No red flags found in any of the 11 categories — no credential harvesting, no data exfiltration, no curl-pipe-shell installer. Scanned against the SlowMist agent-security taxonomy, refreshed every 8 hours. Full audit →
by dtkmn · MCP Server · ★ 66
Last updated: · Indexed by AgentSkillsHub · Auto-synced every 8h
🔒 Is mcp-zap-server safe to install? View the security audit →
NOTE This project is not affiliated with or endorsed by OWASP or the OWASP ZAP project. It is an independent implementation. MCP ZAP Server turns OWASP ZAP into a self-hosted MCP server so AI agents can run guided or expert web security workflows without brittle glue scripts. This repository is the open-source distribution. It is designed for teams that want: a smaller guided default tool surface, with an optional expert surface for raw ZAP control self-hosted auth, queueing, findings/report workflows, and production-oriented observability a documented Docker and Helm path instead of ad hoc local demos Project links: Documentation Quick Start Security Guide Contributing Discussions Security Policy Start Here Copy to . Run . Open for the bundled Open WebUI path, or connect your MCP client to . Use the [Authentication Quick Start](https://dtkmn.github.io/mcp-zap-server/getting-started/authentication-qu
| Stars | 66 |
| Forks | 10 |
| Language | Java |
| Category | MCP Server |
| License | Apache-2.0 |
| Quality Score | 71.1181576177074/100 |
| Open Issues | 3 |
| Last Updated | 2026-09-19 |
| Created | 2025-04-20 |
| Platforms | browser, java, mcp |
| Est. Tokens | ~23k |
These tools work well together with mcp-zap-server for enhanced workflows:
Looking for a mcp-zap-server alternative? If you're comparing mcp-zap-server with other mcp server tools, these 6 projects are the closest alternatives on Agent Skills Hub — ranked by topic overlap, star count, and community traction.
Spring Boot Starter: Auto-convert existing REST APIs (@RestController) to MCP Server with zero/low-code. Expos
From Java Dev to AI Engineer: Spring AI Fast Track
Production-grade Claude Code and Codex skills for Spring Boot developers
编程导航 2025 年 AI 开发实战新项目，基于 Spring Boot 3 + Java 21 + Spring AI 构建 AI 恋爱大师应用和 ReAct 模式自主规划智能体YuManus，覆盖 AI 大模型接入
Java SDK for the Model Context Protocol (MCP), providing seamless integration between Java and Spring applicat
Safe local execution layer for AI agent tools. Build, validate, and publish MCP tools with a no-pass-no-run wo
Explore other popular mcp server tools:
mcp-zap-server is Give AI agents a safe, self-hosted ZAP operator for guided web security scans, findings, reports, and production guardrails.. It is categorized as a MCP Server with 66 GitHub stars.
mcp-zap-server is primarily written in Java. It covers topics such as ai, java, llm.
You can find installation instructions and usage details in the mcp-zap-server GitHub repository at github.com/dtkmn/mcp-zap-server. The project has 66 stars and 10 forks, indicating an active community.
mcp-zap-server is released under the Apache-2.0 license, making it free to use and modify according to the license terms.
The top alternatives to mcp-zap-server on Agent Skills Hub include api2mcp4j, spring-ai, spring-boot-skills. Each offers a different approach to the same problem space — compare them side-by-side by stars, quality score, and community activity.
Grades come from a rule-based scan built on the SlowMist agent-security taxonomy, covering 11 red-flag categories including credential harvesting, data exfiltration, and curl | sh installers. It is a first-layer scan, not a manual audit — we say so rather than overstate it.
The scale of the problem is documented independently: Liu et al. (2026), in a study of 31,132 agent skills, report that 26.1% contain security vulnerabilities. Our own full-catalog census is published as a citable open dataset.
Sources & who's responsible: