1. Conduid
  2. Blockchain
  3. Burp MCP Lite
MCP server · Blockchain

Burp MCP Lite

by · github.com/0xdead4f/burp-mcp-lite

More Token Efficient Burpsuite MCP Server

Unclaimed blockchain
InstallView source
34Low

Scored 4 months ago · breakdown

About Burp MCP Lite

Burp MCP Lite is an MCP server published by 0xdead4f in the Blockchain category: more Token Efficient Burpsuite MCP Server.

The repository has 14 stars and 2 forks, with the last commit a month ago. Recent commit activity is the strongest signal that reported issues will get attention.

Install

From source
git clone https://github.com/0xdead4f/burp-mcp-lite

This server has no ConduID identity, so agent calls to it are not receipted. Pin the version you install and review the source before granting it credentials.

Tools (9)

collaborator_logPoll Collaborator and list DNS / HTTP / SMTP hits as a compact table. The raw capture is withheld until you ask with `detail=`. Filter with `payload=` and `type=`. Pro only.

Parameters not published.

collaborator_payloadMint Burp Collaborator payloads for OOB testing. `count=N` mints N in one call; `custom_data=` tags them (and appends a per-payload index when `count>1`, so a hit names the injection point that fired). Pro only.

Parameters not published.

endpointsDeduplicated method+host+path inventory with hit counts (from proxy history).

Parameters not published.

list_historyBrowse + filter proxy history with field projection. Compact text table by default.

Parameters not published.

matchPredicate over one entry — matched? + small evidence snippet. Never the whole body.

Parameters not published.

sitemapBrowse Burp's site map (spider + scanner + proxy). `mode="domains"` (default) is just the host inventory; `mode="entries" domain=…` lists endpoints under one host — `dedup=true` (default) groups by method+path with last-seen status/mime + hit count, `dedup=false` flat-lists method/status/path.

Parameters not published.

statsAggregates: by method, status class, top hosts.

Parameters not published.

view_requestView one request by id. Headers + cookies OFF unless asked. Auth values redacted.

Parameters not published.

view_responseView one response by id. `body="auto"` truncates >4 KB to `head:20`.

Parameters not published.

Ask AI

✦

Ask AI about Burp MCP Lite

Powered by Claude · Grounded in docs

I know everything about Burp MCP Lite. Ask me about installation, configuration, usage, or troubleshooting.

Security checks

6 checks have not been run yet.

Questions

About Burp MCP Lite

How do I install Burp MCP Lite?

No package has been published for this server, so install it from source: clone the repository and follow its README.

Is Burp MCP Lite safe to use with an AI agent?

Its trust score is 34 out of 100 (low). Conduid hasn't run static security checks on this repository yet, so review the source yourself before granting it credentials. It has no ConduID identity yet, so agent calls to it are not receipted.

Is Burp MCP Lite still maintained?

Yes — the last commit was a month ago. The repository has 14 stars and 2 forks.