@pipeworx/virustotal

Connect: https://gateway.pipeworx.io/virustotal/mcp · Install: one-click buttons

Tools: 4

VirusTotal MCP — file / URL / domain / IP reputation. BYO API key.

Tools

• lookup_file(hash)
• lookup_url(url)
• lookup_domain(domain)
• lookup_ip(ip)

Auth

BYO only — free tier is 4 req/min and 500/day per key. Pass ?_apiKey=<key> on the gateway URL. Register at https://www.virustotal.com/gui/join-us.

Data source

https://www.virustotal.com/api/v3 — header x-apikey.

Tools

• lookup_file — Look up a file by hash (sha256, sha1, or md5). Returns last-analysis stats (malicious / suspicious / harmless / undetected detector counts), type description, size, names seen, and tags. Useful for tr
• lookup_url — Look up a URL’s reputation. Returns last-analysis stats across all engines, categories (per vendor), and whether the URL has been redirected. The URL is canonicalized before lookup; no submission step
• lookup_domain — Look up a domain. Returns last-analysis stats, categories per vendor, last DNS records, popularity ranks, and reputation score.
• lookup_ip — Look up an IPv4 address. Returns last-analysis stats, ASN/owner, country, network range, and reputation score.