SSyncDev

Virustotal MCP Server

MCP server for querying VirusTotal API with comprehensive security analysis tools.

Local serverstdio

What is the Virustotal MCP Server?

MCP server for querying VirusTotal API with comprehensive security analysis tools.

What you get

To install VirusTotal Server for Claude Desktop automatically via Smithery:

  • Comprehensive Analysis Reports — Each analysis tool automatically fetches relevant relationship data along with the basic report using VirusTotal's ?relationships= query, batched to minimize API calls
  • URL Analysis — Cached-report-first lookups with automatic fallback to scanning, plus contacted domains, downloaded files, and threat actors
  • File Analysis — Detailed analysis of file hashes including behaviors, dropped files, and network connections
  • IP Analysis — Security reports with historical data, resolutions, and related threats
  • Domain Analysis — DNS information, WHOIS data, SSL certificates, and subdomains
  • Detailed Relationship Analysis — Dedicated tools for querying specific types of relationships with pagination support

Configuration and credentials

More MCP options

Compare MCP servers by category, or browse hosted MCP servers if you prefer an endpoint over a local process.

Maintainer setup documentation.

How to install the Virustotal MCP Server

{
  "mcpServers": {
    "virustotal": {
      "command": "npx",
      "args": ["-y", "@burtthecoder/mcp-virustotal"],
      "env": {
        "VIRUSTOTAL_API_KEY": "your-value"
      }
    }
  }
}

Add to claude_desktop_config.json, then restart Claude Desktop.

Configuration

VariableDescriptionRequired
VIRUSTOTAL_API_KEYCredential the server authenticates with.Yes

Frequently asked questions

MCP server for querying VirusTotal API with comprehensive security analysis tools. Confirm the tools offered by your installed version in the connected client. Tool availability and permissions depend on the server and account configuration.

Alternatives to the Virustotal MCP Server

NVD Database

Queries the NIST National Vulnerability Database (NVD) via its API.

DatabasesPython★ 14

Cursor Trivy

Scans projects for security vulnerabilities and automatically updates vulnerable dependencies using Trivy.

Security & IdentityPython★ 10

keycloak-mcp-server

Set environment variables (or create a .env file based on .env.example):

Security & Identity

Frogeye Security Scanner

Zero-config MCP security scanner for AI-generated apps. 25K+ vulnerability patterns.

Security & IdentityRemote

Burpsuite

# Burpsuite MCP Server [![smithery badge](https://smithery.ai/badge/@Cyreslab-AI/burpsuite-mcp-server)](https://smithery.ai/server/@Cyreslab-AI/burpsu

Security & Identity

Okta

Okta MCP (Model Context Protocol) server for managing Okta applications, users, and groups

Security & IdentityGo