Meta has unveiled a toolkit named Zurp that integrates AI-assisted agents with Burp Suite to streamline bug bounty testing. This open-source tool is designed exclusively for researchers enrolled in Meta’s bug bounty program, enabling them to conduct web security work on Meta-owned platforms more efficiently by combining manual and AI-powered workflows.
What Is Zurp and How It Works
Zurp operates as a Java extension within Burp Suite and comes with support for Model Context Protocol (MCP) servers to power AI agents. This setup allows researchers to inspect HTTP traffic from Burp Suite, while using approved Meta APIs and access tokens via an AI coding assistant—all within a unified testing environment. The procurement of data and test assets is strictly limited to what’s tied to the researcher’s authorized account, ensuring legal and secure testing boundaries.
One notable feature is the “Meta View” tab, which helps researchers decode identifiers found in requests and responses, like URLs, GraphQL doc_ids, object IDs, and operations. This helps cut down the time spent figuring out what unfamiliar values mean when analyzing traffic from Facebook, Instagram, or other Meta services.
Key Capabilities in the Stack
Zurp includes several components that can be used separately or together in full research workflows:
- Meta Context: Provides explanations for identifiers seen in requests.
- FBDL: Helps create and manage test accounts and authorized test assets within Meta’s internal testing dimension.
- Anti-CSRF handling: Automatically captures short-lived tokens (such as fb_dtsg, lsd, CSRF tokens) from browsing traffic and replaces placeholders before sending requests—making replay tests more stable.
- SPARTA: Offers potential leads for deeper investigation and queues proof-of-concept tasks via Burp Suite’s Organizer.
For AI-assisted tasks, researchers can use compatible MCP clients—like Claude Code or Muse Code—to interface with Zurp’s AI services. These clients allow inspection of captured requests, identification of known Meta values, and safe engagement with authorized test assets.
Installation requires at least Burp Suite version 2024.7. Those wanting to build from source need Java 17, while running the agent-side MCP services calls for Node.js 22.19.0 or newer. Access to Zurp is governed by Meta’s allowlist model via the FBDL service; only approved researchers can use it. Tokens are valid for 60 days, and must be generated while logged into the proper bug bounty account.
Zurp’s combination of manual proxy-based testing, official test datasets, and AI agents reflects a hybrid trend in application security—where human expertise remains central. In 2024 alone, Meta’s bug bounty program paid out over $2.3 million to researchers, based on around 600 valid reports submitted from nearly 10,000 submissions. The release of Zurp aims to reduce friction in that process.
Developers and researchers can review Zurp’s source code and setup instructions via its GitHub repository. Eligibility requirements for Meta’s approved testing environment are also clearly outlined by Meta’s FBDL rules.
Analytical angle: Zurp signals a growing maturation in the bug bounty ecosystem. By embedding AI agents directly into standard tools like Burp Suite, Meta is aiming to eliminate workflow fragmentation and speed up vulnerability discovery. The risk, however, lies in how well access control is enforced—tokens, context, and scope must be tightly managed to prevent misuse. For security teams, this model could become a blueprint: blending human insight with AI assistance under controlled, transparent parameters. Watch closely for how well Zurp handles false positives, researcher onboarding, and long-term maintenance of the MCP services.
