Query the VirusTotal API to analyze URLs, files, IPs and domains with security reports and relationship analysis.
Setup
Choose your client, copy the config, then fill in any required environment variables.
claude mcp add virustotal --env VIRUSTOTAL_API_KEY='<VIRUSTOTAL_API_KEY>' -- npx -y @burtthecoder/mcp-virustotal~/.codex/config.toml
[mcp_servers.virustotal]
command = "npx"
args = ["-y", "@burtthecoder/mcp-virustotal"]
env = { VIRUSTOTAL_API_KEY = "<VIRUSTOTAL_API_KEY>" }
# codex mcp add virustotal --env VIRUSTOTAL_API_KEY='<VIRUSTOTAL_API_KEY>' -- npx -y @burtthecoder/mcp-virustotal~/.cursor/mcp.json
{
"mcpServers": {
"virustotal": {
"command": "npx",
"args": [
"-y",
"@burtthecoder/mcp-virustotal"
],
"env": {
"VIRUSTOTAL_API_KEY": "<VIRUSTOTAL_API_KEY>"
}
}
}
}.vscode/mcp.json
{
"servers": {
"virustotal": {
"type": "stdio",
"command": "npx",
"args": [
"-y",
"@burtthecoder/mcp-virustotal"
],
"env": {
"VIRUSTOTAL_API_KEY": "<VIRUSTOTAL_API_KEY>"
}
}
}
}~/.gemini/settings.json
{
"mcpServers": {
"virustotal": {
"command": "npx",
"args": [
"-y",
"@burtthecoder/mcp-virustotal"
],
"env": {
"VIRUSTOTAL_API_KEY": "<VIRUSTOTAL_API_KEY>"
}
}
}
}claude_desktop_config.json
{
"mcpServers": {
"virustotal": {
"command": "npx",
"args": [
"-y",
"@burtthecoder/mcp-virustotal"
],
"env": {
"VIRUSTOTAL_API_KEY": "<VIRUSTOTAL_API_KEY>"
}
}
}
}.trae/mcp.json
{
"mcpServers": {
"virustotal": {
"command": "npx",
"args": [
"-y",
"@burtthecoder/mcp-virustotal"
],
"env": {
"VIRUSTOTAL_API_KEY": "<VIRUSTOTAL_API_KEY>"
}
}
}
}Environment variables
VIRUSTOTAL_API_KEY
Replace the placeholders with your own credentials and keep them out of version control.