Skip to main content
Glama
VirusTotal

VirusTotal MCP

Official
by VirusTotal
OverviewSchemaSourceRelated ServersDiscussionsAdmin
Python
Hybrid

Related Servers

Alternatives to VirusTotal MCP

No user-submitted related servers found.

    Related Servers

    • virustotal-mcp-server

      barvhaim
      F
      license
      A
      quality
      D
      maintenance
      MCP server for security analysis using VirusTotal API, enabling AI assistants to analyze URLs, files, IP addresses, and domains with automatic relationship fetching.
      8
      1
      -

    • vt-mcp

      king-tero
      A
      license
      A
      quality
      A
      maintenance
      Enables AI agents to access VirusTotal intelligence through MCP, supporting file, URL, domain, and IP lookups, plus analysis, via remote HTTP or local stdio.
      8
      MIT

    • GTI MCP Server

      yayefa
      F
      license
      Not graded
      quality
      C
      maintenance
      A production-ready MCP server providing comprehensive integration with Google Threat Intelligence and VirusTotal API v3, enabling AI agents to access threat intelligence data including IoCs, malware analysis, and network telemetry.
      -

    • VirusTotal MCP Server

      w0h1v
      A
      license
      A
      quality
      B
      maintenance
      A MCP server for querying the VirusTotal API. This server provides tools for scanning URLs, analyzing file hashes, and retrieving IP address reports.
      11
      342 npm
      150
      MIT
    Deploy Server
    One endpoint for every MCP toolRayrun runs every MCP server behind one URL and holds the credentials. Each call is decided per client, tool, and argument, then recorded.ray.runAd

    TDQS

    A4.5/5.0

    Scored across 11 tools

    Disambiguation4/5

    Most tools have clearly distinct purposes (lookup vs. submit vs. reanalyze vs. retrieve analysis/receipt), and the long descriptions explicitly distinguish them. A few pairs could still be confused at a glance, notably submit_file vs. submit_local_file (both submit file content) and get_submission vs. get_analysis (both retrieve prior operation state).

    Naming Consistency5/5

    All tool names use a consistent snake_case verb_noun pattern: get_*, submit_*, reanalyze_*. The only variation is that report-lookup tools include the resource suffix (_report), while get_submission and get_analysis do not, but this still fits the same verb_noun convention.

    Tool Count5/5

    11 tools is well within the typical 3-15 range and each tool corresponds to a distinct VirusTotal operation or indicator type. The set is neither bloated nor thin for the server's threat-intelligence scope.

    Completeness4/5

    The surface covers core workflows: report lookups for file/URL/domain/IP, submissions (file, local file, URL), reanalysis for domain/IP, and analysis/receipt retrieval. Minor gaps exist, such as no reanalyze_url or reanalyze_file tool, and no search, relationship, or behavior endpoints, but agents can work around these for common tasks.

    Maintenance

    ActivityMaintained
    ResponsivenessNo issues

    Resources