# OWASP ZAP

> Use this tool when you need to perform automated web security scans and vulnerability assessments. It solves problems related to web application security by identifying potential threats and providing detailed reports, accepting inputs such as scan configurations and URLs, and producing outputs like findings and guardrail recommendations. Ideal for use in development and production environments where web security is a concern.

Canonical page: https://skillsregistry.net/skills/dtkmn-zap  
JSON: https://api.skillsregistry.net/v1/skills/dtkmn-zap

## Description

This MCP server wraps OWASP ZAP (Zed Attack Proxy) to enable AI agents to perform guided web security scans, retrieve findings, generate reports, and apply production guardrails. Built with Java and Spring Boot, it communicates over HTTP and supports multi-replica deployments with PostgreSQL for durable state. It includes a bundled Open WebUI interface and Docker deployment support.

## Trust

- **Trust score (0–1):** 0.62
- **Verification tier:** scanned
- **Last scanned:** 2026-09-01

## Facts

- **Version:** 1.0.0
- **Skill type:** atomic
- **Execution layer:** mcp-remote
- **Runtime environment:** api
- **Category:** database
- **Updated:** 2026-09-01

## Source

- **Source listing:** [PulseMCP](https://www.pulsemcp.com/servers/dtkmn-zap)
- **Repository:** <https://github.com/dtkmn/mcp-zap-server>

## Use it

Resolve this record through the SkillsRegistry MCP server (no auth, read-only):

```
claude mcp add --transport http --scope user skillsregistry https://api.skillsregistry.net/mcp
```

```json
{
  "jsonrpc": "2.0",
  "id": 1,
  "method": "tools/call",
  "params": {
    "name": "get_skill",
    "arguments": {
      "slug": "dtkmn-zap"
    }
  }
}
```

REST: `GET https://api.skillsregistry.net/v1/skills/dtkmn-zap` · pull for local use: `GET https://api.skillsregistry.net/v1/skills/dtkmn-zap/pull`

---
SkillsRegistry indexes agent skills from public registries and GitHub. Skills we have analysed are scanned with Circle-IR and scored on six dimensions; each listing states its scan coverage. More: https://skillsregistry.net/llms.txt