An accessibility API is an operating system interface that exposes user-interface elements such as buttons, text fields, menus, and window titles to assistive technologies and automation tools. Screen readers use it to describe what is on screen, and desktop automation software can use the same interface to inspect and control apps without relying on keyboard and mouse simulation alone.
In cyber security, this matters because the same visibility that helps accessibility can also help attackers. Malware, phishing kits, and rogue automation scripts may use accessibility hooks to read sensitive on-screen data, detect security prompts, or click through workflows in a user’s session. Defenders should treat accessibility access as a privileged capability: limit which tools can use it, monitor for unusual UI access, and test whether an AI agent or automation layer can reach applications or data it should not touch. In agentic desktop systems, the accessibility API is often the bridge between a chatbot and real actions on the workstation.