BurpMCP
A community Burp Suite extension that starts an MCP server on localhost port 8181 over SSE so an AI client can help with manual web testing.
What it does
A community Burp Suite extension that starts an MCP server on localhost port 8181 over SSE so an AI client can help with manual web testing. The tester right-clicks requests to save them in the extension, with notes for context; the client can then fetch them, send new HTTP/1.1 and HTTP/2 requests, and resend saved requests with regex replacements, a Repeater-like loop for the model. It can also create Collaborator payloads and read interactions for out-of-band tests. Sent requests and all MCP messages are logged in the extension's tabs. Claude Desktop needs the included stdio bridge script with the Python mcp package; Cline and Dive connect over SSE.
Capabilities
- Retrieve requests the tester saved in Burp, with notes
- Send new HTTP/1.1 and HTTP/2 requests
- Resend saved requests with regex replacements
- Generate Collaborator payloads and read interactions
Install
- Add this to Cline's configuration:
{ "mcpServers": { "burpmcp": { "autoApprove": [], "disabled": false, "timeout": 30, "url": "http://localhost:8181/mcp/sse", "transportType": "sse" } } }
From the project's documentation · Add to a config file with the config builder
Details
| Fact | Value | Source |
|---|---|---|
| Type | MCP server | |
| Tool | Burp Suite | |
| Publisher | swgee | source |
| Official status | Community (not published by the tool's vendor) | source |
| Connection | Local (runs on your computer) | source |
| Can change data | Yes | source |
| Needs an API key or sign-in | Not stated in its documentation | |
| Platforms | Not stated in its documentation | |
| AI clients | Claude Desktop, Cline | source |
| Licence | MIT | source |
| Pricing | Not stated in its documentation | |
| Activity | Last commit Jan 21, 202657 GitHub starsDownload data not available (not on npm or PyPI) | source |
| Links | Repository |
Sources
- GitHub repositorygithub.com/swgee/burpmcp · Backs: AI clients, Can change data, Connection, Official status, Publisher, Activity, LicenceNov 11, 2026
- Licence file (LICENSE.md)github.com/swgee/burpmcp · Backs: LicenceNov 12, 2026
- GitHub API recordgithub.com/swgee/BurpMCPNov 10, 2026