{
  "added_at": "2026-10-17",
  "additional_evidence_urls": [
    "https://github.com/PortSwigger/mcp-server/blob/5f76126409780ecba2b766c7f7388f465c5b5f94/src/main/kotlin/net/portswigger/mcp/tools/Tools.kt",
    "https://github.com/PortSwigger/mcp-server/blob/5f76126409780ecba2b766c7f7388f465c5b5f94/src/main/kotlin/net/portswigger/mcp/config/McpConfig.kt",
    "https://github.com/PortSwigger/mcp-server/blob/5f76126409780ecba2b766c7f7388f465c5b5f94/BappManifest.bmf",
    "https://github.com/PortSwigger/mcp-server/blob/5f76126409780ecba2b766c7f7388f465c5b5f94/gradle.properties",
    "https://github.com/PortSwigger/mcp-server/blob/5f76126409780ecba2b766c7f7388f465c5b5f94/LICENSE",
    "https://github.com/PortSwigger/mcp-server/releases/tag/v1.3.0",
    "https://portswigger.net/bappstore/9952290f04ed4f628e624d0aa9dccebc",
    "https://portswigger.net/burp/eula"
  ],
  "category": "agent-mcp",
  "description_en": "PortSwigger's Burp Suite extension serves an MCP endpoint, plus a packaged stdio proxy, so agents can query proxy HTTP and WebSocket history, send HTTP/1.1 or HTTP/2 requests, and open Repeater or Intruder tabs.",
  "description_zh": "PortSwigger 官方 Burp Suite 扩展，提供 MCP 端点并附带 stdio 代理，使智能体可以查询代理中的 HTTP 与 WebSocket 历史记录、发送 HTTP/1.1 或 HTTP/2 请求，并打开 Repeater 或 Intruder 标签页。",
  "entry_url": "https://awesomerea.org/resources/burp-suite-mcp-server/",
  "entry_url_zh": "https://awesomerea.org/zh/resources/burp-suite-mcp-server/",
  "evidence_url": "https://github.com/PortSwigger/mcp-server/blob/5f76126409780ecba2b766c7f7388f465c5b5f94/README.md",
  "group": "agents",
  "id": "burp-suite-mcp-server",
  "json_url": "https://awesomerea.org/resources/burp-suite-mcp-server/record.json",
  "kind": "integration",
  "markdown_url": "https://awesomerea.org/resources/burp-suite-mcp-server/index.md",
  "markdown_url_zh": "https://awesomerea.org/zh/resources/burp-suite-mcp-server/index.md",
  "name": "Burp Suite MCP Server",
  "name_zh": "Burp Suite MCP Server 扩展",
  "record_type": "resource",
  "relationship": "independent-agent-integration",
  "requirements": [
    "Requires Burp Suite, proprietary PortSwigger software under its own EULA: Professional is a paid subscription, while Community Edition is free under separate Community terms. The extension's GPL-3.0 license does not cover Burp. The extension manifest lists both editions as supported.",
    "Reviewed release: v1.3.0, published 2026-05-26 with a prebuilt burp-mcp-all.jar and also listed in the BApp Store. Source builds use Gradle and need Java and the jar command on PATH; the reviewed build targets a Java 21 toolchain.",
    "The SSE server listens on 127.0.0.1:9876 by default; stdio-only clients use the packaged proxy JAR. Approval prompts for sending HTTP requests and for reading HTTP history, WebSocket history and Organizer items are on by default. Config-editing tools are opt-in, and exported options filter credentials by default.",
    "Scanner-issue and Collaborator tools are registered only in Burp Suite Professional. Data returned to the MCP client is handled by that client's model provider. The default branch was seven commits ahead of v1.3.0 at review, with the same registered tool set."
  ],
  "requirements_zh": [
    "需要安装 Burp Suite。Burp Suite 是 PortSwigger 的专有软件，适用其自身的最终用户许可协议：Professional 为付费订阅，Community Edition 按单独的社区版条款免费使用。扩展本身的 GPL-3.0 许可证不涵盖 Burp。扩展清单标明两个版本均受支持。",
    "所审阅版本为 v1.3.0，发布于 2026-05-26，提供预编译的 burp-mcp-all.jar，也已上架 BApp Store。从源码构建需使用 Gradle，并要求 PATH 中有 Java 与 jar 命令；所审阅的构建使用 Java 21 工具链。",
    "SSE 服务默认监听 127.0.0.1:9876；只支持 stdio 的客户端可使用随附的代理 JAR。发送 HTTP 请求以及读取 HTTP 历史、WebSocket 历史和 Organizer 条目时，默认会弹出审批提示。修改配置的工具需手动启用，导出配置时默认过滤凭据。",
    "扫描器问题与 Collaborator 工具仅在 Burp Suite Professional 中注册。返回给 MCP 客户端的数据由该客户端所用的模型提供方处理。审阅时默认分支比 v1.3.0 多 7 个提交，注册的工具集合保持不变。"
  ],
  "targets": [
    "app",
    "website"
  ],
  "url": "https://github.com/PortSwigger/mcp-server",
  "verification": "source-reviewed",
  "verified_at": "2026-10-17"
}