Burp MCP v3.0.1

What's Changed

• feat: secure configurable gRPC and remote mTLS for v3.0.1 by @nguyenthdat in #20

Full Changelog: v3.0.0...v3.0.1

Burp MCP v3.0.0

What's Changed

• Feat/v3 native migration by @nguyenthdat in #2
• Release v3.0.0 by @nguyenthdat in #4
• Keep hosted CI independent of Burp Pro by @nguyenthdat in #14
• build(deps): bump github/codeql-action/upload-sarif from 3.37.8 to 4.37.8 by @dependabot[bot] in #11
• build(deps): bump the gradle-minor-patch group with 10 updates by @dependabot[bot] in #5
• Fix v3 release SBOM generation by @nguyenthdat in #15
• Upgrade CodeQL analysis actions atomically by @nguyenthdat in #16
• Upgrade CodeQL and keep OMP local-only by @nguyenthdat in #17
• Stage the generated release SBOM path by @nguyenthdat in #18
• Use current macOS Intel release runner by @nguyenthdat in #19

New Contributors

• @nguyenthdat made their first contribution in #2
• @dependabot[bot] made their first contribution in #11

Full Changelog: v2.0.0...v3.0.0

Burp MCP v2.0.0

Highlights

• Exposes 80+ Burp Suite tools through an MCP stdio bridge.
• Adds UTF-8-safe request handling, stable proxy history indices, and corrected Cookie Jar operations.
• Ships the Bun-native npm bridge and Java 25 Burp extension from one versioned release.
• Adds authenticated localhost transport, MIT licensing, dual-use disclosure, CI, provenance, and staged npm publishing.

Install

1. Download burp-mcp.jar from this release and load it in Burp Suite.
2. Configure your MCP client to run bunx @nguyenthdat/burpmcp after the npm stage is approved.

The npm package is staged by GitHub Actions and requires maintainer 2FA approval before becoming public.