Prompts are reusable instruction templates. MCP clients discover them via prompts/list and retrieve them via prompts/get.
Run a ZAP baseline scan: spider the target (standard then AJAX) and check for passive vulnerabilities without any active attacking.
Arguments: target (required) - the URL to scan
Run a ZAP full scan: spider the target (standard then AJAX) and then actively scan for vulnerabilities.
Arguments: target (required) - the URL or context name to scan,
policy (optional) - active scan policy name (defaults to the ZAP default policy)