> For the complete documentation index, see [llms.txt](https://docs.bountysecurity.ai/llms.txt). Markdown versions of documentation pages are available by appending `.md` to page URLs; this page is available as [Markdown](https://docs.bountysecurity.ai/burp-bounty-server.md).

# Burp Bounty Server

- [Overview](https://docs.bountysecurity.ai/burp-bounty-server/overview.md): Run profile-based scans on your own machines, with REST and optional MCP.
- [Installation and first start](https://docs.bountysecurity.ai/burp-bounty-server/installation.md): Choose your executable, start the listener and verify authenticated access.
- [Configuration reference](https://docs.bountysecurity.ai/burp-bounty-server/configuration.md): Look up CLI flags, environment variables, limits and logging defaults.
- [Profile catalogue](https://docs.bountysecurity.ai/burp-bounty-server/profile-catalogue.md): Install saved profiles and confirm what the running server can discover.
- [REST API](https://docs.bountysecurity.ai/burp-bounty-server/rest-api.md): Submit exchanges, control scans and retrieve results through HTTP.
- [Connect an MCP client](https://docs.bountysecurity.ai/burp-bounty-server/mcp-setup.md): Connect an agent to the correct endpoint, transport and license header.
- [MCP tools reference](https://docs.bountysecurity.ai/burp-bounty-server/mcp-tools.md): A practical reference for discovery, scan control and finding retrieval.
- [MCP workflows](https://docs.bountysecurity.ai/burp-bounty-server/mcp-workflows.md): Follow complete examples for active scanning, passive analysis and results.
- [Single insertion point selection](https://docs.bountysecurity.ai/burp-bounty-server/insertion-selection.md): Use $BBOUNTY$ to focus a Server scan on one selected request span.
- [Approvals and destination scope](https://docs.bountysecurity.ai/burp-bounty-server/approvals-and-scope.md): Understand automatic approval, pending requests and destination boundaries.
- [Multiple servers](https://docs.bountysecurity.ai/burp-bounty-server/distributed-scanning.md): Distribute scans across as many servers as you need, through Pro or MCP agents.
- [Results and retention](https://docs.bountysecurity.ai/burp-bounty-server/results-and-retention.md): Keep the findings you need and understand how long evidence remains available.
- [Deployment and operation](https://docs.bountysecurity.ai/burp-bounty-server/operations.md): Deploy behind TLS or a tunnel, update the service, manage logs and shut down cleanly.
- [Troubleshooting](https://docs.bountysecurity.ai/burp-bounty-server/troubleshooting.md): Resolve common startup, authentication, catalogue and history problems.