Connect

8 clients · secrets stay placeholders

JSON (mcpServers)Claude CodeCodexOpenCodeCursorVS CodeGemini CLIGoose

{
  "mcpServers": {
    "mcp-zap-server": {
      "command": "docker",
      "args": [
        "--network",
        "mcp-zap-network",
        "--user",
        "1000:1000",
        "-p",
        "127.0.0.1:7456:7456",
        "-v",
        "mcp-zap-wrk:/zap/wrk",
        "-e",
        "ZAP_API_URL",
        "-e",
        "ZAP_API_PORT",
        "-e",
        "ZAP_API_KEY",
        "-e",
        "MCP_API_KEY",
        "-e",
        "MCP_SERVER_TOOLS_SURFACE",
        "ghcr.io/dtkmn/mcp-zap-server:v0.16.0"
      ],
      "env": {
        "ZAP_API_URL": "mcp-zap-zap",
        "ZAP_API_PORT": "8090",
        "ZAP_API_KEY": "${ZAP_API_KEY}",
        "MCP_API_KEY": "${MCP_API_KEY}",
        "MCP_SERVER_TOOLS_SURFACE": "guided"
      }
    }
  }
}

claude mcp add mcp-zap-server -e "ZAP_API_URL=mcp-zap-zap" -e "ZAP_API_PORT=8090" -e "ZAP_API_KEY=${ZAP_API_KEY}" -e "MCP_API_KEY=${MCP_API_KEY}" -e "MCP_SERVER_TOOLS_SURFACE=guided" -- docker --network mcp-zap-network --user 1000:1000 -p 127.0.0.1:7456:7456 -v mcp-zap-wrk:/zap/wrk -e ZAP_API_URL -e ZAP_API_PORT -e ZAP_API_KEY -e MCP_API_KEY -e MCP_SERVER_TOOLS_SURFACE ghcr.io/dtkmn/mcp-zap-server:v0.16.0

[mcp_servers.mcp-zap-server]
command = "docker"
args = ["--network", "mcp-zap-network", "--user", "1000:1000", "-p", "127.0.0.1:7456:7456", "-v", "mcp-zap-wrk:/zap/wrk", "-e", "ZAP_API_URL", "-e", "ZAP_API_PORT", "-e", "ZAP_API_KEY", "-e", "MCP_API_KEY", "-e", "MCP_SERVER_TOOLS_SURFACE", "ghcr.io/dtkmn/mcp-zap-server:v0.16.0"]
env = { "ZAP_API_URL" = "mcp-zap-zap", "ZAP_API_PORT" = "8090", "ZAP_API_KEY" = "${ZAP_API_KEY}", "MCP_API_KEY" = "${MCP_API_KEY}", "MCP_SERVER_TOOLS_SURFACE" = "guided" }

{
  "$schema": "https://opencode.ai/config.json",
  "mcp": {
    "mcp-zap-server": {
      "type": "local",
      "command": [
        "docker",
        "--network",
        "mcp-zap-network",
        "--user",
        "1000:1000",
        "-p",
        "127.0.0.1:7456:7456",
        "-v",
        "mcp-zap-wrk:/zap/wrk",
        "-e",
        "ZAP_API_URL",
        "-e",
        "ZAP_API_PORT",
        "-e",
        "ZAP_API_KEY",
        "-e",
        "MCP_API_KEY",
        "-e",
        "MCP_SERVER_TOOLS_SURFACE",
        "ghcr.io/dtkmn/mcp-zap-server:v0.16.0"
      ],
      "enabled": true,
      "environment": {
        "ZAP_API_URL": "mcp-zap-zap",
        "ZAP_API_PORT": "8090",
        "ZAP_API_KEY": "{env:ZAP_API_KEY}",
        "MCP_API_KEY": "{env:MCP_API_KEY}",
        "MCP_SERVER_TOOLS_SURFACE": "guided"
      }
    }
  }
}

