ZAP MCP Server
UnverifiedREPOlisberndt/zap-mcp-server
F
Catalogue entry updated 8 days ago
Auth postureNot probedno remote endpoint probed yet
Tools91 Destructive · 5 Execute · 1 Write · 2 Read
Worst categoryDestructivegrade tracks the peak, not the average
Capability mix
Destructive 1Execute 5Write 1Read 2
What it can reach
Ingests untrusted inputTouches secretsReaches networkRuns codeTouches filesChanges permissionsSends external commsPersistsDeletes dataMoves money
Tools 9
cancel_scanstart_active_scanstart_ajax_scanstart_complete_scanstart_heartbeat
View all 9 tools
Change history
No changes recorded since first scan. Watched servers surface a diff within the hour.
Recommended policy
cancel_scandeny
start_active_scanrequire approval
create_new_sessionrate limit
Read-only toolsallow
Full policy breakdown with enforcement rules →