How is this server different from using BurpSuite directly?
It exposes BurpSuite’s features via a programmatic REST API, enabling automation and integration with other tools instead of relying on the BurpSuite GUI.
BurpSuite MCP Server
@MCP-Mirror
Basic information
About BurpSuite MCP Server
Mirror of
BurpSuite MCP Server config
Add this server to your MCP-compatible client using the configuration below.
{
"mcpServers": {
"X3r0K_BurpSuite-MCP-Server": {
"command": "python",
"args": [
"main.py"
]
}
}
}BurpSuite MCP Server tools
Tool list not available yet
This listing does not currently have a tool list to display. This does not mean the server has no tools; check its documentation for supported capabilities.
We auto-extract tools from the README. The maintainer can list them under a ## Tools heading to populate this section.
Overview
What is BurpSuite MCP Server?
A Model Context Protocol (MCP) server implementation that provides programmatic access to BurpSuite’s core functionalities, including proxy interception, scanning, logging, and vulnerability detection. It is built with Python and FastAPI and is intended for security professionals and developers automating web security testing.
How to use BurpSuite MCP Server?
Clone the repository, install dependencies with pip install -r requirements.txt, configure environment variables in a .env file (including BurpSuite API key, host, port, proxy host/port, and MCP server host/port), then start the server with python main.py. The server runs on http://localhost:8000 by default.
Key features of BurpSuite MCP Server
- Intercept and modify HTTP/HTTPS traffic in real time
- Perform active and passive scanning with custom configurations
- Comprehensive HTTP traffic logging with advanced filtering
- Automatic detection of XSS, SQL injection, path traversal, and more
- Traffic analysis (request count, method distribution, response times)
- Seamless integration with Cursor IDE
Use cases of BurpSuite MCP Server
- Automate web application security testing workflows
- Integrate BurpSuite scanning into CI/CD pipelines
- Monitor and analyze HTTP traffic for suspicious patterns
- Build custom tools for vulnerability detection and reporting
Frequently asked questions
What are the runtime requirements?
Python 3.8+, FastAPI 0.104.1, and a running BurpSuite instance with the API enabled. The server also requires configuration of the BurpSuite API host, port, and proxy settings.
Where does log data live?
Logs are stored in memory on the server (accessible via endpoints like `/logger/logs` and `/logger/analysis`). They can be cleared via a DELETE request.
What transports and authentication are supported?
The server uses HTTP/REST transport. Authentication is not described in the README beyond securing the BurpSuite API key and recommending HTTPS for production.
What are the known limitations?
The README does not mention specific limitations. It advises running the server in a secure environment and monitoring access.
More Other MCP servers
Klarix Intelligence Engine
KlarixB2B competitive intelligence, live sales battlecards, 5-axis ICP prospect fit scoring, and tech stack teardowns over MCP and REST with cited public-web evidence.
Soar Flight Booking MCP
Soar Flight Booking MCP is a remote MCP server available at https://mcp.soar.flights.
Lemon.io
lemon-ioRequest dedicated senior developers to work on your project, write job descriptions, and prep technical interviews — all without leaving your Claude chat. Just describe what you need, and Lemon.io MCP does the rest. 1–3
Handl
Handl speaks the Model Context Protocol. Your whole billing operation — projects, invoices, clients, reports, approvals — as tools any AI assistant can call, inside your autonomy rules.
Health by Dr Brad
Dr Brad StanfieldHealth by Dr Brad works out a health plan from your own results: which screening is due at your age, and evidence-based suggestions, each with the reason and the published guideline or study behind it. Your record is one
Comments