accessflow-mcp-server 1.0.0

package/build/utils/logger.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"logger.js","sourceRoot":"","sources":["../../src/utils/logger.ts"],"names":[],"mappings":"AAAA,MAAM,CAAN,IAAY,QAKX;AALD,WAAY,QAAQ;IAClB,yCAAS,CAAA;IACT,uCAAQ,CAAA;IACR,uCAAQ,CAAA;IACR,yCAAS,CAAA;AACX,CAAC,EALW,QAAQ,KAAR,QAAQ,QAKnB;AAED,MAAM,OAAO,MAAM;IACT,KAAK,CAAW;IAExB,YAAY,QAAgB,MAAM;QAChC,IAAI,CAAC,KAAK,GAAG,IAAI,CAAC,aAAa,CAAC,KAAK,CAAC,CAAC;IACzC,CAAC;IAEO,aAAa,CAAC,KAAa;QACjC,QAAQ,KAAK,CAAC,WAAW,EAAE,EAAE,CAAC;YAC5B,KAAK,OAAO,CAAC,CAAC,OAAO,QAAQ,CAAC,KAAK,CAAC;YACpC,KAAK,MAAM,CAAC,CAAC,OAAO,QAAQ,CAAC,IAAI,CAAC;YAClC,KAAK,MAAM,CAAC,CAAC,OAAO,QAAQ,CAAC,IAAI,CAAC;YAClC,KAAK,OAAO,CAAC,CAAC,OAAO,QAAQ,CAAC,KAAK,CAAC;YACpC,OAAO,CAAC,CAAC,OAAO,QAAQ,CAAC,IAAI,CAAC;QAChC,CAAC;IACH,CAAC;IAEO,SAAS,CAAC,KAAe;QAC/B,OAAO,KAAK,IAAI,IAAI,CAAC,KAAK,CAAC;IAC7B,CAAC;IAEO,aAAa,CAAC,KAAa,EAAE,OAAe,EAAE,IAAU;QAC9D,MAAM,SAAS,GAAG,IAAI,IAAI,EAAE,CAAC,WAAW,EAAE,CAAC;QAC3C,MAAM,OAAO,GAAG,IAAI,CAAC,CAAC,CAAC,IAAI,IAAI,CAAC,SAAS,CAAC,IAAI,CAAC,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;QACvD,OAAO,IAAI,SAAS,KAAK,KAAK,KAAK,OAAO,GAAG,OAAO,EAAE,CAAC;IACzD,CAAC;IAED,KAAK,CAAC,OAAe,EAAE,IAAU;QAC/B,IAAI,IAAI,CAAC,SAAS,CAAC,QAAQ,CAAC,KAAK,CAAC,EAAE,CAAC;YACnC,OAAO,CAAC,KAAK,CAAC,IAAI,CAAC,aAAa,CAAC,OAAO,EAAE,OAAO,EAAE,IAAI,CAAC,CAAC,CAAC;QAC5D,CAAC;IACH,CAAC;IAED,IAAI,CAAC,OAAe,EAAE,IAAU;QAC9B,IAAI,IAAI,CAAC,SAAS,CAAC,QAAQ,CAAC,IAAI,CAAC,EAAE,CAAC;YAClC,OAAO,CAAC,IAAI,CAAC,IAAI,CAAC,aAAa,CAAC,MAAM,EAAE,OAAO,EAAE,IAAI,CAAC,CAAC,CAAC;QAC1D,CAAC;IACH,CAAC;IAED,IAAI,CAAC,OAAe,EAAE,IAAU;QAC9B,IAAI,IAAI,CAAC,SAAS,CAAC,QAAQ,CAAC,IAAI,CAAC,EAAE,CAAC;YAClC,OAAO,CAAC,GAAG,CAAC,IAAI,CAAC,aAAa,CAAC,MAAM,EAAE,OAAO,EAAE,IAAI,CAAC,CAAC,CAAC;QACzD,CAAC;IACH,CAAC;IAED,KAAK,CAAC,OAAe,EAAE,IAAU;QAC/B,IAAI,IAAI,CAAC,SAAS,CAAC,QAAQ,CAAC,KAAK,CAAC,EAAE,CAAC;YACnC,OAAO,CAAC,GAAG,CAAC,IAAI,CAAC,aAAa,CAAC,OAAO,EAAE,OAAO,EAAE,IAAI,CAAC,CAAC,CAAC;QAC1D,CAAC;IACH,CAAC;CACF"}