{
  "mcpServers": {
    "mcp-zap-server": {
      "command": "docker",
      "args": [
        "--network",
        "mcp-zap-network",
        "--user",
        "1000:1000",
        "-p",
        "127.0.0.1:7456:7456",
        "-v",
        "mcp-zap-wrk:/zap/wrk",
        "-e",
        "ZAP_API_URL",
        "-e",
        "ZAP_API_PORT",
        "-e",
        "ZAP_API_KEY",
        "-e",
        "MCP_API_KEY",
        "-e",
        "MCP_SERVER_TOOLS_SURFACE",
        "ghcr.io/dtkmn/mcp-zap-server:v0.16.0"
      ],
      "env": {
        "ZAP_API_URL": "mcp-zap-zap",
        "ZAP_API_PORT": "8090",
        "ZAP_API_KEY": "${ZAP_API_KEY}",
        "MCP_API_KEY": "${MCP_API_KEY}",
        "MCP_SERVER_TOOLS_SURFACE": "guided"
      }
    }
  },
  "deeplink": "cursor://anysphere.cursor-deeplink/mcp/install?name=mcp-zap-server&config=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%3D%3D"
}

{
  "servers": {
    "mcp-zap-server": {
      "type": "stdio",
      "command": "docker",
      "args": [
        "--network",
        "mcp-zap-network",
        "--user",
        "1000:1000",
        "-p",
        "127.0.0.1:7456:7456",
        "-v",
        "mcp-zap-wrk:/zap/wrk",
        "-e",
        "ZAP_API_URL",
        "-e",
        "ZAP_API_PORT",
        "-e",
        "ZAP_API_KEY",
        "-e",
        "MCP_API_KEY",
        "-e",
        "MCP_SERVER_TOOLS_SURFACE",
        "ghcr.io/dtkmn/mcp-zap-server:v0.16.0"
      ],
      "env": {
        "ZAP_API_URL": "mcp-zap-zap",
        "ZAP_API_PORT": "8090",
        "ZAP_API_KEY": "${ZAP_API_KEY}",
        "MCP_API_KEY": "${MCP_API_KEY}",
        "MCP_SERVER_TOOLS_SURFACE": "guided"
      }
    }
  }
}

{
  "mcpServers": {
    "mcp-zap-server": {
      "command": "docker",
      "args": [
        "--network",
        "mcp-zap-network",
        "--user",
        "1000:1000",
        "-p",
        "127.0.0.1:7456:7456",
        "-v",
        "mcp-zap-wrk:/zap/wrk",
        "-e",
        "ZAP_API_URL",
        "-e",
        "ZAP_API_PORT",
        "-e",
        "ZAP_API_KEY",
        "-e",
        "MCP_API_KEY",
        "-e",
        "MCP_SERVER_TOOLS_SURFACE",
        "ghcr.io/dtkmn/mcp-zap-server:v0.16.0"
      ],
      "env": {
        "ZAP_API_URL": "mcp-zap-zap",
        "ZAP_API_PORT": "8090",
        "ZAP_API_KEY": "${ZAP_API_KEY}",
        "MCP_API_KEY": "${MCP_API_KEY}",
        "MCP_SERVER_TOOLS_SURFACE": "guided"
      }
    }
  }
}

extensions:
  "mcp-zap-server":
    enabled: true
    name: "mcp-zap-server"
    type: stdio
    cmd: "docker"
    args:
      - "--network"
      - "mcp-zap-network"
      - "--user"
      - "1000:1000"
      - "-p"
      - "127.0.0.1:7456:7456"
      - "-v"
      - "mcp-zap-wrk:/zap/wrk"
      - "-e"
      - "ZAP_API_URL"
      - "-e"
      - "ZAP_API_PORT"
      - "-e"
      - "ZAP_API_KEY"
      - "-e"
      - "MCP_API_KEY"
      - "-e"
      - "MCP_SERVER_TOOLS_SURFACE"
      - "ghcr.io/dtkmn/mcp-zap-server:v0.16.0"
    envs:
      "ZAP_API_URL": "mcp-zap-zap"
      "ZAP_API_PORT": "8090"
      "ZAP_API_KEY": "${ZAP_API_KEY}"
      "MCP_API_KEY": "${MCP_API_KEY}"
      "MCP_SERVER_TOOLS_SURFACE": "guided"
    timeout: 300

Placeholders to fill from your own secret store: ${ZAP_API_KEY}, ${MCP_API_KEY}. The registry never accepts secret values.

This is a local package: the command runs on your machine.

