Happy slice of mcp pizzaMCP.pizza

mcp-server

MCP.Pizza Chef: PortSwigger

Security testers use Burp Suite to inspect and replay web traffic. This official PortSwigger extension opens a connection from a running copy of Burp to your AI client, so the assistant can call Burp's own tools and answer questions about what Burp has captured instead of you clicking through its tabs. A built-in installer configures Claude Desktop for you; other clients point at a local address, by default 127.0.0.1 on port 9876. An optional switch also lets the assistant edit Burp's configuration files.

Coding
Web/Research

Use This MCP server To

Ask what Burp captured during my last test session Run Burp's tools from my chat window Let the assistant adjust Burp settings when I allow it Point another MCP client at the same Burp session Get a plain-English summary of what Burp recorded

README

Burp Suite MCP Server Extension

Overview

Integrate Burp Suite with AI Clients using the Model Context Protocol (MCP).

For more information about the protocol visit: modelcontextprotocol.io

Features

  • Connect Burp Suite to AI clients through MCP
  • Automatic installation for Claude Desktop
  • Comes with packaged Stdio MCP proxy server

Usage

  • Install the extension in Burp Suite
  • Configure your Burp MCP server in the extension settings
  • Configure your MCP client to use the Burp SSE MCP server or stdio proxy
  • Interact with Burp through your client!

Installation

Prerequisites

Ensure that the following prerequisites are met before building and installing the extension:

  1. Java: Java must be installed and available in your system's PATH. You can verify this by running java --version in your terminal.
  2. jar Command: The jar command must be executable and available in your system's PATH. You can verify this by running jar --version in your terminal. This is required for building and installing the extension.

Building the Extension

mcp-server FAQ

Do I need Burp Suite already?
Yes. This runs as an extension inside Burp, so it only works while Burp is open.
Which apps can connect to it?
Claude Desktop is configured automatically by the built-in installer. Any other MCP client can connect to the local address Burp listens on.
How hard is setup?
You build the extension yourself with Java and Gradle, load the resulting file in Burp's Extensions tab, then run the installer. Expect a developer-level setup.
Can I use this to let my assistant change Burp's settings?
Yes, but only if you tick the box that enables configuration-editing tools. It is switched off by default.
Does it need an account or a paid key?
No. Everything runs locally between Burp and your client.
Is it official?
Yes. It is published by PortSwigger, the company that makes Burp Suite.
What if my client only supports command-launched servers?
The extension ships with a small proxy you can point at Burp, so those clients still work.