zacarx/hae_mcp

This page was translated automatically. Technical details may differ from the original. View the original

21 stars 4 forks Quality 49 Trend 10

HaE MCP Integration is an intelligent security analysis tool developed based on the HaE extension. This tool provides AI assistants with a structured interface for accessing sensitive information through the MCP protocol, enabling automated security data analysis and verification functions.

Overview

HaE MCP (Model Context Protocol) integration is an intelligent security analysis tool developed based on the Burp Suite HaE extension. This tool provides AI assistants with a structured interface for accessing sensitive information through the MCP protocol, enabling automated security data analysis and verification functions. The HaE MCP tool can extract various sensitive information from HTTP traffic, including but not limited to API keys, access tokens, database connection strings, email addresses, phone numbers, and more. By integrating with AI assistants, intelligent analysis and authenticity verification of this sensitive information can be achieved. The tool implements a timestamp-based incremental analysis mechanism that can track and identify newly discovered sensitive information, avoiding redundant processing of analyzed data. This mechanism ensures continuity and efficiency of analysis work through persistent state management. It provides complete contextual information for HTTP requests and responses, supports AI assistants for in-depth correlation analysis, and determines the usage scenarios and potential risk levels of sensitive information. Function: List all domains containing sensitive information Output: List of domain names and corresponding sensitive information quantity statistics Purpose: Provide a global view to help determine analysis priorities Function: Obtain detailed sensitive information for a specified domain name Parameters: - domain (required): target domain name - limit (optional): returns a limit on the number of results, default value is 50 Output: rule name, match value, domain name information, and basic context Purpose: In-depth analysis of the security risks of a specific domain name Function: Retrieves complete HTTP requests and response messages. Parameters: - domain (required): target domain name - path (optional): URL path filtering conditions - limit (optional): limit the number of returned results, default value is 10. Output: Complete HTTP communication content, including request headers, response headers, message bodies, etc. Purpose: Provide detailed contextual information, support deep security analysis Function: Retrieve newly discovered sensitive information since the last analysis Parameters: - domain (optional): domain name filtering condition - limit (optional): limit the number of returned results, default value is 50 - include_all (optional): whether all historical data is included, default value is false Output: newly discovered sensitive information with timestamps and analyzed statistical data Purpose: Implement incremental analysis and improve analysis efficiency

Overview (machine translated)

Overview

Core Features

Extraction and Analysis of Sensitive Information

The HaE MCP tool can extract various sensitive information from HTTP traffic, including but not limited to API keys, access tokens, database connection strings, email addresses, phone numbers, and more. By integrating with AI assistants, intelligent analysis and authenticity verification of this sensitive information can be achieved.

Incremental Analysis Mechanism

The tool implements a timestamp-based incremental analysis mechanism that can track and identify newly discovered sensitive information, avoiding redundant processing of analyzed data. This mechanism ensures continuity and efficiency of analysis work through persistent state management.

Contextual Association Analysis

It provides complete contextual information for HTTP requests and responses, supports AI assistants for in-depth correlation analysis, and determines the usage scenarios and potential risk levels of sensitive information.

Tool List

Basic Query Tools

list_domains

Function: List all domain names containing sensitive information Output: Domain name list and corresponding sensitive information quantity statistics Purpose: Provides a global view to help prioritize analysis

get_sensitive_data

Function: Obtain detailed sensitive information about a specified domain name Parameters:

domain (required): The target domain name
limit (optional): Returns a limit on the number of results, default value is 50 Output: rule name, match value, domain name information, and basic context Purpose: In-depth analysis of the security risks of specific domain names

get_request_response

Function: Retrieves complete HTTP requests and response messages Parameters:

domain (required): The target domain name
path (optional): URL path filtering condition
limit (optional): Returns a limit on the number of results, with a default value of 10 Output: Complete HTTP communication content, including request headers, response headers, message bodies, etc Purpose: Provides detailed contextual information, supports in-depth security analysis

Incremental Analysis Tools

get_new_sensitive_data

Function: Retrieve sensitive information newly discovered since the last analysis Parameters:

domain (optional): Domain name filtering condition
limit (optional): Returns a limit on the number of results, default value is 50
include_all (optional): Whether all historical data is included, default value is false Output: Newly discovered sensitive information with timestamps and analytical statistical data Purpose: Enables incremental analysis and improves analytical efficiency

mark_analysis_complete

Function: Marking the completion of the current analysis session Parameters:

notes (optional): Analyze note information Function: Update analysis timestamps to establish benchmarks for subsequent incremental analysis Purpose: Maintains analysis status and supports workflow management

get_analysis_stats

Function: Obtain statistical information from the analysis system

This page was translated automatically. Technical details may differ from the original.

Install

This server does not publish a one-line install command.

Open the repository installation guide New to MCP? Start with the mcpskill.org guide →

Configuration

{
  "mcpServers": {
    "hae": {
      "command": "/path/to/java17/bin/java",
      "args": [
        "-jar",
        "/absolute/path/to/hae-mcp-proxy.jar",
        "--url",
        "http://127.0.0.1:9891/message"
      ]
    }
  }
}