Back to Browse

Virustotal MCP Server

Developer ToolsModerate7.2MCP RegistryLocalRemote
Free

Server data from the Official MCP Registry

VirusTotal MCP — file / URL / domain / IP reputation (BYO key)

About

VirusTotal MCP — file / URL / domain / IP reputation (BYO key)

Remote endpoints: streamable-http: https://gateway.pipeworx.io/virustotal/mcp

Security Report

7.2
Moderate7.2Low Risk

This VirusTotal MCP server is well-structured with appropriate authentication via API key and no malicious patterns. The primary concerns are minor code quality issues: the API key is passed as an argument rather than via environment variables (though this is somewhat intentional for a BYO key model), and there is minimal input validation. Permissions are appropriate for the server's purpose of querying VirusTotal's API.

3 files analyzed · 3 issues found

Security scores are indicators to help you make informed decisions, not guarantees. Always review permissions before connecting any MCP server.

Permissions Required

This plugin requests these system permissions. Most are normal for its category.

HTTP Network Access

Connects to external APIs or services over the internet.

How to Install & Connect

Available as Local & Remote

This plugin can run on your machine or connect to a hosted endpoint. during install.

Documentation

View on GitHub

From the project's GitHub README.

@pipeworx/virustotal

VirusTotal MCP — file / URL / domain / IP reputation. BYO API key.

Part of Pipeworx — an MCP gateway connecting AI agents to 1394+ live data sources.

Tools

  • lookup_file(hash)
  • lookup_url(url)
  • lookup_domain(domain)
  • lookup_ip(ip)

Auth

BYO only — free tier is 4 req/min and 500/day per key. Pass ?_apiKey=<key> on the gateway URL. Register at https://www.virustotal.com/gui/join-us.

Data source

https://www.virustotal.com/api/v3 — header x-apikey.

Quick Start

Add to your MCP client (Claude Desktop, Cursor, Windsurf, etc.):

{
  "mcpServers": {
    "virustotal": {
      "url": "https://gateway.pipeworx.io/virustotal/mcp"
    }
  }
}

Or connect to the full Pipeworx gateway for access to all 1394+ data sources:

{
  "mcpServers": {
    "pipeworx": {
      "url": "https://gateway.pipeworx.io/mcp"
    }
  }
}

Using with ask_pipeworx

Instead of calling tools directly, you can ask questions in plain English:

ask_pipeworx({ question: "your question about Virustotal data" })

The gateway picks the right tool and fills the arguments automatically.

More

License

MIT

Reviews

No reviews yet

Be the first to review this server!

Virustotal MCP Server - VirusTotal MCP — file / URL / domain / IP reputation (BYO | MCP Marketplace