Record · burp-suite-mMCP serverCosts not checkedRecord checked Sep 23, 2026

Burp Suite MCP Server

PortSwigger's official extension that connects Burp Suite to AI clients over MCP.

Visit Burp Suite MCP Server →View repository

Sources and review

Checked against public documentation on September 23, 2026. Suitability guidance is our editorial judgment; this is not a performance benchmark or an endorsement.

Repository and README

Best for

Security testers who want an MCP client to work alongside Burp Suite during authorized testing.

About Burp Suite MCP Server

The Burp Suite MCP Server extension from PortSwigger exposes Burp to MCP clients. The extension runs an SSE MCP server configured from its settings tab and ships a packaged stdio proxy for clients that need one, with automatic setup for Claude Desktop. The README builds it from source with Java.

Burp Suite MCP Server is listed in this index written primarily in Kotlin, with 1.3k stars on GitHub. Its latest recorded repository push was in October 2026; that is not an ASE editorial review date.

Before connecting: access and data

This record's specific permissions have not been reviewed by ASE. Read the publisher's documentation before copying setup or connecting.

List the accounts, files and services the enabled tools can read, change or execute. Check your actual credentials and discovered tools.
Use narrowly scoped credentials and read-only mode where supported. Review proposed writes before approving them; a generated configuration does not apply these limits for you.
Local launch is not local-only data processing. External services receive requests, and your client may pass tool results to its model provider. Check both destinations before sharing private data.
Keep keys and browser session files out of shared config, repositories and screenshots. Know how to disconnect the server and separately revoke its credentials or account sessions.

Read the setup guide →

For agent buildersMake your product part of the discovery.Explore advertising