A Spring Boot application exposing OWASP ZAP as an MCP (Model Context Protocol) server. It lets any MCP‑compatible AI agent (e.g., Claude Desktop, Cursor) orchestrate ZAP actions—spider, active scan, import OpenAPI specs, and generate reports.
CommunityActiveNot testedUpdated 4/3/2026
★ 47Edit this page
76
MCPpedia
Score
Score
No CVEsActivestdioMIT
Should you use this server?
A Spring Boot application exposing OWASP ZAP as an MCP (Model Context Protocol) server. It lets any MCP‑compatible AI agent (e.g., Claude Desktop, Cursor) orchestrate ZAP actions—spider, active scan, import OpenAPI specs, and generate reports.
✓
Is it safe?
No package registry to scan for CVEs.
No authentication — any process on your machine can connect to this server.
MIT. View license →
Last scanned 0 days ago.
✓
Is it maintained?
Last commit 1 days ago. 47 GitHub stars.
i
Will it work with my client?
Transport: stdio. Works with Claude Desktop, Cursor, Claude Code, and most MCP clients.
A
How much context will it use?
0 tools. Token cost not measured.
?