Burp Suite MCP Server Extension

by PortSwigger

961 stars

1.6k downloads

Not rated

GitHub

Developer Tools

About

Integrate Burp Suite with AI clients using the Model Context Protocol (MCP).

Details

Author: PortSwigger
GitHub stars: 961
Downloads: 1,588
Categories: Developer Tools

Setting up with Highlight

This MCP is not yet compatible with Highlight’s one-click setup. However, you can still use it with Highlight by following these steps:

Download and install Highlight from highlightai.com/download
Navigate to the plugins tab and select "Add Custom Plugin"
Configure the plugin with the settings below

Plugin Name Burp Suite MCP Server Extension

Command (node, npx, python, etc.)

Please refer to the README for specific instructions on how to obtain API keys or other required environment variables.
Enable "Start Automatically" if you want the plugin to start when Highlight launches

Setting up with Cursor

Open Cursor's settings
Navigate to the MCP section
Click "Add new Global MCP server"
Copy and paste the configuration below based on your operating system

JSON

{
    "mcpServers": {
        "burp suite mcp server extension": {
            "burp": {
                "command": "<path to Java executable packaged with Burp>",
                "args": [
                    "-jar",
                    "/path/to/mcp/proxy/jar/mcp-proxy-all.jar",
                    "--sse-url",
                    "<your Burp MCP server URL configured in the extension>"
                ]
            }
        }
    }
}

JSON

{
    "mcpServers": {
        "burp suite mcp server extension": {
            "burp": {
                "command": "<path to Java executable packaged with Burp>",
                "args": [
                    "-jar",
                    "/path/to/mcp/proxy/jar/mcp-proxy-all.jar",
                    "--sse-url",
                    "<your Burp MCP server URL configured in the extension>"
                ]
            }
        }
    }
}

JSON

{
    "mcpServers": {
        "burp suite mcp server extension": {
            "burp": {
                "command": "<path to Java executable packaged with Burp>",
                "args": [
                    "-jar",
                    "/path/to/mcp/proxy/jar/mcp-proxy-all.jar",
                    "--sse-url",
                    "<your Burp MCP server URL configured in the extension>"
                ]
            }
        }
    }
}

Setting up with Claude Desktop

Open Claude Desktop's settings
Go to the Integrations tab
Click "Add MCP Server"
Use the configuration below based on your operating system

Note: Make sure Claude Desktop is running before attempting to connect.

JSON

{
    "mcpServers": {
        "burp suite mcp server extension": {
            "burp": {
                "command": "<path to Java executable packaged with Burp>",
                "args": [
                    "-jar",
                    "/path/to/mcp/proxy/jar/mcp-proxy-all.jar",
                    "--sse-url",
                    "<your Burp MCP server URL configured in the extension>"
                ]
            }
        }
    }
}

JSON

{
    "mcpServers": {
        "burp suite mcp server extension": {
            "burp": {
                "command": "<path to Java executable packaged with Burp>",
                "args": [
                    "-jar",
                    "/path/to/mcp/proxy/jar/mcp-proxy-all.jar",
                    "--sse-url",
                    "<your Burp MCP server URL configured in the extension>"
                ]
            }
        }
    }
}

JSON

{
    "mcpServers": {
        "burp suite mcp server extension": {
            "burp": {
                "command": "<path to Java executable packaged with Burp>",
                "args": [
                    "-jar",
                    "/path/to/mcp/proxy/jar/mcp-proxy-all.jar",
                    "--sse-url",
                    "<your Burp MCP server URL configured in the extension>"
                ]
            }
        }
    }
}

Setting up with Windsurf

Open Windsurf's preferences
Go to the Integrations section
Click "Add MCP Integration"
Use the configuration below based on your operating system

JSON

{
    "mcpServers": {
        "burp suite mcp server extension": {
            "burp": {
                "command": "<path to Java executable packaged with Burp>",
                "args": [
                    "-jar",
                    "/path/to/mcp/proxy/jar/mcp-proxy-all.jar",
                    "--sse-url",
                    "<your Burp MCP server URL configured in the extension>"
                ]
            }
        }
    }
}

JSON

{
    "mcpServers": {
        "burp suite mcp server extension": {
            "burp": {
                "command": "<path to Java executable packaged with Burp>",
                "args": [
                    "-jar",
                    "/path/to/mcp/proxy/jar/mcp-proxy-all.jar",
                    "--sse-url",
                    "<your Burp MCP server URL configured in the extension>"
                ]
            }
        }
    }
}

JSON

{
    "mcpServers": {
        "burp suite mcp server extension": {
            "burp": {
                "command": "<path to Java executable packaged with Burp>",
                "args": [
                    "-jar",
                    "/path/to/mcp/proxy/jar/mcp-proxy-all.jar",
                    "--sse-url",
                    "<your Burp MCP server URL configured in the extension>"
                ]
            }
        }
    }
}

Setting up with Cline

Open Cline's settings
Navigate to the Integrations section
Click "Add MCP Server"
Copy and paste the configuration below based on your operating system

Note: Make sure to restart Cline after adding the configuration.