package/build/utils/responses.d.ts

@@ -0,0 +1,19 @@
+export interface McpResponse {
+    content: Array<{
+        type: "text";
+        text: string;
+    }>;
+}
+export interface ErrorResponse {
+    error: string;
+    code: string;
+    details?: any;
+}
+export declare class ResponseFormatter {
+    static success(text: string): McpResponse;
+    static error(message: string, code?: string, details?: any): McpResponse;
+    static notFound(resource: string, identifier: string): McpResponse;
+    static validationError(message: string, field?: string): McpResponse;
+    static websiteMismatch(issueId: string, expectedWebsite: string, actualWebsite: string): McpResponse;
+}
+//# sourceMappingURL=responses.d.ts.map

package/build/utils/responses.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"responses.d.ts","sourceRoot":"","sources":["../../src/utils/responses.ts"],"names":[],"mappings":"AAAA,MAAM,WAAW,WAAW;IAC1B,OAAO,EAAE,KAAK,CAAC;QACb,IAAI,EAAE,MAAM,CAAC;QACb,IAAI,EAAE,MAAM,CAAC;KACd,CAAC,CAAC;CACJ;AAED,MAAM,WAAW,aAAa;IAC5B,KAAK,EAAE,MAAM,CAAC;IACd,IAAI,EAAE,MAAM,CAAC;IACb,OAAO,CAAC,EAAE,GAAG,CAAC;CACf;AAED,qBAAa,iBAAiB;IAC5B,MAAM,CAAC,OAAO,CAAC,IAAI,EAAE,MAAM,GAAG,WAAW;IAWzC,MAAM,CAAC,KAAK,CAAC,OAAO,EAAE,MAAM,EAAE,IAAI,GAAE,MAAyB,EAAE,OAAO,CAAC,EAAE,GAAG,GAAG,WAAW;IAiB1F,MAAM,CAAC,QAAQ,CAAC,QAAQ,EAAE,MAAM,EAAE,UAAU,EAAE,MAAM,GAAG,WAAW;IAQlE,MAAM,CAAC,eAAe,CAAC,OAAO,EAAE,MAAM,EAAE,KAAK,CAAC,EAAE,MAAM,GAAG,WAAW;IAQpE,MAAM,CAAC,eAAe,CAAC,OAAO,EAAE,MAAM,EAAE,eAAe,EAAE,MAAM,EAAE,aAAa,EAAE,MAAM,GAAG,WAAW;CAWrG"}

package/build/utils/responses.js

@@ -0,0 +1,41 @@
+export class ResponseFormatter {
+    static success(text) {
+        return {
+            content: [
+                {
+                    type: "text",
+                    text
+                }
+            ]
+        };
+    }
+    static error(message, code = "INTERNAL_ERROR", details) {
+        const errorResponse = {
+            error: message,
+            code,
+            ...(details && { details })
+        };
+        return {
+            content: [
+                {
+                    type: "text",
+                    text: `**Error (${code})**\n\n${message}${details ? `\n\n**Details:**\n\`\`\`json\n${JSON.stringify(details, null, 2)}\n\`\`\`` : ""}`
+                }
+            ]
+        };
+    }
+    static notFound(resource, identifier) {
+        return this.error(`${resource} not found: ${identifier}`, "NOT_FOUND", { resource, identifier });
+    }
+    static validationError(message, field) {
+        return this.error(`Validation error: ${message}`, "VALIDATION_ERROR", { field });
+    }
+    static websiteMismatch(issueId, expectedWebsite, actualWebsite) {
+        return this.error(`Issue "${issueId}" belongs to website "${actualWebsite}" but expected website "${expectedWebsite}"`, "WEBSITE_MISMATCH", {
+            issueId,
+            expectedWebsite,
+            actualWebsite
+        });
+    }
+}
+//# sourceMappingURL=responses.js.map

