MCP server

OWASP ZAP MCP Server

io.github.pierre3/zap-mcp

Checked 26 Oct 2026, 08:31 UTC · Checked against OSV.dev for malware and vulnerabilities; never run by us

MCP server for OWASP ZAP vulnerability scanning with Docker management

Website Source

At a glance

Type

MCP server

Publisher

Not verified

Status

Runs on your computer

Sets up in

Claude Code, Claude Desktop, Codex, Gemini CLI, Cursor, VS Code

Last checked

26 Oct 2026, 08:31 UTC

Connect it to your agent

Add to CursorAdd to VS CodeVS Code Insiders

Opens the app, which shows the server and asks you to confirm. It then runs the package on your computer with your permissions. For other apps, copy the setup below.

Claude Code

claude mcp add zap-mcp -- dnx dotnet-zap-mcp@1.1.0 --yes

Claude Desktop

{"mcpServers":{"zap-mcp":{"command":"dnx","args":["dotnet-zap-mcp@1.1.0","--yes"]}}}

Codex (config.toml)

[mcp_servers.zap-mcp]
command = "dnx"
args = ["dotnet-zap-mcp@1.1.0","--yes"]

Gemini CLI

{"mcpServers":{"zap-mcp":{"command":"dnx","args":["dotnet-zap-mcp@1.1.0","--yes"]}}}

Cursor

{"mcpServers":{"zap-mcp":{"command":"dnx","args":["dotnet-zap-mcp@1.1.0","--yes"]}}}

VS Code

{"servers":{"zap-mcp":{"type":"stdio","command":"dnx","args":["dotnet-zap-mcp@1.1.0","--yes"]}}}

Runs on your computer with your permissions: check the package and its source before installing.

Browse

• GitHub tools
• GitHub and code hosting
• Docker and Kubernetes

Related MCP servers

• Secdim
  Personalised developer security learning pathways from SecDim's challenges and courses.
• ScanLabsAI Security Scanner
  Scan a website for vulnerabilities: OWASP Top 10, CVEs, SSL, headers - with plain-English fixes
• Cybercentry Verification
  Twelve tools: token, wallet, contract and site security. Two free, the rest $1 in USDC over x402.
• Moltline Code Review
  Risk-scan a diff, flag AI-generated-code tells, find secrets. 5 of 7 tools need no account.
• ScanMalware.com URL Scanner
  MCP server for ScanMalware.com URL scanning, malware detection, and analysis.
• ProfitCollector
  22 pay-per-call developer, security, network and data utilities using x402 on Base.
• TLS Radar
  SSL/TLS scanning, free Let's Encrypt issuance, and certificate-expiry monitoring.
• Devstack
  Dev-registry data: npm/PyPI/Docker/VS Code packages, dep graphs, vulns, 50+ ecosystems.

Badge for your README

[![AptLynx](https://aptlynx.net/badge/io.github.pierre3/zap-mcp.svg)](https://aptlynx.net/servers/io.github.pierre3/zap-mcp)

Listing text is written by the maker; AptLynx lists tools and does not vouch for them. Find another tool · Browse by topic · For agents