Safe, self-hosted ZAP operator for guided AI security scans and reports.
To add MCP ZAP Server to Claude, run the install command below. Restart Claude Code after adding it and its tools show up in your next conversation. It needs 8 environment variables, listed below.
Install
docker run -i --rm ghcr.io/dtkmn/mcp-zap-server:v0.17.1Environment variables
ZAP_API_URLSet in your MCP configZAP_API_PORTSet in your MCP configZAP_API_KEYSet in your MCP configMCP_API_KEYSet in your MCP configMCP_SERVER_TOOLS_SURFACESet in your MCP configMCP_SECURITY_MODESet in your MCP configMCP_SECURITY_ENABLEDSet in your MCP configMCP_SECURITY_ALLOW_PLACEHOLDER_API_KEYSet in your MCP configWhat this does
MCP ZAP Server exposes a set of tools to Claude over the Model Context Protocol. After you add it to claude_desktop_config.json (snippet above) and restart Claude Desktop, those tools become callable inside any conversation.
Requirements
This server needs the following environment variables to be set before it can run:
ZAP_API_URL ZAP_API_PORT ZAP_API_KEY MCP_API_KEY MCP_SERVER_TOOLS_SURFACE MCP_SECURITY_MODE MCP_SECURITY_ENABLED MCP_SECURITY_ALLOW_PLACEHOLDER_API_KEY
Set these via the env object in your MCP config (see claude_desktop_config.json snippet above).
Frequently asked questions
How do I install MCP ZAP Server?
The install section on this page carries the maker's install command for MCP ZAP Server, as submitted. Restart your client afterwards and the tools appear in your next conversation.
Which clients work with MCP ZAP Server?
This page carries setup and config for Claude Code. Any other MCP client that accepts a standard server config can connect to MCP ZAP Server as well.
Does MCP ZAP Server need an API key?
Yes. Before it can run, set these environment variables: ZAP_API_URL, ZAP_API_PORT, ZAP_API_KEY, MCP_API_KEY, MCP_SERVER_TOOLS_SURFACE, MCP_SECURITY_MODE, MCP_SECURITY_ENABLED, MCP_SECURITY_ALLOW_PLACEHOLDER_API_KEY. They go in the env block of your MCP config.
Imported from the Official MCP Registry. The details above come from the registry entry; the maker can claim this listing to correct them, add docs, and see its traffic.
Is this your MCP server?
Claim this listing to see its traffic, fix details yourself, and skip the review queue on future updates.
Add this badge to your README
Show visitors this server is listed in the ClaudeRules directory. The badge links straight to this listing.
[](https://clauderules.net/mcp/io-github-dtkmn-mcp-zap-server)<a href="https://clauderules.net/mcp/io-github-dtkmn-mcp-zap-server" target="_blank" rel="noopener noreferrer"><img src="https://clauderules.net/api/badge/io-github-dtkmn-mcp-zap-server" alt="Listed on clauderules.net" /></a>More AI MCP servers
GitHub
Connect AI assistants to GitHub - manage repos, issues, PRs, and workflows through natural language.
Serena MCP: the IDE for your agent
A powerful toolkit for coding, providing semantic retrieval and editing capabilities.
MCP Toolbox for Databases
MCP Toolbox for Databases enables your agent to connect to your database.
Figma-Context-MCP
Give your coding agent access to your Figma data. Implement designs in any framework in one-shot.