virustotal-mcp-server
Related Servers
Alternatives to virustotal-mcp-server
No user-submitted related servers found.
Related Servers
- FlicenseNot gradedqualityCmaintenanceA production-ready MCP server providing comprehensive integration with Google Threat Intelligence and VirusTotal API v3, enabling AI agents to access threat intelligence data including IoCs, malware analysis, and network telemetry.-
- AlicenseAqualityDmaintenanceA MCP server for querying the VirusTotal API. This server provides tools for scanning URLs, analyzing file hashes, and retrieving IP address reports.11301 npm149MIT
- AlicenseCqualityDmaintenanceA Model Context Protocol (MCP) server that enables LLMs to interact with the VirusTotal API for malware analysis, URL scanning, and threat intelligence.81MIT
- AlicenseNot gradedqualityCmaintenanceAn MCP server wrapping urlscan.io and VirusTotal APIs to enable AI agents to pivot on threat indicators during investigations, with compact structured output and defanged results.MIT
- AlicenseBqualityCmaintenanceComprehensive forensic analysis MCP server enabling AI agents to analyze files, Chromium and Firefox browser artifacts, with VirusTotal, DIE, Binwalk integrations.51MIT
- AlicenseNot gradedqualityDmaintenanceAn MCP server that integrates ThreatBook's threat intelligence API, offering 15 specialized tools for security analysis. It enables AI models to perform IP reputation checks, domain investigations, file sandbox analysis, and vulnerability intelligence lookups.51MIT
TDQS
Scored across 8 tools
Each tool targets a distinct resource type (URL, file, IP, domain) combined with a distinct action (report vs relationship). There is no overlap or ambiguity between tools; an agent can easily select the right one based on resource and intent.
All tool names follow a clear and consistent verb_noun pattern: get_<resource>_report and get_<resource>_relationship. The naming is uniform, predictable, and uses snake_case throughout.
With exactly 8 tools, the set is well-scoped for the domain. Each tool covers a core API operation for one of four resource types, and no redundant or unnecessary tools exist.
The tool surface covers report retrieval and relationship queries for all major VirusTotal resources (URL, file, IP, domain). It lacks submission/scanning tools, but for a read-focused MCP server the coverage is quite complete; only a minor gap.