---

BurpMCP-Ultra is a native Kotlin Burp Suite extension with an embedded MCP (Model Context Protocol) server. It exposes Burp's Montoya API as 150 structured tools over a token-secured local SSE transport, so an AI agent can run proxy history analysis, active scans, fuzzing, race conditions, OOB testing, custom scan checks, and guided exploitation — all from natural language.

Why BurpMCP-Ultra?

	BurpMCP-Ultra	burp-ai-agent	PortSwigger Official
MCP Tools	150	53	12
Custom Scan Checks	BCheck + Script	–	–
Guided Injection Probe	SQLi / SSTI / LFI oracles	–	–
JWT Attacks	alg:none, RS→HS, crack	–	–
Access-Control Sweep	IDOR / privesc across identities	–	–
WebSocket Testing	Full lifecycle	–	–
Inline Fuzzer	3 modes (FUZZ / Marker / Offset)	–	–
Race Condition Testing	Single-packet attack	–	–
API Schema Import	OpenAPI / Swagger + $ref	–	–
Passive Intel Extraction	30+ patterns, entropy de-noised	–	–
Recon	JS endpoints, content/param discovery	–	–
Real-time Dashboard	Web + Swing	–	–
Hardened Localhost Security	Host + Origin + token, scope gate	–	–
Collaborator OOB	Full create / poll / correlate	Partial	Partial

Competitor counts are indicative, based on each project's public tool list.

---

Quick Start

1. Build

git clone https://github.com/Cy-S3c/BurpMCP-Ultra.git
cd BurpMCP-Ultra
./gradlew shadowJar

Output: build/libs/burpmcp-ultra-2.1.0.jar (~13 MB). A JDK 17–21 must be installed — see Building from Source. Pre-built JARs are on the Releases page.

2. Load into Burp

1. Burp Suite Pro → Extensions → Add
2. Select the JAR
3. The BurpMCP-Ultra tab appears with a green "Running" status and your connection token

3. Connect Claude Code

{
  "mcpServers": {
    "burp": {
      "type": "sse",
      "url": "http://127.0.0.1:9876/",
      "headers": {
        "Authorization": "Bearer PASTE_TOKEN_FROM_SERVER_TAB"
      }
    }
  }
}

Add to ~/.claude.json or your project's .mcp.json.

⚠️ The token is required, and the endpoint is the root path / — not /sse. Copy the token from the Server

... View full README on GitHub