w0h1v / mcp-virustotal
MCP server for VirusTotal API — analyze URLs, files, IPs, and domains with comprehensive security reports, relationship analysis, and pagination support.
Why this job: name: mcp; says: mcp server; topics: mcp-server, model-context-protocol, mcp
What it does
- Reports with relationships. File, URL, IP and domain reports fetch key relationships in one batched ?relationships= call to save quota.
- Cache first. get_url_report returns the cached VirusTotal report and only submits a scan on a cache miss.
- Pivot tools. Corpus search with VTI-style modifiers (type:peexe positives:5+), merged sandbox behaviour summaries, and threat-actor and malware-family collections.
- Full relationship paging. 100+ relationship types across files, URLs, IPs and domains, with cursor pagination.
- Two transports. stdio for desktop clients, HTTP streaming for a shared service.
Get started
No single install command. Read the steps in the README (opens in new tab)
- Maintenance
- Active
- Last commit 6 days ago
- Stars
- 155
- On GitHub
- Licence
- MIT
- Allows business use
- Downloads for
- None listed
- No release files
- Latest version
- None yet
- No releases
- Built with
- TypeScript
- 82% of the code
Is it looked after?
- Contributors
- 4
- Last 90 days
- Issues
- 50% closed
- 1 still open
- Pull requests
- 28 merged
- 2 waiting
- Releases
- None
- Never published
Similar repos
| Repo | Stars | Last commit | Licence | Downloads for |
|---|---|---|---|---|
| mukul975 / cve-mcp-server | 1,768 | 4 months ago | Apache-2.0 | No downloads |
More: languages, topics and project record
Languages
- TypeScript 82%
- JavaScript 16%
- Python 1%
- Dockerfile 1%
Topics
- ai-tools
- claude
- cybersecurity
- ioc
- malware-analysis
- malware-detection
- mcp
- mcp-server
- model-context-protocol
- security
- threat-intelligence
- typescript
Project record
- JobMCP servers
- StatusListed
- Commits112
- Forks24
- Watching1
- Stars in 28 days+5
- CreatedDec 13, 2024
- First seen by usNov 7, 2026
- CheckedNov 7, 2026