OWASP MCP Server

Created By
shadsidda year ago
Overview

what is OWASP ZAP MCP Server?

OWASP ZAP MCP Server is a tool that provides an interface to interact with the OWASP ZAP (Zed Attack Proxy) API, facilitating security testing of web applications.

how to use OWASP ZAP MCP Server?

To use the OWASP ZAP MCP Server, install the necessary dependencies, run the server, and configure it with your ZAP API endpoint and API key. You can then utilize various tools to perform security scans and retrieve alerts.

key features of OWASP ZAP MCP Server?

  • Configure ZAP API endpoint and authentication
  • Start active scans against target URLs
  • Monitor scan progress
  • Retrieve security alerts
  • Spider websites
  • Generate security reports

use cases of OWASP ZAP MCP Server?

  1. Conducting security assessments on web applications.
  2. Automating security scans during the development process.
  3. Generating reports for compliance and security audits.

FAQ from OWASP ZAP MCP Server?

  • What is OWASP ZAP?

OWASP ZAP is an open-source web application security scanner that helps find vulnerabilities in web applications.

  • Is the OWASP ZAP MCP Server free to use?

Yes! The OWASP ZAP MCP Server is free and open-source.

  • Do I need to run ZAP separately?

Yes, you need to have ZAP running with the API enabled to use the MCP Server.

Project Info
Created At
a year ago
Updated At
a year ago
Author Name
shadsidd
Star
0
Language
Python
License
-
Category
security
Tags

Recommend Servers

View All
Tavily Mcp
@tavily-ai

JavaScript
a year ago
Bring your real authenticated browser session to AI coding agents. Local-first MCP server + Chrome MV3 extension. No cloud. No telemetry.
@Cubenest

peek records the user's actual logged-in browser (DOM via rrweb, console events, network metadata, optional response bodies via opt-in Deep capture) through a Chrome MV3 extension. The extension ships events through a native-messaging stdio bridge to a local MCP server (peek-mcp), which persists them to a SQLite database at ~/.peek/sessions.db. AI coding agents (Claude Code, Cursor, Cline, Windsurf) read sessions from the database via 10 MCP tools: Tool What it does list_recent_sessions List recently recorded sessions (id, origin, ts, event count). get_session_summary LLM-readable narrative summary of a session. get_session_console_errors Console errors recorded in a session. get_session_network_errors Failed/notable network requests in a session. get_user_action_before_error Last N user actions before a console error. generate_playwright_repro Generate a runnable Playwright test from a session. get_dom_snapshot Reconstruct the DOM at a given timestamp. query_dom_history Timeline of attribute/text changes for a selector. request_authorization Side-panel consent for write actions (Level 3). execute_action Dispatch a UI action (gated by permission level + destructive blocklist). Why local-first matters Every other "browser session for AI" tool ships to a vendor cloud. peek's SQLite + extension live on the user's machine — no remote endpoints, no telemetry. The privacy policy (docs/peek/PRIVACY_POLICY.md) is the source of truth. Install # 1. Add the MCP server to Claude Code claude mcp add peek -- npx -y @peekdev/mcp # 2. Install the Chrome extension from the Chrome Web Store # (link added once the CWS listing is approved)

a day ago