Skip to content

new active script to detect open mcp servers #499

New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

Sign up for GitHub

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Open
wants to merge 7 commits into
base: main
Choose a base branch
from
+396 −0
Open

new active script to detect open mcp servers #499

Show file tree
Hide file tree
Changes from all commits
Commits
Show all changes
7 commits
Select commit Hold shift + click to select a range
e0418ec
new active script to detect open mcp servers
bananabr Oct 30, 2025
9c275a3
Merge branch 'zaproxy:main' into new_active-open_mcp
bananabr Nov 11, 2025
a37f72c
Details that are set/common in the metadata block don't need to be re…
bananabr Nov 11, 2025
d6b3fda
Ran ./gradlew :spotlessApply. Build now succeeds.
bananabr Nov 11, 2025
15553dc
Updated CWE id to CWE-306.
bananabr Nov 11, 2025
f58bb86
Adjust to naming convention
bananabr Nov 11, 2025
6c5ad1b
Update changelog according to https://github.com/zaproxy/community-sc…
bananabr Nov 11, 2025
File filter

Filter by extension

Filter by extension
Conversations
Failed to load comments.
Loading
Jump to
Jump to file
Failed to load files.
Loading
Diff view
Diff view
1 change: 1 addition & 0 deletions CHANGELOG.md
View file
Open in desktop
Original file line number Diff line number Diff line change
Expand Up @@ -9,6 +9,7 @@ The format is based on [Keep a Changelog](https://keepachangelog.com/en/1.0.0/).
- Variant script 'AddUrlParams.js'
- Extender script 'ScanMonitor.js'
- Active script 'SwaggerSecretDetector.js'
- Active script 'OpenModelContextProtocolServer.js' - Attempts to detect Model Context Protocol (MCP) servers lacking authentication.

### Changed
- Update minimum ZAP version to 2.16.0 and compile with Java 17.
Expand Down
Loading