OWASP ZAP MCP Server

Betasecurity

★45 starsPythoncommunity

About

Overview

The OWASP ZAP MCP Server enables AI agents to perform dynamic security testing using OWASP ZAP. It provides tools for spidering web applications, running active scans, viewing alerts, and generating security reports.

Capabilities

Tools & Capabilities

⚡spider

Spider a target URL to discover pages

⚡active_scan

Run an active security scan

⚡get_alerts

Get security alerts found

⚡generate_report

Generate a security report

Setup

Installation

bash

Install

pip install mcp-server-zap

Examples

Example Usage

javascript

Usage

{
  "mcpServers": {
    "zap": {
      "command": "python",
      "args": ["-m", "mcp_server_zap"],
      "env": { "ZAP_URL": "http://localhost:8080", "ZAP_API_KEY": "your-key" }
    }
  }
}

Quick Info

Authorcommunity

LanguagePython

StatusBeta

Stars★ 45

Last UpdatedFeb 12, 2026