MCP.so
Sign In

BurpSuite MCP Server

@X3r0K

Basic information

Category

Other

License

MIT

Transports

stdio

Author

X3r0K

About BurpSuite MCP Server

BurpSuite MCP Server: A powerful Model Context Protocol (MCP) server implementation for BurpSuite, providing programmatic access to Burp's core functionalities.

BurpSuite MCP Server config

Add this server to your MCP-compatible client using the configuration below.

{
  "mcpServers": {
    "BurpSuite-MCP-Server": {
      "command": "python",
      "args": [
        "main.py"
      ]
    }
  }
}

BurpSuite MCP Server tools

Tool list not available yet

This listing does not currently have a tool list to display. This does not mean the server has no tools; check its documentation for supported capabilities.

We auto-extract tools from the README. The maintainer can list them under a ## Tools heading to populate this section.

Overview

What is BurpSuite MCP Server?

The BurpSuite MCP Server is a Model Context Protocol (MCP) server that provides programmatic access to BurpSuite’s core functionalities, such as proxy interception, scanning, logging, and vulnerability detection. It is designed for security professionals and developers who want to automate and integrate BurpSuite into their workflows.

How to use BurpSuite MCP Server?

Clone the repository, install dependencies with pip install -r requirements.txt, configure the .env file with your BurpSuite API key and host settings, then start the server with python main.py. Once running, interact via REST API endpoints (e.g., curl -X POST http://localhost:8000/proxy/intercept) to intercept requests, start scans, or retrieve logs.

Key features of BurpSuite MCP Server

  • Intercept and modify HTTP/HTTPS traffic in real time
  • Active and passive scanning with custom configurations
  • Comprehensive HTTP traffic logging with advanced filtering
  • Automatic detection of multiple vulnerability types
  • Real-time request/response manipulation and history access
  • Vulnerability analysis with endpoint and severity summaries

Use cases of BurpSuite MCP Server

  • Automate web application penetration testing by programmatically starting scans and reviewing results
  • Intercept and modify live HTTP traffic for manual security analysis or debugging
  • Collect and analyze large volumes of HTTP logs to detect suspicious patterns and vulnerabilities
  • Integrate BurpSuite capabilities into CI/CD pipelines or custom security tools
  • Use with Cursor IDE for in-editor security testing and task automation

Frequently asked questions

1

What vulnerabilities can the BurpSuite MCP Server detect?

It can detect XSS, SQL Injection, Path Traversal, File Inclusion, SSRF, XXE, CSRF, Open Redirect, and Command Injection.

2

What are the runtime requirements?

The server requires Python 3.8 or later, FastAPI 0.104.1, and the dependencies listed in `requirements.txt`.

3

How do I configure and start the server?

Copy `.env.example` to `.env`, update the values (BURP_API_KEY, BURP_API_HOST, BURP_API_PORT, etc.), then run `python main.py` to start the server on `http://localhost:8000`.

4

Does it integrate with Cursor IDE?

Yes, the repository includes a `.cursor` directory with configuration files (settings, tasks, launch) that enable seamless integration with Cursor IDE for running tasks and debugging.

5

Is authentication required to use the API?

Yes, the server uses a BurpSuite API key (set in the `BURP_API_KEY` environment variable) for authentication. For production, HTTPS and additional access controls are recommended.

Comments

More Other MCP servers