Virustotal

Overview

Virustotal is a Model Context Protocol (MCP) server: MCP server for querying VirusTotal API with comprehensive security analysis tools. Because it speaks the Model Context Protocol, AI assistants can use Virustotal as a set of callable tools instead of you copy-pasting between apps.

It runs locally: the npm package @burtthecoder/mcp-virustotal speaks MCP over stdio on your machine. Configuration happens through environment variables — you'll need VIRUSTOTAL_API_KEY. The current release is v1.0.17, published under the MIT license, with source at BurtTheCoder/mcp-virustotal on GitHub, where it has earned 149 stars.

On mcp.site, Virustotal sits in the Security category. Any MCP client can use it — Claude Desktop, Claude Code, Cursor, VS Code, Windsurf, Zed among them — via the install snippets below. If you maintain Virustotal for BurtTheCoder, claim this listing to verify ownership, earn the Verified badge, and keep the details current.

Installation

// claude_desktop_config.json
{
  "mcpServers": {
    "virustotal": {
      "command": "npx",
      "args": [
        "-y",
        "@burtthecoder/mcp-virustotal"
      ],
      "env": {
        "VIRUSTOTAL_API_KEY": "<virustotal-api-key>"
      }
    }
  }
}

Requires VIRUSTOTAL_API_KEY