mcp-virustotal

Overview

This MCP server provides comprehensive security analysis tools by integrating with the VirusTotal API. It offers automatic relationship data fetching and supports URL, file, IP, and domain analysis with detailed security reports. The server supports both stdio and HTTP streaming transport modes, making it suitable for various deployment scenarios. It includes pagination support for relationship queries and error handling for API keys, rate limiting, and invalid inputs.

Try asking AI

After installing, here are 5 things you can ask your AI assistant:

• get_url_report

  Get a comprehensive URL analysis report including security scan results and key relationships

  Try:Analyze this URL for security threatsTry:Get a detailed report for https://example.com
• get_file_report

  Get a comprehensive file analysis report using its hash (MD5/SHA-1/SHA-256)

  Try:Analyze this file hash: 990d3ae771ebfbef80727685df71603dTry:Check the safety of this file SHA256
• get_ip_report

  Get a comprehensive IP address analysis report including geolocation and reputation data

  Try:Analyze IP address 8.8.8.8 for threatsTry:Get security report for this IP
• get_domain_report

  Get a comprehensive domain analysis report including DNS records and WHOIS data

  Try:Analyze domain google.comTry:Get detailed report for example.org
• get_url_relationship

  Query a specific relationship type for a URL with pagination support

  Try:Show contacted domains for this URLTry:Get downloaded files for https://example.com
• get_file_relationship

  Query a specific relationship type for a file with pagination support

  Try:Show network connections for this fileTry:Get threat actors related to this hash
• get_ip_relationship

  Query a specific relationship type for an IP address with pagination support

  Try:Show historical WHOIS records for this IPTry:Get communicating files for 8.8.8.8
• get_domain_relationship

  Query a specific relationship type for a domain with pagination support

  Try:Show subdomains for this domainTry:Get SSL certificates for example.com

Comparable tools

Installation

claude mcp add --transport stdio --env VIRUSTOTAL_API_KEY=your-key virustotal -- npx -y @burtthecoder/mcp-virustotal

{
  "mcpServers": {
    "virustotal": {
      "command": "mcp-virustotal",
      "env": {
        "VIRUSTOTAL_API_KEY": "your-virustotal-api-key"
      }
    }
  }
}

npm install -g @burtthecoder/mcp-virustotal

FAQ

How do I get a VirusTotal API key?

Sign up at https://www.virustotal.com/gui/my-apikey to get your API key. The key should be 64 characters long.

What error handling is included in this server?

The server handles invalid API keys, rate limiting, network errors, invalid input parameters, invalid hash formats, invalid IP formats, invalid URL formats, invalid relationship types, and pagination errors.

Compare mcp-virustotal with