JSON

{
    "mcpServers": {
        "burp suite mcp server extension": {
            "burp": {
                "command": "<path to Java executable packaged with Burp>",
                "args": [
                    "-jar",
                    "/path/to/mcp/proxy/jar/mcp-proxy-all.jar",
                    "--sse-url",
                    "<your Burp MCP server URL configured in the extension>"
                ]
            }
        }
    }
}

JSON

{
    "mcpServers": {
        "burp suite mcp server extension": {
            "burp": {
                "command": "<path to Java executable packaged with Burp>",
                "args": [
                    "-jar",
                    "/path/to/mcp/proxy/jar/mcp-proxy-all.jar",
                    "--sse-url",
                    "<your Burp MCP server URL configured in the extension>"
                ]
            }
        }
    }
}

JSON

{
    "mcpServers": {
        "burp suite mcp server extension": {
            "burp": {
                "command": "<path to Java executable packaged with Burp>",
                "args": [
                    "-jar",
                    "/path/to/mcp/proxy/jar/mcp-proxy-all.jar",
                    "--sse-url",
                    "<your Burp MCP server URL configured in the extension>"
                ]
            }
        }
    }
}

Setting up with Goose

Open Goose's preferences
Go to the Integrations tab
Select "MCP Servers"
Click "Add New Server"
Use the configuration below based on your operating system

JSON

{
    "mcpServers": {
        "burp suite mcp server extension": {
            "burp": {
                "command": "<path to Java executable packaged with Burp>",
                "args": [
                    "-jar",
                    "/path/to/mcp/proxy/jar/mcp-proxy-all.jar",
                    "--sse-url",
                    "<your Burp MCP server URL configured in the extension>"
                ]
            }
        }
    }
}

JSON

{
    "mcpServers": {
        "burp suite mcp server extension": {
            "burp": {
                "command": "<path to Java executable packaged with Burp>",
                "args": [
                    "-jar",
                    "/path/to/mcp/proxy/jar/mcp-proxy-all.jar",
                    "--sse-url",
                    "<your Burp MCP server URL configured in the extension>"
                ]
            }
        }
    }
}

JSON

{
    "mcpServers": {
        "burp suite mcp server extension": {
            "burp": {
                "command": "<path to Java executable packaged with Burp>",
                "args": [
                    "-jar",
                    "/path/to/mcp/proxy/jar/mcp-proxy-all.jar",
                    "--sse-url",
                    "<your Burp MCP server URL configured in the extension>"
                ]
            }
        }
    }
}

From the repository

Build the JAR with ./gradlew embedProxyJar, load it into Burp Suite as a Java extension, then configure the MCP server in the MCP tab (host/port, enable checkbox). Configure your MCP client—for Claude Desktop, run the built-in installer or manually edit claude_desktop_config.json to point to the stdio proxy server. Restart Claude Desktop while Burp Suite is running with the extension.

Claude Desktop / Cursor

Paste into your MCP client config file to install this server.

{
    "mcpServers": {
        "burp suite mcp server extension": {
            "burp": {
                "command": "<path to Java executable packaged with Burp>",
                "args": [
                    "-jar",
                    "/path/to/mcp/proxy/jar/mcp-proxy-all.jar",
                    "--sse-url",
                    "<your Burp MCP server URL configured in the extension>"
                ]
            }
        }
    }
}

McpServers

{
    "burp": {
        "command": "<path to Java executable packaged with Burp>",
        "args": [
            "-jar",
            "/path/to/mcp/proxy/jar/mcp-proxy-all.jar",
            "--sse-url",
            "<your Burp MCP server URL configured in the extension>"
        ]
    }
}

Burp Suite MCP Server Extension

Overview

Integrate Burp Suite with AI Clients using the Model Context Protocol (MCP).

For more information about the protocol visit: modelcontextprotocol.io

Features

- Connect Burp Suite to AI clients through MCP
- Automatic installation for Claude Desktop
- Comes with packaged Stdio MCP proxy server

Usage

- Install the extension in Burp Suite
- Configure your Burp MCP server in the extension settings
- Configure your MCP client to use the Burp SSE MCP server or stdio proxy
- Interact with Burp through your client!

