SERVER

MCP ZAP Server

Rank #1,751

io.github.dtkmn/mcp-zap-server

Safe, self-hosted OWASP ZAP operator for guided AI security scans and reports.

2 versions

66 GitHub stars

by dtkmn (1 servers)View repository ↗Claim this server

First listed

Apr 20, 2025

Last publish date

Jul 27, 2026

OVERVIEW

MCP ZAP Server is a Model Context Protocol (MCP) server published by dtkmn. It ranks #1,751 of 132,046 servers tracked on MCP Toplist, and its repository has 66 GitHub stars. MCP ZAP Server is listed across 4 registries — Official MCP, PulseMCP, mcp.so and Glama, with 2 tracked versions. It was first listed on Apr 20, 2025 and most recently updated on Jul 27, 2026.

STANDING

#1,751of 132,046 tracked serversTop 5%

Ranks ahead of 130,295 of 132,046 servers on MCP Toplist.

Recent momentum

+12GitHub stars since May 11 (+22%)

CONNECT

Use MCP ZAP Server

API keyNeeds credentials

Requires user-supplied configuration before first use — typically an API key, token or connection string set via environment variables.

Docker image

claude mcp add mcp-zap-server -e "ZAP_API_URL=<your ZAP_API_URL>" -e "ZAP_API_PORT=<your ZAP_API_PORT>" -e "ZAP_API_KEY=<your ZAP_API_KEY>" -e "MCP_API_KEY=<your MCP_API_KEY>" -e "MCP_SERVER_TOOLS_SURFACE=<your MCP_SERVER_TOOLS_SURFACE>" -e "MCP_SECURITY_MODE=<your MCP_SECURITY_MODE>" -e "MCP_SECURITY_ENABLED=<your MCP_SECURITY_ENABLED>" -e "MCP_SECURITY_ALLOW_PLACEHOLDER_API_KEY=<your MCP_SECURITY_ALLOW_PLACEHOLDER_API_KEY>" -- docker run -i --rm --network mcp-zap-network --user 1000:1000 -p 127.0.0.1:7456:7456 -v mcp-zap-wrk:/zap/wrk ghcr.io/dtkmn/mcp-zap-server:v0.11.0

Replace each placeholder with your own value before saving.

Docker image

claude mcp add mcp-zap-server -e "ZAP_API_URL=<your ZAP_API_URL>" -e "ZAP_API_PORT=<your ZAP_API_PORT>" -e "ZAP_API_KEY=<your ZAP_API_KEY>" -e "MCP_API_KEY=<your MCP_API_KEY>" -e "MCP_SERVER_TOOLS_SURFACE=<your MCP_SERVER_TOOLS_SURFACE>" -e "MCP_SECURITY_MODE=<your MCP_SECURITY_MODE>" -e "MCP_SECURITY_ENABLED=<your MCP_SECURITY_ENABLED>" -e "MCP_SECURITY_ALLOW_PLACEHOLDER_API_KEY=<your MCP_SECURITY_ALLOW_PLACEHOLDER_API_KEY>" -- docker run -i --rm --network mcp-zap-network --user 1000:1000 -p 127.0.0.1:7456:7456 -v mcp-zap-wrk:/zap/wrk docker.io/dtkmn/mcp-zap-server:v0.11.0

Replace each placeholder with your own value before saving.

Docker image

[mcp_servers.mcp-zap-server]
command = "docker"
args = ["run", "-i", "--rm", "--network", "mcp-zap-network", "--user", "1000:1000", "-p", "127.0.0.1:7456:7456", "-v", "mcp-zap-wrk:/zap/wrk", "ghcr.io/dtkmn/mcp-zap-server:v0.11.0"]

[mcp_servers.mcp-zap-server.env]
ZAP_API_URL = "<your ZAP_API_URL>"
ZAP_API_PORT = "<your ZAP_API_PORT>"
ZAP_API_KEY = "<your ZAP_API_KEY>"
MCP_API_KEY = "<your MCP_API_KEY>"
MCP_SERVER_TOOLS_SURFACE = "<your MCP_SERVER_TOOLS_SURFACE>"
MCP_SECURITY_MODE = "<your MCP_SECURITY_MODE>"
MCP_SECURITY_ENABLED = "<your MCP_SECURITY_ENABLED>"
MCP_SECURITY_ALLOW_PLACEHOLDER_API_KEY = "<your MCP_SECURITY_ALLOW_PLACEHOLDER_API_KEY>"

Add to ~/.codex/config.toml. Replace each placeholder with your own value before saving.

