Skip to main content
Glama
VirusTotal

VirusTotal MCP

Official
by VirusTotal
OverviewSchemaSourceRelated ServersDiscussionsAdmin
Python
Hybrid

Related Servers

Alternatives to VirusTotal MCP

No user-submitted related servers found.

    Related Servers

    • virustotal-mcp-server

      barvhaim
      F
      license
      A
      quality
      D
      maintenance
      MCP server for security analysis using VirusTotal API, enabling AI assistants to analyze URLs, files, IP addresses, and domains with automatic relationship fetching.
      8
      1
      -

    • vt-mcp

      king-tero
      A
      license
      A
      quality
      A
      maintenance
      Enables AI agents to access VirusTotal intelligence through MCP, supporting file, URL, domain, and IP lookups, plus analysis, via remote HTTP or local stdio.
      8
      MIT

    • GTI MCP Server

      yayefa
      F
      license
      Not graded
      quality
      C
      maintenance
      A production-ready MCP server providing comprehensive integration with Google Threat Intelligence and VirusTotal API v3, enabling AI agents to access threat intelligence data including IoCs, malware analysis, and network telemetry.
      -

    • VirusTotal MCP Server

      w0h1v
      A
      license
      A
      quality
      B
      maintenance
      A MCP server for querying the VirusTotal API. This server provides tools for scanning URLs, analyzing file hashes, and retrieving IP address reports.
      11
      590 npm
      154
      MIT
    Deploy Server
    One endpoint for every MCP toolRayrun runs every MCP server behind one URL and holds the credentials. Each call is decided per client, tool, and argument, then recorded.ray.runAd

    TDQS

    A4.3/5.0

    Scored across 11 tools

    Disambiguation4/5

    Tools are largely distinct by indicator type and action, with get_*_report separated for URL, file, domain, and IP, and submission/reanalysis workflows split clearly. The main possible confusion is between get_analysis and get_submission, and between submit_file and submit_local_file, but descriptions clarify inputs and intent.

    Naming Consistency4/5

    Naming is mostly consistent snake_case verb_noun: get_*_report, submit_*, reanalyze_*. Minor deviations include get_analysis/get_submission lacking the _report suffix, submit_local_file using an adjective, and URL using submit while domain/IP use reanalyze, but the pattern remains readable.

    Tool Count5/5

    11 tools is well within the 3-15 sweet spot and matches VirusTotal's lookup, submission, reanalysis, and async-retrieval needs. Each tool covers a distinct indicator or workflow step without excessive surface.

    Completeness4/5

    Covers report lookups for four indicator types, file/URL/local-file submission, domain/IP reanalysis, and analysis/receipt retrieval. Minor gaps remain: no reanalyze_url, no initial domain/IP submission tool, and no batch or relationship endpoints, but core workflows are covered.

    Maintenance

    ActivityMaintained
    ResponsivenessNo issues

    Resources