How do I install the mcp zap server mcp server?

This profile does not contain a verified copy-paste launch configuration. Follow the current project documentation to confirm the runtime, entry point, transport and authentication before registering it in your client.

SSyncDev

Start a project

MCP Zap Server MCP Server

Give AI agents a safe, self-hosted OWASP ZAP operator for guided web security scans, findings, reports, and production guardrails.

Remote serverstreamable-http

What is the MCP Zap Server MCP Server?

Give AI agents a safe, self-hosted OWASP ZAP operator for guided web security scans, findings, reports, and production guardrails.

More MCP options

Compare MCP servers by category, or browse hosted MCP servers if you prefer an endpoint over a local process.

Maintainer setup documentation.

Recorded tools

Check the linked publisher documentation and your connected client's tool list. Names and availability can vary with the server version and account permissions.

Tool	What it does
self	hosted deployment** with Docker Compose for local adoption and Helm for Kubernetes
bootstrap	local.sh creates .env, generates local API keys, and prepares the ZAP workspace.
self-serve	doctor.sh checks Docker, auth, MCP initialize, tools/list, guided tools, and a harmless tool call.
gateway	core and its WebFlux adapter move to 0.8.0, with application data binding migrated to Jackson 3 and managed by the Jackson 3.2.1 BOM
api	key mode is the base runtime default.
mcp-zap-extension	api packages selected policy, protection, evidence, and

Example prompts to try

“Use MCP Zap Server to self.”
“Use MCP Zap Server to bootstrap.”
“Use MCP Zap Server to self-serve.”

Frequently asked questions

Give AI agents a safe, self-hosted OWASP ZAP operator for guided web security scans, findings, reports, and production guardrails. Confirm the tools offered by your installed version in the connected client. Tool availability and permissions depend on the server and account configuration.