Docker image

[mcp_servers.mcp-zap-server]
command = "docker"
args = ["run", "-i", "--rm", "--network", "mcp-zap-network", "--user", "1000:1000", "-p", "127.0.0.1:7456:7456", "-v", "mcp-zap-wrk:/zap/wrk", "docker.io/dtkmn/mcp-zap-server:v0.11.0"]

[mcp_servers.mcp-zap-server.env]
ZAP_API_URL = "<your ZAP_API_URL>"
ZAP_API_PORT = "<your ZAP_API_PORT>"
ZAP_API_KEY = "<your ZAP_API_KEY>"
MCP_API_KEY = "<your MCP_API_KEY>"
MCP_SERVER_TOOLS_SURFACE = "<your MCP_SERVER_TOOLS_SURFACE>"
MCP_SECURITY_MODE = "<your MCP_SECURITY_MODE>"
MCP_SECURITY_ENABLED = "<your MCP_SECURITY_ENABLED>"
MCP_SECURITY_ALLOW_PLACEHOLDER_API_KEY = "<your MCP_SECURITY_ALLOW_PLACEHOLDER_API_KEY>"

Add to ~/.codex/config.toml. Replace each placeholder with your own value before saving.

Docker image

{
  "mcpServers": {
    "mcp-zap-server": {
      "command": "docker",
      "args": [
        "run",
        "-i",
        "--rm",
        "--network",
        "mcp-zap-network",
        "--user",
        "1000:1000",
        "-p",
        "127.0.0.1:7456:7456",
        "-v",
        "mcp-zap-wrk:/zap/wrk",
        "ghcr.io/dtkmn/mcp-zap-server:v0.11.0"
      ],
      "env": {
        "ZAP_API_URL": "<your ZAP_API_URL>",
        "ZAP_API_PORT": "<your ZAP_API_PORT>",
        "ZAP_API_KEY": "<your ZAP_API_KEY>",
        "MCP_API_KEY": "<your MCP_API_KEY>",
        "MCP_SERVER_TOOLS_SURFACE": "<your MCP_SERVER_TOOLS_SURFACE>",
        "MCP_SECURITY_MODE": "<your MCP_SECURITY_MODE>",
        "MCP_SECURITY_ENABLED": "<your MCP_SECURITY_ENABLED>",
        "MCP_SECURITY_ALLOW_PLACEHOLDER_API_KEY": "<your MCP_SECURITY_ALLOW_PLACEHOLDER_API_KEY>"
      }
    }
  }
}

Add to claude_desktop_config.json (Settings → Developer → Edit Config). Replace each placeholder with your own value before saving.

Docker image

{
  "mcpServers": {
    "mcp-zap-server": {
      "command": "docker",
      "args": [
        "run",
        "-i",
        "--rm",
        "--network",
        "mcp-zap-network",
        "--user",
        "1000:1000",
        "-p",
        "127.0.0.1:7456:7456",
        "-v",
        "mcp-zap-wrk:/zap/wrk",
        "docker.io/dtkmn/mcp-zap-server:v0.11.0"
      ],
      "env": {
        "ZAP_API_URL": "<your ZAP_API_URL>",
        "ZAP_API_PORT": "<your ZAP_API_PORT>",
        "ZAP_API_KEY": "<your ZAP_API_KEY>",
        "MCP_API_KEY": "<your MCP_API_KEY>",
        "MCP_SERVER_TOOLS_SURFACE": "<your MCP_SERVER_TOOLS_SURFACE>",
        "MCP_SECURITY_MODE": "<your MCP_SECURITY_MODE>",
        "MCP_SECURITY_ENABLED": "<your MCP_SECURITY_ENABLED>",
        "MCP_SECURITY_ALLOW_PLACEHOLDER_API_KEY": "<your MCP_SECURITY_ALLOW_PLACEHOLDER_API_KEY>"
      }
    }
  }
}

Add to claude_desktop_config.json (Settings → Developer → Edit Config). Replace each placeholder with your own value before saving.