package/build/utils/responses.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"responses.js","sourceRoot":"","sources":["../../src/utils/responses.ts"],"names":[],"mappings":"AAaA,MAAM,OAAO,iBAAiB;IAC5B,MAAM,CAAC,OAAO,CAAC,IAAY;QACzB,OAAO;YACL,OAAO,EAAE;gBACP;oBACE,IAAI,EAAE,MAAM;oBACZ,IAAI;iBACL;aACF;SACF,CAAC;IACJ,CAAC;IAED,MAAM,CAAC,KAAK,CAAC,OAAe,EAAE,OAAe,gBAAgB,EAAE,OAAa;QAC1E,MAAM,aAAa,GAAkB;YACnC,KAAK,EAAE,OAAO;YACd,IAAI;YACJ,GAAG,CAAC,OAAO,IAAI,EAAE,OAAO,EAAE,CAAC;SAC5B,CAAC;QAEF,OAAO;YACL,OAAO,EAAE;gBACP;oBACE,IAAI,EAAE,MAAM;oBACZ,IAAI,EAAE,YAAY,IAAI,UAAU,OAAO,GAAG,OAAO,CAAC,CAAC,CAAC,iCAAiC,IAAI,CAAC,SAAS,CAAC,OAAO,EAAE,IAAI,EAAE,CAAC,CAAC,UAAU,CAAC,CAAC,CAAC,EAAE,EAAE;iBACvI;aACF;SACF,CAAC;IACJ,CAAC;IAED,MAAM,CAAC,QAAQ,CAAC,QAAgB,EAAE,UAAkB;QAClD,OAAO,IAAI,CAAC,KAAK,CACf,GAAG,QAAQ,eAAe,UAAU,EAAE,EACtC,WAAW,EACX,EAAE,QAAQ,EAAE,UAAU,EAAE,CACzB,CAAC;IACJ,CAAC;IAED,MAAM,CAAC,eAAe,CAAC,OAAe,EAAE,KAAc;QACpD,OAAO,IAAI,CAAC,KAAK,CACf,qBAAqB,OAAO,EAAE,EAC9B,kBAAkB,EAClB,EAAE,KAAK,EAAE,CACV,CAAC;IACJ,CAAC;IAED,MAAM,CAAC,eAAe,CAAC,OAAe,EAAE,eAAuB,EAAE,aAAqB;QACpF,OAAO,IAAI,CAAC,KAAK,CACf,UAAU,OAAO,yBAAyB,aAAa,2BAA2B,eAAe,GAAG,EACpG,kBAAkB,EAClB;YACE,OAAO;YACP,eAAe;YACf,aAAa;SACd,CACF,CAAC;IACJ,CAAC;CACF"}

package/build/utils/validation.d.ts

@@ -0,0 +1,7 @@
+export declare class ValidationError extends Error {
+    constructor(message: string);
+}
+export declare function validateIssueDisplayName(displayName: string): void;
+export declare function validateObjectId(id: string): void;
+export declare function sanitizeMongoQuery(query: any): any;
+//# sourceMappingURL=validation.d.ts.map

package/build/utils/validation.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"validation.d.ts","sourceRoot":"","sources":["../../src/utils/validation.ts"],"names":[],"mappings":"AAGA,qBAAa,eAAgB,SAAQ,KAAK;gBAC5B,OAAO,EAAE,MAAM;CAI5B;AAED,wBAAgB,wBAAwB,CAAC,WAAW,EAAE,MAAM,GAAG,IAAI,CAalE;AAED,wBAAgB,gBAAgB,CAAC,EAAE,EAAE,MAAM,GAAG,IAAI,CAIjD;AAED,wBAAgB,kBAAkB,CAAC,KAAK,EAAE,GAAG,GAAG,GAAG,CAwBlD"}

package/build/utils/validation.js

@@ -0,0 +1,47 @@
+import { ObjectId } from "mongodb";
+import { McpError, ErrorCode } from "@modelcontextprotocol/sdk/types.js";
+export class ValidationError extends Error {
+    constructor(message) {
+        super(message);
+        this.name = "ValidationError";
+    }
+}
+export function validateIssueDisplayName(displayName) {
+    if (!displayName || typeof displayName !== "string") {
+        throw new McpError(ErrorCode.InvalidParams, "Issue display name must be a non-empty string");
+    }
+    // Sanitize input - remove potentially dangerous characters
+    if (!/^[a-zA-Z0-9\-_]+$/.test(displayName)) {
+        throw new McpError(ErrorCode.InvalidParams, "Issue display name contains invalid characters");
+    }
+    if (displayName.length > 100) {
+        throw new McpError(ErrorCode.InvalidParams, "Issue display name too long (max 100 characters)");
+    }
+}
+export function validateObjectId(id) {
+    if (!ObjectId.isValid(id)) {
+        throw new McpError(ErrorCode.InvalidParams, `Invalid ObjectId format: ${id}`);
+    }
+}
+export function sanitizeMongoQuery(query) {
+    // Remove any potential MongoDB injection operators
+    const sanitized = JSON.parse(JSON.stringify(query));
+    function removeOperators(obj) {
+        if (Array.isArray(obj)) {
+            return obj.map(removeOperators);
+        }
+        if (obj && typeof obj === "object") {
+            const cleaned = {};
+            for (const [key, value] of Object.entries(obj)) {
+                // Remove keys that start with $ (MongoDB operators)
+                if (!key.startsWith("$")) {
+                    cleaned[key] = removeOperators(value);
+                }
+            }
+            return cleaned;
+        }
+        return obj;
+    }
+    return removeOperators(sanitized);
+}
+//# sourceMappingURL=validation.js.map

