What vulnerabilities can the BurpSuite MCP Server detect?
It can detect XSS, SQL Injection, Path Traversal, File Inclusion, SSRF, XXE, CSRF, Open Redirect, and Command Injection.
@X3r0K
Basic information
BurpSuite MCP Server: A powerful Model Context Protocol (MCP) server implementation for BurpSuite, providing programmatic access to Burp's core functionalities.
Add this server to your MCP-compatible client using the configuration below.
{
"mcpServers": {
"BurpSuite-MCP-Server": {
"command": "python",
"args": [
"main.py"
]
}
}
}Tool list not available yet
This listing does not currently have a tool list to display. This does not mean the server has no tools; check its documentation for supported capabilities.
We auto-extract tools from the README. The maintainer can list them under a ## Tools heading to populate this section.
The BurpSuite MCP Server is a Model Context Protocol (MCP) server that provides programmatic access to BurpSuite’s core functionalities, such as proxy interception, scanning, logging, and vulnerability detection. It is designed for security professionals and developers who want to automate and integrate BurpSuite into their workflows.
Clone the repository, install dependencies with pip install -r requirements.txt, configure the .env file with your BurpSuite API key and host settings, then start the server with python main.py. Once running, interact via REST API endpoints (e.g., curl -X POST http://localhost:8000/proxy/intercept) to intercept requests, start scans, or retrieve logs.
It can detect XSS, SQL Injection, Path Traversal, File Inclusion, SSRF, XXE, CSRF, Open Redirect, and Command Injection.
The server requires Python 3.8 or later, FastAPI 0.104.1, and the dependencies listed in `requirements.txt`.
Copy `.env.example` to `.env`, update the values (BURP_API_KEY, BURP_API_HOST, BURP_API_PORT, etc.), then run `python main.py` to start the server on `http://localhost:8000`.
Yes, the repository includes a `.cursor` directory with configuration files (settings, tasks, launch) that enable seamless integration with Cursor IDE for running tasks and debugging.
Yes, the server uses a BurpSuite API key (set in the `BURP_API_KEY` environment variable) for authentication. For production, HTTPS and additional access controls are recommended.

Connect your AI assistant to your own YOUB endurance training account. Read recorded activities with full analysis, planned sessions, race goals, wellness (HRV, sleep, resting HR) and your athletic profile. Create or mov

Yuppsy MCP: build and publish real estate websites from your AI assistant. Yuppsy lets your AI assistant create live websites for real estate agents and individual property listings. You don't need a designer or any code

Soar Flight Booking MCP is a remote MCP server available at https://mcp.soar.flights.

Model Context Protocol Servers
Painless E2E Automation for Mobile and Web
Comments