广告合作
MCP.so
登录

BurpSuite MCP Server

@MCP-Mirror

代码仓库

基本信息

分类

其他

许可证

MIT license

传输方式

stdio

作者

MCP-Mirror

关于 BurpSuite MCP Server

Mirror of

#burpsuite#mcp-server#security-testing

BurpSuite MCP Server 配置

使用下面的配置,将此服务器添加到你的 MCP 客户端。

{
  "mcpServers": {
    "X3r0K_BurpSuite-MCP-Server": {
      "command": "python",
      "args": [
        "main.py"
      ]
    }
  }
}

BurpSuite MCP Server 工具

工具列表暂未提供

当前收录暂时没有可展示的工具列表，不代表服务没有工具。请查阅项目文档了解支持的能力。

工具是从 README 中自动提取的。维护者可以在 ## Tools 标题下列出工具,即可填充这部分内容。

概览

What is BurpSuite MCP Server?

A Model Context Protocol (MCP) server implementation that provides programmatic access to BurpSuite’s core functionalities, including proxy interception, scanning, logging, and vulnerability detection. It is built with Python and FastAPI and is intended for security professionals and developers automating web security testing.

How to use BurpSuite MCP Server?

Clone the repository, install dependencies with pip install -r requirements.txt, configure environment variables in a .env file (including BurpSuite API key, host, port, proxy host/port, and MCP server host/port), then start the server with python main.py. The server runs on http://localhost:8000 by default.

Key features of BurpSuite MCP Server

  • Intercept and modify HTTP/HTTPS traffic in real time
  • Perform active and passive scanning with custom configurations
  • Comprehensive HTTP traffic logging with advanced filtering
  • Automatic detection of XSS, SQL injection, path traversal, and more
  • Traffic analysis (request count, method distribution, response times)
  • Seamless integration with Cursor IDE

Use cases of BurpSuite MCP Server

  • Automate web application security testing workflows
  • Integrate BurpSuite scanning into CI/CD pipelines
  • Monitor and analyze HTTP traffic for suspicious patterns
  • Build custom tools for vulnerability detection and reporting

常见问题

1

How is this server different from using BurpSuite directly?

It exposes BurpSuite’s features via a programmatic REST API, enabling automation and integration with other tools instead of relying on the BurpSuite GUI.

2

What are the runtime requirements?

Python 3.8+, FastAPI 0.104.1, and a running BurpSuite instance with the API enabled. The server also requires configuration of the BurpSuite API host, port, and proxy settings.

3

Where does log data live?

Logs are stored in memory on the server (accessible via endpoints like `/logger/logs` and `/logger/analysis`). They can be cleared via a DELETE request.

4

What transports and authentication are supported?

The server uses HTTP/REST transport. Authentication is not described in the README beyond securing the BurpSuite API key and recommending HTTPS for production.

5

What are the known limitations?

The README does not mention specific limitations. It advises running the server in a secure environment and monitoring access.

评论

其他 分类下的更多 MCP 服务器

Screenpipe

screenpipe

YC (S26) | Open Computer History | Continuously record your company computer work, map your workflows, help you find work worth automating, and power your agents' context

22.0K

DeepMark

DeepMark helps teachers deliver rapid, consistent marking with meaningful feedback for every student — in a fraction of the time. What once took a week, now takes one free period.

Klarix Intelligence Engine

Klarix

B2B competitive intelligence, live sales battlecards, 5-axis ICP prospect fit scoring, and tech stack teardowns over MCP and REST with cited public-web evidence.

Health by Dr Brad

Dr Brad Stanfield

Health by Dr Brad works out a health plan from your own results: which screening is due at your age, and evidence-based suggestions, each with the reason and the published guideline or study behind it. Your record is one

ICSS

chokcoco

不止于 CSS

20.7K
广告合作