Best PortSwigger MCP Servers
PortSwigger is a cybersecurity company known for creating Burp Suite, a leading web vulnerability scanner and manual testing tool used by security professionals for web application security assessments.
Why this server?
Supports importing training data from PortSwigger labs to enhance AI-powered pattern matching and exploit detection capabilities.
AlicenseBqualityCmaintenanceAI-powered bug bounty hunting platform that integrates security tools (OWASP ZAP, Caido, Burp Suite) for automated reconnaissance, vulnerability testing, JavaScript analysis, and finding management with PostgreSQL storage.4749MITWhy this server?
Provides programmatic access to BurpSuite's core functionalities, including intercepting and modifying HTTP/HTTPS traffic, performing active and passive security scanning, and logging HTTP traffic for vulnerability detection.
AlicenseNot gradedqualityDmaintenanceBurpSuite MCP Server: A powerful Model Context Protocol (MCP) server implementation for BurpSuite, providing programmatic access to Burp's core functionalities.88MITWhy this server?
Supports integration with Burp Collaborator for out-of-band vulnerability testing and provides educational resources from Web Security Academy.
AlicenseNot gradedqualityDmaintenanceProfessional security testing server with 50+ integrated tools for web application vulnerability scanning, reconnaissance, fuzzing, and API testing. Enables comprehensive bug bounty hunting workflows including subdomain enumeration, XSS/SQLi detection, and automated security assessments.1MITWhy this server?
Indexes PortSwigger Web Security Academy content into the corpus, providing searchable web-exploitation learning material.
AlicenseNot gradedqualityBmaintenanceA source-grounded cybersecurity knowledge & research MCP server that provides read-only search, exact citations, and a knowledge graph, designed to run alongside execution MCPs.10MITWhy this server?
Allows calling Burp MCP directly for Burp-managed HTTP traffic, supporting integration with PortSwigger Burp for security testing while Chrome MCP does not configure a proxy.
AlicenseNot gradedqualityCmaintenanceIt enables AI agents to connect to a live Chrome browser for automation and authorized security testing, including session-aware tab control, network capture and replay, DOM inspection, screenshots, and background workflows.MIT