Home › Security › MCP ZAP Server
MCP ZAP Server
Safe, self-hosted ZAP operator for guided AI security scans and reports.
Topics: Security
Connect
Review any command before running it. Package names and URLs come from the server's own registry entry.
Package (oci)
Package: oci ghcr.io/dtkmn/mcp-zap-server:v0.17.1
ZAP_API_URL— Hostname or URL of a separately running ZAP daemon reachable from this container.ZAP_API_PORT— ZAP API port.ZAP_API_KEYrequired secret — API key configured on the ZAP daemon.MCP_API_KEYrequired secret — API key clients must send as X-API-Key.MCP_SERVER_TOOLS_SURFACE— Tool surface to expose. Use guided for the safer default workflow, including report readback. Use expert only when clients need raw ZAP tools outside the guided surface.MCP_SECURITY_MODEMCP_SECURITY_ENABLEDMCP_SECURITY_ALLOW_PLACEHOLDER_API_KEY
This server takes extra arguments — see its repository.
Package (oci)
Package: oci docker.io/dtkmn/mcp-zap-server:v0.17.1
ZAP_API_URL— Hostname or URL of a separately running ZAP daemon reachable from this container.ZAP_API_PORT— ZAP API port.ZAP_API_KEYrequired secret — API key configured on the ZAP daemon.MCP_API_KEYrequired secret — API key clients must send as X-API-Key.MCP_SERVER_TOOLS_SURFACE— Tool surface to expose. Use guided for the safer default workflow, including report readback. Use expert only when clients need raw ZAP tools outside the guided surface.MCP_SECURITY_MODEMCP_SECURITY_ENABLEDMCP_SECURITY_ALLOW_PLACEHOLDER_API_KEY
This server takes extra arguments — see its repository.
Related servers
semgrep
Scan code for security vulnerabilities using Semgrep.
ida-pro-mcp
IDA Pro plugin for binary analysis: decompilation, disassembly and automatic malware analysis reports.
lauriewired/ghidramcp
Autonomous reverse engineering with Ghidra: decompile binaries, rename methods and data, and list methods, classes, imports and exports.
jadx-ai-mcp
JADX decompiler plugin providing live, LLM-assisted reverse engineering.
beelzebub
Honeypot framework for building decoy MCP tools that an agent would never use in normal work, to detect prompt injection and malicious…
SafeDep Vet MCP
Protect your AI agents and IDEs from malicious open-source packages.
Listed in punkpeye/awesome-mcp-servers (MIT)
Data from the Official MCP Registry