Quality – / 100not scored

Not scored: fewer than three checks apply, usually because no remote answered a credential-free probe or the server is a local package.

protocoln/a · weight 25

n/a
protocol.modern, protocol.stateless, protocol.transport, protocol.list_ttlno remote answered a protocol handshake (not probed yet, unreachable, or local-only)

authorizationn/a · weight 15

n/a
auth.prm, auth.as_metadata, auth.cimdno remote uses OAuth
n/a
auth.secret_in_urlno templated URL

tool hygienen/a · weight 30

n/a
tools.descriptions, tools.description_length, tools.schemas, tools.annotations, tools.directory_hints, tools.token_cost, tools.api_dumptool list unknown (behind auth, not probed, or empty)

stabilityn/a · weight 15

n/a
stability.changes, stability.rug_pulltool list unknown

dependenciesn/a · weight 15

n/a
deps.known_vulns, deps.mcp_sdk_version, deps.resolvableno npm or PyPI package

Tool list unknown · checked 2026-10-20 14:54 UTC

Tool changes

No tool definition changes recorded. A server's first observation is its baseline; later probes record what changes.

Checks run on what our credential-free, read-only probes observe; tools are never called and no code audit is performed. How it is computed.

Trust 94 / 100

provenance90

livenessn/a

freshness100

hygiene95

+repository +namespace-matches-repo +website ~liveness-unmeasured +updated-6d-ago -unpinned-packages(2)

Derived from observable signals (official registry feed and our own credential-free probes); no code audit performed. How it is computed.

Endpoints

package	registry	version	runtime	secrets
`ghcr.io/dtkmn/mcp-zap-server:v0.16.0`	oci	unpinned	docker	`ZAP_API_KEY`, `MCP_API_KEY`
`docker.io/dtkmn/mcp-zap-server:v0.16.0`	oci	unpinned	docker	`ZAP_API_KEY`, `MCP_API_KEY`

Tools (0)

No tools observed. Local packages are never executed by the registry.

Schemas: list_tools.