package/build/utils/validation.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"validation.js","sourceRoot":"","sources":["../../src/utils/validation.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,QAAQ,EAAE,MAAM,SAAS,CAAC;AACnC,OAAO,EAAE,QAAQ,EAAE,SAAS,EAAE,MAAM,oCAAoC,CAAC;AAEzE,MAAM,OAAO,eAAgB,SAAQ,KAAK;IACxC,YAAY,OAAe;QACzB,KAAK,CAAC,OAAO,CAAC,CAAC;QACf,IAAI,CAAC,IAAI,GAAG,iBAAiB,CAAC;IAChC,CAAC;CACF;AAED,MAAM,UAAU,wBAAwB,CAAC,WAAmB;IAC1D,IAAI,CAAC,WAAW,IAAI,OAAO,WAAW,KAAK,QAAQ,EAAE,CAAC;QACpD,MAAM,IAAI,QAAQ,CAAC,SAAS,CAAC,aAAa,EAAE,+CAA+C,CAAC,CAAC;IAC/F,CAAC;IAED,2DAA2D;IAC3D,IAAI,CAAC,mBAAmB,CAAC,IAAI,CAAC,WAAW,CAAC,EAAE,CAAC;QAC3C,MAAM,IAAI,QAAQ,CAAC,SAAS,CAAC,aAAa,EAAE,gDAAgD,CAAC,CAAC;IAChG,CAAC;IAED,IAAI,WAAW,CAAC,MAAM,GAAG,GAAG,EAAE,CAAC;QAC7B,MAAM,IAAI,QAAQ,CAAC,SAAS,CAAC,aAAa,EAAE,kDAAkD,CAAC,CAAC;IAClG,CAAC;AACH,CAAC;AAED,MAAM,UAAU,gBAAgB,CAAC,EAAU;IACzC,IAAI,CAAC,QAAQ,CAAC,OAAO,CAAC,EAAE,CAAC,EAAE,CAAC;QAC1B,MAAM,IAAI,QAAQ,CAAC,SAAS,CAAC,aAAa,EAAE,4BAA4B,EAAE,EAAE,CAAC,CAAC;IAChF,CAAC;AACH,CAAC;AAED,MAAM,UAAU,kBAAkB,CAAC,KAAU;IAC3C,mDAAmD;IACnD,MAAM,SAAS,GAAG,IAAI,CAAC,KAAK,CAAC,IAAI,CAAC,SAAS,CAAC,KAAK,CAAC,CAAC,CAAC;IAEpD,SAAS,eAAe,CAAC,GAAQ;QAC/B,IAAI,KAAK,CAAC,OAAO,CAAC,GAAG,CAAC,EAAE,CAAC;YACvB,OAAO,GAAG,CAAC,GAAG,CAAC,eAAe,CAAC,CAAC;QAClC,CAAC;QAED,IAAI,GAAG,IAAI,OAAO,GAAG,KAAK,QAAQ,EAAE,CAAC;YACnC,MAAM,OAAO,GAAQ,EAAE,CAAC;YACxB,KAAK,MAAM,CAAC,GAAG,EAAE,KAAK,CAAC,IAAI,MAAM,CAAC,OAAO,CAAC,GAAG,CAAC,EAAE,CAAC;gBAC/C,oDAAoD;gBACpD,IAAI,CAAC,GAAG,CAAC,UAAU,CAAC,GAAG,CAAC,EAAE,CAAC;oBACzB,OAAO,CAAC,GAAG,CAAC,GAAG,eAAe,CAAC,KAAK,CAAC,CAAC;gBACxC,CAAC;YACH,CAAC;YACD,OAAO,OAAO,CAAC;QACjB,CAAC;QAED,OAAO,GAAG,CAAC;IACb,CAAC;IAED,OAAO,eAAe,CAAC,SAAS,CAAC,CAAC;AACpC,CAAC"}

package/mcp-config.json

@@ -0,0 +1,11 @@
+{
+  "mcpServers": {
+    "accessflow": {
+      "command": "node",
+      "args": ["./build/index.js"],
+      "env": {
+        "MONGO_URI": "mongodb://localhost:27017/accessflow"
+      }
+    }
+  }
+}

