OWASP ZAP Assistant Plugin

Model Context Protocol (MCP)Free

The OWASP ZAP (Zed Attack Proxy) integration gives AI coding agents command-and-control access over dynamic application security testing (DAST). Agents can spider endpoints, analyze passive scan alerts, and test for broken access controls.

MCP Architecture & Specifications

Protocol Specification	Model Context Protocol (MCP v1.0)
Transport Architecture	stdio (Standard Input/Output) / SSE
Supported AI Clients	Claude DesktopCursorAntigravity
Execution Sandbox	Isolated local subprocess with explicit tool call permission gating
Security Verification	MCP Schema & Protocol Audited

Claude Desktop & Cursor Configuration

claude_desktop_config.json

{
  "mcpServers": {
    "zap": {
      "command": "zap-mcp",
      "args": [
        "--api-key",
        "${ZAP_API_KEY}"
      ]
    }
  }
}

Exposed Tools & Capabilities

4 Verified Capabilities

Interactive DAST proxy control via REST API and MCP wrapper

Automated spidering and passive security auditing of web endpoints

Structured vulnerability reports with CVSS scoring and reproduction steps

World’s most widely used open-source web application scanner

Verified User Reviews & Ratings

Authentic community ratings calculated dynamically across security, workflow, and pricing.

4.9/ 5.0

Based on 0 verified reviews & research benchmarks

100%

Similar MCP Servers & AI Plugins

Extend agent capabilities with verified Model Context Protocol tools

View All

PostgreSQL MCP Server

MIT

Allows AI agents to safely read table schemas, inspect column constraints, and execute parameterized SQL queries.

View MCP specs

Semgrep SAST MCP Plugin

MCP Protocol

Scans codebases for OWASP Top 10 vulnerabilities, leaked secrets, and unsafe cryptography directly from AI chat sessions.

View MCP specs

SecurityHeaders MCP Server

MCP Protocol

MCP server connecting Claude and ChatGPT to analyze CSP headers, HSTS enforcement, and TLS configuration audits in real time.

View MCP specs

OWASP ZAP Assistant Plugin

Model Context Protocol (MCP)Free

Docs

MCP Architecture & Specifications

Protocol Specification	Model Context Protocol (MCP v1.0)
Transport Architecture	stdio (Standard Input/Output) / SSE
Supported AI Clients	Claude DesktopCursorAntigravity
Execution Sandbox	Isolated local subprocess with explicit tool call permission gating
Security Verification	MCP Schema & Protocol Audited

Claude Desktop & Cursor Configuration

claude_desktop_config.json

{
  "mcpServers": {
    "zap": {
      "command": "zap-mcp",
      "args": [
        "--api-key",
        "${ZAP_API_KEY}"
      ]
    }
  }
}

Exposed Tools & Capabilities

4 Verified Capabilities

Interactive DAST proxy control via REST API and MCP wrapper

Automated spidering and passive security auditing of web endpoints

Structured vulnerability reports with CVSS scoring and reproduction steps

World’s most widely used open-source web application scanner

Verified User Reviews & Ratings

Authentic community ratings calculated dynamically across security, workflow, and pricing.

4.9/ 5.0

Based on 0 verified reviews & research benchmarks

100%

Similar MCP Servers & AI Plugins

Extend agent capabilities with verified Model Context Protocol tools

View All

PostgreSQL MCP Server

MIT

Allows AI agents to safely read table schemas, inspect column constraints, and execute parameterized SQL queries.

View MCP specs

Semgrep SAST MCP Plugin

MCP Protocol

Scans codebases for OWASP Top 10 vulnerabilities, leaked secrets, and unsafe cryptography directly from AI chat sessions.

View MCP specs

SecurityHeaders MCP Server

MCP Protocol

MCP server connecting Claude and ChatGPT to analyze CSP headers, HSTS enforcement, and TLS configuration audits in real time.

View MCP specs