BurpMCP-Ultra MCP Server
Cy-S3c/BurpMCP-Ultra
[](https://agentrank-ai.com/tool/Cy-S3c--BurpMCP-Ultra/?utm_source=badge&utm_medium=readme&utm_campaign=agentrank_badge) AI-powered MCP server for Burp Suite Professional — 149 tools across proxy, scanner, inline fuzzer, race conditions, guided injection, JWT/IDOR attacks, recon & OOB, with a real-time dashboard and hardened localhost security. Drive Burp from Claude Code or any MCP client.
claude mcp add agentrank -- npx -y agentrank-mcp-server Overview
Cy-S3c/BurpMCP-Ultra is a Kotlin MCP server licensed under MIT. AI-powered MCP server for Burp Suite Professional — 149 tools across proxy, scanner, inline fuzzer, race conditions, guided injection, JWT/IDOR attacks, recon & OOB, with a real-time dashboard and hardened localhost security. Drive Burp from Claude Code or any MCP client. Topics: bug-bounty, burpsuite, claude, kotlin, mcp, model-context-protocol, pentesting, security-tools.
Ranked #1129 out of 24846 indexed tools.
In the top 5% of all indexed tools.
Ecosystem
Score Breakdown
272 stars → growing community
Last commit 1mo ago → moderate activity
12/13 issues closed → responsive maintainer
2 contributors → solo project
No dependents → no downstream usage
Weights: Freshness 20% · Issue Health 20% · Dependents 22% · Stars 10% · Contributors 8% · How we score →
How to Improve
Matched Queries
From the README
<div align="center"> # BurpMCP-Ultra **The most powerful MCP server for Burp Suite Professional.** Drop a single JAR into Burp, connect Claude Code (or any MCP client), and drive every part of Burp Suite programmatically through AI agents. **150 Tools** • **8 Resources** • **17 Event Types** • Real-time Dashboard • Hardened Localhost Security [Quick Start](#quick-start) • [Tools](#tools) • [Features](#highlight-features) • [Security](#security-model) • [Dashboard](#web-dashboard) • [Setup Guides](#setup-guides) • [Contact](#contact--support) </div> --- BurpMCP-Ultra is a native **Kotlin** Burp Suite extension with an embedded **MCP (Model Context Protocol)** server. It exposes Burp's Montoya API as 150 structured tools over a token-secured local SSE transport, so an AI agent can run proxy history analysis, active scans, fuzzing, race conditions, OOB testing, custom scan checks, and guided exploitation — all from natural languageRead full README on GitHub →
Get the weekly AgentRank digest
Top movers, new tools, ecosystem insights — straight to your inbox.