agent-ready-mcp 0.5.2 → 0.5.4

package/dist/mcp-server.mjs

@@ -31357,10 +31357,26 @@ Discover-then-validate: when the relevant well-known endpoint returns 404, the c
 | C19 | MPP challenge params |
 | C20 | AP2 payment protocol support |
 | C21 | ACP profile (/.well-known/acp.json) |
+
+## Accessibility checks (9)
+
+Run over the homepage DOM (v1). WCAG-grounded accessibility-tree signals \u2014 image text alternatives, form labels, control names \u2014 plus a static layout-stability (CLS) proxy. Scored into a separate \`accessibilityScore\`, a distinct suite from the 69 checks above: accessibility is WCAG, not the Vercel Agent Readability Spec, so it never moves the Vercel score.
+
+| ID | Check |
+|---|---|
+| A1 | Images have text alternatives |
+| A2 | Form controls have labels |
+| A3 | Controls have accessible names |
+| A4 | Media declares explicit dimensions |
+| A5 | ARIA name references resolve |
+| A6 | Iframes have an accessible name |
+| A7 | Heading hierarchy is well-formed |
+| A8 | No positive tabindex |
+| A9 | Pinch-zoom is not disabled |
 `;
 var LLMS_TXT = `# Agent Ready
 
-> Agent Ready is a free tool that scores any website against the Vercel Agent Readability Spec, the llmstxt.org specification, and agent-protocol specs (MCP, A2A, agents.json). It runs 69 checks and provides actionable fix guidance for every failing check.
+> Agent Ready is a free tool that scores any website against the Vercel Agent Readability Spec, the llmstxt.org specification, and agent-protocol specs (MCP, A2A, agents.json). It runs 69 checks \u2014 plus a separate accessibility sub-score from 9 WCAG 2.2 / layout-stability checks \u2014 and provides actionable fix guidance for every failing check.
 
 This resource mirrors agent-ready.dev's own /llms.txt so MCP clients can introspect the same surface that ChatGPT, Perplexity, and other AI agents see when discovering Agent Ready as a tool.
 
@@ -31398,29 +31414,33 @@ Agent Ready's checks map to the specifications below. Each entry links to the ca
 
 ## Agent protocols
 
-- **MCP Server Cards (SEP-1649)** \u2014 The Model Context Protocol discovery card at /.well-known/mcp.json \u2014 its presence (C1) and required fields (C2). Canonical: <https://modelcontextprotocol.io> Checks: C1, C2.
+- **MCP Server Cards (SEP-1649)** \u2014 The Model Context Protocol discovery card at /.well-known/mcp.json \u2014 its presence (C1) and required fields (C2). Canonical: <https://github.com/modelcontextprotocol/modelcontextprotocol/issues/1649> Checks: C1, C2.
 - **OAuth Protected Resource Metadata (RFC 9728)** \u2014 Protected-resource metadata an MCP server advertises so agents can locate its authorization server. Canonical: <https://datatracker.ietf.org/doc/html/rfc9728> Checks: C3.
-- **A2A Protocol \u2014 Agent Cards** \u2014 The agent card at /.well-known/agent-card.json that lets agents discover and call other agents \u2014 existence with correct Content-Type (C4) and required fields (C5). Canonical: <https://a2a-protocol.org> Checks: C4, C5.
+- **A2A Protocol \u2014 Agent Cards** \u2014 The agent card at /.well-known/agent-card.json that lets agents discover and call other agents \u2014 existence with correct Content-Type (C4) and required fields (C5). Canonical: <https://a2a-protocol.org/v1.0.0/specification> Checks: C4, C5.
 - **Wildcard agents.json** _(pre-standard)_ \u2014 An OpenAPI extension declaring which existing REST endpoints agents should call. Pre-standard (v0.1.0). Canonical: <https://github.com/wild-card-ai/agents-json> Checks: C6.
-- **agent-permissions.json** _(pre-standard)_ \u2014 A manifest declaring per-path agent access policies, served at /.well-known/agent-permissions.json. No canonical spec document yet \u2014 defined by the discovery path. Canonical: _none published_ Checks: C7.
-- **UCP \u2014 Unified Capability Profile** \u2014 A composite profile at /.well-known/ucp bundling OAuth authorization-server metadata with capability declarations. Canonical: <https://ucp.dev> Checks: C8.
+- **agent-permissions.json** _(pre-standard)_ \u2014 A manifest declaring per-path agent access policies, served at /.well-known/agent-permissions.json. No canonical spec document yet \u2014 defined by the discovery path. Canonical: <https://github.com/las-wg/agent-permissions.json/blob/main/README.md> Checks: C7.
+- **UCP \u2014 Unified Capability Profile** \u2014 A composite profile at /.well-known/ucp bundling OAuth authorization-server metadata with capability declarations. Canonical: <https://ucp.dev/2026-04-08/specification/overview/> Checks: C8.
 - **OAuth Authorization Server Metadata (RFC 8414)** \u2014 The authorization-server metadata a UCP profile references so agents can complete an OAuth flow. Gated on C8. Canonical: <https://datatracker.ietf.org/doc/html/rfc8414> Checks: C9.
 - **ACP \u2014 Agentic Commerce Protocol** _(pre-standard)_ \u2014 OpenAI and Stripe's agentic-commerce standard. Sellers advertise support via a discovery document at /.well-known/acp.json declaring protocol version, transports, and capabilities (C21). Pre-standard \u2014 the discovery RFC is a Proposal. Canonical: <https://github.com/agentic-commerce-protocol/agentic-commerce-protocol/blob/main/rfcs/rfc.discovery.md> Checks: C21.
 
