mcp-zap-server vs OWASP ZAP

A Spring Boot application exposing OWASP ZAP as an MCP (Model Context Protocol) server. It lets any MCP‑compatible AI agent (e.g., Claude Desktop, Cursor) orchestrate ZAP actions—spider, active scan, import OpenAPI specs, and generate reports.

Integrates with OWASP ZAP to provide comprehensive web application security testing through active vulnerability scanning, passive analysis, traditional spidering, and AJAX crawling with configurable scan policies, session management, and evidence collection for automated penetration testing workflo

MCP Servers

Web Apps

5

—

—

Java

—

MIT

—

—

—

54

6