MCP serverCommunity

MCP ZAP Server

Safe, self-hosted ZAP operator for guided AI security scans and reports.

dtkmn · ↓ 0 installs

Install

Add the config to your client settings. Replace values in <angle brackets> with your own.

claude_desktop_config.json

{
  "mcpServers": {
    "mcp-zap-server": {
      "command": "docker",
      "args": [
        "run",
        "-i",
        "--rm",
        "-e",
        "ZAP_API_URL",
        "-e",
        "ZAP_API_PORT",
        "-e",
        "ZAP_API_KEY",
        "-e",
        "MCP_API_KEY",
        "-e",
        "MCP_SERVER_TOOLS_SURFACE",
        "-e",
        "MCP_SECURITY_MODE",
        "-e",
        "MCP_SECURITY_ENABLED",
        "-e",
        "MCP_SECURITY_ALLOW_PLACEHOLDER_API_KEY",
        "ghcr.io/dtkmn/mcp-zap-server:v0.17.1"
      ],
      "env": {
        "ZAP_API_URL": "mcp-zap-zap",
        "ZAP_API_PORT": "8090",
        "ZAP_API_KEY": "<ZAP_API_KEY>",
        "MCP_API_KEY": "<MCP_API_KEY>",
        "MCP_SERVER_TOOLS_SURFACE": "guided",
        "MCP_SECURITY_MODE": "api-key",
        "MCP_SECURITY_ENABLED": "true",
        "MCP_SECURITY_ALLOW_PLACEHOLDER_API_KEY": "false"
      }
    }
  }
}

Tools

The tool list will appear once the server has a sandbox or the editors fill it in.

Report a problem ↗ (Opens GitHub in a new tab)