Connects Claude to VirusTotal's threat intelligence API for checking file hashes, URLs, domains, and IP addresses against their database of malware and malicious content. You bring your own VirusTotal API key. Hosted through Pipeworx's gateway infrastructure, which also offers an ask_pipeworx tool that lets you query in plain English instead of calling specific endpoints. The source doesn't list individual tools, but standard VirusTotal operations would cover scanning files, looking up reputation scores, and pulling analysis reports. Useful when you need Claude to help triage suspicious links or files during security investigations, or when building workflows that need automated threat checks without leaving your AI environment.
VirusTotal MCP — file / URL / domain / IP reputation (BYO key)
Part of Pipeworx — an MCP gateway connecting AI agents to 673+ live data sources.
| Tool | Description |
|---|
Add to your MCP client (Claude Desktop, Cursor, Windsurf, etc.):
{
"mcpServers": {
"virustotal": {
"url": "https://gateway.pipeworx.io/virustotal/mcp"
}
}
}
Or connect to the full Pipeworx gateway for access to all 673+ data sources:
{
"mcpServers": {
"pipeworx": {
"url": "https://gateway.pipeworx.io/mcp"
}
}
}
Instead of calling tools directly, you can ask questions in plain English:
ask_pipeworx({ question: "your question about Virustotal data" })
The gateway picks the right tool and fills the arguments automatically.
MIT