Installation

Prerequisites

Ensure that the following prerequisites are met before building and installing the extension:

1. Java: Java must be installed and available in your system's PATH. You can verify this by running java --version in your terminal.
2. jar Command: The jar command must be executable and available in your system's PATH. You can verify this by running jar --version in your terminal. This is required for building and installing the extension.

Building the Extension

1. Clone the Repository: Obtain the source code for the MCP Server Extension.

   git clone https://github.com/PortSwigger/mcp-server.git

2. Navigate to the Project Directory: Move into the project's root directory.

   cd mcp-server

3. Build the JAR File: Use Gradle to build the extension.

   ./gradlew embedProxyJar

This command compiles the source code and packages it into a JAR file located in build/libs/burp-mcp-all.jar.

Loading the Extension into Burp Suite

1. Open Burp Suite: Launch your Burp Suite application.
2. Access the Extensions Tab: Navigate to the Extensions tab.
3. Add the Extension:
- Click on Add.
- Set Extension Type to Java.
- Click Select file ... and choose the JAR file built in the previous step.
- Click Next to load the extension.

Upon successful loading, the MCP Server Extension will be active within Burp Suite.

Configuration

Configuring the Extension

Configuration for the extension is done through the Burp Suite UI in the MCP tab. - Toggle the MCP Server: The Enabled checkbox controls whether the MCP server is active. - Enable config editing: The Enable tools that can edit your config checkbox allows the MCP server to expose tools which can edit Burp configuration files. - Advanced options: You can configure the port and host for the MCP server. By default, it listens on http://127.0.0.1:9876.

Claude Desktop Client

To fully utilize the MCP Server Extension with Claude, you need to configure your Claude client settings appropriately.
The extension has an installer which will automatically configure the client settings for you.

1. Currently, Claude Desktop only support STDIO MCP Servers
for the service it needs.
This approach isn't ideal for desktop apps like Burp, so instead, Claude will start a proxy server that points to the
Burp instance,
which hosts a web server at a known port (localhost:9876).

2. Configure Claude to use the Burp MCP server
You can do this in one of two ways:

- Option 1: Run the installer from the extension
This will add the Burp MCP server to the Claude Desktop config.

- Option 2: Manually edit the config file
Open the file located at ~/Library/Application Support/Claude/claude_desktop_config.json,
and replace or update it with the following:

      {

        "mcpServers": {

          "burp": {

            "command": "<path to Java executable packaged with Burp>",

            "args": [

                "-jar",

                "/path/to/mcp/proxy/jar/mcp-proxy-all.jar",

                "--sse-url",

                "<your Burp MCP server URL configured in the extension>"

            ]

          }

        }

      }

3. Restart Claude Desktop - assuming Burp is running with the extension loaded.

Manual installations

If you want to install the MCP server manually you can either use the extension's SSE server directly or the packaged Stdio proxy server.

SSE MCP Server

In order to use the SSE server directly you can just provide the url for the server in your client's configuration. Depending on your client and your configuration in the extension this may be with or without the /sse path.

http://127.0.0.1:9876

http://127.0.0.1:9876/sse

Stdio MCP Proxy Server

The source code for the proxy server can be found here: MCP Proxy Server

In order to support MCP Clients which only support Stdio MCP Servers, the extension comes packaged with a proxy server for
passing requests to the SSE MCP server extension.

If you want to use the Stdio proxy server you can use the extension's installer option to extract the proxy server jar.
Once you have the jar you can add the following command and args to your client configuration:

/path/to/packaged/burp/java -jar /path/to/proxy/jar/mcp-proxy-all.jar --sse-url http://127.0.0.1:9876

Creating / modifying tools

Tools are defined in src/main/kotlin/net/portswigger/mcp/tools/Tools.kt. To define new tools, create a new serializable
data class with the required parameters which will come from the LLM.

The tool name is auto-derived from its parameters data class. A description is also needed for the LLM. You can return
a string (or richer PromptMessageContents) to provide data back to the LLM.

Extend the Paginated interface to add auto-pagination support.

No reviews yet — be the first

Use Google, GitHub, or an email account so ratings stay tied to real people.

Email sign in

No reviews posted yet.

About

Details

Jump to

Setting up with Highlight

From the repository

Claude Desktop / Cursor

McpServers

Burp Suite MCP Server Extension

Overview

Features

Usage

Installation

Prerequisites

Building the Extension

Loading the Extension into Burp Suite

Configuration

Configuring the Extension

Claude Desktop Client

Manual installations

SSE MCP Server

Stdio MCP Proxy Server

Creating / modifying tools

Install

More like this

Sentry

Github

Git

GitLab

Context 7

Playwright