burp-mcp-agents
Verified Safeby six2dez
Overview
Connects Burp Suite MCP Server to AI backends (Codex, Gemini, Ollama, LM Studio) for assisted, non-destructive vulnerability analysis using real Burp traffic.
Installation
python3 lmstudio/lmstudio_mcp_agent.py llama-3.1-8b-instructEnvironment Variables
- OLLAMA_HOST
Security Notes
The system is explicitly designed for local, trusted use and warns against exposing the Caddy proxy (listening on 127.0.0.1:19876) externally. All direct agent-to-Burp/LLM communication components bind to localhost by default. Cloud backends (Codex, Gemini) will transmit prompts and tool call details to their respective external APIs, but the raw Burp traffic is processed locally by the agents before being summarized for the LLM. The LM Studio default API key 'lm-studio' is a placeholder for a local server and not a sensitive secret. No 'eval' or obvious obfuscation detected.
Similar Servers
VibeShift
VibeShift is an intelligent security agent that integrates with AI coding assistants to analyze AI-generated code for vulnerabilities, suggest remediations, and facilitate web test recording, crawling, and execution.
pentestMCP
This MCP server enables AI agents to perform automated and interactive penetration testing tasks by exposing a suite of security assessment utilities as callable tools.
mcp-pentest
An AI-driven middleware to orchestrate and manage penetration testing tools and engagements.
VulneraMCP
An AI-powered platform for automated security testing, vulnerability research, and bug bounty hunting.