How do I install OWASP ZAP MCP Server?

Pick a client above and copy the generated config. Cursor and VS Code also have a deep link when the server can run locally or remotely.

Is OWASP ZAP MCP Server official?

No. Registry-listed is not the same as vendor-official. Read the methodology for the difference.

How is the trust score calculated?

This listing scores 40 (Fair). The formula is published on the methodology page.

MCPpedia

OWASP ZAP MCP Server MCP Server | MCPpedia

OWASP ZAP MCP Server MCP Server

Name: OWASP ZAP MCP Server
Author: pierre3

MCP server for OWASP ZAP vulnerability scanning with Docker management

Tools Versions Alternatives

Registrypierre3

40Fair

Install

~/Library/Application Support/Claude/claude_desktop_config.json

{
  "mcpServers": {
    "pierre3-dotnet-zap-mcp": {
      "command": "dnx",
      "args": [
        "dotnet-zap-mcp"
      ],
      "env": {
        "ZAP_BASE_URL": "",
        "ZAP_API_KEY": ""
      }
    }
  }
}

Install guide

Related servers

homebutler

73Good

Tells an agent what changed on a server since it last looked - status, Docker, backups, Proxmox.

Registryhigangssh305 stars

kubeview

72Good

Read-only Model Context Protocol MCP server enabling code-driven AI analysis of Kubernetes clusters.

OWASP ZAP MCP Server MCP Server

Install

Related servers

homebutler

kubeview

Environment

Tools

About

FAQ

Reviews

WHOIS

XposedOrNot Breach Intelligence

Codigest

gitlab-mcp

Name	Required	Notes
ZAP_BASE_URL	No	ZAP API base URL (default: http://localhost:8090)
ZAP_API_KEY	No	ZAP API key. Auto-generated if not set and DockerComposeUp is used.