LocalFree server, account needed

Virustotal MCP server

BurtTheCoder/mcp-virustotal

Query the VirusTotal API: scan URLs, analyze file hashes and retrieve IP address reports.

Source code

Install Virustotal in Claude Code

Claude Code
claude mcp add virustotal -e VIRUSTOTAL_API_KEY=... -- npx -y @burtthecoder/mcp-virustotal
mcp.json (Claude Desktop, Cursor, VS Code, Windsurf)
{
  "mcpServers": {
    "virustotal": {
      "command": "npx",
      "args": [
        "-y",
        "@burtthecoder/mcp-virustotal"
      ],
      "env": {
        "VIRUSTOTAL_API_KEY": "..."
      }
    }
  }
}

Replace each ... with your own value.

Frequently asked questions

What does the Virustotal MCP server do?

Query the VirusTotal API: scan URLs, analyze file hashes and retrieve IP address reports.

Is the Virustotal MCP server free?

The server is free, but you will likely need an account. The server itself is free, but it connects to a service that needs an account or API key, which may have paid tiers. Check the provider for current pricing.

Does Virustotal run locally or remotely?

Local. Runs on your machine (stdio). You install it with npx, uvx, Docker or from source.

How do I add Virustotal to Claude Code?

Run: claude mcp add virustotal -e VIRUSTOTAL_API_KEY=... -- npx -y @burtthecoder/mcp-virustotal

More security & identity MCP servers

View all

VMware Harden

zw008/VMware-Harden

Read-only VMware vSphere compliance scanning and drift detection against CIS, vSphere SCG, China DJCP 2.0 and PCI-DSS, with remediation suggestions.

LocalAccount neededPython

Verity

0

meloliva14/verity-mcp

Fail-closed trust gate for agents: fact-checking, prompt-injection detection, content moderation, PII and secret detection, and a pre-action guardrail.

LocalAccount neededPython

Vorim

Kzino/vorim-mcp-server

Agent identity, trust and audit trails: Ed25519 agent registration, permission checks, tamper-evident audit events, trust scores and credential delegation.

LocalAccount neededTypeScript

verify-proof

0

Fulcrum-Enterprises/verify-proof

Verify blockchain-anchored timestamp proofs locally: recompute a file's SHA-256, walk the Merkle path and check the anchor on Polygon or Bitcoin.

LocalFreePython

VulnFeed

infai-tech/vulnfeed-mcp

Scans dependency lockfiles for vulnerabilities, prioritizes them by EPSS exploit probability and recommends fix versions, with monitoring and alerting.

LocalFreePython

VERAX

0

verax-ai/verax

Sits between an agent and its tools: every call passes a policy gate and leaves a signed decision record before it runs, a refusal is recorded like an approval, payments wait for an operator on the same machine, and the ledger stays there and verifies offline. Apache-2.0.

LocalFreeTypeScript