mcp-virustotal

mcp-virustotal

53
security

The VirusTotal MCP Server is designed for querying the VirusTotal API to provide comprehensive security analysis. It offers detailed reporting tools for URLs, files, IP addresses, and domains, integrated with automatic data fetching. The server is intended for seamless integration with MCP applications like Claude Desktop.

VirusTotal MCP Server

A Model Context Protocol server for querying the VirusTotal API, providing comprehensive security analysis tools with automatic relationship data fetching. It integrates seamlessly with MCP-compatible applications.

Features

  • Comprehensive Analysis Reports: Automated fetching of relationship data with security reports.
  • URL Analysis: Detailed reports with domain and threat actor insights.
  • File and IP Analysis: Includes hash and resolution data.
  • Domain Analysis: Provides DNS and WHOIS data.

Requirements

  • Node.js (v18 or later)
  • A valid VirusTotal API Key

Installation

  1. Via Smithery: Install automatically for Claude Desktop.
  2. Manual Installation: Install globally via npm and configure.
  3. Alternative Setup: Run from source code if modifications are needed.

Error Handling

Comprehensive handling for API key, rate limiting, network errors, pagination, and invalid formats.

Version History

  • v1.0.0: Initial release
  • v1.1.0: Relationship analysis tools added
  • v1.4.0: Domain analysis support added