VirusTotal
About
VirusTotal is a Model Context Protocol (MCP) server that integrates VirusTotal’s security database, enabling AI assistants like Claude to perform malware detection and threat intelligence on URLs, files, IP addresses, and domains. It automatically fetches relationship data to…
Details
- Author
- barvhaim
- Downloads
- 262
- Categories
- Other
Jump to
- Comprehensive threat analysis with automatic relationship fetching
- URL analysis including contacted domains and threat actors
- File hash analysis covering behaviors, dropped files, and network connections
- IP analysis with geolocation, reputation, and historical data
- Domain analysis including DNS, WHOIS, SSL certificates, and subdomains
- Paginated access to specific relationship types for deep investigation
- Respects VirusTotal API rate limits
- Supports SSE and STDIO transports
Setting up with Highlight
This MCP is not yet compatible with Highlight’s one-click setup. However, you can still use it with Highlight by following these steps:
- Download and install Highlight from highlightai.com/download
- Navigate to the plugins tab and select "Add Custom Plugin"
-
Configure the plugin with the settings below
Plugin Name
VirusTotalCommand (node, npx, python, etc.)Please refer to the README for specific instructions on how to obtain API keys or other required environment variables.
- Enable "Start Automatically" if you want the plugin to start when Highlight launches
From the repository
The README does not provide installation, configuration, or invocation instructions. Refer to the server’s source code or documentation for setup details.
Claude Desktop / Cursor
Paste into your MCP client config file to install this server.
{
"mcpServers": {
"virustotal": {
"virustotal": {
"command": "uv",
"args": [
"--directory",
"/absolute/path/to/virustotal-mcp-server",
"run",
"main.py"
],
"env": {
"VIRUSTOTAL_API_KEY": "your_api_key_here"
}
}
}
}
}McpServers
{
"virustotal": {
"command": "uv",
"args": [
"--directory",
"/absolute/path/to/virustotal-mcp-server",
"run",
"main.py"
],
"env": {
"VIRUSTOTAL_API_KEY": "your_api_key_here"
}
}
}VirusTotal MCP Server
A Model Context Protocol (MCP) server for comprehensive security analysis using the VirusTotal API. Built with FastMCP and Python, this server provides AI assistants like Claude with powerful malware detection and threat intelligence capabilities.
Overview
This MCP server integrates VirusTotal's extensive security database, allowing AI assistants to perform comprehensive security analysis on URLs, files, IP addresses, and domains. The server automatically fetches relationship data to provide complete security context in a single request.
Features
Comprehensive Security Analysis: Complete threat analysis with automatic relationship fetching
URL Analysis: Security reports with contacted domains, downloaded files, and threat actors
File Analysis: Detailed file hash analysis including behaviors, dropped files, and network connections
IP Analysis: Geolocation, reputation data, and historical information
Domain Analysis: DNS records, WHOIS data, SSL certificates, and subdomains
Detailed Relationship Queries: Paginated access to specific relationship types for deep investigation
Rate Limit Aware: Respects VirusTotal API limitations
Multiple Transport Support: SSE and STDIO transports for different integration needs
Sign in to leave a review
Use Google, GitHub, or an email account so ratings stay tied to real people.
No reviews posted yet.
