OWASP ZAP MCP Server

OWASP ZAP MCP Server is an MCP integration. MCP server for OWASP ZAP vulnerability scanning with Docker management.

Packages and local setup

The published nuget package is dotnet-zap-mcp, version 1.1.0. Its declared MCP transport is stdio.

The package declares ZAP_BASE_URL: ZAP API base URL (default: http://localhost:8090); ZAP_API_KEY: ZAP API key. Auto-generated if not set and DockerComposeUp is used..

Before connecting

Check the maintainer’s instructions for account access, authentication and the supported client configuration. Once connected, inspect the tools your client receives and try a small task that matches the server’s stated purpose. The registry description does not include a verified, complete tool list.

Project and source

View the publisher’s registry entry · Project repository · Project website. This profile uses version 1.1.0 from the registry. Registration identifies the publisher namespace; it does not establish that this is a first-party integration for every service it connects.

Browse related security & identity MCP servers for tools that cover the same kind of work.