What it does

Self-hosted OWASP ZAP integration with guided security scans, findings summaries and report generation.

Local connectionPricing not confirmedv0.17.1

Connection manifest

Public connection metadata from the source. Follow the provider’s setup guide for authentication, permissions, and required variables.

{
  "name": "io.github.dtkmn/mcp-zap-server",
  "version": "0.17.1",
  "repository": {
    "url": "https://github.com/dtkmn/mcp-zap-server"
  },
  "remotes": [],
  "packages": [
    {
      "registryType": "oci",
      "identifier": "ghcr.io/dtkmn/mcp-zap-server:v0.17.1",
      "version": "",
      "transport": {
        "type": "streamable-http"
      },
      "environmentVariables": [
        {
          "name": "ZAP_API_URL",
          "isRequired": false
        },
        {
          "name": "ZAP_API_PORT",
          "isRequired": false
        },
        {
          "name": "ZAP_API_KEY",
          "isRequired": true
        },
        {
          "name": "MCP_API_KEY",
          "isRequired": true
        },
        {
          "name": "MCP_SERVER_TOOLS_SURFACE",
          "isRequired": false
        },
        {
          "name": "MCP_SECURITY_MODE",
          "isRequired": false
        },
        {
          "name": "MCP_SECURITY_ENABLED",
          "isRequired": false
        },
        {
          "name": "MCP_SECURITY_ALLOW_PLACEHOLDER_API_KEY",
          "isRequired": false
        }
      ]
    },
    {
      "registryType": "oci",
      "identifier": "docker.io/dtkmn/mcp-zap-server:v0.17.1",
      "version": "",
      "transport": {
        "type": "streamable-http"
      },
      "environmentVariables": [
        {
          "name": "ZAP_API_URL",
          "isRequired": false
        },
        {
          "name": "ZAP_API_PORT",
          "isRequired": false
        },
        {
          "name": "ZAP_API_KEY",
          "isRequired": true
        },
        {
          "name": "MCP_API_KEY",
          "isRequired": true
        },
        {
          "name": "MCP_SERVER_TOOLS_SURFACE",
          "isRequired": false
        },
        {
          "name": "MCP_SECURITY_MODE",
          "isRequired": false
        },
        {
          "name": "MCP_SECURITY_ENABLED",
          "isRequired": false
        },
        {
          "name": "MCP_SECURITY_ALLOW_PLACEHOLDER_API_KEY",
          "isRequired": false
        }
      ]
    }
  ]
}

Metadata reviewed for listing. Server code, permissions, and runtime behavior have not been security-audited. Directory access is free; individual providers may charge.