Burp Suite for AI Agent
Server Configuration
Describes the environment variables required to run the server.
| Name | Required | Description | Default |
|---|---|---|---|
| PORT | No | Port for the MCP server (customizable via --port) | 9999 |
Capabilities
Features and capabilities supported by this server
| Capability | Details |
|---|---|
| tools | {
"listChanged": true
} |
Tools
Functions exposed to the LLM to take actions
| Name | Description |
|---|---|
| burp_statusA | Show Burp bridge connection status and store statistics (requests, tasks, issues captured). Call first to confirm bridge is running. |
| burp_requestsA | List recent HTTP requests captured from Burp (most-recent first). Returns id, method, url, and status for each captured request. |
| burp_request_detailA | Fetch full details for one captured request: headers, request body, and response body (when available). Pass the id from burp_requests. |
| burp_endpointsA | List unique endpoints (METHOD + path) observed from Burp traffic, with query/body parameter names and hit counts. Helps identify attack surface. |
| burp_tasksA | List scan / plan / scope tasks queued from the Burp extension. Use these to decide what to analyze next. |
| burp_issuesA | List security findings/issues queued for Burp import. These are confirmed findings that can be imported as Burp Scanner issues. |
| burp_import_issueB | Submit a confirmed finding as a Burp-importable issue. The issue will appear in the bridge and can be pulled into Burp via the burpAI Burp plugin. |
| burp_snapshotA | Return the most recent session snapshot (cookies, localStorage, sessionStorage). Useful for constructing authenticated requests. |
| burp_send_to_burpA | Queue an action for execution in Burp Suite. The next time the Burp plugin polls, it will execute the action. Supports: send_to_repeater (open Repeater tab with a request), add_scan_issue (add scan issue to Burp), console_log (write to Burp output tab). |
| burp_outbound_statusA | List pending outbound actions queued for the Burp plugin to execute. Actions remain here until the Burp plugin polls and drains them. |
| burp_clearA | Clear all captured requests, endpoints, tasks, and issues from the bridge store. |
Prompts
Interactive templates invoked by user choice
| Name | Description |
|---|---|
No prompts | |
Resources
Contextual data attached and managed by the client
| Name | Description |
|---|---|
No resources | |
Latest Blog Posts
- Who's Calling? MCP Hosts Are an Identity Blind Spot (And the Spec Knows It)By Om-Shree-0709 on .mcpAgent IdentityOAuth 2.1
- Your AI Chatbot Just Exposed Your CEO's Salary to an InternBy Om-Shree-0709 on .Agent IdentityMCP SecurityOAuth Delegation
- Why MCP Servers Need Execution Sandboxing (And Why Your Current Stack Isn't Enough)By Om-Shree-0709 on .Agentic AiPrompt InjectionWebAssembly
MCP directory API
We provide all the information about MCP servers via our MCP API.
curl -X GET 'https://glama.ai/api/mcp/v1/servers/whoismemas/burpsuite-for-ai-agent'
If you have feedback or need assistance with the MCP directory API, please join our Discord server