logo
Login
MCP cover image
mcp-zap-server logo
Private

mcp-zap-server

See in Github
2025-04-14

A Spring Boot application exposing OWASP ZAP as an MCP (Model Context Protocol) server. It lets any MCP‑compatible AI agent (e.g., Claude Desktop, Cursor) orchestrate ZAP actions—spider, active scan, import OpenAPI specs, and generate reports.

0

Github Watches

0

Github Forks

0

Github Stars

MCP ZAP Spring Boot Server

A Dockerized Spring Boot application exposing OWASP ZAP as an MCP (Model Context Protocol) server. It lets any MCP‑compatible AI agent (e.g., Claude Desktop, Cursor) orchestrate ZAP actions—spider, active scan, import OpenAPI specs, and generate reports.

Features

  • MCP server: Exposes ZAP actions as MCP tools
  • OpenAPI integration: Import remote or uploaded OpenAPI specs into ZAP and kick off active scans
  • Report generation: Generate HTML/JSON reports and fetch contents programmatically
  • Dockerized: Runs ZAP and the MCP server in containers, orchestrated via docker-compose
  • Secure: Configure API keys for both ZAP (ZAP_API_KEY) and the MCP server (MCP_API_KEY)

Architecture

flowchart LR
  subgraph "Docker Compose"
    ZAP["OWASP ZAP (container)"]
    MCP["MCP Server (Spring Boot)"]
  end
  Client["MCP Client (Claude, Cursor)"]
  Client -->|HTTP/SSE + Bearer| MCP
  MCP -->|ZAP REST API| ZAP
  ZAP -->|scan, alerts, reports| MCP

Build

./gradlew clean build

Usage with Claude Desktop, Cursor, Windsurf or any MCP‑compatible AI agent

{
  "mcpServers": {
    "security-testing-mcp-server": {
        "command": "java",
        "args": [
          "-Dspring.ai.mcp.server.stdio=true",
          "-Dspring.main.web-application-type=none",
          "-Dlogging.pattern.console=",
          "-jar",
          "/PROJECT_PATH/mcp-zap-server/build/libs/mcp-zap-server-0.0.1-SNAPSHOT.jar"
        ]
    }
  }
}

相关推荐

awesome-LLM-resourses

awesome-LLM-resourses

  • WangRongsheng

    • 🧑‍🚀 全世界最好的LLM资料总结（Agent框架、辅助编程、数据处理、模型训练、模型推理、o1 模型、MCP、小语言模型、视觉语言模型） | Summary of the world's best LLM resources.

    3.5 (4)
    harbor

    harbor

  • av

    • Effortlessly run LLM backends, APIs, frontends, and services with one command.

    2 (1)
    1Panel

    1Panel

  • 1Panel-dev

    • 🔥 1Panel provides an intuitive web interface and MCP Server to manage websites, files, containers, databases, and LLMs on a Linux server.

    2 (1)
    dify

    dify

  • langgenius

    • Dify is an open-source LLM app development platform. Dify's intuitive interface combines AI workflow, RAG pipeline, agent capabilities, model management, observability features and more, letting you quickly go from prototype to production.

    5 (0)
    nacos

    nacos

  • alibaba

    • an easy-to-use dynamic service discovery, configuration and service management platform for building AI cloud native applications.

    5 (0)
    rulego

    rulego

  • rulego

    • ⛓️RuleGo is a lightweight, high-performance, embedded, next-generation component orchestration rule engine framework for Go.

    3.7 (10)
    cpp-mcp

    cpp-mcp

  • hkr04

    • Lightweight C++ MCP (Model Context Protocol) SDK

    3 (1)
    witsy

    witsy

  • nbonamy

    • Witsy: desktop AI assistant / universal MCP client

    3.1 (10)
    llm-functions

    llm-functions

  • sigoden

    • Easily create LLM tools and agents using plain Bash/JavaScript/Python functions.

    1 (1)
    nerve

    nerve

  • evilsocket

    • The Simple Agent Development Kit.

    3.4 (5)

    Reviews

    3.3 (6)
    Avatar
    user_hMe8SYai
    2025-04-24

    The mcp-zap-server by dtkmn is a game-changer for my projects! It's incredibly reliable and easy to set up, making server management a breeze. The efficient design and powerful features simplify my workflow. Highly recommend for anyone needing a robust server solution!

    Avatar
    user_KLVxckf2
    2025-04-24

    As a devoted user of the mcp-zap-server by dtkmn, I must say this product truly excels! Its intuitive design and flawless functionality make it an essential tool for any project. The seamless navigation and robust performance are standouts. I highly recommend it to anyone looking for a reliable server solution.

    Avatar
    user_hsQ8IfbX
    2025-04-24

    The mcp-zap-server by dtkmn is an essential tool for any MCP application enthusiast. It's incredibly efficient and user-friendly, making process management a breeze. Highly recommend for its seamless performance and reliability.

    Avatar
    user_XdsJgiXj
    2025-04-24

    As a long-time user of the mcp-zap-server, I am thoroughly impressed with its performance and reliability. Developed by dtkmn, this server stands out for its seamless integration and robust capabilities. The setup process is straightforward, and the welcome information provided is clear and helpful. If you're looking for a dependable server solution, the mcp-zap-server is definitely worth considering.

    Avatar
    user_CfgBNWii
    2025-04-24

    As a dedicated user of the mcp-zap-server created by dtkmn, I am thoroughly impressed with its performance. The server is reliable, efficient, and easy to integrate into existing systems. It has significantly improved our workflow and productivity. The detailed documentation and welcoming user interface make it accessible even for beginners. Highly recommended!

    Avatar
    user_WWXDiQpg
    2025-04-24

    As a dedicated user of the MCP ecosystem, I must say that the mcp-zap-server by dtkmn is a game-changer. Its seamless integration and robust performance have significantly improved my workflow. The user-friendly interface and comprehensive support make it a standout tool. Highly recommended for anyone in need of reliable server solutions!