What's Changed

• Batch SSE concurrency fix -- Throttle concurrent SSE calls to 4 to prevent overwhelming Burp's extension under batch workloads. Defer old session close during reconnect so in-flight goroutines aren't killed mid-request.
• Eliminate global state -- Refactored tools to inject dependencies instead of using package-level globals. Deduplicated shared logic across tools and hardened input validation.
• Chunked body cap -- Fixed body limit enforcement for chunked transfer-encoding responses.
• CI fix -- Replaced removed dominikh/staticcheck-action with direct go install, fixed staticcheck findings.
• Encode test rewrite -- Rewrote encode/decode tests for better coverage.
• README rewrite -- Flat sections, problem/solution comparison table, architecture diagrams.

Install

curl -fsSL https://raw.githubusercontent.com/c0tton-fluff/burp-mcp-server/main/install.sh | bash

Or download binaries below.

Fixed

• Duplicate response headers now merged correctly (multi-value headers like Set-Cookie)
• Proxy history JSON parsing handles Burp's HttpRequestResponse{} wrapper format
• SSE client reconnects gracefully on transient failures
• CLI body limit aligned to 10KB matching MCP server default (was 2KB, truncating responses)

Changed

• Default body limit is now 10KB across both MCP server and CLI
• Collapsible MCP Server and CLI sections in README

What's new

• Burp CLI - Standalone Python CLI for terminal use. Sends through Burp's proxy listener (port 8080) so requests appear in Proxy > HTTP History. Commands: send, raw, race, encode, decode. Zero dependencies beyond Python stdlib.
• Install script - Now supports TOOL=cli for CLI installation alongside MCP server
• Build script - Cross-compiles MCP server (Go) + packages CLI (Python) for darwin/linux amd64+arm64

Install

MCP server (default):

curl -fsSL https://raw.githubusercontent.com/c0tton-fluff/burp-mcp-server/main/install.sh | bash

CLI:

curl -fsSL https://raw.githubusercontent.com/c0tton-fluff/burp-mcp-server/main/install.sh | TOOL=cli bash