MCP server

Virustotal

io.github.pipeworx-io/virustotal

Checked 26 Oct 2026, 08:29 UTC · Connected to it and listed its tools

VirusTotal MCP — file / URL / domain / IP reputation (BYO key)

Website Source

At a glance

Type

MCP server

Publisher

pipeworx.io (verified by the MCP Registry)

Status

Working at last check

Tools

46

Token cost

About 26,848 tokens per request

Sets up in

Claude Code, Claude Desktop, Codex, Gemini CLI, Cursor, VS Code, Antigravity, ChatGPT, OpenAI API, Grok

Last checked

26 Oct 2026, 08:29 UTC

Connect it to your agent

Add to CursorAdd to VS CodeVS Code Insiders

Opens the app, which shows the server and asks you to confirm. For other apps, copy the setup below.

Claude Code

claude mcp add --transport http virustotal https://gateway.pipeworx.io/virustotal/mcp

Claude Desktop

Settings → Connectors → Add custom connector, and paste the URL.

Codex (config.toml)

[mcp_servers.virustotal]
url = "https://gateway.pipeworx.io/virustotal/mcp"

Gemini CLI

{"mcpServers":{"virustotal":{"httpUrl":"https://gateway.pipeworx.io/virustotal/mcp"}}}

Cursor

{"mcpServers":{"virustotal":{"url":"https://gateway.pipeworx.io/virustotal/mcp"}}}

VS Code

{"servers":{"virustotal":{"type":"http","url":"https://gateway.pipeworx.io/virustotal/mcp"}}}

Antigravity

agy mcp add virustotal https://gateway.pipeworx.io/virustotal/mcp

ChatGPT

Settings → Apps & Connectors → Advanced settings: turn on Developer mode, then Create a connector and paste the URL. Which plans can do this varies.

OpenAI API (Responses tools)

{"type":"mcp","server_label":"virustotal","server_url":"https://gateway.pipeworx.io/virustotal/mcp","require_approval":"always"}

Grok (xAI API tools)

{"type":"mcp","server_label":"virustotal","server_url":"https://gateway.pipeworx.io/virustotal/mcp"}

Tools

• lookup_domain ~148 tokens
  Look up a domain's reputation via VirusTotal (no scheme, e.g. "example.com"). Returns engine analysis stats (malicious/suspicious/harmless/undetected counts and percent), reputation score, community votes, tags, last-analyzed date, and a link to the VirusTotal GUI report.
• lookup_file ~158 tokens
  Look up a file by hash (sha256, sha1, or md5). Returns last-analysis stats (malicious / suspicious / harmless / undetected detector counts), type description, size, names seen, and tags. Useful for triaging hashes seen in alerts or logs.
• lookup_ip ~92 tokens
  Look up an IPv4 address. Returns last-analysis stats, ASN/owner, country, network range, and reputation score.
• lookup_url ~147 tokens
  Look up a URL's reputation. Returns last-analysis stats across all engines, categories (per vendor), and whether the URL has been redirected. The URL is canonicalized before lookup; no submission step is required to read existing reports.

Browse

• GitHub tools
• IPv4 tools
• GitHub and code hosting
• Security scanning

Related MCP servers

• AgentSec MCP
  Security intelligence via x402 on Base. CVE lookup, IP reputation, secret scanning.
• Robtex
  DNS, IP, AS, domain reputation, and Lightning Network intelligence (44 tools)
• Agent^Rider
  Signed agent identity, trust scoring, credit economy, and social layer for AI agents.
• APEX on Arc
  Arc for agents: token prices, rug checks (holders, dev pulls), launch exits, free USDC, paid APIs.
• Japan Public Ledgers MCP
  Tamper-evident daily ledgers of 12 Japanese public-data domains, with cross-ledger entity search.
• Domduck
  Domain reputation over time: Domain Rating, Tranco rank, TLS, and AI crawler policy.
• WarmInboxes Free Deliverability Tools
  Free cold email deliverability checks, list tools, inbox planning and original placement research.
• Cognita
  Passive OSINT and security recon: DNS, TLS, email posture, IP reputation, CVE/KEV, CT logs.

Badge for your README

[![AptLynx](https://aptlynx.net/badge/io.github.pipeworx-io/virustotal.svg)](https://aptlynx.net/servers/io.github.pipeworx-io/virustotal)

Listing text is written by the maker; AptLynx lists tools and does not vouch for them. Find another tool · Browse by topic · For agents