Similar MCP servers

Official server.json

{
  "name": "io.github.dtkmn/mcp-zap-server",
  "_meta": {
    "io.modelcontextprotocol.registry/publisher-provided": {
      "installation": "Docker Compose remains the easiest install path. OCI package installs require a separately running ZAP daemon reachable from the MCP container.",
      "dockerCompose": "https://github.com/dtkmn/mcp-zap-server/blob/main/docker-compose.yml",
      "externalDependency": "ZAP is not bundled in the MCP server image. Start ZAP separately on the configured Docker network, initialize mcp-zap-wrk for UID/GID 1000:1000, and mount the same mcp-zap-wrk:/zap/wrk volume into ZAP so reports generated by ZAP are readable by MCP.",
      "recommendedInstallDoc": "https://github.com/dtkmn/mcp-zap-server/blob/main/llms-install.md"
    }
  },
  "icons": [
    {
      "src": "https://raw.githubusercontent.com/dtkmn/mcp-zap-server/main/images/brand.png",
      "sizes": [
        "1024x1024"
      ],
      "mimeType": "image/png"
    }
  ],
  "title": "MCP ZAP Server",
  "$schema": "https://static.modelcontextprotocol.io/schemas/2025-12-11/server.schema.json",
  "version": "0.16.0",
  "packages": [
    {
      "transport": {
        "url": "http://localhost:7456/mcp",
        "type": "streamable-http",
        "headers": [
          {
            "name": "X-API-Key",
            "isSecret": true,
            "isRequired": true,
            "description": "MCP API key configured with MCP_API_KEY."
          }
        ]
      },
      "identifier": "ghcr.io/dtkmn/mcp-zap-server:v0.16.0",
      "runtimeHint": "docker",
      "registryType": "oci",
      "runtimeArguments": [
        {
          "name": "--network",
          "type": "named",
          "value": "mcp-zap-network",
          "description": "Docker network containing the separately running ZAP daemon."
        },
        {
          "name": "--user",
          "type": "named",
          "value": "1000:1000",
          "description": "Run with the standard zaproxy/zap-stable UID/GID so shared report workspace files remain writable by both containers."
        },
        {
          "name": "-p",
          "type": "named",
          "value": "127.0.0.1:7456:7456",
          "description": "Expose the streamable HTTP MCP endpoint on localhost."
        },
        {
          "name": "-v",
          "type": "named",
          "value": "mcp-zap-wrk:/zap/wrk",
          "description": "Named report workspace volume. The external ZAP container must mount the same volume at /zap/wrk."
        }
      ],
      "environmentVariables": [
        {
          "name": "ZAP_API_URL",
          "default": "mcp-zap-zap",
          "description": "Hostname or URL of a separately running ZAP daemon reachable from this container."
        },
        {
          "name": "ZAP_API_PORT",
          "default": "8090",
          "description": "ZAP API port."
        },
        {
          "name": "ZAP_API_KEY",
          "isSecret": true,
          "isRequired": true,
          "description": "API key configured on the ZAP daemon."
        },
        {
          "name": "MCP_API_KEY",
          "isSecret": true,
          "isRequired": true,
          "description": "API key clients must send as X-API-Key."
        },
        {
          "name": "MCP_SERVER_TOOLS_SURFACE",
          "default": "guided",
          "description": "Tool surface to expose. Use guided for the safer default workflow, including report readback. Use expert only when clients need raw ZAP tools outside the guided surface."
        },
        {
          "name": "MCP_SECURITY_MODE",
          "value": "api-key"
        },
        {
          "name": "MCP_SECURITY_ENABLED",
          "value": "true"
        },
        {
          "name": "MCP_SECURITY_ALLOW_PLACEHOLDER_API_KEY",
          "value": "false"
        }
      ]
    },
    {
      "transport": {
        "url": "http://localhost:7456/mcp",
        "type": "streamable-http",
        "headers": [
          {
            "name": "X-API-Key",
            "isSecret": true,
            "isRequired": true,
            "description": "MCP API key configured with MCP_API_KEY."
          }
        ]
      },
      "identifier": "docker.io/dtkmn/mcp-zap-server:v0.16.0",
      "runtimeHint": "docker",
      "registryType": "oci",
      "runtimeArguments": [
        {
          "name": "--network",
          "type": "named",
          "value": "mcp-zap-network",
          "description": "Docker network containing the separately running ZAP daemon."
        },
        {
          "name": "--user",
          "type": "named",
          "value": "1000:1000",
          "description": "Run with the standard zaproxy/zap-stable UID/GID so shared report workspace files remain writable by both containers."
        },
        {
          "name": "-p",
          "type": "named",
          "value": "127.0.0.1:7456:7456",
          "description": "Expose the streamable HTTP MCP endpoint on localhost."
        },
        {
          "name": "-v",
          "type": "named",
          "value": "mcp-zap-wrk:/zap/wrk",
          "description": "Named report workspace volume. The external ZAP container must mount the same volume at /zap/wrk."
        }
      ],
      "environmentVariables": [
        {
          "name": "ZAP_API_URL",
          "default": "mcp-zap-zap",
          "description": "Hostname or URL of a separately running ZAP daemon reachable from this container."
        },
        {
          "name": "ZAP_API_PORT",
          "default": "8090",
          "description": "ZAP API port."
        },
        {
          "name": "ZAP_API_KEY",
          "isSecret": true,
          "isRequired": true,
          "description": "API key configured on the ZAP daemon."
        },
        {
          "name": "MCP_API_KEY",
          "isSecret": true,
          "isRequired": true,
          "description": "API key clients must send as X-API-Key."
        },
        {
          "name": "MCP_SERVER_TOOLS_SURFACE",
          "default": "guided",
          "description": "Tool surface to expose. Use guided for the safer default workflow, including report readback. Use expert only when clients need raw ZAP tools outside the guided surface."
        },
        {
          "name": "MCP_SECURITY_MODE",
          "value": "api-key"
        },
        {
          "name": "MCP_SECURITY_ENABLED",
          "value": "true"
        },
        {
          "name": "MCP_SECURITY_ALLOW_PLACEHOLDER_API_KEY",
          "value": "false"
        }
      ]
    }
  ],
  "repository": {
    "id": "969625020",
    "url": "https://github.com/dtkmn/mcp-zap-server",
    "source": "github"
  },
  "websiteUrl": "https://danieltse.org/mcp-zap-server/",
  "description": "Safe, self-hosted ZAP operator for guided AI security scans and reports."
}