Docker image

{
  "mcpServers": {
    "mcp-zap-server": {
      "command": "docker",
      "args": [
        "run",
        "-i",
        "--rm",
        "--network",
        "mcp-zap-network",
        "--user",
        "1000:1000",
        "-p",
        "127.0.0.1:7456:7456",
        "-v",
        "mcp-zap-wrk:/zap/wrk",
        "ghcr.io/dtkmn/mcp-zap-server:v0.11.0"
      ],
      "env": {
        "ZAP_API_URL": "<your ZAP_API_URL>",
        "ZAP_API_PORT": "<your ZAP_API_PORT>",
        "ZAP_API_KEY": "<your ZAP_API_KEY>",
        "MCP_API_KEY": "<your MCP_API_KEY>",
        "MCP_SERVER_TOOLS_SURFACE": "<your MCP_SERVER_TOOLS_SURFACE>",
        "MCP_SECURITY_MODE": "<your MCP_SECURITY_MODE>",
        "MCP_SECURITY_ENABLED": "<your MCP_SECURITY_ENABLED>",
        "MCP_SECURITY_ALLOW_PLACEHOLDER_API_KEY": "<your MCP_SECURITY_ALLOW_PLACEHOLDER_API_KEY>"
      }
    }
  }
}

Add to ~/.cursor/mcp.json (global) or .cursor/mcp.json (per project). Replace each placeholder with your own value before saving.

Docker image

{
  "mcpServers": {
    "mcp-zap-server": {
      "command": "docker",
      "args": [
        "run",
        "-i",
        "--rm",
        "--network",
        "mcp-zap-network",
        "--user",
        "1000:1000",
        "-p",
        "127.0.0.1:7456:7456",
        "-v",
        "mcp-zap-wrk:/zap/wrk",
        "docker.io/dtkmn/mcp-zap-server:v0.11.0"
      ],
      "env": {
        "ZAP_API_URL": "<your ZAP_API_URL>",
        "ZAP_API_PORT": "<your ZAP_API_PORT>",
        "ZAP_API_KEY": "<your ZAP_API_KEY>",
        "MCP_API_KEY": "<your MCP_API_KEY>",
        "MCP_SERVER_TOOLS_SURFACE": "<your MCP_SERVER_TOOLS_SURFACE>",
        "MCP_SECURITY_MODE": "<your MCP_SECURITY_MODE>",
        "MCP_SECURITY_ENABLED": "<your MCP_SECURITY_ENABLED>",
        "MCP_SECURITY_ALLOW_PLACEHOLDER_API_KEY": "<your MCP_SECURITY_ALLOW_PLACEHOLDER_API_KEY>"
      }
    }
  }
}

Add to ~/.cursor/mcp.json (global) or .cursor/mcp.json (per project). Replace each placeholder with your own value before saving.

Docker image

{
  "servers": {
    "mcp-zap-server": {
      "type": "stdio",
      "command": "docker",
      "args": [
        "run",
        "-i",
        "--rm",
        "--network",
        "mcp-zap-network",
        "--user",
        "1000:1000",
        "-p",
        "127.0.0.1:7456:7456",
        "-v",
        "mcp-zap-wrk:/zap/wrk",
        "ghcr.io/dtkmn/mcp-zap-server:v0.11.0"
      ],
      "env": {
        "ZAP_API_URL": "<your ZAP_API_URL>",
        "ZAP_API_PORT": "<your ZAP_API_PORT>",
        "ZAP_API_KEY": "<your ZAP_API_KEY>",
        "MCP_API_KEY": "<your MCP_API_KEY>",
        "MCP_SERVER_TOOLS_SURFACE": "<your MCP_SERVER_TOOLS_SURFACE>",
        "MCP_SECURITY_MODE": "<your MCP_SECURITY_MODE>",
        "MCP_SECURITY_ENABLED": "<your MCP_SECURITY_ENABLED>",
        "MCP_SECURITY_ALLOW_PLACEHOLDER_API_KEY": "<your MCP_SECURITY_ALLOW_PLACEHOLDER_API_KEY>"
      }
    }
  }
}

Save as .vscode/mcp.json in your workspace. Replace each placeholder with your own value before saving.

