Install VirusTotal in Claude Code
Remote URL
claude mcp add --transport http virustotal-virustotal https://ai.virustotal.com/mcp{
"mcpServers": {
"virustotal-virustotal": {
"url": "https://ai.virustotal.com/mcp"
}
}
}PyPI (uv)
claude mcp add virustotal-virustotal -e VTAI_TOKEN_FILE=... -- uvx vt-mcp{
"mcpServers": {
"virustotal-virustotal": {
"command": "uvx",
"args": [
"vt-mcp"
],
"env": {
"VTAI_TOKEN_FILE": "..."
}
}
}
}Replace each ... with your own value.
Frequently asked questions
What does the VirusTotal MCP server do?
Official VirusTotal MCP server: threat reports, file and URL submissions, and analysis recovery.
Is the VirusTotal MCP server free?
The server is free, but you will likely need an account. The server itself is free, but it connects to a service that needs an account or API key, which may have paid tiers. Check the provider for current pricing.
Does VirusTotal run locally or remotely?
Local + Remote. Can run locally or be used as a hosted remote server.
How do I add VirusTotal to Claude Code?
Run: claude mcp add --transport http virustotal-virustotal https://ai.virustotal.com/mcp
More security & identity MCP servers
View allMobsf
pullkitsan/mobsf-mcp-server
Static and dynamic analysis of Android and iOS apps with MobSF.
Delego
Delego-Dev/delego
Intent-bound action authorization for AI agents: policy, human approval, and a signed audit trail.
AIM
AIM-Intelligence/AIM-MCP
Security-focused safety guidelines and content analysis for AI agents.
CorrectOver
CorrectOver/mcp-server
MCP runtime security. 22µs validation, 97% self-healing. Detects RCE, SSRF, credential hijacking.
Gecko Surf
GeckoVision/gecko-surf
Point Gecko at an OpenAPI spec; get first-call-correct, auth-hidden agent tools.
Brightspace
JhostinAleck/brightspace-mcp
D2L Brightspace MCP server: courses, grades, rubrics, feedback, course files, calendar. Multi-auth.