# burp-mcp

Burp MCP Server Extension

- **Kind:** MCP server
- **Owner:** PortSwigger
- **Source:** https://github.com/PortSwigger/mcp-server
- **Version:** 1.3.0
- **Runtime:** jvm
- **License:** GPL-3.0
- **Pinned commit:** `642e6fa31c63db3886a353fcd7ed62037e0ceed5`
- **Page:** https://forefy.com/mcps/620a94c4-a5da-58f9-b0f6-c6c07756cd2c
- **API (JSON):** https://forefy.com/api/asr/mcps/620a94c4-a5da-58f9-b0f6-c6c07756cd2c

## Install

Ask your agent: `Install the burp-mcp MCP server securely from: https://forefy.com/mcps/620a94c4-a5da-58f9-b0f6-c6c07756cd2c and register it with my agent`

## Tools (17)

- `output_project_options`: Outputs current project-level configuration in JSON format. You can use this to determine the schema for available config options.
- `output_user_options`: Outputs current user-level configuration in JSON format. You can use this to determine the schema for available config options.
- `get_active_editor_contents`: Outputs the contents of the user's active message editor
- `send_http1_request`: Issues an HTTP/1.1 request and returns the response.
- `send_http2_request`: Issues an HTTP/2 request and returns the response. Do NOT pass headers to the body parameter.
- `url_encode`: URL encodes the input string
- `url_decode`: URL decodes the input string
- `base64_encode`: Base64 encodes the input string
- `base64_decode`: Base64 decodes the input string
- `generate_random_string`: Generates a random string of specified length and character set
- `set_project_options`: Sets project-level configuration in JSON format. This will be merged with existing configuration. Make sure to export before doing this, so you know what the s…
- `set_user_options`: Sets user-level configuration in JSON format. This will be merged with existing configuration. Make sure to export before doing this, so you know what the sche…
- `generate_collaborator_payload`: Generates a Burp Collaborator payload URL for out-of-band (OOB) testing.
- `get_collaborator_interactions`: Polls Burp Collaborator for out-of-band interactions (DNS, HTTP, SMTP).
- `set_task_execution_engine_state`: Sets the state of Burp's task execution engine (paused or unpaused)
- `set_proxy_intercept_state`: Enables or disables Burp Proxy Intercept
- `set_active_editor_contents`: Sets the content of the user's active message editor