공식 VirusTotal MCP 서버는 링크를 열고 다운로드된 파일을 실행하거나 의심스러운 인프라를 조사하기 전에 에이전트 위협 인텔리전스를 제공합니다. ** vt-mcp**는 파일, URL, 도메인 및 IP 주소, 파일 및 네트워크 분석 제출 및 영수증 복구에 대한 보고서와 더불어 MCP 클라이언트를 VTAI에 연결합니다.

현재 접속 제한을 가진 무료 VTAI 서비스를 사용하십시오. VirusTotal API 키가 필요하지 않습니다.

원격으로 OAuth

use**https://ai.virustotal.com/mcp** 호환 리모트 MCP 클라이언트에서. 이름 * VTAI 계정과 연결 권한을 승인; 로컬 파이썬 없음 설치, 정적 토큰 또는 개인 VirusTotal API 키가 필요합니다.

Claude Code: 플러그인 설치

공식 플러그인은 OAuth 연결, 위협 인텔리전스 기술 포함 및 모델 생성 된 base64없이 로컬 파일 업로드.

코드 필요 2.1.283 이상 및 Node.js 22 이상 그에 PATH. Node.js 22 및 24은 플러그인 CI에 의해 확인됩니다. 플러그인에는 https://ai.virustotal.com/mcp이 포함되어 있습니다.

플러그인으로 기존의 수동 연결을 교체하는 경우, read the 이동 및 복구 가이드 아무것도 제거하기 전에.

VirusTotal MCP

The official VirusTotal MCP server gives your agent threat intelligence before it opens a link, runs a downloaded file or investigates suspicious infrastructure. vt-mcp connects MCP clients to VTAI, with reports for files, URLs, domains and IP addresses, file and network analysis submission, and receipt recovery.

Use the free VTAI service with its current access limits. You do not need your own VirusTotal API key.

Connect remotely with OAuth

Use https://ai.virustotal.com/mcp in a compatible remote MCP client. Sign in with your VTAI account and approve the connection’s permissions; no local Python installation, static token or personal VirusTotal API key is required.

Claude Code: install the plugin

The official plugin includes the OAuth connection, a threat-intelligence skill and local file uploads without model-generated base64.

claude plugin marketplace add VirusTotal/virustotal-mcp
claude plugin install virustotal@virustotal

Requires Claude Code 2.1.283 or later and Node.js 22 or later on its PATH. Node.js 22 and 24 are verified by the plugin CI. The plugin includes https://ai.virustotal.com/mcp.

If you are replacing an existing manual connection with the plugin, read the migration and recovery guide before removing anything. Recover uncertain submissions through the original connection first; keep a working manual connection if you choose that alternative.

Start a new session or use /reload-plugins, then /mcp to complete browser sign-in when needed. The plugin already supplies the MCP connection; do not add a duplicate. See plugin setup, file access and credential-name protection.

Claude Code alternative: manual HTTP without Node.js

For report lookups without the local upload hook, use the direct connection:

claude mcp add --transport http virustotal https://ai.virustotal.com/mcp

Open Claude Code, run /mcp, select virustotal and complete browser sign-in. See the Claude Code OAuth instructions and the VirusTotal connection guide. Choose this alternative or the plugin. Adding a server configures it; complete authentication and a tool call to check that your connection works.

OAuth connections share the signed-in VTAI account’s free quota and use the permissions approved for each connection. Existing Agent Tokens keep their rights and quotas. If your client needs configurable HTTP headers, use one protected