ZAP Server MCP Server

Give AI agents a safe, self-hosted ZAP operator for guided web security scans, findings, reports, and production guardrails.

People who work with spring ai and zap and want it reachable from Claude, Cursor, VS Code, or another MCP client. The project is written in Java.

VERIFIED ACTIVE

LAST COMMIT 2026-09-18 · ★ 66 · #109 OF 204 MAINTAINED SECURITY · VERIFIED 2026-09-18

Apache-2.0 · Java · how we verify → /methodology

01 · Install ZAP Server

Docker

docker run -i --rm ghcr.io/dtkmn/mcp-zap-server:v0.11.0

Claude Desktop - add to config

{
  "mcpServers": {
    "dtkmn-mcp-zap-server": {
      "command": "docker",
      "args": [
        "run",
        "-i",
        "--rm",
        "ghcr.io/dtkmn/mcp-zap-server:v0.11.0"
      ]
    }
  }
}

Using another client? Same JSON, different key

Claude Desktop · mcpServers

Cursor · mcpServers

VS Code · servers

Windsurf · mcpServers

Zed · context_servers

Cline · mcpServers

Roo Code · mcpServers

Continue · mcpServers

LibreChat · mcpServers

Gemini CLI · mcpServers

Codex CLI · mcp_servers

Full setup guides: every client.

02 · Evidence

Security posture

What to check before giving this server access to your agent - from the registry, GitHub, and our own probes. We don't score safety; we show what's verifiable.

runs as container (OCI image) - can be sandboxed away from your filesystem

license Apache-2.0 - declared in the repository

registry namespace io.github.dtkmn is GitHub-verified and matches the repo owner

03 · What ZAP Server can do

Prose above is summarized from the project's README and registry record - no invented capabilities.

Latest releases

v0.12.0 · 2026-09-17

Fixed · Made queue cancellation durable and retryable for active scans, traditional spiders, and AJAX Spider. Late successful starts are tracked and stopped without discarding their ownership or targeting a newer scan.…

v0.11.1 · 2026-09-12

Fixed · Fixed #227: unknown tools and tools disabled by the selected surface now return the same HTTP 200 JSON-RPC -32602 (Unknown tool) response, without an authentication challenge or disclosure of required scopes.…

v0.11.0 · 2026-07-27

Changed · Bumped runtime, MCP server metadata, Helm chart metadata, MCP Registry package metadata, extension proof defaults, and current installation examples to 0.11.0 / v0.11.0. · Updated mcp-gateway-core and…

04 · Who maintains ZAP Server

MCP ZAP Server is maintained by dtkmn. It's the only MCP server we track from this author; the repo dates to Apr 2025.

05 · Facts

repository: github.com/dtkmn/mcp-zap-server
website: https://danieltse.org/mcp-zap-server/
category: security - ranked #109 of 204 actively-maintained security servers as of 2026-09-18.
release cadence: 6 releases in the last 90 days (latest 2026-09-17)
registry: io.github.dtkmn/mcp-zap-server (active, first published 2026-05-10 · 2 versions)
packages: oci:ghcr.io/dtkmn/mcp-zap-server:v0.11.0 · oci:docker.io/dtkmn/mcp-zap-server:v0.11.0

06 · ZAP Server FAQ

What is ZAP Server?

Give AI agents a safe, self-hosted ZAP operator for guided web security scans, findings, reports, and production guardrails.

Is ZAP Server still maintained?

Yes - as of 2026-09-18, its last commit was 2026-09-18 and it shipped 6 releases in the last 90 days. We re-verify nightly.

How do I install ZAP Server?

Run `docker run -i --rm ghcr.io/dtkmn/mcp-zap-server:v0.11.0`. You can also paste the ready-made client config above.

07 · Alternatives to ZAP Server

Alternatives to ZAP Server

Maintained security servers if ZAP Server isn't the fit.

Pairs well with

Servers that cover what ZAP Server doesn't - only shown when the pairing reason fits the companion.

More security MCP servers · Toolmesh · Reolink MCP · Zzop · Skill Audit MCP · Sanction