VirusTotal

io.github.VirusTotal/virustotal-mcp

Official VirusTotal MCP server: threat reports, file and URL submissions, and analysis recovery.

View repository →Homepage →

Connect this server

Add this to your MCP client config — claude_desktop_config.json (Claude Desktop) or .cursor/mcp.json (Cursor).Suits: Claude Desktop · Cursor.

{
  "mcpServers": {
    "virustotal-mcp": {
      "command": "uvx",
      "args": [
        "vt-mcp"
      ],
      "env": {
        "VTAI_TOKEN_FILE": "<your VTAI_TOKEN_FILE>"
      }
    }
  }
}
Environment variables
  • VTAI_TOKEN_FILErequiredPath to a protected file containing only your VTAI token. Get free access at https://ai.virustotal.com/connect/mcp.

A starting point — check the repository for exact arguments and setup. Restart your client after editing the config.

Category
Developer Tools
Version
0.9.9
Registry
active
Published
10/11/2026

Remotes

  • streamable-httphttps://ai.virustotal.com/mcp

More Developer Tools servers

Browse all Developer Tools →

VirWave Breathe

virwave

Calm, animated breathing sessions paced to your breath. Runs locally and collects nothing.

Developer ToolsAdded 1 month ago

Reelpen

viscountsparrow-cloud

Build editable 3D scenes, direct characters and cameras, and export AI video references with MCP.

Developer ToolsAdded 1 month ago

io.github.vish288/mcp-argocd

vish288

Argo CD MCP server (MCP 2026-07-28): status, sync, rollback, drift, AppSets; writes or read-only

Developer ToolsAdded 4 days ago

io.github.vish288/mcp-atlassian-extended

vish288

Jira/Confluence MCP server (MCP 2026-07-28): sprints, boards, attachments; writes or read-only

Developer ToolsAdded 4 days ago

io.github.vish288/mcp-coda

vish288

Coda MCP server (MCP 2026-07-28): docs, pages, tables, rows, automations; writes or read-only

Developer ToolsAdded 4 days ago

io.github.vish288/mcp-gitlab

vish288

GitLab MCP server (MCP 2026-07-28): projects, MRs, pipelines, CI/CD, issues; writes or read-only

Developer ToolsAdded 4 days ago

Add the badge to your site

Show visitors that VirusTotal is listed here — it’s also the link we check for a free listing.

VirusTotal — listed on Serverdex

HTML — for your website

<a href="https://serverdex.io/server/io-github-virustotal-virustotal-mcp?utm_source=badge"><img src="https://serverdex.io/brand/badge.svg" alt="VirusTotal — listed on Serverdex" width="123" height="40" loading="lazy"></a>

Recommended. A dofollow link from your own domain is the one that counts for search engines, and it's the link we check for a free listing.

Markdown — for your README

[![VirusTotal — listed on Serverdex](https://serverdex.io/brand/badge.svg)](https://serverdex.io/server/io-github-virustotal-virustotal-mcp?utm_source=badge)

Nice for visibility, but GitHub marks README links nofollow, so it doesn't pass authority. Use the HTML badge on your site as well.