Burp Suite

listing.by

Drive Burp Suite from AI clients through an extension that exposes Burp over MCP, with an SSE endpoint and a bundled stdio proxy.

state.local.long (state.local.title)

listing.install

listing.local.explain

java -jar mcp-proxy-all.jar --sse-url http://127.0.0.1:9876

listing.local.note

act.add_to a11y.new_tabact.add_to a11y.new_tab

listing.share.h

listing.share.p_local

mcp.tc/i/burp-suite

listing.about

A Burp Suite extension that exposes Burp to MCP clients. Once loaded, an AI assistant can work with Burp from a chat, for example proxy history, Repeater and scanner issues. An optional setting lets the server expose tools that edit Burp configuration.

The extension runs inside Burp and serves SSE at http://127.0.0.1:9876 by default. Host and port are set in the MCP tab. For clients that only support stdio, a packaged proxy jar forwards requests to the SSE server. The extension has an installer that configures Claude Desktop. Java is required. No API key is needed.

listing.can

  • Connect Burp Suite to MCP clients over SSE or a stdio proxy
  • Work with Burp from an AI assistant, including proxy history and Repeater
  • Review scanner issues from the chat
  • Optionally enable tools that edit Burp configuration
  • Install into Claude Desktop with the built-in installer

listing.tools

listing.notools.local

listing.prompts

  • Show the most recent requests in my Burp proxy history.

  • Send this request to Repeater and change the id parameter.

  • List the scanner issues Burp has found so far.

  • Summarize the high severity findings in this Burp project.

listing.setup.h

listing.setup.local

Claude Code

  1. Run this in a terminal, in your project folder:
claude mcp add --transport stdio burp-suite -- java -jar mcp-proxy-all.jar --sse-url http://127.0.0.1:9876
  1. Start Claude Code and type /mcp. burp-suite should show as connected.

Add --scope user to make it available in every project.

Claude Desktop

  1. Open Settings → Developer → Edit Config. It opens claude_desktop_config.json. Add:
claude_desktop_config.json
{
  "mcpServers": {
    "burp-suite": {
      "command": "java",
      "args": [
        "-jar",
        "mcp-proxy-all.jar",
        "--sse-url",
        "http://127.0.0.1:9876"
      ]
    }
  }
}
  1. Save the file and restart Claude Desktop.

The file lives in ~/Library/Application Support/Claude/ on macOS and %APPDATA%\Claude\ on Windows.

Cursor

Add to Cursor a11y.new_tab

Or add it by hand to ~/.cursor/mcp.json (all projects) or .cursor/mcp.json (this project):

mcp.json
{
  "mcpServers": {
    "burp-suite": {
      "command": "java",
      "args": [
        "-jar",
        "mcp-proxy-all.jar",
        "--sse-url",
        "http://127.0.0.1:9876"
      ]
    }
  }
}

VS Code

Install in VS Code a11y.new_tab

Or from a terminal:

code --add-mcp '{"name":"burp-suite","type":"stdio","command":"java","args":["-jar","mcp-proxy-all.jar","--sse-url","http://127.0.0.1:9876"]}'

Or commit it to the repo in .vscode/mcp.json:

.vscode/mcp.json
{
  "servers": {
    "burp-suite": {
      "type": "stdio",
      "command": "java",
      "args": [
        "-jar",
        "mcp-proxy-all.jar",
        "--sse-url",
        "http://127.0.0.1:9876"
      ]
    }
  }
}

Devin Desktop

  1. Add it to ~/.config/devin/mcp_config.json (macOS and Linux) or %APPDATA%\devin\mcp_config.json (Windows):
mcp_config.json
{
  "mcpServers": {
    "burp-suite": {
      "command": "java",
      "args": [
        "-jar",
        "mcp-proxy-all.jar",
        "--sse-url",
        "http://127.0.0.1:9876"
      ]
    }
  }
}
  1. Refresh the MCP server list in Cascade.

Devin Desktop is the new name for Windsurf.

Codex

codex mcp add burp-suite -- java -jar mcp-proxy-all.jar --sse-url http://127.0.0.1:9876

Or edit ~/.codex/config.toml directly:

config.toml
[mcp_servers.burp-suite]
command = "java"
args = ["-jar", "mcp-proxy-all.jar", "--sse-url", "http://127.0.0.1:9876"]

Gemini CLI

gemini mcp add burp-suite java -- -jar mcp-proxy-all.jar --sse-url http://127.0.0.1:9876

This adds it to the current project. Add -s user to use it everywhere.

