VirusTotal is a free online service that analyzes files and URLs for viruses, worms, trojans and other kinds of malicious content. It aggregates many antivirus products and online scan engines to check for threats that the user's own antivirus may have missed.
AI-powered OSINT framework exposing 10 tools (email, username, breach, WHOIS, IP, subdomain, phone, Shodan, dorks, Pastebin) as an MCP server for Claude Code and Claude Desktop, with an autonomous agent REPL and direct CLI.
20
1,295 PyPI
1,753
MIT
Why this server?
Enables querying VirusTotal/Google Threat Intelligence for file hash, URL, domain, and IP analysis, providing reputation data and threat intelligence reports.
Enables MCP clients to interact with SentinelOne's cybersecurity platform for security analysis, threat investigation, and asset management through natural language queries. Provides read-only access to alerts, vulnerabilities, misconfigurations, and inventory data.
33
99
MIT
Why this server?
Provides VirusTotal intelligence tools for files, URLs, domains, and IP addresses, including report lookups, file submission, and analysis recovery via VTAI.
Official VirusTotal MCP server for AI agents: threat intelligence, file analysis, and recovery through VTAI.
11
195 PyPI
17
Apache 2.0
Why this server?
Provides tools for interacting with VirusTotal API, enabling security analysis of URLs, files, IP addresses, and domains with automatic relationship data fetching.
Enables security analysis of URLs, files, IPs, and domains using the VirusTotal API, with automatic fetching of relationship data to provide comprehensive reports.
7
1,562 npm
MIT
Why this server?
Enables virus and threat intelligence lookups (e.g., domain, IP, hash analysis) as part of Maltego investigations.
Turns an LLM into a Maltego CE investigation copilot, enabling AI-assisted OSINT investigations by building, analyzing, and exporting Maltego graph files.
52
MIT
Why this server?
Integrates with VirusTotal API v3 to perform file, URL, domain, and IP analysis for threat intelligence.
Comprehensive forensic analysis MCP server enabling AI agents to analyze files, Chromium and Firefox browser artifacts, with VirusTotal, DIE, Binwalk integrations.
51
MIT
Why this server?
Allows triggering VirusTotal enrichment for indicators via the trigger_enrichment tool.
MCP server providing comprehensive threat intelligence access to OpenCTI for Claude Code and other MCP clients, with 32 tools for searching and managing threat data.
28
MIT
Why this server?
Provides tool for scanning files/URLs with multiple antivirus engines via VirusTotal API.
Enables AI-driven open-source intelligence investigations by exposing 30 tools for scanning emails, usernames, domains, IPs, and more, with real subprocess execution.
31
59 PyPI
9
MIT
Why this server?
Provides tools for performing malware hash lookups using VirusTotal's database of over 68 antivirus engines to identify and analyze malicious files.
Provides real-time threat intelligence including IP risk scores, CVE lookups, and malware hash analysis without requiring an API key. It enables users to monitor active threats, predict CISA KEV additions, and detect pre-attack infrastructure staging through natural language.
