agent-ready-mcp 0.5.3 → 0.6.0

package/dist/mcp-server.mjs

@@ -23093,6 +23093,50 @@ async function call(config2, opts) {
   }
   return payload;
 }
+async function postAnonScan(config2, url2) {
+  const path = "/api/scan";
+  let res;
+  try {
+    res = await fetch(`${config2.baseUrl}${path}`, {
+      method: "POST",
+      headers: {
+        "Content-Type": "application/json",
+        Accept: "application/json"
+      },
+      body: JSON.stringify({ url: url2 }),
+      signal: AbortSignal.timeout(config2.scanTimeoutMs)
+    });
+  } catch (err) {
+    if (err instanceof Error && err.name === "TimeoutError") {
+      throw new ApiError(
+        "timeout",
+        `Request to ${path} timed out after ${config2.scanTimeoutMs}ms.`
+      );
+    }
+    const message = err instanceof Error ? err.message : String(err);
+    throw new ApiError("network_error", `Network error calling ${path}: ${message}`);
+  }
+  const text = await res.text();
+  let payload = null;
+  if (text.length > 0) {
+    try {
+      payload = JSON.parse(text);
+    } catch {
+    }
+  }
+  if (!res.ok) {
+    const body = payload && typeof payload === "object" ? payload : null;
+    let message = typeof body?.error === "string" && body.error ? body.error : text || `HTTP ${res.status} from ${path}`;
+    if (res.status === 429) {
+      if (typeof body?.resetAt === "string") {
+        message += ` Quota resets ${body.resetAt.slice(0, 10)}.`;
+      }
+      throw new ApiError("quota_exhausted", message, res.status);
+    }
+    throw new ApiError(`http_${res.status}`, message, res.status);
+  }
+  return payload;
+}
 async function postScan(config2, body) {
   return call(config2, {
     method: "POST",
@@ -31357,10 +31401,26 @@ Discover-then-validate: when the relevant well-known endpoint returns 404, the c
 | C19 | MPP challenge params |
 | C20 | AP2 payment protocol support |
 | C21 | ACP profile (/.well-known/acp.json) |
+
+## Accessibility checks (9)
+
+Run over the homepage DOM (v1). WCAG-grounded accessibility-tree signals \u2014 image text alternatives, form labels, control names \u2014 plus a static layout-stability (CLS) proxy. Scored into a separate \`accessibilityScore\`, a distinct suite from the 69 checks above: accessibility is WCAG, not the Vercel Agent Readability Spec, so it never moves the Vercel score.
+
+| ID | Check |
+|---|---|
+| A1 | Images have text alternatives |
+| A2 | Form controls have labels |
+| A3 | Controls have accessible names |
+| A4 | Media declares explicit dimensions |
+| A5 | ARIA name references resolve |
+| A6 | Iframes have an accessible name |
+| A7 | Heading hierarchy is well-formed |
+| A8 | No positive tabindex |
+| A9 | Pinch-zoom is not disabled |
 `;
 var LLMS_TXT = `# Agent Ready
 
-> Agent Ready is a free tool that scores any website against the Vercel Agent Readability Spec, the llmstxt.org specification, and agent-protocol specs (MCP, A2A, agents.json). It runs 69 checks and provides actionable fix guidance for every failing check.
+> Agent Ready is a free tool that scores any website against the Vercel Agent Readability Spec, the llmstxt.org specification, and agent-protocol specs (MCP, A2A, agents.json). It runs 69 checks \u2014 plus a separate accessibility sub-score from 9 WCAG 2.2 / layout-stability checks \u2014 and provides actionable fix guidance for every failing check.
 
 This resource mirrors agent-ready.dev's own /llms.txt so MCP clients can introspect the same surface that ChatGPT, Perplexity, and other AI agents see when discovering Agent Ready as a tool.
 
@@ -31421,6 +31481,10 @@ Agent Ready's checks map to the specifications below. Each entry links to the ca
 - **Agent Skills Discovery** _(pre-standard)_ \u2014 A /.well-known/agent-skills/index.json manifest advertising installable agent skills. Pre-standard (Cloudflare RFC v0.2.0). Canonical: <https://github.com/cloudflare/agent-skills-discovery-rfc/blob/main/README.md> Checks: C15.
 - **Content parity (anti-cloaking)** _(behavioural)_ \u2014 Not a published spec \u2014 a behavioural check comparing the AI-bot response to the baseline to detect cloaking (serving agents different content than humans). Canonical: _none published_ Checks: C16.
 - **Agent-driven UI (A2UI)** _(pre-standard)_ \u2014 MCP-Apps / OpenAI Apps SDK UI surfaces declared on an MCP Server Card, letting agents render interactive widgets inline. Emerging. Canonical: <https://modelcontextprotocol.io> Checks: C17.
+
+## Accessibility
+
+- **WCAG 2.2 + layout stability** \u2014 The accessibility tree \u2014 image text alternatives, form labels, control names, resolved ARIA references, named iframes, a clean heading outline \u2014 is what assistive tech and AI agents parse to act on a page; explicit media dimensions and enabled zoom keep it stable and usable (with a static CLS proxy). Scored as a separate accessibilityScore, not part of the Vercel score. Canonical: <https://www.w3.org/TR/WCAG22/> Checks: A1\u2013A9.
 `;
 