Any client

Most clients that start local servers accept this shape:

{
  "mcpServers": {
    "burp-suite": {
      "command": "java",
      "args": [
        "-jar",
        "mcp-proxy-all.jar",
        "--sse-url",
        "http://127.0.0.1:9876"
      ]
    }
  }
}

Zed puts servers under context_servers in its settings, with the same command, args and env fields.

listing.faq

Can I paste mcp.tc/i/burp-suite into my MCP client?

No. Burp Suite runs on your own computer, started by your client, so it has no web address to connect to. The quick link is the page to share; the install command is java -jar mcp-proxy-all.jar --sse-url http://127.0.0.1:9876.

Does Burp Suite need an API key?

No. It doesn't declare any keys or environment variables. It runs with your user account's permissions, so check what its tools can reach.

Is Burp Suite a remote or a local server?

Local. Your client starts it as a process on your computer with java -jar mcp-proxy-all.jar --sse-url http://127.0.0.1:9876.

What can Burp Suite do?

You can connect Burp Suite to MCP clients over SSE or a stdio proxy, work with Burp from an AI assistant, including proxy history and Repeater and review scanner issues from the chat.

Which clients can use it?

Any client that starts local servers: Claude Code, Claude Desktop, Cursor, VS Code, Devin Desktop, Codex, Gemini CLI, Zed and others. claude.ai and ChatGPT only connect to remote servers.

Who wrote this page?

mcp.tc's robot read Burp Suite's public metadata (its package and repository pages), and an AI model drafted the text from it. A person reviews anything the checks can't confirm. The text can still be wrong, so if you spot a mistake, use Report this listing on this page.

listing.em.h

listing.em.lead_local listing.em.how

listing.em.badge

em.prev_lightem.prev_dark
Markdown
[![Burp Suite on mcp.tc](https://mcp.tc/i/burp-suite/badge.svg)](https://mcp.tc/i/burp-suite)
HTML
<a href="https://mcp.tc/i/burp-suite"><img src="https://mcp.tc/i/burp-suite/badge.svg" alt="Burp Suite on mcp.tc" height="20"></a>

listing.em.badge_note

listing.em.widget

HTML
<script src="https://mcp.tc/w/burp-suite.js" async></script>

listing.em.widget_note

iframe

HTML
<iframe src="https://mcp.tc/embed/burp-suite" title="Burp Suite on mcp.tc" width="420" height="200" loading="lazy" allow="clipboard-write" style="border:0;border-radius:8px;max-width:100%"></iframe>

listing.em.iframe_note

JSON

listing.em.json_local

https://mcp.tc/i/burp-suite.json

listing.em.fields

listing.related

listing.more_in

  • IDA Pro MCP

    mrexodia

    state.local.label (state.local.title)

    Reverse engineer binaries in IDA Pro: decompile, rename, comment and retype functions through your AI assistant.

    mcp.tc/i/ida-pro

  • CrowdStrike Falconvf.sr

    CrowdStrike

    state.local.label (state.local.title)

    Query CrowdStrike Falcon detections, hosts, threat intel, vulnerabilities and more from your AI assistant.

    mcp.tc/i/crowdstrike-falcon

  • Oktavf.sr

    Security & Compliance

    state.local.label (state.local.title)

    Manage Okta users, groups, applications, policies and system logs from your assistant using natural language.

    mcp.tc/i/okta

  • SonarQubevf.sr

    SonarSource

    state.local.label (state.local.title)

    Check code quality and security issues, quality gates and code snippets with SonarQube Server or SonarQube Cloud from your AI assistant.

    mcp.tc/i/sonarqube

  • Zscaler Zero Trust Exchange

    Zscaler

    state.local.label (state.local.title)

    Manage Zscaler Zero Trust Exchange services such as ZPA, ZIA, ZDX and ZCC through more than 400 tools, read-only by default.

    mcp.tc/i/zscaler-zero-trust-exchange

  • Black Duck Signal

    Black Duck

    state.local.label (state.local.title)

    Scan code changes or specific files for security vulnerabilities with Black Duck Signal AI analysis, from your coding assistant.

    mcp.tc/i/black-duck

listing.disclaimer_checked