MCP ZAP Server
Rank #2084glama/dtkmn/mcp-zap-server
Safe, self-hosted OWASP ZAP operator for guided AI security scans, findings, and reports. Requires a separately running OWASP ZAP daemon.
MCP ZAP Server is a Model Context Protocol (MCP) server published by dtkmn. It ranks #2084 of 58,900 servers tracked on MCP Toplist, and its repository has 55 GitHub stars. MCP ZAP Server is listed across 4 registries — Official MCP, Glama, PulseMCP and mcp.so, with 1 tracked version. It was first listed on Apr 20, 2025 and most recently updated on May 10, 2026.
Ranks ahead of 56,816 of 58,900 servers on MCP Toplist.
Use MCP ZAP Server
Add MCP ZAP Server to any MCP client (Claude, Cursor, VS Code, …) with one of the configs below.
{
"mcpServers": {
"mcp-zap-server": {
"command": "docker",
"args": [
"run",
"-i",
"--rm",
"ghcr.io/dtkmn/mcp-zap-server:v0.8.0"
],
"env": {
"ZAP_API_URL": "<your ZAP_API_URL>",
"ZAP_API_PORT": "<your ZAP_API_PORT>",
"ZAP_API_KEY": "<your ZAP_API_KEY>",
"MCP_API_KEY": "<your MCP_API_KEY>",
"MCP_SERVER_TOOLS_SURFACE": "<your MCP_SERVER_TOOLS_SURFACE>",
"MCP_SECURITY_MODE": "<your MCP_SECURITY_MODE>",
"MCP_SECURITY_ENABLED": "<your MCP_SECURITY_ENABLED>",
"MCP_SECURITY_ALLOW_PLACEHOLDER_API_KEY": "<your MCP_SECURITY_ALLOW_PLACEHOLDER_API_KEY>"
}
}
}
}Replace each placeholder with your own value before saving.
{
"mcpServers": {
"mcp-zap-server": {
"command": "docker",
"args": [
"run",
"-i",
"--rm",
"docker.io/dtkmn/mcp-zap-server:v0.8.0"
],
"env": {
"ZAP_API_URL": "<your ZAP_API_URL>",
"ZAP_API_PORT": "<your ZAP_API_PORT>",
"ZAP_API_KEY": "<your ZAP_API_KEY>",
"MCP_API_KEY": "<your MCP_API_KEY>",
"MCP_SERVER_TOOLS_SURFACE": "<your MCP_SERVER_TOOLS_SURFACE>",
"MCP_SECURITY_MODE": "<your MCP_SECURITY_MODE>",
"MCP_SECURITY_ENABLED": "<your MCP_SECURITY_ENABLED>",
"MCP_SECURITY_ALLOW_PLACEHOLDER_API_KEY": "<your MCP_SECURITY_ALLOW_PLACEHOLDER_API_KEY>"
}
}
}
}Replace each placeholder with your own value before saving.
Listed on 4 registries
dtkmn
Available versions (1)
| Version | Published |
|---|---|
| 0.8.0 | May 10, 2026 |
Frequently asked questions
- What is MCP ZAP Server?
- Safe, self-hosted OWASP ZAP operator for guided AI security scans, findings, and reports. Requires a separately running OWASP ZAP daemon.
- Who maintains MCP ZAP Server?
- MCP ZAP Server is maintained by dtkmn, which publishes 1 MCP server (1 total version) tracked on MCP Toplist.
- Is MCP ZAP Server an official MCP server?
- Yes — MCP ZAP Server is listed on the Official MCP Registry, alongside Glama, PulseMCP and mcp.so.
- How many versions does MCP ZAP Server have?
- MCP Toplist tracks 1 version of MCP ZAP Server, most recently published on May 10, 2026.
- Where can I find the source code for MCP ZAP Server?
- The source code for MCP ZAP Server is hosted at github.com/dtkmn/mcp-zap-server.