
MCP ZAP Server
MCP server by github.com/dtkmn/mcp-zap-server
Safe, self-hosted OWASP ZAP operator for guided AI security scans and reports.
About MCP ZAP Server
MCP ZAP Server is an MCP (Model Context Protocol) server published by dtkmn in the official MCP registry, listed under Security on Loomal. Safe, self-hosted OWASP ZAP operator for guided AI security scans and reports.
It ships as a Docker image (ghcr.io/dtkmn/mcp-zap-server:v0.8.0), so any MCP client that can launch a local process can run it.
Development happens in the open at github.com/dtkmn/mcp-zap-server, where the project has earned 56 GitHub stars.
Use MCP ZAP Server with your agent
claude mcp add mcp-zap-server -- docker run -i --rm ghcr.io/dtkmn/mcp-zap-server:v0.8.0{
"mcpServers": {
"mcp-zap-server": {
"command": "docker",
"args": [
"run",
"-i",
"--rm",
"ghcr.io/dtkmn/mcp-zap-server:v0.8.0"
]
}
}
}ghcr.io/dtkmn/mcp-zap-server:v0.8.0Frequently asked questions
- What is MCP ZAP Server?
- MCP ZAP Server is an MCP (Model Context Protocol) server by dtkmn in the Security category. Safe, self-hosted OWASP ZAP operator for guided AI security scans and reports.
- How do I connect MCP ZAP Server to Claude, Cursor, or another MCP client?
- Install MCP ZAP Server from its oci package (ghcr.io/dtkmn/mcp-zap-server:v0.8.0) and register it under "mcpServers" in your client's MCP configuration — for example claude_desktop_config.json or Cursor's mcp.json — then restart the client.
- Is MCP ZAP Server open source?
- Yes — the source code is public at github.com/dtkmn/mcp-zap-server, with 56 GitHub stars.
- Can AI agents pay to use MCP ZAP Server?
- Not yet through Loomal — MCP ZAP Server is listed as a free directory entry. If its maintainer verifies ownership, they can set per-call USDC pricing that agents pay over x402, with settlement on Base.
More Security MCP servers

idea-reality-mcp
719
Pre-build reality check. Scans GitHub, HN, npm, PyPI, Product Hunt — returns 0-100 signal.

skylos
453
Dead code, security, secrets detection and code quality for Python, TypeScript, Go.

MCPProxy
253
Local-first MCP proxy with BM25 tool discovery, security scanning, quarantine & ~99% token savings

mcp-afip
252
AFIP — Argentine tax authority, electronic invoicing (Factura Electrónica)

mcp-ap2
252
MCP server for AP2 — Google's Agent-to-Agent Payment Protocol (authorization, audit, trust)

OpenClaw MCP Server
172
MCP server bridging Claude.ai/Desktop with self-hosted OpenClaw via OAuth 2.1.
Listing data from the official MCP registry and GitHub, refreshed periodically. Not affiliated with the maintainer unless claimed. Maintain MCP ZAP Server? Claim this listing free by verifying GitHub ownership, or contact us.