Cover image
Try Now
2025-04-14

Une application Spring Boot exposant OWASP ZAP en tant que serveur MCP (Protocole de contexte de modèle). Il permet à tout agent AI compatible MCP (par exemple, Claude Desktop, curseur) des actions de zap orchestrate - aspider, scan actif, importer des spécifications OpenAPI et générer des rapports.

3 years

Works with Finder

0

Github Watches

0

Github Forks

0

Github Stars

MCP ZAP Spring Boot Server

A Dockerized Spring Boot application exposing OWASP ZAP as an MCP (Model Context Protocol) server. It lets any MCP‑compatible AI agent (e.g., Claude Desktop, Cursor) orchestrate ZAP actions—spider, active scan, import OpenAPI specs, and generate reports.


Features

  • MCP server: Exposes ZAP actions as MCP tools
  • OpenAPI integration: Import remote or uploaded OpenAPI specs into ZAP and kick off active scans
  • Report generation: Generate HTML/JSON reports and fetch contents programmatically
  • Dockerized: Runs ZAP and the MCP server in containers, orchestrated via docker-compose
  • Secure: Configure API keys for both ZAP (ZAP_API_KEY) and the MCP server (MCP_API_KEY)

Architecture

flowchart LR
  subgraph "Docker Compose"
    ZAP["OWASP ZAP (container)"]
    MCP["MCP Server (Spring Boot)"]
  end
  Client["MCP Client (Claude, Cursor)"]
  Client -->|HTTP/SSE + Bearer| MCP
  MCP -->|ZAP REST API| ZAP
  ZAP -->|scan, alerts, reports| MCP

Build

./gradlew clean build

Usage with Claude Desktop, Cursor, Windsurf or any MCP‑compatible AI agent

{
  "mcpServers": {
    "security-testing-mcp-server": {
        "command": "java",
        "args": [
          "-Dspring.ai.mcp.server.stdio=true",
          "-Dspring.main.web-application-type=none",
          "-Dlogging.pattern.console=",
          "-jar",
          "/PROJECT_PATH/mcp-zap-server/build/libs/mcp-zap-server-0.0.1-SNAPSHOT.jar"
        ]
    }
  }
}

相关推荐

  • av
  • Exécutez sans effort LLM Backends, API, Frontends et Services avec une seule commande.

  • 1Panel-dev
  • 🔥 1Panel fournit une interface Web intuitive et un serveur MCP pour gérer des sites Web, des fichiers, des conteneurs, des bases de données et des LLM sur un serveur Linux.

  • WangRongsheng
  • 🧑‍🚀 全世界最好的 LLM 资料总结 (数据处理、模型训练、模型部署、 O1 模型、 MCP 、小语言模型、视觉语言模型) | Résumé des meilleures ressources LLM du monde.

  • rulego
  • ⛓️RULEGO est un cadre de moteur de règle d'orchestration des composants de nouvelle génération légère, intégrée, intégrée et de nouvelle génération pour GO.

  • sigoden
  • Créez facilement des outils et des agents LLM à l'aide de fonctions Plain Bash / JavaScript / Python.

  • hkr04
  • SDK C ++ MCP (Protocole de contexte modèle léger)

  • RockChinQ
  • 😎简单易用、🧩丰富生态 - 大模型原生即时通信机器人平台 | 适配 QQ / 微信 (企业微信、个人微信) / 飞书 / 钉钉 / Discord / Telegram / Slack 等平台 | 支持 Chatgpt 、 Deepseek 、 Dify 、 Claude 、 GEMINI 、 XAI 、 PPIO 、 OLLAMA 、 LM Studio 、阿里云百炼、火山方舟、 Siliconflow 、 Qwen 、 Moonshot 、 ChatGlm 、 Sillytraven 、 MCP 等 LLM 的机器人 / Agent | Plateforme de bots de messagerie instantanée basés sur LLM, prend en charge Discord, Telegram, WeChat, Lark, Dingtalk, QQ, Slack

  • dmayboroda
  • Rag de conversation sur site avec des conteneurs configurables

  • modelscope
  • Commencez à construire des applications multi-agents LLM, plus facilement.

  • paulwing
  • Un référentiel de test créé à l'aide du service MCP

    Reviews

    3.3 (6)
    Avatar
    user_hMe8SYai
    2025-04-24

    The mcp-zap-server by dtkmn is a game-changer for my projects! It's incredibly reliable and easy to set up, making server management a breeze. The efficient design and powerful features simplify my workflow. Highly recommend for anyone needing a robust server solution!

    Avatar
    user_KLVxckf2
    2025-04-24

    As a devoted user of the mcp-zap-server by dtkmn, I must say this product truly excels! Its intuitive design and flawless functionality make it an essential tool for any project. The seamless navigation and robust performance are standouts. I highly recommend it to anyone looking for a reliable server solution.

    Avatar
    user_hsQ8IfbX
    2025-04-24

    The mcp-zap-server by dtkmn is an essential tool for any MCP application enthusiast. It's incredibly efficient and user-friendly, making process management a breeze. Highly recommend for its seamless performance and reliability.

    Avatar
    user_XdsJgiXj
    2025-04-24

    As a long-time user of the mcp-zap-server, I am thoroughly impressed with its performance and reliability. Developed by dtkmn, this server stands out for its seamless integration and robust capabilities. The setup process is straightforward, and the welcome information provided is clear and helpful. If you're looking for a dependable server solution, the mcp-zap-server is definitely worth considering.

    Avatar
    user_CfgBNWii
    2025-04-24

    As a dedicated user of the mcp-zap-server created by dtkmn, I am thoroughly impressed with its performance. The server is reliable, efficient, and easy to integrate into existing systems. It has significantly improved our workflow and productivity. The detailed documentation and welcoming user interface make it accessible even for beginners. Highly recommended!

    Avatar
    user_WWXDiQpg
    2025-04-24

    As a dedicated user of the MCP ecosystem, I must say that the mcp-zap-server by dtkmn is a game-changer. Its seamless integration and robust performance have significantly improved my workflow. The user-friendly interface and comprehensive support make it a standout tool. Highly recommended for anyone in need of reliable server solutions!