PluginBench
MCP Server

OWASP ZAP MCP Server MCP Server

io.github.pierre3/zap-mcp

RepositoryRegistry

What is the OWASP ZAP MCP Server MCP server?

MCP server for OWASP ZAP vulnerability scanning with Docker management

How to install OWASP ZAP MCP Server

Copy-paste configuration for popular MCP clients.

transport: stdio
Config generated by PluginBench — verify against the source before use.
Environment / auth
  • ZAP_BASE_URL

    ZAP API base URL (default: http://localhost:8090)

  • ZAP_API_KEY

    ZAP API key. Auto-generated if not set and DockerComposeUp is used.

Claude Desktop
~/Library/Application Support/Claude/claude_desktop_config.json
{
  "mcpServers": {
    "zap-mcp": {
      "command": "dnx",
      "args": [
        "dotnet-zap-mcp"
      ],
      "env": {
        "ZAP_BASE_URL": "<YOUR_ZAP_BASE_URL>",
        "ZAP_API_KEY": "<YOUR_ZAP_API_KEY>"
      }
    }
  }
}
Cursor
~/.cursor/mcp.json
{
  "mcpServers": {
    "zap-mcp": {
      "command": "dnx",
      "args": [
        "dotnet-zap-mcp"
      ],
      "env": {
        "ZAP_BASE_URL": "<YOUR_ZAP_BASE_URL>",
        "ZAP_API_KEY": "<YOUR_ZAP_API_KEY>"
      }
    }
  }
}
Windsurf
~/.codeium/windsurf/mcp_config.json
{
  "mcpServers": {
    "zap-mcp": {
      "command": "dnx",
      "args": [
        "dotnet-zap-mcp"
      ],
      "env": {
        "ZAP_BASE_URL": "<YOUR_ZAP_BASE_URL>",
        "ZAP_API_KEY": "<YOUR_ZAP_API_KEY>"
      }
    }
  }
}
VS Code
.vscode/mcp.json
{
  "servers": {
    "zap-mcp": {
      "type": "stdio",
      "command": "dnx",
      "args": [
        "dotnet-zap-mcp"
      ],
      "env": {
        "ZAP_BASE_URL": "<YOUR_ZAP_BASE_URL>",
        "ZAP_API_KEY": "<YOUR_ZAP_API_KEY>"
      }
    }
  }
}
Claude Code
claude mcp add zap-mcp --env ZAP_BASE_URL=<YOUR_ZAP_BASE_URL> --env ZAP_API_KEY=<YOUR_ZAP_API_KEY> -- dnx dotnet-zap-mcp

Related MCP servers

io.github.pierre3/maildev-mcp

MailDev MCP server. Manage Docker containers and inspect emails from your AI editor or MCP client.

View repository →