In-depth architectural comparison of the Ara — audits d'accessibilité RGAA and TradeOnyx MCP servers. Compare execution transports, security boundaries, tool capabilities, quality scores, and ready-to-paste client installation snippets for Claude, Cursor, Windsurf, and VS Code.
At a Glance & Executive Verdict
Ara — audits d'accessibilité RGAA
Developer Tools · Local stdio
Quality: 64/100 (Good) | Auth: API Key required
TradeOnyx
Developer Tools · Local stdio
Quality: 45/100 (Fair) | Auth: No auth required
Verdict Summary: Choose Ara — audits d'accessibilité RGAA if you need specialized Developer Tools tools running via a local process. Choose TradeOnyx if your workspace requires Developer Tools integration with local subprocess execution. Both servers can be configured concurrently in your client's mcpServers manifest.
Which MCP Server Should You Choose?
Choose Ara — audits d'accessibilité RGAA when:
You need dedicated capabilities in the Developer Tools domain.
You prefer local stdio subprocess transport architecture.
Your security boundary fits: API Key required (Free / Open Source).
You have access to required keys: ARA_AUTH_TOKEN, ARA_USERNAME, ARA_PASSWORD, ARA_BASE_URL.
List RGAA 4.1 criteria as an index: topic number, topic name, criterion number and wording. Tests are NOT included — call get_rgaa_criterion for those.
Use this to know what an audit actually covers before evaluating anything. Filter to keep the answer small:
- auditType FAST — the 25 criteria of a rapid audit
- auditType COMPLEMENTARY — the 25 complementary criteria (disjoint from the rapid ones)
- auditType FULL, or no filter — all 106
- topic — restrict to one of the 13 topics
Source: the RGAA reference shipped with Ara, published by the DINUM under Licence Ouverte 2.0.
get_audit_method
Return the work plan for an audit type: which criteria can be settled by reading the HTML source, and which ones require the rendered page, keyboard navigation, the accessibility tree, or editorial judgement.
Call this BEFORE starting an audit. It tells you which tools you will actually need — a browser, a keyboard pass, a screen reader — instead of discovering halfway through that half the criteria cannot be answered from markup.
Criteria that need more than the source cannot be marked COMPLIANT or NOT_COMPLIANT by update_audit_results without declaring the matching evidence.
This classification is guidance from this server, not a prescription of the RGAA.
get_rgaa_criterion
Return the wording of a single RGAA 4.1 criterion AND its numbered tests — the checks an auditor actually performs to decide COMPLIANT / NOT_COMPLIANT / NOT_APPLICABLE.
Call this before evaluating a criterion with update_audit_results: it is what turns "topic 6, criterium 1" into something you can actually assess. Also tells whether the criterion belongs to the rapid or complementary audit.
The "verification" block says what is needed BEYOND the HTML source to settle the criterion — keyboard navigation, rendered page, accessibility tree, or editorial judgement — and how to go about it. When "sourceSuffit" is false, reading the markup is not enough: open the page.
Source: the RGAA reference shipped with Ara, published by the DINUM under Licence Ouverte 2.0.
Ready-to-Paste Client Configurations
Paste either (or both) of these JSON server blocks into your client config file (e.g. claude_desktop_config.json or ~/.cursor/mcp.json).
Ara — audits d'accessibilité RGAA is categorized under Developer Tools and uses a local stdio subprocess. In contrast, TradeOnyx belongs to Developer Tools using local stdio subprocess. Select Ara — audits d'accessibilité RGAA when you need capabilities focused on developer tools and TradeOnyx when you require tools for developer tools.
Re-authenticate against Ara using the credentials configured in this server's environment, and report the current authentication state.
Takes no arguments on purpose: credentials must never be passed as tool arguments, because tool arguments transit through the model's context and are persisted in conversation transcripts.
Configure them in the `env` block of your MCP client configuration:
- ARA_AUTH_TOKEN — a pre-issued Bearer token (recommended)
- ARA_USERNAME + ARA_PASSWORD — used to sign in automatically at startup
Use this tool only when a call has failed with an expired-token error.
create_audit
Create a new RGAA accessibility audit in Ara. Returns the audit with its editUniqueId (for editing) and consultUniqueId (for viewing the report).
