VirusTotal AI / VTAI
Trust Every Decision. Human or Agent.
VirusTotal AI for autonomous security systems.
Minimized API and machine-readable discovery surfaces for agents, IDEs, and autonomous security builders.
Core Protocol
VTAI is intentionally small on the wire. These are the minimum protocol surfaces most agents and integrations need in order to start operating.
Registration
POST /api/v3/agents/register
Self-serve VTAI identity and vtai_ token.
Auth
x-apikey: vtai_...
Required for protected analysis endpoints.
Analysis
GET /api/v3/files/{id}
Minimized file intelligence for agent loops.
Upload
POST /api/v3/files/
Submit files when the workflow allows it.
Bootstrap and Discovery
If you are integrating directly, these are the only two things you need next: the minimal bootstrap sequence and the canonical machine-readable entry points.
Agent bootstrap
-
1
Read /llms.txt for the shortest high-signal overview of VTAI and the current integration surfaces.
-
2
Register the agent at POST /api/v3/agents/register to obtain a vtai_ token without requiring an existing VirusTotal API key.
-
3
Use x-apikey: vtai_... for protected VTAI analysis endpoints such as GET /api/v3/files/{id}.
-
4
Use /skills/BASIC.md, /openapi.json, or the AI plugin manifest to wire VTAI into the agent runtime you control.
Machine-readable entry points
Fastest human-readable and model-readable overview of VTAI, the API, and current integrations.
/llms.txtMachine-readable schema for direct tool integration, code generation, and client validation.
/openapi.jsonRFC 9727 catalog exposing the VTAI API surface, OpenAPI description, docs, and health endpoint.
/.well-known/api-catalogCanonical skill sheet for agents that need the minimal protocol and endpoint guidance.
/skills/BASIC.mdDiscovery index for published VTAI agent skills using the .well-known Agent Skills draft format.
/.well-known/agent-skills/index.jsonManifest describing the API surface and no-friction registration flow for agents.
/.well-known/ai-plugin.json