Burp Suite MCP Server Extension

@PortSwigger

リポジトリ

基本情報

カテゴリ

開発者ツール

ライセンス

GPL-3.0

トランスポート

stdio

作者

PortSwigger

Burp Suite MCP Server Extension について

MCP Server for Burp

#extension

Burp Suite MCP Server Extension の設定

以下の設定を使って、このサーバーを MCP 対応クライアントに追加してください。

{
  "mcpServers": {
    "burp": {
      "command": "<path to Java executable packaged with Burp>",
      "args": [
        "-jar",
        "/path/to/mcp/proxy/jar/mcp-proxy-all.jar",
        "--sse-url",
        "<your Burp MCP server URL configured in the extension>"
      ]
    }
  }
}

Burp Suite MCP Server Extension のツール

ツール一覧はまだありません

この掲載には表示できるツール一覧がまだありません。サーバーにツールがないという意味ではありません。対応機能はプロジェクトのドキュメントをご確認ください。

ツールは README から自動的に抽出されます。メンテナーは ## Tools という見出しの下に記載することで、このタブに反映できます。

概要

What is Burp Suite MCP Server Extension?

Burp Suite MCP Server Extension integrates Burp Suite with AI clients using the Model Context Protocol (MCP). It is a Java-based extension for Burp Suite that allows security testing tools to be controlled and queried through AI assistants like Claude.

How to use Burp Suite MCP Server Extension?

Build the JAR with ./gradlew embedProxyJar, load it into Burp Suite as a Java extension, then configure the MCP server in the MCP tab (host/port, enable checkbox). Configure your MCP client—for Claude Desktop, run the built-in installer or manually edit claude_desktop_config.json to point to the stdio proxy server. Restart Claude Desktop while Burp Suite is running with the extension.

Key features of Burp Suite MCP Server Extension

Connects Burp Suite to AI clients via MCP
Automatic installation for Claude Desktop
Packaged Stdio MCP proxy server for client compatibility
Toggle the MCP server on/off in Burp UI
Expose tools that can edit Burp configuration files

Use cases of Burp Suite MCP Server Extension

Automate security testing workflows through natural language commands
Query Burp Suite’s proxy history and scan results using an AI assistant
Integrate Burp Suite with Claude Desktop for interactive penetration testing

よくある質問

What are the prerequisites for installation?

Java and the `jar` command must be installed and available in your system PATH.

How do I configure the MCP server in Burp Suite?

Open the `MCP` tab, enable the server with the `Enabled` checkbox, optionally allow configuration editing, and set the host and port (default `http://127.0.0.1:9876`).

How do I connect Claude Desktop to Burp Suite?

Use the extension’s installer to automatically configure Claude, or manually edit `~/Library/Application Support/Claude/claude_desktop_config.json` to add the stdio proxy server command pointing to the Burp MCP server URL.

Can I define custom tools for the MCP server?

Yes. Tools are defined in `src/main/kotlin/net/portswigger/mcp/tools/Tools.kt`. Create a new serializable data class with required parameters; the tool name is auto-derived from the class name.

What transport does the MCP server use?

It runs an SSE MCP server on the configured host and port (default `127.0.0.1:9876`). A packaged Stdio proxy server is provided for clients that only support stdio transport.

「開発者ツール」の他のコンテンツ

LocalCan

Gives AI agents public URLs (tunnels) for localhost, live HTTP traffic inspection, snapshot publishing, and access control. Part of LocalCan, the ngrok alternative for Mac, Windows and Linux. Free plan.