mcp-zap-server
Active·★ 67·MIT·Updated 2026-10-21
A Spring Boot application that exposes OWASP ZAP as a Model Context Protocol (MCP) server, allowing MCP-compatible AI agents to orchestrate ZAP actions such as spider scanning, active scanning, and report generation. It offers guided and expert tool surfaces, a scan queue with high-availability support, and various security features.
#java#llm#mcp#mcp-server#mcp-servers#owasp#spring-ai#spring-boot
01
Features
01MCP ZAP server: Exposes ZAP actions as MCP tools
02Guided and expert tool surfaces
03OpenAPI integration for importing API specs and scanning
04Findings and report workflows with diff support
05Scan queue v1 with job lifecycle, retries, and dead-letter handling
02
Compatibility
Docker Compose
Docker Compose
Verified via docs
Kubernetes
Kubernetes (Helm)
Verified via docs
Open WebUI
Open WebUI
Verified via docs
Claude Desktop
Claude Desktop
Verified via docs
03
Quick start
1
$ git clone https://github.com/dtkmn/mcp-zap-server.git
2
$ cd mcp-zap-server
3
$ cp .env.example .env
4
$ mkdir -p $(grep LOCAL_ZAP_WORKPLACE_FOLDER .env | cut -d '=' -f2)/zap-wrk
5
$ docker compose -f docker-compose.yml -f docker-compose.dev.yml up -d --build
04
Use cases
↳Automated security scanning orchestrated by AI agents
↳Continuous integration security testing with CI/CD pipelines
↳Automated vulnerability assessment for web applications and APIs
05
Alternatives
MetaSearchMCP★ 60
Open-source metasearch backend, MCP server, and AI search API for LLM agents. Python FastAPI search gateway with Google search via SerpBase and Serper, multi-engine search aggregation, structured JSON output, provider fallback, deduplication, and SearXNG alternative architecture for agent workflows.
discord-mcp★ 556
A MCP server for the Discord integration. Enable your AI assistants to seamlessly interact with Discord. Enhance your Discord experience with powerful automation capabilities.
Comments
Log in to leave a comment
No comments yet. Be the first!