概览
What is Burp Suite MCP Server Extension?
Burp Suite MCP Server Extension integrates Burp Suite with AI clients using the Model Context Protocol (MCP). It is a Java-based extension for Burp Suite that allows security testing tools to be controlled and queried through AI assistants like Claude.
How to use Burp Suite MCP Server Extension?
Build the JAR with ./gradlew embedProxyJar, load it into Burp Suite as a Java extension, then configure the MCP server in the MCP tab (host/port, enable checkbox). Configure your MCP client—for Claude Desktop, run the built-in installer or manually edit claude_desktop_config.json to point to the stdio proxy server. Restart Claude Desktop while Burp Suite is running with the extension.
Key features of Burp Suite MCP Server Extension
- Connects Burp Suite to AI clients via MCP
- Automatic installation for Claude Desktop
- Packaged Stdio MCP proxy server for client compatibility
- Toggle the MCP server on/off in Burp UI
- Expose tools that can edit Burp configuration files
Use cases of Burp Suite MCP Server Extension
- Automate security testing workflows through natural language commands
- Query Burp Suite’s proxy history and scan results using an AI assistant
- Integrate Burp Suite with Claude Desktop for interactive penetration testing
FAQ from Burp Suite MCP Server Extension
What are the prerequisites for installation?
Java and the jar command must be installed and available in your system PATH.
How do I configure the MCP server in Burp Suite?
Open the MCP tab, enable the server with the Enabled checkbox, optionally allow configuration editing, and set the host and port (default http://127.0.0.1:9876).
How do I connect Claude Desktop to Burp Suite?
Use the extension’s installer to automatically configure Claude, or manually edit ~/Library/Application Support/Claude/claude_desktop_config.json to add the stdio proxy server command pointing to the Burp MCP server URL.
Can I define custom tools for the MCP server?
Yes. Tools are defined in src/main/kotlin/net/portswigger/mcp/tools/Tools.kt. Create a new serializable data class with required parameters; the tool name is auto-derived from the class name.
What transport does the MCP server use?
It runs an SSE MCP server on the configured host and port (default 127.0.0.1:9876). A packaged Stdio proxy server is provided for clients that only support stdio transport.
