MCP Servers
dtkmn/mcp-zap-server
Give AI agents a safe, self-hosted ZAP operator for guided web security scans, findings, reports, and production guardrails.
Our verdict
We have not reviewed dtkmn/mcp-zap-server yet
No one at Enterprise DNA has checked this listing against its sources. The description comes from public listings gathered automatically. Any fact below shows where it came from and when it was last checked.
From the listing
About dtkmn/mcp-zap-server
A self-hosted MCP server that lets AI agents operate OWASP ZAP for web security scanning. It provides guided scans, retrieves findings and reports, and enforces production guardrails. Written in Java.
Best for
Teams wanting AI-assisted web security scanning with self-hosted control.
Use cases
- Run guided security scans on web applications
- Fetch and analyze ZAP findings and reports
- Enforce security guardrails in production environments
Notes
65 stars on GitHub. Last updated 2026-09-16. Licensed Apache-2.0.
Pros
- Self-hosted, keeps scan data in your control
- Provides structured access to ZAP for AI agents
- Guided scans reduce misconfiguration risk
Cons
- Requires Java runtime and ZAP setup
- Limited to ZAP capabilities, not a full security suite
- Small community with 65 stars
Key facts
What we have checked
- Days since the last commit
- 0
- GitHub forks
- 11
- GitHub stars
- 69
- Days to a first reply on issues
- 20
- Open issues
- 23
- Releases in the last 90 days
- 8
Each value shows when we last confirmed it and where it came from. Values we have not confirmed are left out, never guessed.
How to use
How to set it up
As the listing publishes it. We have not run this install.
Install
git clone https://github.com/dtkmn/mcp-zap-server.git && cd mcp-zap-server && ./bin/bootstrap-local.sh --startTools exposed
zap_policy_dry_run
Clients the listing names (not checked here)
Claude Desktop, Claude Code, Cursor, Continue, ChatGPT
Install
Add dtkmn/mcp-zap-server to your client
No install recipe yet. We write one for Claude Code, Claude Desktop, Cursor, VS Code, Codex and ChatGPT when the server is in the official MCP registry with a package or remote address we can use.
Until then, follow the project's own README, or the setup the listing publishes under How to set it up.
Works with
What dtkmn/mcp-zap-server connects to
No confirmed connections yet. A product appears here when the server's registry name, repo, homepage or name ties it to that product, and a client appears when we have an install recipe for it.
Stars and usage
How dtkmn/mcp-zap-server is growing
68 to 69
Health and security
Is dtkmn/mcp-zap-server looked after, and what do its setup files show
Health score
52 out of 100
| Part | Points | What we saw |
|---|---|---|
| Recent activity | 30 of 30 | Last push 0 days ago |
| Releases | 15 of 15 | 8 releases in 90 days |
| Issue replies | 7.4 of 20 | First reply in 20 days (median) |
| Maintainer | 0 of 15 | Owned by a single user |
| Official source | 0 of 20 | Community server |
Security check static checks
100 out of 100
- Note No published npm or PyPI package of this repository was found, so package advisories were not checked.
- Note The lab has not recorded this server's tool list yet, so tool permissions were not checked.
Sources
Where this comes from
- GitHubRegistry
A source shows what was published when we checked it. It does not certify security, performance or a working installation. Read our method.
Changelog
What changed
No changes recorded yet. Releases, price changes and deprecations appear here, with their dates, once we track them for this record.
Pairs with
Other entries in the index that connect to this one. Click through to see the chain.
executeautomation/playwright-mcp-server
Various
Playwright Model Context Protocol Server - Tool to automate Browsers and APIs in Claude Desktop, Cline, Cursor IDE and More 🔌
seleniumbase/SeleniumBase
Various
Browser automation, web scraping, and testing. CDP Mode provides a Stealthy Chromium instance that bypasses bot-detection systems. Includes an MCP server.
semgrep/semgrep
Various
Lightweight static analysis for many languages. Find bug variants with patterns that look like source code.
Get the free Developer’s Field Guide
A 27-page field guide to the AI coding workflow with Claude. Claude Code, MCP servers, the prompt patterns that work, and what to delegate. Free.
Enter your work email. We send it straight over, plus a few short notes worth knowing. Unsubscribe any time.