Burp Suite MCP Server

PortSwigger's official MCP server for Burp Suite. It runs as a Burp extension and exposes Burp's web security testing capabilities to MCP clients, so an agent can work with HTTP traffic and Burp tooling during authorized penetration tests and security reviews.

{
  "mcpServers": {
    "burp-suite": {
      "command": "npx",
      "args": []
    }
  }
}