VirusTotal MCP Server

@BurtTheCoder

代码仓库主页

基本信息

分类

开发工具

许可证

MIT

传输方式

stdio

作者

BurtTheCoder

关于 VirusTotal MCP Server

MCP server for VirusTotal API — analyze URLs, files, IPs, and domains with comprehensive security reports, relationship analysis, and pagination support.

VirusTotal MCP Server 配置

使用下面的配置,将此服务器添加到你的 MCP 客户端。

{
  "mcpServers": {
    "mcp-virustotal": {
      "command": "npx",
      "args": [
        "-y",
        "@smithery/cli",
        "install",
        "@burtthecoder/mcp-virustotal",
        "--client",
        "claude"
      ]
    }
  }
}

VirusTotal MCP Server 工具

工具列表暂未提供

当前收录暂时没有可展示的工具列表，不代表服务没有工具。请查阅项目文档了解支持的能力。

点击上方按钮,在临时沙箱中运行此服务器并实时获取工具列表。

概览

What is VirusTotal MCP Server?

An MCP server for querying the VirusTotal API. It provides comprehensive security analysis tools with automatic relationship data fetching and integrates with MCP-compatible applications like Claude Desktop.

How to use VirusTotal MCP Server?

Install via npm or run via npx, then configure the server in your MCP client’s JSON configuration, setting the required VIRUSTOTAL_API_KEY environment variable. Use commands like claude mcp add, codex mcp add, or gemini mcp add for quick setup. Optionally switch to HTTP streaming mode by setting MCP_TRANSPORT=httpStream.

Key features of VirusTotal MCP Server

Comprehensive analysis reports with automatic relationship data fetching.
URL analysis with cached-report-first lookups and fallback scanning.
File analysis by MD5, SHA-1, or SHA-256 hash.
IP and domain analysis with historical data and related threats.
Dedicated relationship query tools with pagination support.
Corpus search across files, URLs, domains, IPs, and comments.
Cross-sandbox behaviour summary with MITRE ATT&CK and IDS alerts.
Threat collection lookup for APT, malware-family, campaign objects.

Use cases of VirusTotal MCP Server

Threat hunting by searching for IOCs and pivoting through relationships.
Incident response via comprehensive URL, file, IP, and domain reports.
Malware analysis using sandbox behaviour summaries and threat collections.
Security automation integrated into MCP-compatible assistants.
Automated URL scanning with cache-first retrieval to minimize API calls.

常见问题

What is required to use this server?

A VirusTotal API key. Set it as the `VIRUSTOTAL_API_KEY` environment variable.

How do I install it for Claude Desktop?

Install globally via `npm install -g @burtthecoder/mcp-virustotal` and add the server configuration to your Claude Desktop config file.

Does it support HTTP streaming?

Yes. Set `MCP_TRANSPORT=httpStream` and optionally `MCP_PORT` (default 3000) and `MCP_ENDPOINT` (default /mcp).

How does URL analysis handle cached reports?

It retrieves the cached VirusTotal report first; only submits the URL for scanning and polls on cache miss.

What tools are available?

Report tools (URL, file, IP, domain), relationship tools with pagination, corpus search, file behaviour summary, and collection lookup.

开发工具分类下的更多 MCP 服务器

Eddyter AI Rich Text Editor MCP

EddyterAI

Set up and manage the Eddyter AI rich text editor by talking to your AI agent — for Claude, Cursor, Codex and other MCP tools. A Model Context Protocol server that lets AI tools add Eddyter to a React, Next.js, Vite or R

Launchdog

Devin Starks

Launch your product from your AI agent. Connect Claude Code, Codex, Cursor or ChatGPT to Launchdog over MCP and your agent drafts the listing, picks a launch week and books it. 50 launches a week, ranked only by human vo

Moxie Docs

Jackalope-Dev

Automated codebase documentation for GitHub: searchable docs, MCP context for AI agents, doc drift detection, and Friday Cleanup PRs.

Testiny MCP server

Mategra GmbH

Testiny is a test case management platform. Its remote MCP server lets AI assistants such as Claude, ChatGPT, GitHub Copilot, Cursor and other MCP clients work directly with your Testiny data. Browse and search projects,

Foremerge

naw103

Catch intent conflicts before code conflicts. The open-source coordination protocol for coding agents, built above Git.