Virustotal Mcp — independently scanned and version-tracked by SaferSkills.
SaferSkills independently audited Virustotal Mcp (Agent Skill) and scored it 100/100 (green). The audit ran 55 deterministic rules across Security, Supply Chain, Maintenance, Transparency, and Community; it found 0 high-severity and 0 lower-severity findings. The full rule-by-rule trace and per-finding evidence are below. Free, methodology-open.
Findings & checks · 0 flagged
Every scanned point with the score it earned and what moved between them.
First recorded scan — no prior version to compare against.
The primary manifest — the file an agent reads to learn what this artifact does.
A Model Context Protocol (MCP) server that enables LLMs to interact with the VirusTotal API for malware analysis, URL scanning, and threat intelligence.
pyproject.toml.git clone https://github.com/your-username/virustotal-mcp.git
cd virustotal-mcpCreate a .env file in the root directory:
VIRUSTOTAL_API_KEY=your_api_key_here
API_BASE_URL=https://www.virustotal.com/api/v3
REQUEST_TIMEOUT=30.0uv pip install -e .🔌 Claude Desktop Configuration Add this to your claude_desktop_config.json:
{
"mcpServers": {
"virustotal": {
"command": "uv",
"args": [
"--directory",
"D:\\coolAI\\mcp-client",
"run",
"virustotal_mcp.py"
],
"env": {
"VIRUSTOTAL_API_KEY": "<api_key_here>",
"API_BASE_URL": "https://www.virustotal.com/api/v3",
"REQUEST_TIMEOUT": "30.0"
}
}
}
}| Tool | Description |
|---|---|
virustotal_scan_file | Upload a local file for analysis. |
virustotal_get_file_report | Get reports via hash. |
virustotal_scan_url / virustotal_get_url_report | Scan and analyze URLs. |
virustotal_get_domain_report | Domain-specific threat intel. |
virustotal_get_ip_report | IP address reputation. |
virustotal_search | Search VT intelligence. |
virustotal_post_comment | Add community notes to resources. |
~30 seconds. Free. No account. Every finding cites a rule and a line of evidence.