Docker image

{
  "servers": {
    "mcp-zap-server": {
      "type": "stdio",
      "command": "docker",
      "args": [
        "run",
        "-i",
        "--rm",
        "--network",
        "mcp-zap-network",
        "--user",
        "1000:1000",
        "-p",
        "127.0.0.1:7456:7456",
        "-v",
        "mcp-zap-wrk:/zap/wrk",
        "docker.io/dtkmn/mcp-zap-server:v0.11.0"
      ],
      "env": {
        "ZAP_API_URL": "<your ZAP_API_URL>",
        "ZAP_API_PORT": "<your ZAP_API_PORT>",
        "ZAP_API_KEY": "<your ZAP_API_KEY>",
        "MCP_API_KEY": "<your MCP_API_KEY>",
        "MCP_SERVER_TOOLS_SURFACE": "<your MCP_SERVER_TOOLS_SURFACE>",
        "MCP_SECURITY_MODE": "<your MCP_SECURITY_MODE>",
        "MCP_SECURITY_ENABLED": "<your MCP_SECURITY_ENABLED>",
        "MCP_SECURITY_ALLOW_PLACEHOLDER_API_KEY": "<your MCP_SECURITY_ALLOW_PLACEHOLDER_API_KEY>"
      }
    }
  }
}

Save as .vscode/mcp.json in your workspace. Replace each placeholder with your own value before saving.

Docker image

{
  "mcpServers": {
    "mcp-zap-server": {
      "command": "docker",
      "args": [
        "run",
        "-i",
        "--rm",
        "--network",
        "mcp-zap-network",
        "--user",
        "1000:1000",
        "-p",
        "127.0.0.1:7456:7456",
        "-v",
        "mcp-zap-wrk:/zap/wrk",
        "ghcr.io/dtkmn/mcp-zap-server:v0.11.0"
      ],
      "env": {
        "ZAP_API_URL": "<your ZAP_API_URL>",
        "ZAP_API_PORT": "<your ZAP_API_PORT>",
        "ZAP_API_KEY": "<your ZAP_API_KEY>",
        "MCP_API_KEY": "<your MCP_API_KEY>",
        "MCP_SERVER_TOOLS_SURFACE": "<your MCP_SERVER_TOOLS_SURFACE>",
        "MCP_SECURITY_MODE": "<your MCP_SECURITY_MODE>",
        "MCP_SECURITY_ENABLED": "<your MCP_SECURITY_ENABLED>",
        "MCP_SECURITY_ALLOW_PLACEHOLDER_API_KEY": "<your MCP_SECURITY_ALLOW_PLACEHOLDER_API_KEY>"
      }
    }
  }
}

Add to ~/.codeium/windsurf/mcp_config.json. Replace each placeholder with your own value before saving.

Docker image

{
  "mcpServers": {
    "mcp-zap-server": {
      "command": "docker",
      "args": [
        "run",
        "-i",
        "--rm",
        "--network",
        "mcp-zap-network",
        "--user",
        "1000:1000",
        "-p",
        "127.0.0.1:7456:7456",
        "-v",
        "mcp-zap-wrk:/zap/wrk",
        "docker.io/dtkmn/mcp-zap-server:v0.11.0"
      ],
      "env": {
        "ZAP_API_URL": "<your ZAP_API_URL>",
        "ZAP_API_PORT": "<your ZAP_API_PORT>",
        "ZAP_API_KEY": "<your ZAP_API_KEY>",
        "MCP_API_KEY": "<your MCP_API_KEY>",
        "MCP_SERVER_TOOLS_SURFACE": "<your MCP_SERVER_TOOLS_SURFACE>",
        "MCP_SECURITY_MODE": "<your MCP_SECURITY_MODE>",
        "MCP_SECURITY_ENABLED": "<your MCP_SECURITY_ENABLED>",
        "MCP_SECURITY_ALLOW_PLACEHOLDER_API_KEY": "<your MCP_SECURITY_ALLOW_PLACEHOLDER_API_KEY>"
      }
    }
  }
}

Add to ~/.codeium/windsurf/mcp_config.json. Replace each placeholder with your own value before saving.

