A Model Context Protocol (MCP) server for comprehensive security analysis using the VirusTotal API. Built with FastMCP and Python, this server provides AI assistants like Claude with powerful…
VirusTotal is an MCP project maintained in the barvhaim/virustotal-mcp-server repository. The maintainer describes its purpose as “A Model Context Protocol (MCP) server for comprehensive security analysis using the VirusTotal API. Built with FastMCP and Python, this server provides AI assistants like…”. Read the project documentation for the complete scope.
The project provides a local client configuration using uv. Follow the repository’s build and installation steps before copying it, and replace example paths with the paths on your own computer.
The example declares VIRUSTOTAL_API_KEY, MCP_TRANSPORT. Secret-looking values have been replaced with placeholders. Required and optional labels are shown only when the documentation states them.
Project documentation · Repository · Discovery listing. This profile records the public documentation checked on 2026-10-08.
Check the linked publisher documentation and your connected client's tool list. Names and availability can vary with the server version and account permissions.
| Tool | What it does |
|---|---|
| Parameters | - domain (required): Domain name |
| Auto | fetched relationships: subdomains, historical SSL certificates, resolutions, threat actors |
| relationships | optional): Specific relationships to include |
| relationship | required): Relationship type (subdomains, historical_ssl_certificates, etc.) |
| limit | optional, 1-40, default: 10): Number of results |
| cursor | optional): Pagination cursor |
{
"mcpServers": {
"virustotal": {
"command": "uv",
"args": [
"--directory",
"/absolute/path/to/virustotal-mcp-server",
"run",
"main.py"
],
"env": {
"VIRUSTOTAL_API_KEY": "YOUR_VIRUSTOTAL_API_KEY",
"MCP_TRANSPORT": "stdio"
}
}
}
}From the project documentation. Replace placeholders and example paths before connecting.
| Variable | Description | Required |
|---|---|---|
| VIRUSTOTAL_API_KEY | Declared in the maintainer’s client configuration. | Check documentation |
| MCP_TRANSPORT | Declared in the maintainer’s client configuration. | Check documentation |
Queries the NIST National Vulnerability Database (NVD) via its API.
Scans projects for security vulnerabilities and automatically updates vulnerable dependencies using Trivy.
Search 1,032 verified smart contract vulnerability findings from Sherlock audits by pattern.
Remote MCP for A2A dependency inspector MCP, structured receipts, audit logs, and reviewer-ready evi
Remote MCP for A2A failure replay MCP, structured receipts, audit logs, and reviewer-ready evidence.
A comprehensive Model Context Protocol (MCP) server for ABP.IO framework with 48+ tools for application development, UI generation, and management