-mcp

Is Spotlight MCP server safe?: With care: it is graded C, so read the findings first (68/100). Read the Spotlight safety report
How do I install Spotlight?: It runs on your machine. Copy the Claude Code, Cursor, VS Code or Claude Desktop config from the install section.
Does Spotlight need an API key?: Not as far as the registry entry and our scan can tell: no credentials are declared or required.
Is Spotlight maintained?: The latest release is v0.1.2.
How does Spotlight compare with other MCP servers?: safety score 68/100 (higher than 30% of 48,255 servers); tools 1 (the typical server has 7); tools that change things 0% (typical: 0%. Fewer write tools means less an agent can break). Full comparison.