cosmic-mcp

All servers

MCP ZAP Server

io.github.dtkmn/mcp-zap-server · version 0.17.1

Community listing. Not installed or verified by cosmic-mcp. Read the source and its permissions before you run it.

Safe, self-hosted ZAP operator for guided AI security scans and reports.

https://github.com/dtkmn/mcp-zap-server

Quick facts

  • Listing: Community
  • Published Oct 22, 14:34 UTC
  • Transport: streamable-http
  • Package: oci ghcr.io/dtkmn/mcp-zap-server:v0.17.1
  • Listed by cosmic-mcp: Nov 9, 04:26 UTC

Security

Setup snippets

Generated from the registry entry. cosmic-mcp has not run or reviewed this server; values in angle brackets are yours to fill in.

Run it locally (oci)

docker run -i --rm -e 'MCP_API_KEY' -e 'MCP_SECURITY_ALLOW_PLACEHOLDER_API_KEY' -e 'MCP_SECURITY_ENABLED' -e 'MCP_SECURITY_MODE' -e 'MCP_SERVER_TOOLS_SURFACE' -e 'ZAP_API_KEY' -e 'ZAP_API_PORT' -e 'ZAP_API_URL' 'ghcr.io/dtkmn/mcp-zap-server:v0.17.1'

Claude Desktop (claude_desktop_config.json)

{
  "mcpServers": {
    "mcp-zap-server": {
      "args": [
        "run",
        "-i",
        "--rm",
        "-e",
        "MCP_API_KEY",
        "-e",
        "MCP_SECURITY_ALLOW_PLACEHOLDER_API_KEY",
        "-e",
        "MCP_SECURITY_ENABLED",
        "-e",
        "MCP_SECURITY_MODE",
        "-e",
        "MCP_SERVER_TOOLS_SURFACE",
        "-e",
        "ZAP_API_KEY",
        "-e",
        "ZAP_API_PORT",
        "-e",
        "ZAP_API_URL",
        "ghcr.io/dtkmn/mcp-zap-server:v0.17.1"
      ],
      "command": "docker",
      "env": {
        "MCP_API_KEY": "<your mcp api key>",
        "MCP_SECURITY_ALLOW_PLACEHOLDER_API_KEY": "<your mcp security allow placeholder api key>",
        "MCP_SECURITY_ENABLED": "<your mcp security enabled>",
        "MCP_SECURITY_MODE": "<your mcp security mode>",
        "MCP_SERVER_TOOLS_SURFACE": "<your mcp server tools surface>",
        "ZAP_API_KEY": "<your zap api key>",
        "ZAP_API_PORT": "<your zap api port>",
        "ZAP_API_URL": "<your zap api url>"
      }
    }
  }
}

Claude Code

claude mcp add 'mcp-zap-server' -- docker run -i --rm -e 'MCP_API_KEY' -e 'MCP_SECURITY_ALLOW_PLACEHOLDER_API_KEY' -e 'MCP_SECURITY_ENABLED' -e 'MCP_SECURITY_MODE' -e 'MCP_SERVER_TOOLS_SURFACE' -e 'ZAP_API_KEY' -e 'ZAP_API_PORT' -e 'ZAP_API_URL' 'ghcr.io/dtkmn/mcp-zap-server:v0.17.1'

Cursor (.cursor/mcp.json)

{
  "mcpServers": {
    "mcp-zap-server": {
      "args": [
        "run",
        "-i",
        "--rm",
        "-e",
        "MCP_API_KEY",
        "-e",
        "MCP_SECURITY_ALLOW_PLACEHOLDER_API_KEY",
        "-e",
        "MCP_SECURITY_ENABLED",
        "-e",
        "MCP_SECURITY_MODE",
        "-e",
        "MCP_SERVER_TOOLS_SURFACE",
        "-e",
        "ZAP_API_KEY",
        "-e",
        "ZAP_API_PORT",
        "-e",
        "ZAP_API_URL",
        "ghcr.io/dtkmn/mcp-zap-server:v0.17.1"
      ],
      "command": "docker",
      "env": {
        "MCP_API_KEY": "<your mcp api key>",
        "MCP_SECURITY_ALLOW_PLACEHOLDER_API_KEY": "<your mcp security allow placeholder api key>",
        "MCP_SECURITY_ENABLED": "<your mcp security enabled>",
        "MCP_SECURITY_MODE": "<your mcp security mode>",
        "MCP_SERVER_TOOLS_SURFACE": "<your mcp server tools surface>",
        "ZAP_API_KEY": "<your zap api key>",
        "ZAP_API_PORT": "<your zap api port>",
        "ZAP_API_URL": "<your zap api url>"
      }
    }
  }
}

VS Code (.vscode/mcp.json)

{
  "servers": {
    "mcp-zap-server": {
      "args": [
        "run",
        "-i",
        "--rm",
        "-e",
        "MCP_API_KEY",
        "-e",
        "MCP_SECURITY_ALLOW_PLACEHOLDER_API_KEY",
        "-e",
        "MCP_SECURITY_ENABLED",
        "-e",
        "MCP_SECURITY_MODE",
        "-e",
        "MCP_SERVER_TOOLS_SURFACE",
        "-e",
        "ZAP_API_KEY",
        "-e",
        "ZAP_API_PORT",
        "-e",
        "ZAP_API_URL",
        "ghcr.io/dtkmn/mcp-zap-server:v0.17.1"
      ],
      "command": "docker",
      "env": {
        "MCP_API_KEY": "<your mcp api key>",
        "MCP_SECURITY_ALLOW_PLACEHOLDER_API_KEY": "<your mcp security allow placeholder api key>",
        "MCP_SECURITY_ENABLED": "<your mcp security enabled>",
        "MCP_SECURITY_MODE": "<your mcp security mode>",
        "MCP_SERVER_TOOLS_SURFACE": "<your mcp server tools surface>",
        "ZAP_API_KEY": "<your zap api key>",
        "ZAP_API_PORT": "<your zap api port>",
        "ZAP_API_URL": "<your zap api url>"
      },
      "type": "stdio"
    }
  }
}

Related servers

  • AgentTrust — Identity & Trust for A2A Agents Verified domain
    Identity, trust, and A2A orchestration for autonomous AI agents. Official A2A partner.
  • 13FLOW
    Source-linked SEC 13F research, quality checks, watchlists and audit trails for agents.
  • 1Claw Vault
    HSM-backed vault secrets for AI agents (JIT fetch) plus prompt-injection and threat scanning.
  • 212medya Growth Check Verified domain
    Audit a public website for B2B marketing readiness and AI search visibility.
  • 3ilm-mcp
    Search 1,032 verified smart contract vulnerability findings from Sherlock audits by pattern.
  • 402shield
    x402 payment security and pre-execution transaction risk screening for autonomous AI agents.