Burp Suite MCP Server Extension

🚀 Burp Suite MCP Server Extension

This project integrates Burp Suite into AI clients through the Model Context Protocol (MCP). It allows seamless interaction between Burp Suite and AI tools, enhancing the efficiency and intelligence of security testing.

🚀 Quick Start

To quickly get started with the Burp Suite MCP Server Extension, follow these steps:

1. Install the extension in Burp Suite.
2. Configure your Burp MCP server in the extension settings.
3. Configure your MCP client to use the Burp SSE MCP server or stdio proxy.
4. Interact with Burp through the client!

✨ Features

• Connect Burp Suite with AI clients via MCP.
• Automatically install Claude Desktop.
• Comes with a packaged Stdio MCP proxy server.

📦 Installation

Build the Extension

1. Clone the repository: Get the source code of the MCP server extension.

git clone https://github.com/PortSwigger/mcp-server.git

2. Navigate to the project directory: Go to the root directory of the project.

cd burp-mcp

3. Build the JAR file: Use Gradle to build the extension.

./gradlew embedProxyJar

This command will compile the source code and package it into a JAR file located at build/libs/burp-mcp-all.jar.

Load the Extension into Burp Suite

1. Open Burp Suite: Launch your Burp Suite application.
2. Access the Extensions tab: Navigate to the Extensions tab.
3. Add the extension:
   • Click Add.
   • Set Extension Type to Java.
   • Click Select file ... and choose the JAR file built in the previous step.
   • Click Next to load the extension. After successful loading, the MCP server extension will be active in Burp Suite.

📚 Documentation

Configure the Extension

Configure the extension through the MCP tab in the Burp Suite UI.

• Enable the MCP server: The Enabled checkbox controls whether the MCP server is active.
• Enable configuration editing tools: The Enable tools that can edit your config checkbox allows the MCP server to expose tools that can edit the Burp configuration file.
• Advanced options: You can configure the port and host of the MCP server. By default, it listens on http://127.0.0.1:9876.

Claude Desktop Client

To fully utilize the MCP server extension with Claude, correctly configure your Claude client settings. The extension comes with an installer that can automatically configure the client settings for you.

1. Currently, Claude Desktop only supports the STDIO MCP server for the required services. This method is not ideal for desktop applications like Burp. Therefore, Claude will start a proxy server pointing to the running Burp instance, which hosts a web server on a known port (localhost:9876).
2. Configure Claude to use the Burp MCP server You can do this in one of two ways:

• Option 1: Run the installer from the extension This will add the Burp MCP server to the Claude Desktop configuration.
• Option 2: Manually edit the configuration file Open the file located at ~/Library/Application Support/Claude/claude_desktop_config.json and replace or update it with the following content:

{
    "tools": {
        "burp_mcp": {
            "type": "mcp",
            "description": "A tool that interacts with the Burp Suite MCP server.",
            "parameters": {}
        }
    },
    "llm": {
        "temperature": 0.7,
        "max_tokens": 2048
    }
}

Create / Modify Tools

Tools are defined in src/main/kotlin/net/portswigger/mcp/tools/Tools.kt. To define a new tool, create a new serializable data class that contains the required parameters from the LLM. The tool name is automatically derived from its parameter data class. A description for the LLM to use also needs to be provided. Extend the Paginated interface to add automatic pagination support.

For more information about the protocol, visit: modelcontextprotocol.io