mcp-virustotal
View on GitHubMCP server for VirusTotal API — analyze URLs, files, IPs, and domains with comprehensive security reports, relationship analysis, and pagination support.
An MCP server that connects AI agents to the VirusTotal v3 API for indicator reports, relationship analysis, corpus search, and sandbox behavior summaries. Supports stdio and HTTP streaming transports.
Use Cases
Look up VirusTotal reports for file hashes, URLs, IPs, and domainsInvestigate malware relationships such as contacted hosts and dropped filesSearch VirusTotal threat intelligence and pivot across indicatorsRetrieve sandbox behavior summaries and threat-actor collections
Built With
- Language
- TypeScript
- Frameworks
- FastMCP · Zod
Tags
VirusTotal · threat intelligence · malware analysis · IOC lookup · security · file reports · URL scanning · IP reputation · domain analysis · relationship analysis · MCP server · pagination