広告掲載
MCP.so
ログイン

BurpSuite MCP Server

@MCP-Mirror

リポジトリ

基本情報

カテゴリ

その他

ライセンス

MIT license

トランスポート

stdio

作者

MCP-Mirror

BurpSuite MCP Server について

Mirror of

#burpsuite#mcp-server#security-testing

BurpSuite MCP Server の設定

以下の設定を使って、このサーバーを MCP 対応クライアントに追加してください。

{
  "mcpServers": {
    "X3r0K_BurpSuite-MCP-Server": {
      "command": "python",
      "args": [
        "main.py"
      ]
    }
  }
}

BurpSuite MCP Server のツール

ツール一覧はまだありません

この掲載には表示できるツール一覧がまだありません。サーバーにツールがないという意味ではありません。対応機能はプロジェクトのドキュメントをご確認ください。

ツールは README から自動的に抽出されます。メンテナーは ## Tools という見出しの下に記載することで、このタブに反映できます。

概要

What is BurpSuite MCP Server?

A Model Context Protocol (MCP) server implementation that provides programmatic access to BurpSuite’s core functionalities, including proxy interception, scanning, logging, and vulnerability detection. It is built with Python and FastAPI and is intended for security professionals and developers automating web security testing.

How to use BurpSuite MCP Server?

Clone the repository, install dependencies with pip install -r requirements.txt, configure environment variables in a .env file (including BurpSuite API key, host, port, proxy host/port, and MCP server host/port), then start the server with python main.py. The server runs on http://localhost:8000 by default.

Key features of BurpSuite MCP Server

  • Intercept and modify HTTP/HTTPS traffic in real time
  • Perform active and passive scanning with custom configurations
  • Comprehensive HTTP traffic logging with advanced filtering
  • Automatic detection of XSS, SQL injection, path traversal, and more
  • Traffic analysis (request count, method distribution, response times)
  • Seamless integration with Cursor IDE

Use cases of BurpSuite MCP Server

  • Automate web application security testing workflows
  • Integrate BurpSuite scanning into CI/CD pipelines
  • Monitor and analyze HTTP traffic for suspicious patterns
  • Build custom tools for vulnerability detection and reporting

よくある質問

1

How is this server different from using BurpSuite directly?

It exposes BurpSuite’s features via a programmatic REST API, enabling automation and integration with other tools instead of relying on the BurpSuite GUI.

2

What are the runtime requirements?

Python 3.8+, FastAPI 0.104.1, and a running BurpSuite instance with the API enabled. The server also requires configuration of the BurpSuite API host, port, and proxy settings.

3

Where does log data live?

Logs are stored in memory on the server (accessible via endpoints like `/logger/logs` and `/logger/analysis`). They can be cleared via a DELETE request.

4

What transports and authentication are supported?

The server uses HTTP/REST transport. Authentication is not described in the README beyond securing the BurpSuite API key and recommending HTTPS for production.

5

What are the known limitations?

The README does not mention specific limitations. It advises running the server in a secure environment and monitoring access.

コメント

「その他」の他のコンテンツ

🚀 Model Context Protocol (MCP) Curriculum for Beginners

microsoft

This open-source curriculum introduces the fundamentals of Model Context Protocol (MCP) through real-world, cross-language examples in .NET, Java, TypeScript, JavaScript, Rust and Python. Designed for developers, it focuses on practical techniques for building modular, scalable,

16.7K

Hindsight

vectorize-io

Hindsight: Agent Memory That Learns

50.4K

Handl

Handl speaks the Model Context Protocol. Your whole billing operation — projects, invoices, clients, reports, approvals — as tools any AI assistant can call, inside your autonomy rules.

Senso MCP for Joomla

sensomedia

Senso MCP turns a Joomla 5 or 6 site into a remote MCP server. It runs inside Joomla itself (no extra server, no Node.js bridge) and is secured with OAuth 2.1 and Joomla's own ACL. The free pack lets an AI assistant crea

N

Next Generation Movers: free moving quotes (remote MCP)

Next Generation Movers

Free moving quotes for AI agents from Next Generation Movers, a licensed interstate mover (USDOT 3764697). US long-distance nationwide and local DC/MD/VA. Indicative ballpark price and booking options; optional $0.01 x40

広告掲載