Model Context Protocol server for Burp Suite, providing tools to interact with Burp's security testing capabilities including proxy, scanner, cookies, HTTP requests, and sitegraph indexing
Critical gaps across all dimensions. Tool definitions are inferred from test files rather than explicit registration code. No input schemas visible in source, only parameter names and types listed in test assertions. Descriptions are present but generic (10-50 chars), lacking LLM-optimized guidance on WHEN to use each tool or what happens. Parameters lack type constraints (enums, ranges, formats). No output schemas documented. Error handling and recovery guidance absent. This server does not meet production quality baselines.
Run BCheck tests
Read cookies from the cookie jar
Get content from Burp editor
Patch content in Burp editor
Renew editor content
Restart Burp Suite
Clear logger history
Read logger history entries
Tool definitions inferred from test code, not explicit registration. No actual tool registration code visible in source, only test assertions. Per HARD SCORING RULE, caps all tools at 50 maximum.
No input schemas visible in source code. Parameter definitions exist only as test assertions (e.g., 'page', 'url_filter'), not as JSON Schema with type, format, or constraint declarations. Per HARD SCORING RULE, schema score must be 0 when no schema is visible.
| Scored | Grade | Overall | Spec posture | Rubric |
|---|---|---|---|---|
| 2026-09-23 | F | 39 | 2026-07-28+ | v2 |
Read organizer entries
Write organizer entries
Read proxy history with filtering and pagination
Update scanner issue status
Read scanner issues with filtering and pagination
Read sitemap entries with filtering and pagination
Echo bytes for testing transport layer
Descriptions are generic and under 50 characters for most tools (e.g., 'Read proxy history with filtering and pagination' = 50 chars). Current descriptions lack guidance on when to call each tool vs. similar ones (e.g., proxy.read vs. sitemap.read).
No output schemas documented. LLMs cannot plan downstream tool calls or extract required fields (e.g., does proxy.read return request_id, response_id, timestamp?). Pagination tools (proxy.read, sitemap.read, scanner.read, logger.read, organizer.read) do not document total_count, next_cursor, or result structure.
Destructive/irreversible operations (lifecycle.restart, logger.clear, editor.patch, editor.renew, scanner.issues.update) lack confirmation or dry-run support. No error recovery guidance. LLMs cannot distinguish retryable from fatal errors.