aid: portswigger
name: PortSwigger
description: PortSwigger is the UK-based security research company behind Burp Suite,
  the industry-standard web and API security testing platform used by penetration
  testers and enterprise AppSec teams worldwide. The platform is available as Burp
  Suite Community Edition (free), Burp Suite Professional (manual testing toolkit),
  and Burp Suite DAST (enterprise dynamic application security testing). Developers
  can automate and integrate with Burp Suite DAST via a GraphQL API and a REST API,
  both secured with API key authentication. PortSwigger also provides the Montoya
  extension API for building custom Burp Suite extensions and an official MCP Server
  extension that bridges Burp Suite with AI clients such as Claude Desktop.
type: Index
image: https://kinlane-productions.s3.amazonaws.com/apis-json/apis-json-logo.jpg
tags:
- Security
- Web Security
- Penetration Testing
- DAST
- API Security
- Developer Tools
url: https://raw.githubusercontent.com/api-evangelist/portswigger/refs/heads/main/apis.yml
created: '2026-06-12'
modified: '2026-06-12'
specificationVersion: '0.19'
apis:
- aid: portswigger:dast-graphql-api
  name: Burp Suite DAST GraphQL API
  description: The primary API for integrating with Burp Suite DAST, recommended for
    all new integrations. Exposes the broadest range of functionality including managing
    sites, initiating and monitoring scans, retrieving vulnerability issues, configuring
    agents, and generating reports. Authenticated via API key in the Authorization
    header at the endpoint your-server/graphql/v1.
  humanURL: https://portswigger.net/burp/documentation/dast/user-guide/api-documentation/graphql-api
  baseURL: https://your-server/graphql/v1
  tags:
  - GraphQL
  - DAST
  - Security Scanning
  - Automation
  properties:
  - type: Documentation
    url: https://portswigger.net/burp/documentation/dast/user-guide/api-documentation/graphql-api
  - type: GraphQLSchema
    url: https://portswigger.net/burp/extensibility/enterprise/graphql-api/index.html
  - url: graphql/portswigger-graphql.md
    type: GraphQL
- aid: portswigger:dast-rest-api
  name: Burp Suite DAST REST API
  description: A REST API for Burp Suite DAST that offers compatibility for users
    familiar with the Burp Suite Professional API. Supports initiating scans from
    CI/CD systems and failing builds on issue detection. The API is self-documenting
    via interactive docs served at the server URL; API key authentication is required.
    GraphQL is recommended for new integrations as REST exposes a more limited feature
    set.
  humanURL: https://portswigger.net/burp/documentation/dast/user-guide/api-documentation/rest
  tags:
  - REST
  - DAST
  - CI/CD
  - Security Scanning
  properties:
  - type: Documentation
    url: https://portswigger.net/burp/documentation/dast/user-guide/api-documentation/rest
- aid: portswigger:professional-rest-api
  name: Burp Suite Professional REST API
  description: A local REST API built into Burp Suite Professional that allows external
    tools to interact with the running Burp Suite instance. Accessible at a configurable
    local service URL and API key combination. Supports API-key-based authentication
    and exposes interactive documentation via the running service endpoint. Intended
    for local automation and tool integration during manual penetration testing workflows.
  humanURL: https://portswigger.net/burp/documentation/desktop/settings/suite/rest-api
  tags:
  - REST
  - Professional
  - Penetration Testing
  - Local API
  properties:
  - type: Documentation
    url: https://portswigger.net/burp/documentation/desktop/settings/suite/rest-api
- aid: portswigger:montoya-extension-api
  name: Burp Suite Montoya Extension API
  description: The Java-based extension API for building custom Burp Suite extensions
    (BApps). The Montoya API is the current standard for extension development, superseding
    the legacy Wiener API. Extensions can be published to the BApp Store. The API
    is distributed via Maven and documented with full Javadoc reference; example implementations
    are available on GitHub.
  humanURL: https://portswigger.github.io/burp-extensions-montoya-api/javadoc/burp/api/montoya/MontoyaApi.html
  tags:
  - Java
  - Extension API
  - SDK
  - BApp Store
  properties:
  - type: Documentation
    url: https://portswigger.github.io/burp-extensions-montoya-api/javadoc/burp/api/montoya/MontoyaApi.html
  - type: GitHubRepository
    url: https://github.com/PortSwigger/burp-extensions-montoya-api
- aid: portswigger:mcp-server
  name: Burp Suite MCP Server
  description: An official Model Context Protocol (MCP) server extension for Burp
    Suite that bridges Burp Suite capabilities to AI clients such as Claude Desktop.
    Runs as an SSE server on localhost port 9876, exposing Burp Suite tools including
    proxy history access, HTTP request sending, Collaborator payload generation, Repeater
    tab creation, and configuration management. Includes an installer that automatically
    configures compatible AI clients.
  humanURL: https://portswigger.net/bappstore/9952290f04ed4f628e624d0aa9dccebc
  tags:
  - MCP
  - AI
  - Claude
  - Security Testing
  properties:
  - type: Documentation
    url: https://portswigger.net/bappstore/9952290f04ed4f628e624d0aa9dccebc
  - type: GitHubRepository
    url: https://github.com/PortSwigger/mcp-server
common:
- type: Website
  url: https://portswigger.net
- type: Documentation
  url: https://portswigger.net/burp/documentation
- type: GitHubOrganization
  url: https://github.com/portswigger
- type: LinkedIn
  url: https://www.linkedin.com/company/portswigger
- type: Blog
  url: https://portswigger.net/blog
- type: Pricing
  url: https://portswigger.net/pricing
- type: X
  url: https://twitter.com/PortSwigger
- type: Releases
  url: https://portswigger.net/burp/releases
- type: Plans
  url: plans/portswigger-plans-pricing.yml
- type: RateLimits
  url: rate-limits/portswigger-rate-limits.yml
- type: FinOps
  url: finops/portswigger-finops.yml
maintainers:
- FN: Kin Lane
  email: kin@apievangelist.com