Skip to main content
Glama
whoismemas

Burp Suite for AI Agent

by whoismemas

burp_send_to_burp

Queue HTTP requests to Burp Repeater, add scan issues with title and severity, or write log messages to Burp console.

Instructions

Queue an action for execution in Burp Suite. The next time the Burp plugin polls, it will execute the action. Supports: send_to_repeater (open Repeater tab with a request), add_scan_issue (add scan issue to Burp), console_log (write to Burp output tab).

Input Schema

TableJSON Schema
NameRequiredDescriptionDefault
urlNoFinding URL (required for add_scan_issue)
hostNoTarget host (required for send_to_repeater)
portNoTarget port (required for send_to_repeater, e.g. 443)
typeYesAction type: send_to_repeater opens a Repeater tab; add_scan_issue adds a Scanner issue; console_log writes to Burp output
httpsNoUse HTTPS (required for send_to_repeater)
titleNoIssue title (required for add_scan_issue)
detailNoFinding description (required for add_scan_issue)
messageNoMessage text (required for console_log)
severityNoSeverity: Critical, High, Medium, Low, Information
tab_nameNoTab caption in Repeater (optional, for send_to_repeater)
raw_request_b64NoBase64-encoded raw HTTP request (required for send_to_repeater)
Behavior3/5

Does the description disclose side effects, auth requirements, rate limits, or destructive behavior?

The description discloses the key behavioral trait of being asynchronous ('the next time the Burp plugin polls'), but does not cover failure handling, reversibility, or authorization requirements. Without annotations, this is a moderate disclosure but incomplete for a tool that queues actions.

Agents need to know what a tool does to the world before calling it. Descriptions should go beyond structured annotations to explain consequences.

Conciseness5/5

Is the description appropriately sized, front-loaded, and free of redundancy?

The description is concise with two sentences. The first sentence defines the core action, and the second enumerates supported actions with brief clarifications. No redundant information is present.

Shorter descriptions cost fewer tokens and are easier for agents to parse. Every sentence should earn its place.

Completeness3/5

Given the tool's complexity, does the description cover enough for an agent to succeed on first attempt?

Given the tool has 11 parameters, no output schema, and no annotations, the description is partially complete. It covers the purpose and action types well but omits details about return values, error behavior, or the queuing mechanism's side effects, leaving some gaps for an agent.

Complex tools with many parameters or behaviors need more documentation. Simple tools need less. This dimension scales expectations accordingly.

Parameters4/5

Does the description clarify parameter syntax, constraints, interactions, or defaults beyond what the schema provides?

With 100% schema coverage, the baseline is 3. The description adds value by explaining that certain parameters are required for specific action types (e.g., 'raw_request_b64' for send_to_repeater), which goes beyond the schema's individual property descriptions and clarifies conditional usage.

Input schemas describe structure but not intent. Descriptions should explain non-obvious parameter relationships and valid value ranges.

Purpose5/5

Does the description clearly state what the tool does and how it differs from similar tools?

The description clearly specifies that the tool queues an action for execution in Burp Suite, listing three distinct action types. It distinguishes itself from sibling tools like 'burp_status' (read-only) or 'burp_clear' (removal) by explicitly stating it is for sending actions.

Agents choose between tools based on descriptions. A clear purpose with a specific verb and resource helps agents select the right tool.

Usage Guidelines3/5

Does the description explain when to use this tool, when not to, or what alternatives exist?

The description explains when to use the tool (to queue actions in Burp) but does not provide explicit guidance on when not to use it or mention alternative tools for similar purposes. The context implies usage for sending actions, but lacks exclusions or comparisons.

Agents often have multiple tools that could apply. Explicit usage guidance like "use X instead of Y when Z" prevents misuse.

Install Server

Other Tools

Latest Blog Posts

MCP directory API

We provide all the information about MCP servers via our MCP API.

curl -X GET 'https://glama.ai/api/mcp/v1/servers/whoismemas/burpsuite-for-ai-agent'

If you have feedback or need assistance with the MCP directory API, please join our Discord server