Virustotal MCP Server

by w0h1v Your server? Claim it

local only

Virustotal runs on your own machine — the client starts it, so there is no endpoint to ping. 1 562 installs a week from npm. Last commit 14 Oct 2026.

MCP server for querying VirusTotal API with comprehensive security analysis tools.

Installs per day peak 704 · avg 119 · +260% w/w

a month agotoday

1 562

Installs / week

npm · @burtthecoder/mcp-virustotal

151

Stars

1 open issue

14 Oct 2026

Last commit

6 releases in 90 days

MIT

License

TypeScript

Nothing serious here today

Today is the operative word: we check Virustotal every 15 minutes and re-read its code on every release. Watch it and you find out the day that stops being true.

Connect this server

This server runs on your own machine — install it with the package manager and the client starts it for you. Package name taken from the official registry entry.

Claude Code Claude Desktop Codex Cursor VS Code

run in your terminal

claude mcp add virustotal -- npx -y @burtthecoder/mcp-virustotal

~/Library/Application Support/Claude/claude_desktop_config.json

{
  "mcpServers": {
    "virustotal": {
      "args": [
        "-y",
        "@burtthecoder/mcp-virustotal"
      ],
      "command": "npx"
    }
  }
}

~/.codex/config.toml

[mcp_servers.virustotal]
command = "npx"
args = ["-y", "@burtthecoder/mcp-virustotal"]

.cursor/mcp.json

{
  "mcpServers": {
    "virustotal": {
      "args": [
        "-y",
        "@burtthecoder/mcp-virustotal"
      ],
      "command": "npx"
    }
  }
}

.vscode/mcp.json

{
  "mcpServers": {
    "virustotal": {
      "args": [
        "-y",
        "@burtthecoder/mcp-virustotal"
      ],
      "command": "npx"
    }
  }
}

This one needs environment variables set before it will start: VIRUSTOTAL_API_KEY (Your VirusTotal API key). The author declared them in the registry entry; get the values from the project itself.

Alternatives to Virustotal

same job, measured the same way

Virustotal

by burtthecoder

MCP server for querying VirusTotal API with comprehensive security analysis tools.

local only

Vulnicheck

by andrasfe

HTTP MCP Server for comprehensive Python vulnerability scanning and security analysis.

local only

Securityscorecard MCP

by callmarcus

Community-built, comprehensive MCP server for the SecurityScorecard API (unofficial).

63 installs/wk local only

Vaultguard MCP

by kota1026

VaultGuard MCP Server - Yearn V3 / DeFi vault security and analysis tools for AI coding agents....

28 installs/wk local only

SymbioticSec

by symbioticsec

Symbiotic CLI MCP Server for security scanning and analysis

37 installs/wk local only

Ghost MCP Server

by ghostsecurity

Minimal MCP server for Ghost Security API - compatible with all MCP clients

36 installs/wk local only

npm MCP

by alisaitteke

MCP server for npm package management, security analysis, and compatibility checking

32 installs/wk local only

Rqwstr

by kjopstad-it

AI-native HTTP security testing MCP server — 17 tools with raw HTTP/1.1 + HTTP/2 control

local only

Virustotal — questions

Answers built from our own checks of this server.

Why is there no uptime for Virustotal?

Virustotal runs on your own machine over stdio — there is no network address to reach, so uptime cannot be measured for it by anyone. What can be measured is adoption: the npm package @burtthecoder/mcp-virustotal was installed 1 562 times last week.

How do I connect Virustotal?

Copy the ready config from this page — we generate it for Claude Code, Claude Desktop, Codex, Cursor and VS Code, each with the file path that client actually reads. It runs locally, so the command pulls @burtthecoder/mcp-virustotal straight from npm; nothing to host, nothing to sign up for.

How many people use Virustotal?

The npm package @burtthecoder/mcp-virustotal was installed 1 562 times in the last week. Week over week that is +260%. We show installs rather than GitHub stars on purpose: a star is a bookmark, an install is someone actually running it.

Is Virustotal open source?

Yes — it is published under the MIT licence, written in TypeScript, 151 stars on GitHub and 1 open issue. The source link is on this page, so you can read exactly what it does with your data before you connect it.