 ## Payments
 
-- **x402 \u2014 HTTP 402 Payment Required** \u2014 A behavioural payments scheme: a paid endpoint answers with HTTP 402 and a JSON body carrying an accepts array \u2014 the 402 response (C10) and valid accepts entries (C11). Canonical: <https://www.x402.org> Checks: C10, C11.
-- **MPP \u2014 Machine Payments Protocol** _(pre-standard)_ \u2014 The Stripe- and Tempo-authored "Payment" HTTP auth scheme on the IETF standards track \u2014 the WWW-Authenticate: Payment challenge (C18) and its required params (C19). Canonical: <https://paymentauth.org/> Checks: C18, C19.
+- **x402 \u2014 HTTP 402 Payment Required** \u2014 A behavioural payments scheme: a paid endpoint answers with HTTP 402 and a JSON body carrying an accepts array \u2014 the 402 response (C10) and valid accepts entries (C11). Canonical: <https://github.com/coinbase/x402/blob/main/specs/x402-specification-v2.md> Checks: C10, C11.
+- **MPP \u2014 Machine Payments Protocol** _(pre-standard)_ \u2014 The Stripe- and Tempo-authored "Payment" HTTP auth scheme on the IETF standards track \u2014 the WWW-Authenticate: Payment challenge (C18) and its required params (C19). Canonical: <https://paymentauth.org/draft-httpauth-payment-00.html> Checks: C18, C19.
 - **AP2 \u2014 Agent Payments Protocol** _(pre-standard)_ \u2014 Google's trust/authorization layer for agent-led payments, built on A2A: a participant advertises support via the AP2 extension URI in its A2A Agent Card. Detection only \u2014 mandate verifiable credentials are runtime SD-JWTs with no static artifact. Pre-standard (v0.2.0). Canonical: <https://github.com/google-agentic-commerce/AP2> Checks: C20.
 
