Virustotal Mcp MCP Server

A Model Context Protocol (MCP) server that enables LLMs to interact with the VirusTotal API for malware analysis, URL scanning, and threat intelligence.

Local serverstdio

What is the Virustotal Mcp Server?

Virustotal Mcp is an MCP project maintained in the yassinech-99/virustotal_mcp repository. The maintainer describes its purpose as “A Model Context Protocol (MCP) server that enables LLMs to interact with the VirusTotal API for malware analysis, URL scanning, and threat intelligence”. Read the project documentation for the complete scope.

Local setup

The project provides a local client configuration using uv. Follow the repository’s build and installation steps before copying it, and replace example paths with the paths on your own computer.

Configuration values

The example declares VIRUSTOTAL_API_KEY, API_BASE_URL, REQUEST_TIMEOUT. Secret-looking values have been replaced with placeholders. Required and optional labels are shown only when the documentation states them.

Source

Project documentation · Repository · Discovery listing. This profile records the public documentation checked on 2026-10-08.

How to install the Virustotal Mcp Server

{
  "mcpServers": {
    "virustotal": {
      "command": "uv",
      "args": [
        "--directory",
        "D:\\coolAI\\mcp-client",
        "run",
        "virustotal_mcp.py"
      ],
      "env": {
        "VIRUSTOTAL_API_KEY": "YOUR_VIRUSTOTAL_API_KEY",
        "API_BASE_URL": "https://www.virustotal.com/api/v3",
        "REQUEST_TIMEOUT": "30.0"
      }
    }
  }
}

From the project documentation. Replace placeholders and example paths before connecting.

Configuration

Variable	Description	Required
VIRUSTOTAL_API_KEY	Declared in the maintainer’s client configuration.	Check documentation
API_BASE_URL	Declared in the maintainer’s client configuration.	Check documentation
REQUEST_TIMEOUT	Declared in the maintainer’s client configuration.	Check documentation