VirusTotal is a free online service that analyzes files and URLs for viruses, worms, trojans and other kinds of malicious content. It aggregates many antivirus products and online scan engines to check for threats that the user's own antivirus may have missed.
Enables querying VirusTotal/Google Threat Intelligence for file hash, URL, domain, and IP analysis, providing reputation data and threat intelligence reports.
Enables MCP clients to interact with SentinelOne's cybersecurity platform for security analysis, threat investigation, and asset management through natural language queries. Provides read-only access to alerts, vulnerabilities, misconfigurations, and inventory data.
33
90
MIT
Why this server?
Provides tools for checking files and domains against VirusTotal's database for security analysis.
AI-powered OSINT framework exposing 10 tools (email, username, breach, WHOIS, IP, subdomain, phone, Shodan, dorks, Pastebin) as an MCP server for Claude Code and Claude Desktop, with an autonomous agent REPL and direct CLI.
20
1,392
MIT
Why this server?
Enriches threat intelligence by querying VirusTotal for malware and reputation data (optional API key).
A universal digital fingerprinting MCP server that combines 103 techniques across TCP, TLS, SSH, HTTP, DNS, and more into a single interface for AI agents, enabling full-spectrum fingerprinting on demand.
2
13
12
3
AGPL 3.0
Why this server?
Provides tools to submit files and URLs for threat analysis, retrieving detection reports and threat scores from VirusTotal's malware scanning database.
Enables AI agents to orchestrate security research workflows by connecting to containerized security tools via MCP, allowing automated vulnerability analysis and pipeline execution.
24
803
Why this server?
Provides tool for scanning files/URLs with multiple antivirus engines via VirusTotal API.
Enables AI-driven open-source intelligence investigations by exposing 30 tools for scanning emails, usernames, domains, IPs, and more, with real subprocess execution.
31
11
MIT
Why this server?
Integrates with VirusTotal API v3 to perform file, URL, domain, and IP analysis for threat intelligence.
Comprehensive forensic analysis MCP server enabling AI agents to analyze files, Chromium and Firefox browser artifacts, with VirusTotal, DIE, Binwalk integrations.
51
MIT
Why this server?
Enables checking file hash (MD5/SHA1/SHA256) and IP reputation with detection ratios and vendor verdicts from VirusTotal's threat intelligence database.
Aggregates real-time threat intelligence from multiple sources including Feodo Tracker, URLhaus, CISA KEV, and ThreatFox, with IP/hash reputation checking via VirusTotal, AbuseIPDB, and Shodan for comprehensive security monitoring.
11
196
MIT
Why this server?
Provides threat intelligence capabilities by enabling lookups of file hashes, IP addresses, domains, and files against VirusTotal's database for reputation analysis.
