MCP ZAP Server MCP Server

by dtkmn Your server? Claim it

local only

MCP ZAP Server runs on your own machine — the client starts it, so there is no endpoint to ping. Last commit 17 Sep 2026.

Safe, self-hosted OWASP ZAP operator for guided AI security scans and reports.

—

Installs / week

not published

Stars

0 open issues

17 Sep 2026

Last commit

from GitHub

Apache-2.0

License

Java

Nothing serious here today

Today is the operative word: we check MCP ZAP Server every 15 minutes and re-read its code on every release. Watch it and you find out the day that stops being true.

Alternatives to MCP ZAP Server

same job, measured the same way

Scannd

by scannd

Trigger security scans and read reports/vulnerabilities via the hosted Scannd API. Free: 2 scans/mo.

54 installs/wk local only

MCP Code Review Server

by goodjobwilliam

Code review as an MCP server — structured reviews with OWASP security scanning.

122 installs/wk local only

Laserfiche MCP

by samuelshernandez

MCP server for self-hosted Laserfiche repositories — search and read documents from Claude.

117 installs/wk local only

Rootly

by wyre-ai

MCP server for Rootly — incidents, alerts, escalations, and post-incident reports.

local only

Rootly

by wyre-technology

MCP server for Rootly — incidents, alerts, escalations, and post-incident reports.

local only

OpsConduit Jobber MCP

by opsconduit

Customer-hosted read-only MCP server for Jobber ops reports, OAuth setup, and GraphQL validation.

46 installs/wk local only

Huntress

by wyre-ai

MCP server for Huntress — accounts, organizations, agents, incidents, and reports.

local only

Huntress

by wyre-technology

MCP server for Huntress — accounts, organizations, agents, incidents, and reports.

local only

MCP ZAP Server — questions

Answers built from our own checks of this server.

Why is there no uptime for MCP ZAP Server?

MCP ZAP Server runs on your own machine over stdio — there is no network address to reach, so uptime cannot be measured for it by anyone.

Is MCP ZAP Server open source?

Yes — it is published under the Apache-2.0 licence, written in Java and 66 stars on GitHub. The source link is on this page, so you can read exactly what it does with your data before you connect it.