Install ZAP in Claude Code
This server doesn't publish a package to a registry, so follow the install steps in its README. Once it runs, register it with Claude Code:
claude mcp add zap -- <command to start the server>Frequently asked questions
What does the ZAP MCP server do?
Self-hosted OWASP ZAP integration with guided security scans, findings summaries and report generation.
Is the ZAP MCP server free?
The server is free, but you will likely need an account. The server itself is free, but it connects to a service that needs an account or API key, which may have paid tiers. Check the provider for current pricing.
Does ZAP run locally or remotely?
Local. Runs on your machine (stdio). You install it with npx, uvx, Docker or from source.
How do I add ZAP to Claude Code?
Follow the install steps in the project's README at https://github.com/dtkmn/mcp-zap-server, then register it with "claude mcp add".
More security & identity MCP servers
View allDandan
82ch/MCP-Dandan
Real-time security framework for MCP servers that detects and blocks malicious agent behavior by analyzing tool call patterns and intent.
Bugsy
mobb-dev/bugsy
Mobb Vibe Shield identifies and remediates vulnerabilities in human and AI-written code.
SAS Viya
sassoftware/sas-mcp-server
Execute SAS code and query Compute, CAS, and model APIs on SAS Viya via OAuth 2.0.
Dependency Management
sonatype/dependency-management-mcp-server
Sonatype component intelligence: versions, security analysis, and Trust Score recommendations
mcpcut
RostislavMatov/mcpcut
Journals every MCP tool call with secrets redacted; with a policy, holds risky calls for approval
Transloadit Media Processing
transloadit/node-sdk
Process video, audio, images and documents with Transloadit Robots. Connect by URL with OAuth.