Mcp Virustotal
MCP server for VirusTotal API — analyze URLs, files, IPs, and domains with comprehensive security reports, relationship analysis, and pagination support.
- Transport
- Not stated
- Package
- —
- Registry id
- —
No install snippet on purpose. A working MCP config is a command, its arguments and an environment block — the last two are where API keys live, so this catalogue never stores them and cannot publish them. Follow the link above for the authors' own instructions.
It gives AI agents access to the VirusTotal v3 API. It can analyze hashes, URLs, IPs, and domains, returning detection reports and related entities. It supports two transport modes: stdio for desktop clients and HTTP streaming for a shared service.
It requires the user to provide their own VirusTotal API key. It runs on Node.js version 20 or newer. It offers four report tools: get_file_report, get_url_report, get_ip_report, and get_domain_report.
It provides search and pivot tools including search_vt, get_file_behaviour_summary, and get_collection.
Summary drafted from the project's own website. Every sentence is backed by text on that page and was reviewed before publishing.