PortSwigger/mcp-server

MCP Server for Burp

What it solves

This project provides a way to connect Burp Suite, a popular web security testing tool, to AI clients (like Claude Desktop) using the Model Context Protocol (MCP). This allows AI assistants to interact with Burp Suite's functionality and data, enabling AI-driven security testing and analysis.

How it works

The project is implemented as a Burp Suite extension that hosts an MCP server. It can operate in two modes: it can be used as an SSE (Server-Sent Events) server directly, or it can use a packaged Stdio proxy server to bridge the gap for AI clients that only support Stdio-based communication. The extension allows the AI client to call specific tools defined in the Kotlin code, which then execute actions within Burp Suite.

Who it’s for

Security researchers and penetration testers who use Burp Suite and want to leverage AI assistants to automate or enhance their security testing workflows.

Highlights

  • MCP Integration: Uses the Model Context Protocol to standardize how AI clients interact with the tool.
  • Claude Desktop Support: Includes an automatic installer to configure Claude Desktop to communicate with Burp Suite.
  • Flexible Connectivity: Supports both SSE and Stdio proxy modes for different client requirements.
  • Tool Extensibility: Allows developers to define new tools for the AI to use via simple Kotlin data classes.

Related

  • Project
    six2dez/burp-ai-agent

    A Burp Suite extension that integrates AI agents and LLMs to automate vulnerability scanning and security analysis across 62 vulnerability classes.

  • Project
    motherduckdb/mcp-server-motherduck

    A Model Context Protocol (MCP) server that connects AI assistants to DuckDB and MotherDuck for SQL analytics and data engineering.

  • Project
    domdomegg/computer-use-mcp

    An MCP server that allows Claude and other AI models to control a local computer via keyboard and mouse automation.

  • Project
    vladimir-kharin/1c_mcp

    A toolkit for creating MCP servers on the 1C:Enterprise platform, allowing AI assistants to automatically access and interact with 1C database data and functionality.

  • Dispatch
    Anthropic Model Context Protocol (MCP) Release

    Anthropic has open-sourced the Model Context Protocol (MCP), a universal standard for connecting AI assistants to data sources like content repositories, business tools, and development environments to eliminate fragmented integrations.