 // src/resources.ts
@@ -31448,7 +31512,7 @@ function registerResources(server) {
     "agent-ready://checks",
     {
       title: "Check registry",
-      description: "Reference table of all 69 checks Agent Ready runs, grouped by category (site, page, llms.txt, protocol). Each row pairs the stable check ID (e.g. P11, S15, L9, C3) with its human-readable name. Use this to identify a check by id when interpreting scan results.",
+      description: "Reference table of all 69 checks Agent Ready runs, grouped by category (site, page, llms.txt, protocol), plus the 9-check accessibility suite scored as a separate accessibility sub-score. Each row pairs the stable check ID (e.g. P11, S15, L9, C3, A7) with its human-readable name. Use this to identify a check by id when interpreting scan results.",
       mimeType: "text/markdown"
     },
     async () => ({
@@ -31511,7 +31575,31 @@ var POLL_INTERVAL_MS = 2e3;
 async function sleep(ms) {
   return new Promise((resolve) => setTimeout(resolve, ms));
 }
+var ANON_TIER_NOTE = "Scanned on the anonymous free tier (3 scans per 30 days per IP, 25-page depth). A Pro API key (AGENT_READY_API_KEY) unlocks 50 scans/month, 250-page depth, scan history via get_scan, and weekly monitoring \u2014 https://agent-ready.dev/pricing";
 async function scanSite(config2, input) {
+  if (!config2.apiKey) {
+    let res;
+    try {
+      res = await postAnonScan(config2, input.url);
+    } catch (err) {
+      if (err instanceof ApiError) {
+        const hint = err.status === 429 ? " Set a Pro API key (AGENT_READY_API_KEY, from https://agent-ready.dev/dashboard/api-keys) to remove the anonymous cap." : "";
+        throw new ToolError(err.code, err.message + hint);
+      }
+      throw err;
+    }
+    if (!res || typeof res !== "object" || !res.scan) {
+      throw new ToolError(
+        "invalid_response",
+        "Anonymous scan returned no scan payload from /api/scan."
+      );
+    }
+    const payload = { ...res.scan, message: ANON_TIER_NOTE };
+    return {
+      content: [{ type: "text", text: JSON.stringify(payload) }],
+      structuredContent: payload
+    };
+  }
   let placeholder;
   try {
     placeholder = await postScan(config2, {
@@ -31585,6 +31673,12 @@ async function getScanById(config2, input) {
       if (err.status === 404) {
         throw new ToolError("not_found", `Scan ${input.id} not found.`);
       }
+      if (err.code === "missing_api_key") {
+        throw new ToolError(
+          "missing_api_key",
+          "get_scan needs a Pro API key (scan history is account-scoped). scan_site works without one on the anonymous tier and returns its result inline. Keys: https://agent-ready.dev/dashboard/api-keys"
+        );
+      }
       throw new ToolError(err.code, err.message);
     }
     throw err;
@@ -31734,7 +31828,7 @@ var validateStructuredDataInputShape = {
 // src/server.ts
 var SERVER_INFO = {
   name: "agent-ready",
-  version: "0.5.3"
+  version: "0.6.0"
 };
 function createMcpServer(config2) {
   const server = new McpServer(SERVER_INFO);
@@ -31748,7 +31842,7 @@ function createMcpServer(config2) {
     "scan_site",
     {
       title: "Scan a site for AI agent readability",
-      description: "Runs the agent-ready.dev scanner against a URL and returns structured results: Vercel score, llmstxt.org score, and per-check findings with remediation hints. Scans may take up to ~60s; if the local poll deadline elapses, the tool returns the scan id and asks you to poll with get_scan.",
+      description: "Runs the agent-ready.dev scanner against a URL and returns structured results: Vercel score, llmstxt.org score, and per-check findings with remediation hints. Works without an API key on the anonymous free tier (3 scans/30 days per IP, 25-page depth, synchronous). With a Pro AGENT_READY_API_KEY it scans deeper (up to 250 pages) and may take up to ~60s; if the local poll deadline elapses, the tool returns the scan id and asks you to poll with get_scan.",
       inputSchema: scanSiteInputShape,
       outputSchema: scanOutputShape,
       annotations: READ_ONLY_OPEN_WORLD
@@ -31765,7 +31859,7 @@ function createMcpServer(config2) {
     "get_scan",
     {
       title: "Get a previous scan by id",
-      description: "Fetches a completed or in-progress scan by its id. Only scans owned by the authenticated API key's user are returned.",
+      description: "Fetches a completed or in-progress scan by its id. Requires a Pro API key \u2014 scan history is account-scoped. (Anonymous scan_site calls return their result inline, so keyless use never needs this tool.)",
       inputSchema: getScanInputShape,
       outputSchema: scanOutputShape,
       annotations: READ_ONLY_OPEN_WORLD
@@ -31833,7 +31927,7 @@ async function main() {
   const config2 = createConfig();
   if (!config2.apiKey) {
     process.stderr.write(
-      "agent-ready-mcp started without AGENT_READY_API_KEY \u2014 tools will return a configuration message until a key is set. Issue a Pro API key at https://agent-ready.dev/dashboard/api-keys.\n"
+      "agent-ready-mcp started without AGENT_READY_API_KEY \u2014 scan_site runs on the anonymous free tier (3 scans per 30 days per IP, 25-page depth); get_scan needs a Pro key. Issue one at https://agent-ready.dev/dashboard/api-keys for deeper scans, history, and monitoring.\n"
     );
   }
   const server = createMcpServer(config2);

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "agent-ready-mcp",
-  "version": "0.5.3",
+  "version": "0.6.0",
   "mcpName": "io.github.mlava/agent-ready-mcp",
   "description": "MCP server for Agent Ready — scan any URL for AI-readability against the Vercel Agent Readability Spec, the llmstxt.org standard, and agent-protocol manifests (MCP server cards, A2A, agents.json, agent-permissions.json, UCP, x402, NLWeb). 69 checks with per-check fix guidance.",
   "license": "MIT",