Docker image

{
  "mcpServers": {
    "mcp-zap-server": {
      "command": "docker",
      "args": [
        "run",
        "-i",
        "--rm",
        "--network",
        "mcp-zap-network",
        "--user",
        "1000:1000",
        "-p",
        "127.0.0.1:7456:7456",
        "-v",
        "mcp-zap-wrk:/zap/wrk",
        "ghcr.io/dtkmn/mcp-zap-server:v0.11.0"
      ],
      "env": {
        "ZAP_API_URL": "<your ZAP_API_URL>",
        "ZAP_API_PORT": "<your ZAP_API_PORT>",
        "ZAP_API_KEY": "<your ZAP_API_KEY>",
        "MCP_API_KEY": "<your MCP_API_KEY>",
        "MCP_SERVER_TOOLS_SURFACE": "<your MCP_SERVER_TOOLS_SURFACE>",
        "MCP_SECURITY_MODE": "<your MCP_SECURITY_MODE>",
        "MCP_SECURITY_ENABLED": "<your MCP_SECURITY_ENABLED>",
        "MCP_SECURITY_ALLOW_PLACEHOLDER_API_KEY": "<your MCP_SECURITY_ALLOW_PLACEHOLDER_API_KEY>"
      }
    }
  }
}

Replace each placeholder with your own value before saving.

Docker image

{
  "mcpServers": {
    "mcp-zap-server": {
      "command": "docker",
      "args": [
        "run",
        "-i",
        "--rm",
        "--network",
        "mcp-zap-network",
        "--user",
        "1000:1000",
        "-p",
        "127.0.0.1:7456:7456",
        "-v",
        "mcp-zap-wrk:/zap/wrk",
        "docker.io/dtkmn/mcp-zap-server:v0.11.0"
      ],
      "env": {
        "ZAP_API_URL": "<your ZAP_API_URL>",
        "ZAP_API_PORT": "<your ZAP_API_PORT>",
        "ZAP_API_KEY": "<your ZAP_API_KEY>",
        "MCP_API_KEY": "<your MCP_API_KEY>",
        "MCP_SERVER_TOOLS_SURFACE": "<your MCP_SERVER_TOOLS_SURFACE>",
        "MCP_SECURITY_MODE": "<your MCP_SECURITY_MODE>",
        "MCP_SECURITY_ENABLED": "<your MCP_SECURITY_ENABLED>",
        "MCP_SECURITY_ALLOW_PLACEHOLDER_API_KEY": "<your MCP_SECURITY_ALLOW_PLACEHOLDER_API_KEY>"
      }
    }
  }
}

Replace each placeholder with your own value before saving.

BADGE

Show your rank

Maintain this server? Add the live rank badge to your README — it updates automatically as the leaderboard changes.

Markdown

[![MCP Toplist](https://mcptoplist.com/badge/io.github.dtkmn%2Fmcp-zap-server.svg)](https://mcptoplist.com/server/io.github.dtkmn%2Fmcp-zap-server)

HTML

<a href="https://mcptoplist.com/server/io.github.dtkmn%2Fmcp-zap-server"><img src="https://mcptoplist.com/badge/io.github.dtkmn%2Fmcp-zap-server.svg" alt="MCP Toplist: Top 5% of 132,046" /></a>

Variants: append ?metric=score or ?metric=stars to the image URL.

REGISTRIES

Listed on 4 registries

ORGANIZATION

dtkmn

Organization

dtkmn

Servers in org

Versions across org

VERSIONS

Available versions (2)

Version	Published
0.11.0	Jul 27, 2026
0.8.0	May 10, 2026

FAQ

Frequently asked questions

Who maintains MCP ZAP Server?: MCP ZAP Server is maintained by dtkmn, which publishes 1 MCP server (2 total versions) tracked on MCP Toplist.
Is MCP ZAP Server listed on the Official MCP Registry?: Yes — MCP ZAP Server is listed on the Official MCP Registry, alongside PulseMCP, mcp.so and Glama.
How many versions does MCP ZAP Server have?: MCP Toplist tracks 2 versions of MCP ZAP Server, most recently published on Jul 27, 2026.
Where can I find the source code for MCP ZAP Server?: The source code for MCP ZAP Server is hosted at github.com/dtkmn/mcp-zap-server.

Used in projects

Do you run this server?

Add to a project

Community projects list the MCP servers behind real agents and apps. Publish yours and this page will link to it.

EXPLORE

All MCP Servers Official MCP Servers GitHub MCP Servers Best MCP Servers Most Active MCP Servers New MCP Servers Best New MCP Servers