package/package.json

@@ -0,0 +1,33 @@
+{
+  "name": "accessflow-mcp-server",
+  "version": "1.0.0",
+  "description": "AccessFlow MCP Server for accessibility issue remediation",
+  "main": "build/index.js",
+  "bin": {
+    "flow-mcp": "./bin/flow-mcp"
+  },
+  "scripts": {
+    "build": "tsc",
+    "start": "node build/index.js",
+    "dev": "tsc && node build/index.js",
+    "test": "echo \"Error: no test specified\" && exit 1"
+  },
+  "keywords": [
+    "mcp",
+    "accessibility",
+    "wcag",
+    "remediation"
+  ],
+  "author": "AccessFlow",
+  "license": "ISC",
+  "type": "module",
+  "dependencies": {
+    "@modelcontextprotocol/sdk": "^1.15.1",
+    "@types/mongodb": "^4.0.6",
+    "mongodb": "^6.17.0"
+  },
+  "devDependencies": {
+    "@types/node": "^24.0.14",
+    "typescript": "^5.8.3"
+  }
+}

package/src/index.ts

@@ -0,0 +1,125 @@
+#!/usr/bin/env node
+
+import { Server } from "@modelcontextprotocol/sdk/server/index.js";
+import { StdioServerTransport } from "@modelcontextprotocol/sdk/server/stdio.js";
+import {
+  CallToolRequestSchema,
+  ErrorCode,
+  ListToolsRequestSchema,
+  McpError,
+} from "@modelcontextprotocol/sdk/types.js";
+import rulesData from "./rules.json" with { type: "json" };
+import { getToolDefinitions, getToolHandler } from "./tools/index.js";
+import { ToolContext } from "./tools/types.js";
+import { sanitizeDomain } from "./utils/domain.js";
+
+class AccessFlowMCPServer {
+  private server: Server;
+  private environment: string;
+  private domain: string;
+  private apiKey: string;
+  private rules: any[] = rulesData;
+
+  constructor() {
+    this.server = new Server(
+      {
+        name: "flow-mcp",
+        version: "1.0.0",
+      },
+      {
+        capabilities: {
+          tools: {},
+        },
+      }
+    );
+
+    this.environment = process.env.ENVIRONMENT || "accessflow.accessibe.com";
+
+    // Get DOMAIN Key from environment variable
+    this.domain = sanitizeDomain(process.env.DOMAIN || "");
+    if (!this.domain) {
+      console.error("DOMAIN environment variable is required");
+      process.exit(1);
+    }
+
+
+    // Get API Key from environment variable
+    this.apiKey = process.env.API_KEY || "";
+    if (!this.apiKey) {
+      console.error("API_KEY environment variable is required");
+      process.exit(1);
+    }
+
+    this.setupToolHandlers();
+  }
+
+  private setupToolHandlers(): void {
+    this.server.setRequestHandler(ListToolsRequestSchema, async () => {
+      return {
+        tools: getToolDefinitions(),
+      };
+    });
+
+    this.server.setRequestHandler(CallToolRequestSchema, async (request) => {
+      const { name, arguments: args } = request.params;
+
+      try {
+        const handler = getToolHandler(name);
+        if (!handler) {
+          throw new McpError(ErrorCode.MethodNotFound, `Unknown tool: ${name}`);
+        }
+
+        const headers: Record<string, string> = {
+          "x-api-key": this.apiKey,
+          "x-accessflow-domain": this.domain,
+          "Content-Type": "application/json",
+        };
+
+        if (this.environment.toLowerCase().includes("test")) {
+          const basicAuth = Buffer.from("test:acsb123").toString("base64");
+          headers["Authorization"] = `Basic ${basicAuth}`;
+        }
+
+        const context: ToolContext = {
+          rules: this.rules,
+          environment: this.environment,
+          apiKey: this.apiKey,
+          headers: headers,
+        };
+
+        return await handler(args || {}, context);
+      } catch (error) {
+        if (error instanceof McpError) {
+          throw error;
+        }
+        const errorMessage =
+          error instanceof Error ? error.message : String(error);
+        throw new McpError(
+          ErrorCode.InternalError,
+          `Tool execution failed: ${errorMessage}`
+        );
+      }
+    });
+  }
+
+  async run(): Promise<void> {
+    const transport = new StdioServerTransport();
+    await this.server.connect(transport);
+    console.error("AccessFlow MCP Server running on stdio");
+
+    // Handle graceful shutdown
+    process.on("SIGINT", async () => {
+      console.error("Shutting down AccessFlow MCP Server...");
+      process.exit(0);
+    });
+
+    process.on("SIGTERM", async () => {
+      console.error("Shutting down AccessFlow MCP Server...");
+      process.exit(0);
+    });
+  }
+}
+
+// Start the server
+const server = new AccessFlowMCPServer();
+server.run().catch(console.error);