dtkmn/mcp-zap-server — A Spring Boot application exposing OWASP ZAP as an MCP (Model Context Protocol) server.

Description and use

dtkmn/mcp-zap-server is a Spring Boot‑based backend that wraps the OWASP ZAP security scanner behind the Model Context Protocol (MCP). By exposing ZAP’s core capabilities—spidering, active scanning, OpenAPI import, and report generation—as MCP endpoints, it enables any MCP‑compatible AI agent (such as Claude Desktop or Cursor) to orchestrate automated security testing directly from code. This open‑source project bridges AI‑driven workflows with web‑application security tooling.

Problem

dtkmn/mcp-zap-server helps connect AI assistants to real tools and data through a standard protocol.

Outcome

Early or unclear: treat as research material until maintenance, releases, docs, and issue activity are verified.

Workflow

• connect AI agents to tools
• ship Model Context Protocol servers
• standardize integrations

Evidence

A Spring Boot application exposing OWASP ZAP as an MCP (Model Context Protocol) server. It lets any MCP‑compatible AI agent (e.g., Claude Desktop, Cursor) orchestrate ZAP actions—spider, active scan, import OpenAPI specs, and generate reports.

Source