Virustotal
Rank #2,029io.github.w0h1v/virustotal
MCP server for querying VirusTotal API with comprehensive security analysis tools.
What you can do with Virustotal
Virustotal is a Model Context Protocol (MCP) server published by w0h1v. It ranks #2,029 of 144,396 active servers on MCP Toplist, and its repository has 151 GitHub stars. Virustotal is listed across 4 registries — Official MCP, PulseMCP, mcp.so and Glama, with 4 tracked versions. It was first listed on Dec 13, 2024 and most recently updated on Oct 13, 2026.
Not verifiedMCP Toplist has not yet written a checked profile for this server, so the paragraph above is assembled from registry data only. The repository README is the authority on what it does.
What Virustotal can and cannot do
Not verifiedMCP Toplist has not catalogued this server's tools or limitations. The repository README lists them.
What you need before using Virustotal
The registry listing declares required configuration before first use — typically an API key, token or connection string set via environment variables.
Declared by Glama, last synced Oct 16, 2026. Not independently verified by MCP Toplist.
- VIRUSTOTAL_API_KEY · required
Connect Virustotal and confirm it works
claude mcp add virustotal -e "VIRUSTOTAL_API_KEY=<your VIRUSTOTAL_API_KEY>" -- npx -y @burtthecoder/mcp-virustotalReplace each placeholder with your own value before saving.
[mcp_servers.virustotal]
command = "npx"
args = ["-y", "@burtthecoder/mcp-virustotal"]
[mcp_servers.virustotal.env]
VIRUSTOTAL_API_KEY = "<your VIRUSTOTAL_API_KEY>"Add to ~/.codex/config.toml. Replace each placeholder with your own value before saving.
{
"mcpServers": {
"virustotal": {
"command": "npx",
"args": [
"-y",
"@burtthecoder/mcp-virustotal"
],
"env": {
"VIRUSTOTAL_API_KEY": "<your VIRUSTOTAL_API_KEY>"
}
}
}
}Add to claude_desktop_config.json (Settings → Developer → Edit Config). Replace each placeholder with your own value before saving.
{
"mcpServers": {
"virustotal": {
"command": "npx",
"args": [
"-y",
"@burtthecoder/mcp-virustotal"
],
"env": {
"VIRUSTOTAL_API_KEY": "<your VIRUSTOTAL_API_KEY>"
}
}
}
}Add to ~/.cursor/mcp.json (global) or .cursor/mcp.json (per project). Replace each placeholder with your own value before saving.
{
"servers": {
"virustotal": {
"type": "stdio",
"command": "npx",
"args": [
"-y",
"@burtthecoder/mcp-virustotal"
],
"env": {
"VIRUSTOTAL_API_KEY": "<your VIRUSTOTAL_API_KEY>"
}
}
}
}Save as .vscode/mcp.json in your workspace. Replace each placeholder with your own value before saving.
{
"mcpServers": {
"virustotal": {
"command": "npx",
"args": [
"-y",
"@burtthecoder/mcp-virustotal"
],
"env": {
"VIRUSTOTAL_API_KEY": "<your VIRUSTOTAL_API_KEY>"
}
}
}
}Add to ~/.codeium/windsurf/mcp_config.json. Replace each placeholder with your own value before saving.
{
"mcpServers": {
"virustotal": {
"command": "npx",
"args": [
"-y",
"@burtthecoder/mcp-virustotal"
],
"env": {
"VIRUSTOTAL_API_KEY": "<your VIRUSTOTAL_API_KEY>"
}
}
}
}Replace each placeholder with your own value before saving.
After adding the config, ask your client to list this server's tools. A tool list confirms the connection; an empty list or an error means the server did not start or needs credentials.
When to choose another server
No task-specific alternatives are catalogued for Virustotalyet; the list above is its publisher's other servers.
What changed, and when this was checked
- First listed
- Dec 13, 2024
- Latest version published
- Oct 13, 2026
- Version history
- 4 versions tracked (below)
- Requirements evidence
- Declared by Glama, last synced Oct 16, 2026. Not independently verified by MCP Toplist.
- Profile checked
- Not yet — purpose, capabilities and requirements above come from registry data only
- Ranking data as of
- Oct 16, 2026
- Official MCP ↗listed since Apr 25, 2026 · still listed
- PulseMCP ↗listed since Jun 4, 2026 · still listed
- mcp.so ↗listed since Jun 4, 2026 · still listed
- Glama ↗listed since Jun 4, 2026 · delisted, last seen Jun 8, 2026
- Glama ↗listed since Jun 8, 2026 · still listed
- Official MCP ↗listed since Oct 14, 2026 · still listed
Do you maintain Virustotal? to correct or enrich this profile.
Available versions (4)
| Version | Published |
|---|---|
| 1.0.35 | Oct 13, 2026 |
| 1.0.34 | Oct 13, 2026 |
| 1.0.17 | Mar 3, 2026 |
| 0.1.0 | Nov 25, 2024 |
Ranks ahead of 142,367 of 144,396 servers on MCP Toplist.
Show your rank
Maintain this server? Add the live rank badge to your README — it updates automatically as the leaderboard changes.
[](https://mcptoplist.com/server/io.github.w0h1v%2Fvirustotal)<a href="https://mcptoplist.com/server/io.github.w0h1v%2Fvirustotal"><img src="https://mcptoplist.com/badge/io.github.w0h1v%2Fvirustotal.svg" alt="MCP Toplist: Top 5% of 144,396" /></a>Variants: append ?metric=score or ?metric=stars to the image URL.
Frequently asked questions
- Who maintains Virustotal?
- Virustotal is maintained by w0h1v, which publishes 5 MCP servers (11 total versions) tracked on MCP Toplist.
- Is Virustotal listed on the Official MCP Registry?
- Yes — Virustotal is listed on the Official MCP Registry, alongside PulseMCP, mcp.so and Glama.
- How many versions does Virustotal have?
- MCP Toplist tracks 4 versions of Virustotal, most recently published on Oct 13, 2026.
- Where can I find the source code for Virustotal?
- The source code for Virustotal is hosted at github.com/w0h1v/mcp-virustotal.
Do you run this server?
Community projects list the MCP servers behind real agents and apps. Publish yours and this page will link to it.