Zfuzz MCP Server

Catch SQL injection, leaked API keys, and vulnerable dependencies while you build — no security background required. You don't run tools. You don't read dashboards. You just talk to your AI, and…

Local serverstdioApache-2.0

What is the Zfuzz MCP Server?

Zfuzz is an MCP project maintained in the zfuzz-dev/zfuzz-mcp repository. The maintainer describes its purpose as “Catch SQL injection, leaked API keys, and vulnerable dependencies while you build — no security background required. You don't run tools. You don't read dashboards…”. Read the project documentation for the complete scope.

Installation

The documented npm package is @zfuzz/mcp. The configuration below comes from the maintainer’s example; adapt its paths and account values to your environment.

Source

Project documentation · Repository · Discovery listing. This profile records the public documentation checked on 2026-10-08.

How to install the Zfuzz MCP Server

{
  "mcpServers": {
    "zfuzz": {
      "command": "npx",
      "args": [
        "-y",
        "@zfuzz/mcp"
      ]
    }
  }
}

From the project documentation. Replace placeholders and example paths before connecting.