Turn a Burp Suite XML export into an OpenAPI 3.0 spec ready to import into Postman, Insomnia, or Swagger UI. Runs entirely in your browser — your captured traffic never leaves the device.
In Burp > right-click the URL in the Target tab > Save selected items (ensure Base64-encode is ticked).
Any path containing one of these as a full segment will be skipped (case-insensitive). Useful for stripping bot-management, analytics, or vendor paths.
The XML is parsed and converted in your browser. No upload, no server, no logging.
Auto-detects path parameters (UUIDs, numeric IDs, opaque tokens) and groups sibling paths into a single templated route.
Detects Bearer / Basic / API key auth, infers request-body schemas from JSON and form-urlencoded payloads, and surfaces query parameters.
Skips static assets (JS, CSS, fonts, images, fonts) and Cloudflare infrastructure paths by default. Toggle off if you need them.
Drop the resulting JSON straight into editor.swagger.io, Postman, Insomnia, or any OpenAPI-aware tool.
Based on the Burp2API Python tool by MrTurvey. This is a faithful TypeScript port that produces the same output, in your browser.