Back to Browse

Zap Server MCP Server

by Dtkmn
Developer ToolsLow Risk10.0MCP RegistryLocal
Free

Server data from the Official MCP Registry

Safe, self-hosted ZAP operator for guided AI security scans and reports.

About

Safe, self-hosted ZAP operator for guided AI security scans and reports.

Security Report

10.0
Low Risk10.0Low Risk

Valid MCP server (1 strong, 1 medium validity signals). No known CVEs in dependencies. Imported from the Official MCP Registry.

6 files analyzed · No issues found

Security scores are indicators to help you make informed decisions, not guarantees. Always review permissions before connecting any MCP server.

Permissions Required

This plugin requests these system permissions. Most are normal for its category.

file_system

Check that this permission is expected for this type of plugin.

env_vars

Check that this permission is expected for this type of plugin.

What You'll Need

Set these up before or after installing:

Hostname or URL of a separately running ZAP daemon reachable from this container.Optional

Environment variable: ZAP_API_URL

ZAP API port.Optional

Environment variable: ZAP_API_PORT

API key configured on the ZAP daemon.Required

Environment variable: ZAP_API_KEY

API key clients must send as X-API-Key.Required

Environment variable: MCP_API_KEY

Tool surface to expose. Use guided for the safer default workflow, including report readback. Use expert only when clients need raw ZAP tools outside the guided surface.Optional

Environment variable: MCP_SERVER_TOOLS_SURFACE

MCP_SECURITY_MODEOptional
MCP_SECURITY_ENABLEDOptional
MCP_SECURITY_ALLOW_PLACEHOLDER_API_KEYOptional

Reviews

No reviews yet

Be the first to review this server!