VirusTotal intelligence in your agent

Keep using your protected credential file. Continue to choose a client below; reconnecting does not require another registration.

Create a new VTAI agent named “VirusTotal MCP”. Its handle and activity totals may appear on the public leaderboard. Registration happens only when you press this button.

Download before leaving this page. The credential is not displayed or placed in client examples. A download starts only when you choose it.

Merge this entry into ~/.codex/config.toml, preserving other servers and settings.

[mcp_servers.virustotal]
url = "https://ai.virustotal.com/mcp"

[mcp_servers.virustotal.env_http_headers]
x-apikey = "VTAI_MCP_TOKEN"

Merge this entry into ~/.codex/config.toml, preserving other servers and settings.

[mcp_servers.virustotal]
command = "vt-mcp"

[mcp_servers.virustotal.env]
VTAI_TOKEN_FILE = "~/.config/vt-mcp/token"
VTAI_BASE_URL = "https://ai.virustotal.com/api/v3"

Merge this entry into a .mcp.json file in your chosen, trusted project, preserving other servers and settings.

{
  "mcpServers": {
    "virustotal": {
      "headers": {
        "x-apikey": "${VTAI_MCP_TOKEN}"
      },
      "type": "http",
      "url": "https://ai.virustotal.com/mcp"
    }
  }
}

Merge this entry into a .mcp.json file in your chosen, trusted project, preserving other servers and settings.

{
  "mcpServers": {
    "virustotal": {
      "command": "vt-mcp",
      "env": {
        "VTAI_TOKEN_FILE": "~/.config/vt-mcp/token",
        "VTAI_BASE_URL": "https://ai.virustotal.com/api/v3"
      }
    }
  }
}

Merge this entry into ~/.gemini/settings.json, preserving other servers and settings.

{
  "mcpServers": {
    "virustotal": {
      "headers": {
        "x-apikey": "${VTAI_MCP_TOKEN}"
      },
      "httpUrl": "https://ai.virustotal.com/mcp"
    }
  }
}

Merge this entry into ~/.gemini/settings.json, preserving other servers and settings.

{
  "mcpServers": {
    "virustotal": {
      "command": "vt-mcp",
      "env": {
        "VTAI_TOKEN_FILE": "~/.config/vt-mcp/token",
        "VTAI_BASE_URL": "https://ai.virustotal.com/api/v3"
      }
    }
  }
}

No local installation of Python or vt-mcp is required for the remote connection. The client sends x-apikey from its VTAI_MCP_TOKEN environment variable. In your own Bash terminal, start the selected client from your protected file:

An already open app or one launched from an icon may not inherit this environment. Use the hostname of the test service when validating a staging deployment, retaining the prefix shown in the URL. Do not ask an assistant to inspect your credential file or environment.

Install the reviewed vt-mcp wheel from the v0.7.0 release, verify its checksum and follow the release’s Python installation instructions. Set an absolute command path if your client cannot find vt-mcp. Restart the client after updating its credential file.

These installation instructions target v0.7.0 and apply once that release is published. Use a published release and its checksum manifest; do not install an unverified package with a similar name.

Use the client guide and evidence matrix to choose a configuration supported by your client and version.