"VirusTotal" matching MCP servers:

• VirusTotal MCP Server

  emeryray2002

  A

  license

  -

  quality

  F

  maintenance

  Provides comprehensive security analysis tools for querying the VirusTotal API, enabling detailed security reports on URLs, files, IP addresses, and domains with automatic relationship data fetching.

  Last updated 2025-03-30

  3

  Apache 2.0

• VirusTotal MCP Server

  yassinech-99

  A

  license

  -

  quality

  D

  maintenance

  A Model Context Protocol (MCP) server that enables LLMs to interact with the VirusTotal API for malware analysis, URL scanning, and threat intelligence.

  Last updated 2026-02-22

  MIT

• virustotal-mcp-server

  barvhaim

  F

  license

  -

  quality

  D

  maintenance

  MCP server for security analysis using VirusTotal API, enabling AI assistants to analyze URLs, files, IP addresses, and domains with automatic relationship fetching.

  Last updated 2025-08-25

  1

• Malware-Sandbox-mcp

  inadvisable-hibiscusfarragei279

  A

  license

  A

  quality

  B

  maintenance

  Enables assistants to analyze files and URLs for malware by integrating with security services like VirusTotal and ANY.RUN, returning threat reports.

  Last updated 2026-07-25

  20

  MIT

• Threat Intelligence MCP Server

  marc-shade

  A

  license

  A

  quality

  C

  maintenance

  Aggregates real-time threat intelligence from multiple sources including Feodo Tracker, URLhaus, CISA KEV, and ThreatFox, with IP/hash reputation checking via VirusTotal, AbuseIPDB, and Shodan for comprehensive security monitoring.

  Last updated 2026-06-04

  11

  37

  MIT

• Enrichment MCP Server

  MSAdministrator

  F

  license

  C

  quality

  D

  maintenance

  A Model Context Protocol server that enables users to perform third-party enrichment lookups for security observables (IP addresses, domains, URLs, emails) through services like VirusTotal, Shodan, and others.

  Last updated 2025-04-30

  1

  5

• SecMCP

  scthornton

  A

  license

  -

  quality

  D

  maintenance

  MCP servers exposing security operations tools (VirusTotal, MITRE Caldera, LimaCharlie) to AI agents with defense-in-depth safety controls.

  Last updated 2026-06-18

  1

  MIT

• Forensics Utils MCP Server

  jus1-c

  A

  license

  -

  quality

  C

  maintenance

  Comprehensive forensic analysis MCP server enabling AI agents to analyze files, Chromium and Firefox browser artifacts, with VirusTotal, DIE, Binwalk integrations.

  Last updated 2026-06-24

  MIT

• threatintel-mcp

  ChristianPresley

  A

  license

  -

  quality

  C

  maintenance

  An MCP server wrapping urlscan.io and VirusTotal APIs to enable AI agents to pivot on threat indicators during investigations, with compact structured output and defanged results.

  Last updated 2026-07-06

  MIT

• FastMCP ThreatIntel

  4R9UN

  A

  license

  -

  quality

  C

  maintenance

  Enables AI-powered threat intelligence analysis of IPs, domains, URLs, and file hashes across multiple threat intelligence platforms (VirusTotal, AlienVault OTX, AbuseIPDB, IPinfo) with APT attribution and interactive reporting through natural language queries.

  Last updated 2025-07-18

  40

  Apache 2.0

• Threat Intel MCP Server

  iceage2114

  F

  license

  -

  quality

  D

  maintenance

  Provides threat intelligence and vulnerability research tools by integrating with NVD, VirusTotal, AbuseIPDB, Shodan, and MITRE ATT\&CK. It enables users to perform CVE lookups, analyze IP reputation, and retrieve detailed MITRE ATT\&CK technique information.

  Last updated 2026-04-14

  1

• CyberMCP

  mehmetaksy

  F

  license

  -

  quality

  C

  maintenance

  Enables cybersecurity research through Claude by providing tools for CVE lookup, IP geolocation, and file hash checking against VirusTotal.

  Last updated 2026-06-19