drio
Open app

VirusTotal MCP Server

Source

A Model Context Protocol (MCP) server for querying the VirusTotal API.

Catalog onlyCatalog onlySTDIO

Overview

The VirusTotal MCP Server is a Model Context Protocol (MCP) server designed for querying the VirusTotal API, facilitating the analysis of URLs, file hashes, and IP address reports.

To use the VirusTotal MCP Server, install it via npm, configure it with your VirusTotal API key in the Claude Desktop configuration file, then restart Claude Desktop to enable integration.

  • URL Scanning for potential security threats - Analysis of file hashes - Retrieval of security reports for IP addresses - Relationship analysis between URLs, files, and IPs
  1. Security professionals scanning websites for malware.
  2. Developers analyzing files for potential risks before deployment.
  3. Incident responders retrieving historical data on potentially malicious IP addresses.

Add to your AI client

Use these steps to connect VirusTotal MCP Server in Cursor, Claude, VS Code, and other MCP-compatible apps. The same JSON appears in the Use with menu above for one-click copy.

Cursor

Add this to your .cursor/mcp.json file in your project root, then restart Cursor.

.cursor/mcp.json

{
  "mcpServers": {
    "mcp-virustotal-burtthecoder": {
      "command": "npx",
      "args": [
        "-y",
        "@modelcontextprotocol/server-mcp-virustotal-burtthecoder"
      ]
    }
  }
}

Claude Desktop

Add this server entry to the mcpServers object in your Claude Desktop config, then restart the app.

~/Library/Application Support/Claude/claude_desktop_config.json (macOS) or %APPDATA%\Claude\claude_desktop_config.json (Windows)

{
  "mcpServers": {
    "mcp-virustotal-burtthecoder": {
      "command": "npx",
      "args": [
        "-y",
        "@modelcontextprotocol/server-mcp-virustotal-burtthecoder"
      ]
    }
  }
}

Claude Code

Add this to your project's .mcp.json file. Claude Code will detect it automatically.

.mcp.json (project root)

{
  "mcpServers": {
    "mcp-virustotal-burtthecoder": {
      "command": "npx",
      "args": [
        "-y",
        "@modelcontextprotocol/server-mcp-virustotal-burtthecoder"
      ]
    }
  }
}

VS Code (Copilot)

Add this to your .vscode/mcp.json file. Requires the GitHub Copilot extension with MCP support enabled.

.vscode/mcp.json

{
  "servers": {
    "mcp-virustotal-burtthecoder": {
      "type": "stdio",
      "command": "npx",
      "args": [
        "-y",
        "@modelcontextprotocol/server-mcp-virustotal-burtthecoder"
      ]
    }
  }
}

Windsurf

Add this to your Windsurf MCP config file, then restart Windsurf.

~/.codeium/windsurf/mcp_config.json

{
  "mcpServers": {
    "mcp-virustotal-burtthecoder": {
      "command": "npx",
      "args": [
        "-y",
        "@modelcontextprotocol/server-mcp-virustotal-burtthecoder"
      ]
    }
  }
}

Cline

Open Cline settings, navigate to MCP Servers, and add this server configuration.

Cline MCP Settings (via UI)

{
  "mcpServers": {
    "mcp-virustotal-burtthecoder": {
      "command": "npx",
      "args": [
        "-y",
        "@modelcontextprotocol/server-mcp-virustotal-burtthecoder"
      ]
    }
  }
}

FAQ

What is required to use the MCP Server?

You need Node.js (v18 or later) and a valid VirusTotal API key.

How do I resolve API key issues?

Check your API key in the configuration and ensure it's valid by reviewing the logs for any errors.

Can I run this server from source?

Yes! You can clone the repository, build it, and run it from source if needed.

Research and data