BurtTheCoder/mcp-virustotal
Free用于查询 VirusTotal API 的 MCP 服务器。提供扫描 URL、分析文件哈希和检索 IP 地址报告的工具。
FreeFree tier
About BurtTheCoder/mcp-virustotal
A Model Context Protocol (MCP) server for querying the VirusTotal API. Provides comprehensive security analysis tools including URL scanning, file hash analysis, IP address and domain reputation checks, with automatic relationship data fetching and pagination support. Integrates seamlessly with MCP-compatible applications such as Claude Desktop and VS Code via either stdio or HTTP streaming transport. Open-source and free to use, requiring only a VirusTotal API key.
Key Features
Scan URLs for security threats
Analyze file hashes (MD5, SHA1, SHA256)
Retrieve IP address reports
Analyze domain reports
Comprehensive security reports with relationship analysis
Automatic relationship data fetching
Pagination support for large datasets
Integration with MCP-compatible applications (Claude Desktop, VS Code)
HTTP streaming transport support
Configurable via environment variables
Pros & Cons
Pros
- Integrates seamlessly with MCP-compatible clients like Claude Desktop and VS Code
- Provides comprehensive security reports including relationship data
- Supports multiple data types: URLs, files, IPs, domains
- Offers pagination for handling large result sets
- Open source and free to use
Cons
- Requires a VirusTotal API key, which may have usage limitations
- Dependent on VirusTotal's data availability and accuracy
- No real-time scanning; only queries existing VirusTotal database
- Limited to what VirusTotal API provides (some endpoints may be restricted for free tier)
Best For
Threat intelligence and investigationSecurity automation in MCP-based workflowsURL and file reputation checkingIP and domain reputation analysisIntegration with AI assistants for real-time security analysis
FAQ
What is VirusTotal MCP Server?
It is a Model Context Protocol server that provides tools for querying the VirusTotal API, enabling analysis of URLs, files, IPs, and domains with comprehensive security reports.
How do I install it?
You can install globally via npm: npm install -g @burtthecoder/mcp-virustotal, then configure it in your MCP client's configuration file.
What tools are available?
Tools include scanning URLs, analyzing file hashes, retrieving IP and domain reports, all with relationship analysis and pagination support.
Is it free?
Yes, the server itself is open source and free, but you need a VirusTotal API key which may have usage limits.