Production-grade OWASP ZAP MCP server for authorized penetration testing and bug-bounty workflows (67 curated tools, authenticated scanning, target authorization policy).
Quick Install
Copy the config for your editor. Some servers may need additional setup — check the README.
Add to claude_desktop_config.json:
{
"mcpServers": {
"zap-mcp-server": {
"command": "uvx",
"args": [
"zap-mcp-server"
]
}
}
}
Run in terminal:
claude mcp add zap-mcp-server uvx zap-mcp-server
Add to .cursor/mcp.json:
{
"mcpServers": {
"zap-mcp-server": {
"command": "uvx",
"args": [
"zap-mcp-server"
]
}
}
}
Or install with pip: pip install zap-mcp-server