# Burp Suite MCP Server

> PortSwigger's Burp Suite extension serves an MCP endpoint, plus a packaged stdio proxy, so agents can query proxy HTTP and WebSocket history, send HTTP/1.1 or HTTP/2 requests, and open Repeater or Intruder tabs.

- Type: Integration
- Targets: App · Website
- Category: Independent MCP integrations
- Relationship: Independent agent integration
- Sources reviewed: 2026-10-17
- Added to the catalog: 2026-10-17
- Original resource: <https://github.com/PortSwigger/mcp-server>
- Primary source: <https://github.com/PortSwigger/mcp-server/blob/5f76126409780ecba2b766c7f7388f465c5b5f94/README.md>
- Catalog page: <https://awesomerea.org/resources/burp-suite-mcp-server/>
- Record JSON: <https://awesomerea.org/resources/burp-suite-mcp-server/record.json>
- Chinese version: [简体中文](https://awesomerea.org/zh/resources/burp-suite-mcp-server/index.md)

## Requirements & limits

- Requires Burp Suite, proprietary PortSwigger software under its own EULA: Professional is a paid subscription, while Community Edition is free under separate Community terms. The extension's GPL-3.0 license does not cover Burp. The extension manifest lists both editions as supported.
- Reviewed release: v1.3.0, published 2026-05-26 with a prebuilt burp-mcp-all.jar and also listed in the BApp Store. Source builds use Gradle and need Java and the jar command on PATH; the reviewed build targets a Java 21 toolchain.
- The SSE server listens on 127.0.0.1:9876 by default; stdio-only clients use the packaged proxy JAR. Approval prompts for sending HTTP requests and for reading HTTP history, WebSocket history and Organizer items are on by default. Config-editing tools are opt-in, and exported options filter credentials by default.
- Scanner-issue and Collaborator tools are registered only in Burp Suite Professional. Data returned to the MCP client is handled by that client's model provider. The default branch was seven commits ahead of v1.3.0 at review, with the same registered tool set.

## Primary sources

1. <https://github.com/PortSwigger/mcp-server/blob/5f76126409780ecba2b766c7f7388f465c5b5f94/README.md>
2. <https://github.com/PortSwigger/mcp-server/blob/5f76126409780ecba2b766c7f7388f465c5b5f94/src/main/kotlin/net/portswigger/mcp/tools/Tools.kt>
3. <https://github.com/PortSwigger/mcp-server/blob/5f76126409780ecba2b766c7f7388f465c5b5f94/src/main/kotlin/net/portswigger/mcp/config/McpConfig.kt>
4. <https://github.com/PortSwigger/mcp-server/blob/5f76126409780ecba2b766c7f7388f465c5b5f94/BappManifest.bmf>
5. <https://github.com/PortSwigger/mcp-server/blob/5f76126409780ecba2b766c7f7388f465c5b5f94/gradle.properties>
6. <https://github.com/PortSwigger/mcp-server/blob/5f76126409780ecba2b766c7f7388f465c5b5f94/LICENSE>
7. <https://github.com/PortSwigger/mcp-server/releases/tag/v1.3.0>
8. <https://portswigger.net/bappstore/9952290f04ed4f628e624d0aa9dccebc>
9. <https://portswigger.net/burp/eula>

## More in Websites

- [Wakaru](https://awesomerea.org/resources/wakaru/index.md) · Tool
- [Spectral](https://awesomerea.org/resources/spectral-mcp/index.md) · Integration
- [jsdeob-workbench](https://awesomerea.org/resources/jsdeob-workbench/index.md) · Tool
- [Browser Reverse Engineering Toolkit](https://awesomerea.org/resources/browser-reverse-engineering-toolkit/index.md) · Tool
- [screenshot-to-code](https://awesomerea.org/resources/screenshot-to-code/index.md) · Tool
- [Dembrandt](https://awesomerea.org/resources/dembrandt/index.md) · Tool

## About this entry

The description was reviewed against primary sources.
Original editorial content: MIT. Linked projects, papers and assets retain their own rights and licenses.