Install Virustotal in Claude Code
claude mcp add w0h1v-virustotal -e VIRUSTOTAL_API_KEY=... -- npx -y @burtthecoder/mcp-virustotal{
"mcpServers": {
"w0h1v-virustotal": {
"command": "npx",
"args": [
"-y",
"@burtthecoder/mcp-virustotal"
],
"env": {
"VIRUSTOTAL_API_KEY": "..."
}
}
}
}Replace each ... with your own value.
Frequently asked questions
What does the Virustotal MCP server do?
MCP server for querying VirusTotal API with comprehensive security analysis tools.
Is the Virustotal MCP server free?
The server is free, but you will likely need an account. The server itself is free, but it connects to a service that needs an account or API key, which may have paid tiers. Check the provider for current pricing.
Does Virustotal run locally or remotely?
Local. Runs on your machine (stdio). You install it with npx, uvx, Docker or from source.
How do I add Virustotal to Claude Code?
Run: claude mcp add w0h1v-virustotal -e VIRUSTOTAL_API_KEY=... -- npx -y @burtthecoder/mcp-virustotal
More security & identity MCP servers
View allGhidraMCP
13bm/GhidraMCP
Ghidra plugin for binary analysis: function inspection, decompilation, memory exploration and import/export analysis.
Taskade
taskade/mcp
Taskade projects, tasks and AI agents. Hosted OAuth server or local stdio package.
Shellward
jnMetaCode/shellward
Agent security middleware with layered defenses: prompt injection detection, DLP data flow tracking, command blocking and PII detection.
Agent Security Scanner
sinewaveai/agent-security-scanner-mcp
Security layer for AI agents: blocks prompt injection, detects fake packages, scans vulnerabilities.
Dvalincode
arthurpanhku/dvalincode
Deterministic security scanning, no model or API key, plus offline-verifiable proof a fix worked.
Rsigma
timescale/rsigma
Author, lint, validate and convert Sigma detection rules with RSigma, evaluate and explain detections against log events, and inspect correlation state.