Audit types:
- FULL: all 106 RGAA criteria
- FAST: 25 criteria (audit rapide)
- COMPLEMENTARY: 25 criteria (audit complémentaire) — disjoint from the rapid ones, the two methodologies together covering 50
Call list_rgaa_criteria to see exactly which criteria a type covers.
get_audit
Retrieve a full audit by its editUniqueId. Returns all metadata, pages, environments, and notes.
update_audit
Full update of an audit's metadata (procedure info, auditor info, environments, tools, technologies, notes, etc.). This REPLACES the existing metadata: fetch the audit with get_audit first and resend the fields you want to keep.
patch_audit_notes
Update only the notes field of an audit, without touching other metadata. The new content REPLACES the existing notes.
Unlike criterion comments, this field is passed through as rich text: HTML is interpreted. Write <th> rather than <th> if you need to quote markup literally.
delete_audit
Soft-delete an audit. The audit itself returns HTTP 410 Gone for future requests, and disappears from the account's audit list. This cannot be undone from this server.
IMPORTANT — deleting does NOT unpublish. If the audit was published, its report REMAINS publicly readable at its consultation URL after deletion, and it is then reachable from nowhere in the Ara interface, so it can no longer be edited or withdrawn. Verified against the live API. Do not present deletion to the user as a way to undo a publication.
duplicate_audit
Fully duplicate an existing audit (metadata, pages, RGAA results, example images). Returns a new audit with fresh IDs. The source audit is left untouched.
publish_audit
Mark an audit as published/completed. This makes the audit report and its accessibility statement PUBLICLY available at their consultation URL — confirm with the user before calling it. The audit must be fully filled in (all criteria evaluated) before publishing. Returns HTTP 409 if incomplete.
IMPORTANT — publishing is effectively irreversible from here. There is no unpublish operation, and delete_audit does NOT withdraw a published report: it stays publicly readable while disappearing from the Ara interface. Make sure the user means to publish THIS audit, on THIS site, before calling it — publishing an audit about a third party puts a public accessibility statement about them under the auditor's name.
get_audit_results
Retrieve all criterion results for an audit. Returns an array of results, each with:
- topic (1-13): RGAA topic number
- criterium: criterion number within the topic
- pageId: ID of the audited page
- status: COMPLIANT | NOT_COMPLIANT | NOT_APPLICABLE | NOT_TESTED
- compliantComment / notApplicableComment
- notCompliantItems: the individual issues found, each with title, comment, userImpact (MINOR | MAJOR | BLOCKING) and quickWin
On a FULL audit this returns 106 criteria per page — hundreds of entries. Filter by pageId or status rather than pulling everything, and call get_audit_progress when all you need is what is left to evaluate.
+5 more tools listed on main page
TradeOnyx Tools (49)
account_list
List the user's trading accounts (id / name / type / is_active / FIFO-vs-LIFO). The is_active flag points at the dashboard's active account, which...
settings_get
Read the account-level limits the discipline checks and the weekly digest enforce: capital, risk per trade, daily and weekly loss limits, monthly goal, whether overnight positions are allowed, timezone. Percentages come back as percentages plus `risk_per_trade_amount` in the account currency. Read-…
attachment_upload_link_create
Mint a single-use, 10-minute-TTL browser-upload link for a screenshot. Use this when the user shares an image blob you cannot encode or URL — commo...
broker_sync_trigger
Manually trigger a sync on an existing broker connection (Bybit, Alpaca, Binance, etc.). Pulls latest fills, FIFO-pairs Buy/Sell legs, persists rou...
briefing_get
Read the cached daily AI briefing for a market category (gbpusd, eurusd, forex, general, crypto). Returns ``{briefing: null}`` if no briefing has b...
econ_analysis_get
Read the cached AI analysis for one economic-calendar event by event_id. Returns ``{analysis: null}`` when no AI run exists for the event. Includes...
econ_analysis_list
List recent cached economic-event AI analyses, newest first. Optional ``symbol`` filters by case-insensitive substring on pairs_affected. Returns u...
journal_attachment_list
List every screenshot attached to one of the user's journal entries. Returns id, public URL, caption, mime type and uploaded_at for each attachment.
journal_attachment_upload
Attach a screenshot to one of the user's journal entries. PREFERRED PATHS (in priority order): 1. If the user shared an HTTPS URL of the image (Tra...
journal_entry_get
Read the journal entry for a specific date (or null if none).
journal_entry_list
List journal entries within a date range. Pro Plus only.
journal_entry_search
Search the user's own journal entries by words or phrases. Multiple words are ANDed; wrap a phrase in double quotes to match it in order. Searches...