virustotal-mcp

virustotal-mcp

3.3

If you are the rightful owner of virustotal-mcp and would like to certify it and/or have it hosted online, please leave a comment on the right or send an email to henry@mcphub.com.

A Model Context Protocol (MCP) server for querying the VirusTotal API, providing comprehensive security analysis tools with automatic relationship data fetching.

The VirusTotal MCP Server is designed to facilitate seamless integration with MCP-compatible applications, offering a robust interface for security analysis through the VirusTotal API. It provides detailed reports on URLs, files, IPs, and domains, automatically fetching relevant relationship data to deliver a complete security overview. The server supports advanced search capabilities and rich formatting for clear presentation of results. It is compatible with platforms like Claude Desktop and can be installed via Smithery or manually. The server includes comprehensive error handling and requires Python 3.11 or higher, along with a valid VirusTotal API key.

Features

  • Comprehensive Analysis Reports: Automatically fetches relevant relationship data for a complete security overview.
  • URL Analysis: Provides security reports with details on contacted domains, downloaded files, and threat actors.
  • File Analysis: Offers detailed analysis of file hashes, including behaviors and network connections.
  • IP Analysis: Delivers security reports with historical data and related threats.
  • Domain Analysis: Includes DNS information, WHOIS data, SSL certificates, and subdomains.

Tools

  1. get_url_report

    Get a comprehensive URL analysis report including security scan results and key relationships.

  2. get_file_report

    Get a comprehensive file analysis report using its hash, including detection results and key relationships.

  3. get_ip_report

    Get a comprehensive IP address analysis report including geolocation and reputation data.

  4. get_domain_report

    Get a comprehensive domain analysis report including DNS records and key relationships.

  5. advanced_corpus_search

    Perform advanced searches across the VirusTotal dataset using VT Intelligence query syntax.