MCP ZAP Server

io.github.dtkmn/mcp-zap-server

Safe, self-hosted ZAP operator for guided AI security scans and reports.

View repository →Homepage →

Connect this server

Add this to your MCP client config — claude_desktop_config.json (Claude Desktop) or .cursor/mcp.json (Cursor).Suits: Claude Desktop · Cursor.

{
  "mcpServers": {
    "mcp-zap-server": {
      "command": "docker",
      "args": [
        "run",
        "-i",
        "--rm",
        "ghcr.io/dtkmn/mcp-zap-server:v0.17.1"
      ],
      "env": {
        "ZAP_API_URL": "mcp-zap-zap",
        "ZAP_API_PORT": "8090",
        "ZAP_API_KEY": "<your ZAP_API_KEY>",
        "MCP_API_KEY": "<your MCP_API_KEY>",
        "MCP_SERVER_TOOLS_SURFACE": "guided"
      }
    }
  }
}
Environment variables
  • ZAP_API_URLHostname or URL of a separately running ZAP daemon reachable from this container.
  • ZAP_API_PORTZAP API port.
  • ZAP_API_KEYrequiredsecretAPI key configured on the ZAP daemon.
  • MCP_API_KEYrequiredsecretAPI key clients must send as X-API-Key.
  • MCP_SERVER_TOOLS_SURFACETool surface to expose. Use guided for the safer default workflow, including report readback. Use expert only when clients need raw ZAP tools outside the guided surface.

A starting point — check the repository for exact arguments and setup. Restart your client after editing the config.

Category
Developer Tools
Version
0.17.1
Registry
active
Published
10/22/2026

More Developer Tools servers

Browse all Developer Tools →

ENTRA Jobs

dubaikseniia-wq

Verified AI/tech jobs from company ATSs: search, fit matching, salary stats; employer job posting

Developer ToolsAdded 1 month ago

Weav Customer Service

dubdubdubco

Explore Weav customer service pricing, features, comparisons, signup, and demos. No auth required.

Developer ToolsAdded 2 months ago

ProWebLook

dubeychandan996

19 tools for phone, WhatsApp, email, caller ID, IP geo, blacklist, scraping & SERP

Developer ToolsAdded 1 week ago

Scopture

ducflair

Work on physical engineering projects, inspect CAD/BIM, run simulations, and manage project context

Developer ToolsAdded 4 days ago

Duchamp

duchamp-app

Competitor ad research for coding agents: long-running ads, keyframes and transcripts over MCP.

Developer ToolsAdded 2 weeks ago

Duck Framework MCP

duckframework

Official Duck Framework MCP server for AI-assisted development and project scaffolding.

Developer ToolsAdded 2 weeks ago

Add the badge to your site

Show visitors that MCP ZAP Server is listed here — it’s also the link we check for a free listing.

MCP ZAP Server — listed on Serverdex

HTML — for your website

<a href="https://serverdex.io/server/io-github-dtkmn-mcp-zap-server?utm_source=badge"><img src="https://serverdex.io/brand/badge.svg" alt="MCP ZAP Server — listed on Serverdex" width="123" height="40" loading="lazy"></a>

Recommended. A dofollow link from your own domain is the one that counts for search engines, and it's the link we check for a free listing.

Markdown — for your README

[![MCP ZAP Server — listed on Serverdex](https://serverdex.io/brand/badge.svg)](https://serverdex.io/server/io-github-dtkmn-mcp-zap-server?utm_source=badge)

Nice for visibility, but GitHub marks README links nofollow, so it doesn't pass authority. Use the HTML badge on your site as well.