MCP ZAP Server

Self-hosted MCP server giving AI agents a safe OWASP ZAP operator for security scans

Pluginfree

MCP ZAP Server is a free, open-source, self-hosted MCP server that lets AI agents safely operate OWASP ZAP for guided web security scans, with findings, reports, and production guardrails built in. It's for security teams who want to let an AI agent assist with authorized web application security testing under controlled, auditable conditions, rather than running ZAP scans manually.

Website

Full match profile

Behind the summary, Matchbox keeps a richer profile of MCP ZAP Server - the signals our matcher actually reads to decide when to surface it. It stays private; claim the listing to see and control it.

Problem & pain-point mapping
Who we surface it to (audience fit)
What it's a strong alternative to
Trust & credibility signals

Claim MCP ZAP Server to unlock →

Try Matchbox with your own problem

Describe what is not working - we’ll show you whether MCP ZAP Server (or something else) actually fits.

Try a problem