VirusTotal

io.github.VirusTotal/virustotal-mcpVersion 0.9.9

Official VirusTotal MCP server: threat reports, file and URL submissions, and analysis recovery.

Status

Sign-in required228 msNov 14, 2026, 14:43 UTCReachable. It asks for authorization, so we did not look inside.

We could not refresh it, so this page shows the last copy.

Data from the official MCP Registry, checked by run.zero. How we check

Streamable HTTP

https://ai.virustotal.com/mcpSign-in required228 msNov 14, 2026, 14:43 UTC

OAuth sign-in

This server asks for sign-in. Your client opens the sign-in when it connects.

claude mcp add --transport http virustotal-mcp https://ai.virustotal.com/mcp

1
2
3

Settings > Connectors > Add custom connector
Name: virustotal-mcp
Remote MCP server URL: https://ai.virustotal.com/mcp

{
  "mcpServers": {
    "virustotal-mcp": {
      "url": "https://ai.virustotal.com/mcp"
    }
  }
}

code --add-mcp '{"name":"virustotal-mcp","type":"http","url":"https://ai.virustotal.com/mcp"}'

Streamable HTTP

pypi: vt-mcp 0.9.9

Package only

claude mcp add virustotal-mcp -e 'VTAI_TOKEN_FILE=<YOUR_VTAI_TOKEN_FILE>' -- uvx vt-mcp==0.9.9

Replace <YOUR_VTAI_TOKEN_FILE> before running.

Built your own server? run.zero hosts MCP servers on European infrastructure.

Tools are visible after sign-in; we do not look inside protected servers.

Registry status: Active
Published: Oct 11, 2026
Updated: Oct 11, 2026
Website: https://ai.virustotal.com/connect/mcp⁠ (opens in a new tab)
Repository: https://github.com/VirusTotal/virustotal-mcp⁠ (opens in a new tab)
Categories (suggested): SecuritySuggested categories are assigned automatically from the registry text and may be wrong. Verified operators can correct them.
GDPR: Not declared