VirusTotal is a free online service that analyzes files and URLs for viruses, worms, trojans and other kinds of malicious content. It aggregates many antivirus products and online scan engines to check for threats that the user's own antivirus may have missed.
AI-powered OSINT framework exposing 10 tools (email, username, breach, WHOIS, IP, subdomain, phone, Shodan, dorks, Pastebin) as an MCP server for Claude Code and Claude Desktop, with an autonomous agent REPL and direct CLI.
24
903 PyPI
1,626
MIT
Why this server?
Provides VirusTotal intelligence tools for files, URLs, domains, and IP addresses, including report lookups, file submission, and analysis recovery via VTAI.
Official VirusTotal MCP server for AI agents: threat intelligence, file analysis, and recovery through VTAI.
11
313 PyPI
1
Apache 2.0
Why this server?
Enables querying VirusTotal/Google Threat Intelligence for file hash, URL, domain, and IP analysis, providing reputation data and threat intelligence reports.
Enables MCP clients to interact with SentinelOne's cybersecurity platform for security analysis, threat investigation, and asset management through natural language queries. Provides read-only access to alerts, vulnerabilities, misconfigurations, and inventory data.
33
98
MIT
Why this server?
Provides tools for analyzing IPs, domains, URLs, and hashes using VirusTotal's threat intelligence data.
AI-powered threat intelligence server with real-time alert monitoring and multi-source IOC analysis, enabling security investigations directly in Claude Desktop.
9
Apache 2.0
Why this server?
Allows enrichment of DNS security analysis with VirusTotal threat intelligence for domain and IP reputation checks.
Comprehensive DNS security toolkit for AI agents: 103 tools across 13 categories including DNSSEC validation, subdomain takeover detection, email security audit, and more, all running locally with no external API calls required.
100
78 npm
7
MIT
Why this server?
Provides tools for interacting with VirusTotal API, enabling security analysis of URLs, files, IP addresses, and domains with automatic relationship data fetching.
Enables security analysis of URLs, files, IPs, and domains using the VirusTotal API, with automatic fetching of relationship data to provide comprehensive reports.
7
282 npm
MIT
Why this server?
Integrates with VirusTotal API v3 to perform file, URL, domain, and IP analysis for threat intelligence.
Comprehensive forensic analysis MCP server enabling AI agents to analyze files, Chromium and Firefox browser artifacts, with VirusTotal, DIE, Binwalk integrations.
51
MIT
Why this server?
Allows triggering VirusTotal enrichment for indicators via the trigger_enrichment tool.
MCP server providing comprehensive threat intelligence access to OpenCTI for Claude Code and other MCP clients, with 32 tools for searching and managing threat data.
28
MIT
Why this server?
Provides tool for scanning files/URLs with multiple antivirus engines via VirusTotal API.
Enables AI-driven open-source intelligence investigations by exposing 30 tools for scanning emails, usernames, domains, IPs, and more, with real subprocess execution.
