virustotal/virustotal-mcp
Developer toolsЭта страница переведена автоматически. Технические детали смотрите в оригинале. Открыть оригинал
Official VirusTotal MCP server for AI agents: threat intelligence, file analysis, and recovery through VTAI.
Обзор
The official VirusTotal MCP server gives your agent threat intelligence before it opens a link, runs a downloaded file or investigates suspicious infrastructure. connects MCP clients to VTAI, with reports for files, URLs, domains and IP addresses, file and network analysis submission, and receipt recovery. Use the free VTAI service with its current access limits. You do not need your own VirusTotal API key. Use in a compatible remote MCP client. Sign in with your VTAI account and approve the connection's permissions; no local Python installation, static token or personal VirusTotal API key is required. The official plugin includes the OAuth connection, a threat-intelligence skill and local file uploads without model-generated base64. Requires Claude Code and on its PATH. Node.js 22 and 24 are verified by the plugin CI. The plugin includes https://ai.virustotal.com/mcp.
README
Показан фрагмент оригинального README. Открыть оригинал.
VirusTotal MCP
The official VirusTotal MCP server gives your agent threat intelligence before it opens a link, runs a downloaded file or investigates suspicious infrastructure. vt-mcp connects MCP clients to VTAI, with reports for files, URLs, domains and IP addresses, file and network analysis submission, and receipt recovery.
Use the free VTAI service with its current access limits. You do not need your own VirusTotal API key.
Connect remotely with OAuth
Use https://ai.virustotal.com/mcp in a compatible remote MCP client. Sign in
with your VTAI account and approve the connection’s permissions; no local Python
installation, static token or personal VirusTotal API key is required.
Claude Code: install the plugin
The official plugin includes the OAuth connection, a threat-intelligence skill and local file uploads without model-generated base64.
claude plugin marketplace add VirusTotal/virustotal-mcp
claude plugin install virustotal@virustotal
Requires Claude Code 2.1.283 or later and Node.js 22 or later on its PATH. Node.js 22 and 24 are verified by the plugin CI. The plugin includes https://ai.virustotal.com/mcp.
If you are replacing an existing manual connection with the plugin, read the migration and recovery guide before removing anything. Recover uncertain submissions through the original connection first; keep a working manual connection if you choose that alternative.
Start a new session or use /reload-plugins, then /mcp to complete browser
sign-in when needed. The plugin already supplies the MCP connection; do not add
a duplicate. See plugin setup, file access and credential-name protection.
Claude Code alternative: manual HTTP without Node.js
For report lookups without the local upload hook, use the direct connection:
claude mcp add --transport http virustotal https://ai.virustotal.com/mcp
Open Claude Code, run /mcp, select virustotal and complete browser sign-in.
See the Claude Code OAuth instructions
and the VirusTotal connection guide.
Choose this alternative or the plugin. Adding a server configures it; complete authentication and a tool call to check
that your connection works.
OAuth connections share the signed-in VTAI account’s free quota and use the permissions approved for each connection. Existing Agent Tokens keep their rights and quotas. If your client needs configurable HTTP headers, use one protected
Установка
This server does not publish a one-line install command.
Open the repository installation guide Новичок в MCP? Начните с руководства на mcpskill.org →Конфигурация
{
"mcpServers": {
"virustotal": {
"command": "vt-mcp",
"args": [],
"env": {
"VTAI_TOKEN_FILE": "~/.config/vt-mcp/token"
}
}
}
}