Burp Suite for AI Agent
Two-way Burp Suite MCP bridge enabling AI agents to capture traffic, analyze endpoints, queue scans, and send findings back to Burp.
Caution. Specific findings reduced this grade. They are listed on the page. Grades reflect the full trust pyramid: code, verification depth, and reputation. New projects cap at C until adoption is earned.
How we verified
Verified is a snapshot. Live keeps it current, and builds your track record.
⚡ Connect GitHub → continuous verification on every pushwhy connect →Who stands behind it
whoismemas
Source: Glama
Claim it to get a verified publisher badge, a free copy of our full audit findings, and direct contact for any high-priority issues we find. Or connect your repo for our deepest verification, Live Monitored: read-only, revoke anytime. What we access →
Install from
The grade above is for the source repository. Registries can serve a different version, so we mark the ones we were not able to read.
These names and descriptions are the publisher's own, read from the source code. We print them as written. Our assessment is the findings above, not this list.
burp_statusShow Burp bridge connection status and store statistics (requests, tasks, issues captured). Call first to confirm bridge is running.
burp_requestsList recent HTTP requests captured from Burp (most-recent first). Returns id, method, url, and status for each captured request.
burp_request_detailFetch full details for one captured request: headers, request body, and response body (when available). Pass the id from burp_requests.
burp_endpointsList unique endpoints (METHOD + path) observed from Burp traffic, with query/body parameter names and hit counts. Helps identify attack surface.
burp_tasksList scan / plan / scope tasks queued from the Burp extension. Use these to decide what to analyze next.
burp_issuesList security findings/issues queued for Burp import. These are confirmed findings that can be imported as Burp Scanner issues.
burp_import_issueSubmit a confirmed finding as a Burp-importable issue. The issue will appear in the bridge and can be pulled into Burp via the burpAI Burp plugin.
burp_snapshotReturn the most recent session snapshot (cookies, localStorage, sessionStorage). Useful for constructing authenticated requests.
burp_send_to_burpQueue an action for execution in Burp Suite. The next time the Burp plugin polls, it will execute the action. Supports: send_to_repeater (open Repeater tab with a request), add_scan_issue (add scan issue to Burp), console_log (write to Burp output tab).
burp_replayModify a captured request and send it to Burp Repeater. Agent specifies which parameter to inject — the modified request opens in Burp Repeater where Burp executes the HTTP call and the response auto-forwards back to the bridge.
burp_outbound_statusList pending outbound actions queued for the Burp plugin to execute. Actions remain here until the Burp plugin polls and drains them.
burp_clearClear all captured requests, endpoints, tasks, and issues from the bridge store.
burp_scan_urlRun nuclei scan against a single URL. Returns findings with severity, name, and matched details. High/Critical findings are auto-imported as Burp issues.
burp_scan_bulkRun nuclei scan against all unique endpoints from captured traffic. Capped at 25 URLs to avoid excessive load.
burp_scan_resultsList previous nuclei scan runs with finding counts. Use burp_issues to see auto-imported findings.
burp_scan_import_allManually import all nuclei findings from a specific scan as Burp issues. By default, High/Critical findings are auto-imported; use this for lower severity findings.
Disclosed vulnerabilities in this server's declared npm dependencies (via OSV). Whether each is reachable depends on the installed versions.
@modelcontextprotocol/sdk has cross-client data leak via shared server/transport instance reuse
Anthropic's MCP TypeScript SDK has a ReDoS vulnerability
Model Context Protocol (MCP) TypeScript SDK does not enable DNS rebinding protection by default
Tool annotations
No tools have read-only/destructive annotations
Add readOnlyHint or destructiveHint annotations to every tool so hosts can warn users before invoking.
All four hints declared on every tool
16/16 tools missing one or more hints — burp_status (missing: readOnlyHint, destructiveHint, idempotentHint, openWorldHint); burp_requests (missing: readOnlyHint, destructiveHint, idempotentHint, openWorldHint); burp_request_detail (missing: readOnlyHint, destructiveHint, idempotentHint, openWorldHint), +13 more. OpenAI's directory rejects tools where any of the four hints are missing or non-boolean.
For every tool, set all four hints (readOnlyHint, destructiveHint, idempotentHint, openWorldHint) to explicit true/false values that match the handler’s actual behaviour.
Tool inputs are validated
11/16 tool handlers declare input schemas (69%)
Declare an inputSchema with zod/joi/yup on every tool definition.
Tool handlers catch errors
Only 3/16 tool handlers wrap calls in try/catch (19%)
Wrap each tool handler body in try/catch and return a structured error response.
Tests exist
No test files found
Add tests that exercise each declared tool.
Production dependencies are patched
0 critical, 3 high severity in production deps — @modelcontextprotocol/sdk@1.16.0 (high), @modelcontextprotocol/sdk@1.16.0 (high)
Run npm audit fix, or upgrade the affected packages to a non-vulnerable version.
Claim the listing to review these findings one by one and send us a correction where you disagree, straight to the team. Claiming also means we tell you when the grade moves, and reach you first if we find anything urgent.
[](https://m8ven.ai/mcp/whoismemas/burpsuite-for-ai-agent)?variant=verified from the URL.Vetting this one by hand? Tool Check is an MCP that scores other MCPs. Add it once and ask Claude, ChatGPT, or any MCP client to grade a server, surface CVEs, check the publisher, and suggest safer alternatives — before you install.
https://m8ven.ai/api/mcp/tool-check