MCP Application Security Toolbox

Example Use Cases

• 1

  Analyze and manipulate authenticated HTTP and WebSocket traffic collaboratively with a human operator.

• 2

  Perform exploratory security testing or validate specific vulnerability reports with guided workflows.

• 3

  Detect reflections, perform out-of-band interaction testing, and crawl web applications through proxy history.

Description

This MCP server enables collaborative security testing by combining human-driven UI interactions with agent-driven analysis and manipulation of authenticated traffic through a built-in or Burp proxy. It supports HTTP/1.1, HTTP/2, WebSocket interception, replay with mutation, reflection detection, out-of-band interaction testing, and crawling. The tool facilitates thorough and efficient security assessments by sharing state and workflows between the user and automated agents.