Burp Suite MCP Server
Drive Burp Suite from Claude to send requests, search proxy history and test web apps.
Officialby PortSwiggerRuns on your computerChecked October 18, 2026
PortSwigger's MCP Server extension exposes Burp Suite to Claude through a local server, so it can send HTTP requests, search proxy history, open Repeater tabs and pass requests to Intruder during a security test. It ships with a stdio proxy and a one-click installer for Claude Desktop, and an approval list controls which targets Claude may touch.
Who it is for
- Penetration testers
- Bug bounty hunters
- Application security engineers
Prompts to try
Once it is connected, ask in plain words. Claude decides when to use the server and asks before it changes anything important.
Look through the proxy history for API requests that include a numeric ID parameter and list them.Send this login request to Repeater with the password field left empty and tell me how the server responds.Find responses in the proxy history that leak stack traces or server version headers.How to connect it
In Claude Code
claude mcp add --transport sse burp http://127.0.0.1:9876
In the Claude desktop app
Use the installer in the extension's MCP tab, which adds the Burp stdio proxy to claude_desktop_config.json
Good to know
Install the MCP Server extension from the BApp Store and enable it in Burp's MCP tab first; it listens on http://127.0.0.1:9876. Only test systems you are allowed to test.
Unlock the setup steps
Free. Leave your email once to open the setup steps for all 150 servers, and get the best new connectors each month.
How we checked it
Checked the PortSwigger/mcp-server repo (GPL-3.0, last commit 2026-08) and the MCP Server listing in PortSwigger's BApp Store (version 1.3.0, updated May 2026, written by PortSwigger staff).