Cursor Agent for BurpCursor's local Agent inside Burp

A project-scoped Agent workspace with persistent sessions, forks, Rules and Memories, permission control, MCP configuration, and Native / WSL launch — Cursor runs the Agent; Burp hosts the work.

Get started

Launch

GitHub

💬

Project-scoped sessions

Chats belong to each Burp project — pin, rename, fork from a reply, export/import, and resume after process restarts.

🧠

Rules and Memories

Durable notes with on-demand fetch — title indexes in prompts, bodies via burpai-rule/* and burpai-memory/* fences.

🛡️

Permission control

Ask · Allow safe · Allow all · Deny — inline Allow/Deny for tool runs, with attention when you are on another tab.

🔌

MCP your way

Own editable MCP list or link Cursor's mcp.json per launch profile — prefer Burp MCP for proxy and Repeater work.

🖥️

Cross-platform launch

Native, Windows→WSL, or custom override — session cwd, launch preview, and compact or full resume briefing.

📤

Burp-native workflow

Send to Cursor Agent from Proxy and Target context menus — draft lands in the Suite tab ready to edit.

Quick start

bash

./gradlew test shadowJar

Load build/libs/burp-cursor-agent-*-all.jar in Burp (Extensions → Add → Java). Class: io.zamdevio.burpai.BurpaiExtension. Open the Cursor Agent tab and send a message.

See Install for requirements, launch profile, and first-run checks.

Documentation

Guide	What you will learn
Install	Build, load, verify the extension
Sessions	Chats, forks, import/export, sidebar
Launch	Native, WSL, cwd, resume briefing
Rules & Memories	Agent Rules, Memories, built-in fences
Permissions	Ask / allow-safe / allow-all / deny
MCP	Own list vs link Cursor
Troubleshooting	PATH, login, load-miss, MCP

How it fits together

Cursor Agent owns reasoning and native tools. MCP owns Burp and other integrations. This extension owns the Burp-native host — UI, transcript persistence, Rules/Memories, permissions UX, launch configuration, and ACP process integration.

Cursor-only by design. Not a multi-backend switcher, not a second IDE, not a built-in scanner.