 ## Discovery & integrity
 
 - **NLWeb** \u2014 An open natural-language query protocol: a site exposes POST /ask returning Schema.org-typed JSON. Detection is heuristic and informational. Canonical: <https://nlweb.ai/docs/specification> Checks: C12.
 - **API Catalog (RFC 9727)** \u2014 A /.well-known/api-catalog linkset advertising a site's APIs so agents can enumerate them from one well-known entry point. Canonical: <https://www.rfc-editor.org/info/rfc9727> Checks: C13.
-- **Web Bot Auth** _(pre-standard)_ \u2014 An HTTP message-signatures directory at /.well-known/http-message-signatures-directory letting well-behaved bots prove their identity. IETF draft. Canonical: <https://datatracker.ietf.org/doc/draft-meunier-web-bot-auth-architecture/> Checks: C14.
-- **Agent Skills Discovery** _(pre-standard)_ \u2014 A /.well-known/agent-skills/index.json manifest advertising installable agent skills. Pre-standard (Cloudflare RFC v0.2.0). Canonical: <https://github.com/cloudflare/agent-skills-discovery-rfc> Checks: C15.
+- **Web Bot Auth** _(pre-standard)_ \u2014 An HTTP message-signatures directory at /.well-known/http-message-signatures-directory letting well-behaved bots prove their identity. IETF draft. Canonical: <https://datatracker.ietf.org/doc/html/draft-meunier-web-bot-auth-architecture-05> Checks: C14.
+- **Agent Skills Discovery** _(pre-standard)_ \u2014 A /.well-known/agent-skills/index.json manifest advertising installable agent skills. Pre-standard (Cloudflare RFC v0.2.0). Canonical: <https://github.com/cloudflare/agent-skills-discovery-rfc/blob/main/README.md> Checks: C15.
 - **Content parity (anti-cloaking)** _(behavioural)_ \u2014 Not a published spec \u2014 a behavioural check comparing the AI-bot response to the baseline to detect cloaking (serving agents different content than humans). Canonical: _none published_ Checks: C16.
 - **Agent-driven UI (A2UI)** _(pre-standard)_ \u2014 MCP-Apps / OpenAI Apps SDK UI surfaces declared on an MCP Server Card, letting agents render interactive widgets inline. Emerging. Canonical: <https://modelcontextprotocol.io> Checks: C17.
+
+## Accessibility
+
+- **WCAG 2.2 + layout stability** \u2014 The accessibility tree \u2014 image text alternatives, form labels, control names, resolved ARIA references, named iframes, a clean heading outline \u2014 is what assistive tech and AI agents parse to act on a page; explicit media dimensions and enabled zoom keep it stable and usable (with a static CLS proxy). Scored as a separate accessibilityScore, not part of the Vercel score. Canonical: <https://www.w3.org/TR/WCAG22/> Checks: A1\u2013A9.
 `;
 
 // src/resources.ts
@@ -31448,7 +31468,7 @@ function registerResources(server) {
     "agent-ready://checks",
     {
       title: "Check registry",
-      description: "Reference table of all 69 checks Agent Ready runs, grouped by category (site, page, llms.txt, protocol). Each row pairs the stable check ID (e.g. P11, S15, L9, C3) with its human-readable name. Use this to identify a check by id when interpreting scan results.",
+      description: "Reference table of all 69 checks Agent Ready runs, grouped by category (site, page, llms.txt, protocol), plus the 9-check accessibility suite scored as a separate accessibility sub-score. Each row pairs the stable check ID (e.g. P11, S15, L9, C3, A7) with its human-readable name. Use this to identify a check by id when interpreting scan results.",
       mimeType: "text/markdown"
     },
     async () => ({
@@ -31734,7 +31754,7 @@ var validateStructuredDataInputShape = {
 // src/server.ts
 var SERVER_INFO = {
   name: "agent-ready",
-  version: "0.5.2"
+  version: "0.5.4"
 };
 function createMcpServer(config2) {
   const server = new McpServer(SERVER_INFO);

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "agent-ready-mcp",
-  "version": "0.5.2",
+  "version": "0.5.4",
   "mcpName": "io.github.mlava/agent-ready-mcp",
   "description": "MCP server for Agent Ready — scan any URL for AI-readability against the Vercel Agent Readability Spec, the llmstxt.org standard, and agent-protocol manifests (MCP server cards, A2A, agents.json, agent-permissions.json, UCP, x402, NLWeb). 69 checks with per-check fix guidance.",
   "license": "MIT",