Shared context · suite
Official publisherMCPNewly listed 2026-10-14
Burp Suite MCP (PortSwigger)
by PortSwigger · PortSwigger/mcp-server
Connect your AI client to a running Burp Suite instance through PortSwigger’s MCP extension and packaged stdio proxy.
Install from the author’s instructions
Before connecting
- Have Burp Suite available. Building the extension requires Java and the jar command.
- Load build/libs/burp-mcp-all.jar as a Java extension in Burp.
Build the author extension
git clone https://github.com/PortSwigger/mcp-server.git
cd mcp-server
./gradlew embedProxyJarSources: Author README · Checked 2026-10-14.
Claude Desktop · packaged proxy
{
"mcpServers": {
"burp": {
"command": "<path to Java executable packaged with Burp>",
"args": [
"-jar",
"/path/to/mcp/proxy/jar/mcp-proxy-all.jar",
"--sse-url",
"<your Burp MCP server URL configured in the extension>"
]
}
}
}Sources: Author README · Checked 2026-10-14.
The README offers an extension installer and a manual Java proxy configuration. Replace the Java, proxy JAR, and server-URL placeholders with the values from your Burp extension.
After loading the extension, open Burp’s MCP tab and enable the server. Use the extension’s installer option to extract the packaged proxy JAR before configuring a stdio client.
Sources: Author README · Checked 2026-10-14.
Tools and capabilities
| Capability | What it does |
|---|---|
| Burp MCP extension | Bridge a running Burp instance to an MCP client. |
| Claude Desktop installer | Configure Claude Desktop from the extension. |
| Packaged proxy | Connect stdio clients to the extension’s SSE server. |
Sources: Author README · Checked 2026-10-14.
Workflow examples
Suggested prompts for your own client. These are examples, not recorded tool executions.
Prompt 1
Help me configure the MCP connection to my running Burp instance and inspect its available tools.Prompt 2
Use the connected Burp tools to help review an application I am authorized to test; establish the target scope first.Sources and verification
Official documentation and repository metadata reviewed; no third-party software installed and no MCP or hosted service executed.
Recent activity refers to the repository push timestamp. It does not establish the product’s original release date. Stars are a dated snapshot of the entire repository.
- GitHub repository metadataVerified 2026-10-14
- Author READMEVerified 2026-10-14