OWASP ZAP MCP Server runs on your own machine — the client starts it, so there is no endpoint to ping. Last commit 31 Mar 2026.
MCP server for OWASP ZAP vulnerability scanning with Docker management
What the code does
We read the source, 4 d ago · rules 995398eba69f
Found in continuous integration, deployment or infrastructure files, or in a neighbouring package of the same monorepo. None of this is installed when you add the server: it describes how the project is built and released. We list it because a leaked key in a build pipeline is still a real problem, but it is not something this server does on your machine.
run: dotnet nuget push ./nupkg/*.nupkg --api-key ${{ secrets.NUGET_API_KEY }} --source https://api.nuget.org/v3/index.json --skip-duplicate
Is this your server and something here is wrong? Tell us — corrections are free and do not require a plan.
Nothing serious here today
Today is the operative word: we check OWASP ZAP MCP Server every 15 minutes and re-read its code on every release. Watch it and you find out the day that stops being true.
Alternatives to OWASP ZAP MCP Server
same job, measured the same wayRust MCP server and CLI for Arcane Docker and container management.
SQL Server MCP with RAG capabilities for macOS (Docker SQL Server support)
FinishKit MCP: scan GitHub repos for security vulnerabilities, deployment blockers, and quality
MCP server for managing Fly.io machines, apps, logs, and Docker images.
MCP server for Komodo - manage Docker containers, servers, stacks, and deployments via AI
MCP server for managing Docker containers, images, networks, volumes, and registries
Arcane Docker and Compose management over MCP and CLI with authenticated stdio and HTTP.
OpenShift/Kubernetes cluster management via the oc CLI for MCP clients
OWASP ZAP MCP Server — questions
Answers built from our own checks of this server.